last executing test programs: 25m23.887989715s ago: executing program 1 (id=6999): r0 = syz_io_uring_complete(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x36a4, 0x11}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9f636df530"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f00000001c0)={0x0, 0x5, 0x2}) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) 25m23.804965973s ago: executing program 1 (id=7000): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x253, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_usb_connect$cdc_ncm(0x4, 0x81, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x8, 0xd0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '}~'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x6, 0x1}, {0x6, 0x24, 0x1a, 0x7, 0x28}, [@mbim={0xc, 0x24, 0x1b, 0xdbc, 0x7, 0xfb, 0x6, 0x4cd2, 0xe6}, @obex={0x5, 0x24, 0x15, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x2c, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8e, 0xab, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfe, 0x0, 0x10}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x3, 0x0, 0x51, 0x20, 0x9}, 0x95, &(0x7f0000000140)={0x5, 0xf, 0x95, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x2, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x2, 0x8}, @generic={0x7f, 0x10, 0x1, "e6fb5b0209b1b067ea035688630c7d1392a621baf23b93895b01965bad288ab9d9c819c94e5702a7645989b857753c9d1b413ea5584c72313e3baa3b166f6bb3cefbcd9aaa9e02840c3e4c6c80ddef01098d642c11477ccdc722a09bb19ec04d9afc6330b97814b1f797ae2da76f4b811fc19aef469d56a62132bf74"}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x446}}, {0x1e, &(0x7f0000000240)=@string={0x1e, 0x3, "ad9cf8c0e594772c344c2690d082861746f262aa7d6ac133e0217827"}}, {0x34, &(0x7f0000000280)=@string={0x34, 0x3, "4ce9499887e8734af514b0e4fe565b212fcec0ec158a9302ea614c3e988ec4972244d2f35b50fae4d0af7eb05fa3f429a232"}}, {0xbd, &(0x7f00000002c0)=@string={0xbd, 0x3, "0340231f9d000a6f3df24927b61eaeebf76fdbf1db986710a00ab0f5bfec7431e458217f7d23d4f701f776d79c9c5af0521cfd35cf0ede72da3cf4bb23e5c600680d75eb63d97278e230785a1fa9c3c9e15a2c155a19979ed9fa20da16f75a42e68eaf5669d1bc7a9ac2a6d982542135090a04b0022fe9bcb7134133c1f4ca5053ab77be5fdac5fab2785256f928613b55d32aea63c25864d33fb90686aabf0e65980976339540a76e69fa977752d4e0d698cea618843d82306895"}}, {0xc4, &(0x7f0000000380)=@string={0xc4, 0x3, "637f1089bedbab16aa9eb5ede706001dd19ac7fc4e87a7ed01c2cfe36bedb2b42851c483ed5ce7457612bcb8b6acfc485d8f36d46b09107adb976ce7cab3370971d0a154b5048d9e8146ad671e76be3583cfb7a3099d07c5f8484e40f4d8372bf32b2022992f69321f8c4745eef49ea1907c1f7f7bca0591c73bf507060ec2e871212a1d70d0d984bdd2c742867d9c8d7de226a6d9c1ca850daefc6569c3a20452a0f16c83de344b40ffd3dbaca513d79efa7fc96d4c3dd6897cd147435573083165"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2401}}]}) 25m20.707575668s ago: executing program 1 (id=7017): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2004c081, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 25m20.405008775s ago: executing program 1 (id=7018): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x0, 0x6, 0x4d, 0x39cc1919, 0x6800000, 0x9, 0x3, 0x2, 0x0, 0x8, 0x8, 0x0, 0x2, 0x5, 0x7, 0x4, 0x3c5b, 0x1, 0x1fc, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xd, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x4, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x2, 0xe752, 0x20000000, 0x200182, 0x9a, 0x7, 0x8, 0x18, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x5, 0x1800, 0xfffffffc, 0x4, 0x0, 0x7, 0x5, 0x2f, 0x8, 0x8, 0x1, 0x0, 0x2, 0x8, 0x4, 0x8000, 0x9, 0x5, 0x401, 0x3, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0xb, 0xb, 0xa, 0x1, 0x1, 0x2, 0x2, 0x7b, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x48c93694, 0x42, 0x400004], [0x3, 0x6, 0x81000003, 0x2, 0xff, 0x40000100, 0x8d2, 0x80000001, 0x5, 0x5, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e8, 0x9, 0x5, 0x2, 0x2, 0x9, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x5, 0x1fe, 0x80, 0x2, 0xcc56, 0x950bfaf, 0x1000, 0xa2, 0x4, 0x53cf697b, 0xfffffff9, 0x80000001, 0xac8, 0x8, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120002, 0x40005, 0x46, 0xaaed, 0x4, 0xdf], [0x4010, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0xffffffff, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x7, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x82, 0x100, 0x9602, 0x4, 0x3, 0xffff, 0x9649, 0x1, 0x10080, 0x6, 0x6, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x35cb92d0, 0x80, 0x4, 0x4, 0xb19, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403", @ANYBLOB], 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x5, 0x8, 0x10000, 0x2, 0x7fffffff, 0x6, "ae9cfdf12e2cecc9b3c3effffca0bc03", 0x63, 0x10, 0x2, 0x9, 0x81, 0x5, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f00000001c0)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r8 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)) poll(&(0x7f00000000c0)=[{r9, 0x14d1}], 0x1, 0x606) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000040)={0x20000013}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xbe5b}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) syz_emit_ethernet(0x0, 0x0, 0x0) 25m16.598851091s ago: executing program 1 (id=7031): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newneigh={0x1c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x4c}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd29, 0xb, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @loopback, 0x6}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, 0x0, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x800) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0) 25m16.214539332s ago: executing program 1 (id=7034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x230141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000000040)=0x19b1, 0xfffffffffffffe3a) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, &(0x7f0000000700)}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10030, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a3100000000090002"], 0xdc}, 0x1, 0x0, 0x0, 0x48051}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000680001"], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket(0x10, 0x3, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000100)) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000fa9000/0x2000)=nil, 0x2000}, 0x1}) pread64(r2, &(0x7f0000000140)=""/66, 0x42, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f00000000c0)) 25m15.857028685s ago: executing program 32 (id=7034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x230141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000000040)=0x19b1, 0xfffffffffffffe3a) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, &(0x7f0000000700)}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10030, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a3100000000090002"], 0xdc}, 0x1, 0x0, 0x0, 0x48051}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000680001"], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket(0x10, 0x3, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000100)) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000fa9000/0x2000)=nil, 0x2000}, 0x1}) pread64(r2, &(0x7f0000000140)=""/66, 0x42, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f00000000c0)) 5m57.021678208s ago: executing program 5 (id=11185): fsopen(0x0, 0x1) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000293000/0x4000)=nil, 0x4000, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1f00, 0x0, 0xfffffffffffffff3, 0x2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x60) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x4, 0x9, 0x9, 0xbe9, 0x7f]}, &(0x7f00000001c0)=0x50) mmap$IORING_OFF_SQES(&(0x7f0000999000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x10000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) fchdir(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) write(0xffffffffffffffff, 0x0, 0x0) 5m53.813827679s ago: executing program 5 (id=11201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x361400, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x25) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x208000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x8d0) accept4$inet6(r0, 0x0, 0x0, 0x800) 5m52.881287448s ago: executing program 5 (id=11205): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="2006672d7184d6c1e0658e1df7fd5f14eacbe8f822f72d7d881c1f08102696fed8710d3ee00a3cf493676c794216e6bdc6f1f1543c69cee9e5be21cef5182fc0d2f752f8e4ae5f30fa5ec65258b48fea73c2f7641de518698ba7f78cda4cf88b97374442"], &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x24, &(0x7f0000000200)={0x40, 0x14, 0x76, "c503b8f90273d8917fdb69dce8e51bcaf255afb6d5cc44860cb8a92774ed80b15970250e04416b57dfc11db9f54876243aceebd212f9708c9f5ccb6baf536c4f92b4422a6adc0c80883228de2d1b32bb9fe02f3ca5765bcccd7cdc3b6ac453b442079e9077fc2d523bc515d059b41c6150af82ed5f1b"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x800, 0x1ff, 0x100, 0x3, 0xb304, 0x2, 0x1, 0x2, 0xc, 0x9, 0x9, 0x2}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x4}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) shmctl$SHM_LOCK(0x0, 0xb) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) shmctl$SHM_LOCK(0x0, 0xb) 5m49.584717483s ago: executing program 5 (id=11211): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2e00000010000100434b703d9498d20500742b140000001100010000000000bc2300d9a100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f00000004c0)={@loopback}, 0x14) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000200000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470580800000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x74, r7, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x35, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000004}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x17b242be}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fffe00}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4008084) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r7, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4a}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x42}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa39}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x840) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) listen(r0, 0x5) socket$netlink(0x10, 0x3, 0x8000000004) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r8, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) 5m48.039592231s ago: executing program 5 (id=11217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, r2, 0x3f, 0x0, 0x7}, [@NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x30}}, 0x4000004) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') exit(0xffff) read$eventfd(r4, &(0x7f0000000040), 0x8) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x501c6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) fcntl$getown(0xffffffffffffffff, 0x9) r5 = syz_open_dev$amidi(&(0x7f0000000000), 0xc, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000340)) 5m47.692934833s ago: executing program 5 (id=11218): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000003c0)={0x3, 0x101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10000) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0xa) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x92d02, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) getpid() syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0x7, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) 5m47.49475969s ago: executing program 33 (id=11218): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000003c0)={0x3, 0x101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10000) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0xa) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x92d02, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) getpid() syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0x7, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) 3m57.387032167s ago: executing program 6 (id=11712): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000), 0xfffff, 0xfffffffffffffffc) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r2, 0x1, 0x10, 0x0, &(0x7f0000001bc0)) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) fcntl$lock(r0, 0x7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 3m56.783653785s ago: executing program 6 (id=11717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000014c0)={@val={0x6f01, 0xc00}, @val={0x1, 0x0, 0x0, 0xffff, 0x14}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x22, 0xfc0, 0x68, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @remote}, {0x11, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, "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"}}}}, 0xfce) 3m56.549532159s ago: executing program 6 (id=11720): unshare(0x26020480) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x387a}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x1, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x5}}}, 0x24}}, 0x10) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x6}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) 3m55.420472388s ago: executing program 6 (id=11727): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_emit_ethernet(0x52, &(0x7f0000000c80)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x30, 0x0, @opaque="4d76f364d54d1525c6dc09eae42d5d07ec5464c11985ebb9370b19644e22c7324089b744134d59ad"}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x0, 0x11, 0x0, @broadcast, @empty}, {0x0, 0x7, 0x9c, 0x0, @wg=@initiation={0x1, 0x8000, "7d27ff78a4c907e68634a3e4cc036b1407d0616f9dd7f42f3faf73932e565303", "e4be18d0f4f77370280491fb4b4becb2a7a899906c0db25b4d1d5fc08fbaca1ca8bdabe719be21408d52739c9a622277", "d5466fa15b5fded3bad35d39205273cedc7df78dfbfb98ade7e82f83", {"a032e5772bab073c1dd3d60bd4ef52e5", "66d4a5bffef0781486d671dfdc881cba"}}}}}}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x41, 0x4000, @fd=r3, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="d7706e5b92a49387fa4a7af9378b1f85d3c844c52dfdb380b2373e71eae5235f423d9dc970ffcd2c8288c57d402a388dce8afe2b50de6e58668e5d075a4f36d5f12fd7097c3419953de377d451a9171f9b5cf8d90cd29455dcfb", 0x5a}, {&(0x7f0000000400)="de2a68a2ca01887fddfd8fc82523da1e8a467915d42c1e83c3d7a2fc98a86fb3ad1080a6a5622a206843b770fbbd38e11603541b76c639a652de4c0887863078c0c049713a343a0934141c80ce9693a4a1babd14b8481513f8c9a3e803b0a19df34e06b92d08fbec9451f3cc9381a122fdd387103df942867b8ce8d85ca7497f", 0x80}], 0x2, 0x10, 0x1}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0/file0\x00', 0x8) 3m54.447698668s ago: executing program 6 (id=11734): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, &(0x7f0000000000)=0xa636, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRES32=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x400000000000003, 0xfffffffd, 0x0, {0x2, 0x8, 0x0, 0x1, 0xd1, 0x2, 0x6, 0x2, 0x4, 0x2000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='VOLUME \')ine\' 1'], 0x2a) close(r4) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1001a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004140)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e10400ae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45448020242f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5ad6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90c00000000cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde0caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1c83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db1085df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07ff3d433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bee1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ecf8e26206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362371a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4671f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76b060000000000000095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc06127a450ed0dfa1410cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc42ff32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f01d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865638b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72093b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xffffffffffffffda, 0xffffffff, {0x3, 0x8000000000000, 0x0, 0xfab, 0x440000, 0x8, {0x1, 0x5, 0x9, 0x80, 0x8, 0xffffffff80000001, 0x81, 0xfffffffc, 0x4, 0x6000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read$FUSE(r1, &(0x7f00000102c0)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x100) fallocate(r5, 0x3, 0x2, 0x8000c62) write$tun(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2be) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000030a030000000000000000000a0000090c00024000000000000000010900030073790400000000000900010073797a310000000014000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 3m54.132721423s ago: executing program 6 (id=11737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000014c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0xffff, 0x14}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x22, 0xfc0, 0x68, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @remote}, {0x11, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, "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"}}}}, 0xfce) (fail_nth: 6) 3m53.768367954s ago: executing program 34 (id=11737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000014c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0xffff, 0x14}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x22, 0xfc0, 0x68, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @remote}, {0x11, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, "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"}}}}, 0xfce) (fail_nth: 6) 10.650050419s ago: executing program 0 (id=12171): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x100000000000000, &(0x7f0000000000)={0x8000000000000001, 0x3}) 10.14524601s ago: executing program 3 (id=12174): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="741000002100100027bd7000fddbdf2500000000000000000000ffffac1e0001fe800000000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1074}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000180)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = openat$mice(0xffffff9c, &(0x7f00000000c0), 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc00c64b5, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d828ffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210649fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1a14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328537a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0xb5, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020}, 0x402) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r7, 0x7008000) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) preadv2(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x489, 0x0, 0xec}]}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) 9.021624874s ago: executing program 0 (id=12179): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x800, 0xb, {0x0, 0xea60}, {0x1, 0x1, 0xe, 0x4, 0xf9, 0x8, "e012dd35"}, 0x8, 0x4, {}, 0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2a000000060000000000000020000000010000000087ab4b4054a5ccac7c775c4a3870db0000000004"], 0x2a) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r5}}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000000c0)={&(0x7f0000001000)={[{&(0x7f0000000100)="6e6f82e5e8bf21ed4e1a02367f8b3cf61b4a16a146dfb1851626bda845094856f52489d817e92e5a8ecce42c451dca", 0x2f}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 8.511508565s ago: executing program 3 (id=12182): openat$tun(0xffffff9c, &(0x7f00000001c0), 0x80, 0x0) r0 = openat$tun(0xffffff9c, &(0x7f0000000380), 0xa0000, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000300aaaaaaaaf9"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}}}, &(0x7f0000000140)=0x84) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000", @ANYRES16, @ANYBLOB="1706000000000000000101000000080009003f00000014001f000000000000000000000000000000000114002000000000000000000009000000000000000500070000000000060002000100000008000a0004000000b3d29feda2f540d051e125014e5cedb205ff12199c18a1108c7cc1deff652dc916fb78a75511785ea9b1b93f48bb5fb59ebcae929e56f0f6b1bd646dc336685512749c5824ddaf04afa3c2974273570b8f75f806563483abb9"], 0x5c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x1000000001b8, 0x2}) fcntl$lock(r5, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x5}) 8.116801613s ago: executing program 3 (id=12186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x4000400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) (async) syz_clone(0x4000400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x40) (async) 7.540796219s ago: executing program 3 (id=12190): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r5, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x500, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) r10 = fcntl$dupfd(r8, 0x0, r8) write$sndseq(r10, &(0x7f0000000280)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0x5, {0x7, 0xc9a}}}, {0x1, 0x0, 0x0, 0x0, @time={0x0, 0x200}, {}, {0x80, 0x1}, @queue={0xf, {0x3, 0x4}}}], 0x38) read$snapshot(r10, 0x0, 0xffffffbf) read$snapshot(r10, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7.376598607s ago: executing program 0 (id=12192): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x2020, 0x2fe, {0x7, 0x0, 0x0, r2, 0x1, 0x952}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6, 0x0, 0x1, [{0x0, 0x7, 0x0, 0x0, 0xf1d3}]}}, @AF_BRIDGE]}]}, 0x291f715cbcd40098}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 7.25338658s ago: executing program 0 (id=12193): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f00000004c0)={0x0, 0x818d, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x800000000, 0x0, 0x0, 0x8, 0x1}) io_uring_enter(r3, 0x2def, 0xfffffffd, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x2b, 0x80801, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000002000010000000000000000000a00204000000007000000001400110076657468305f746f5f6272696467650014000300762df7e95a55ab88546e00000000000014000200fe8000000000004534398a1542b4f117c5deab4c608a61bc003151cfa43b22497684a4c08d1eb263684f28f525c9bdf355fd28137beef49e5024ea61560b827bfc8032bdedf00757e2d2e339003b26f100eaa5fbce4553000a81b057810cb7d35cc298df8a7918a1b8534ca0c4c3e4a66d95c2b28a1bc4c24c2f6db9"], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019580)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r6], 0x74}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 7.166743722s ago: executing program 2 (id=12195): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b00010062726964676500000c00028005001900"], 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x80201, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) 6.611070858s ago: executing program 3 (id=12197): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r3, 0x6) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, [0x0, 0x38e, 0xd8, 0x6, 0xff, 0x1ff, 0x1, 0x2, 0x7, 0x86, 0x7, 0xc0, 0x4, 0xa22e, 0x6]}, &(0x7f0000000040)=0x9e) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) setpriority(0x2, r5, 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000000904000002"], 0x0) syz_open_dev$midi(0x0, 0x500, 0xc900) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000002000000050000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000005000000000000000000000000000000000000000000000000a1c4d8948002088498fba24441ecddf6346b01b45653f09c4aebdd8eedc9189b6857c3bcc448b1ac1c5e3c3275ad097df3c4178040fafca99535acc928eec95e583e2233ed9951365c90447e2b7bdcc349c9ca2a944549fd68cc6bfae7c1bb119e95512ded668ef89a946629ed74e9a82e9e88ae26fbf3ac3c7d780868f0626540ee7c0300000000000000ccdf114f01026af8806fafc1"], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r6, &(0x7f0000000300), 0x0}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) 5.656910666s ago: executing program 0 (id=12204): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r3, 0x6) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, [0x0, 0x38e, 0xd8, 0x6, 0xff, 0x1ff, 0x1, 0x2, 0x7, 0x86, 0x7, 0xc0, 0x4, 0xa22e, 0x6]}, &(0x7f0000000040)=0x9e) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) setpriority(0x2, r5, 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000000904000002"], 0x0) syz_open_dev$midi(0x0, 0x500, 0xc900) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000002000000050000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000005000000000000000000000000000000000000000000000000a1c4d8948002088498fba24441ecddf6346b01b45653f09c4aebdd8eedc9189b6857c3bcc448b1ac1c5e3c3275ad097df3c4178040fafca99535acc928eec95e583e2233ed9951365c90447e2b7bdcc349c9ca2a944549fd68cc6bfae7c1bb119e95512ded668ef89a946629ed74e9a82e9e88ae26fbf3ac3c7d780868f0626540ee7c0300000000000000ccdf114f01026af8806fafc1"], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r6, &(0x7f0000000300), 0x0}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) 3.902786968s ago: executing program 2 (id=12205): r0 = syz_open_dev$media(&(0x7f0000000080), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002f00)={0x0, 0xfffffffffffffd41, 0x0, 0x0, 0x62, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {0x0, 0x80000000}, {}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc01c7c02, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000000200)}) unshare(0x400) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) sysfs$2(0x2, 0xfffffffffffffffd, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x287, 0x0, 0xfffffffffffffffc}]}) r6 = socket(0x23, 0x3, 0x40000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x270bd25, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x10, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_PBURST={0x8, 0x7, 0x1543}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000140)=0x90) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009003610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000001880)=ANY=[@ANYBLOB="202713"], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x84, 0x1, 'V'}, 0x0}) write$tun(r9, &(0x7f0000001bc0)=ANY=[@ANYBLOB="87d19c84d6c3"], 0xfdef) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000160a01080000004d97914e00050000070900020073797a3100000000140000001100017d0f5fbdeca4ddcf9ae925a9de0000000000000000000100000a"], 0x48}, 0x1, 0x0, 0x0, 0x20000855}, 0x24000840) r12 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r12, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r12, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000100)="42e9463c9bfb9b", 0x7}], 0x2}, 0x0) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r13, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r13, {0x2, 0x4e23, @local}, 0x3, 0x4, 0x2, 0x4}}, 0x80, 0x0}, 0x4000000) 3.119174097s ago: executing program 7 (id=12209): openat$tun(0xffffff9c, &(0x7f00000001c0), 0x80, 0x0) r0 = openat$tun(0xffffff9c, &(0x7f0000000380), 0xa0000, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000300aaaaaaaaf9"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}}}, &(0x7f0000000140)=0x84) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x1000000001b8, 0x2}) fcntl$lock(r5, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x5}) 2.801394516s ago: executing program 7 (id=12211): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x800, 0xb, {0x0, 0xea60}, {0x1, 0x1, 0xe, 0x4, 0xf9, 0x8, "e012dd35"}, 0x8, 0x4, {}, 0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r5}}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 2.601692363s ago: executing program 3 (id=12214): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x80) getegid() syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x98, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "96"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x14, &(0x7f00000000c0)={0x20, 0x5, 0x6f, {0x6f, 0x9, "c8b659acfa97c2767252f39fb59b2b6347e34ad9f031c8bfd69c6d0ed68202141934d40926e83088281789dbfbd0c3f9101d412a423923f55431661d8f653f22fb3c40e78b72d53426bb589af95efab6333485dda48fe3bc9665c941d28d5ca304a6abd89309878c647d4b9bfd"}}, &(0x7f0000000180)={0x0, 0x3, 0xa5, @string={0xa5, 0x3, "3587493ec5d61f6d4137eabfe39c7598f00c23b5dbb9d6d7783ac85d95382de341d9fd52af71eed07cb7a4cec9febc17457984ae73bac1c9c1d6c1aee67790d4bbb68130980915ac881c942a5072168ded656e7055b552adb99b6f785c37573bc3c1960f4f7b8da31454ca3bac8511c3fba9faa6bb2c4a99e533cb5252f50ff5d9571a860bc235d759672f960466bf37bf55289d8806ac989800cbb664b6efd9c75f3f"}}, &(0x7f0000000240)={0x0, 0x22, 0x13, {[@main=@item_012={0x1, 0x0, 0xc, "e1"}, @local=@item_4={0x3, 0x2, 0x3, "c87ca5b5"}, @main=@item_012={0x1, 0x0, 0xa, ')'}, @main=@item_012={0x2, 0x0, 0xb, "12ef"}, @global=@item_012={0x1, 0x1, 0x2, 'x'}, @main=@item_4={0x3, 0x0, 0xc, "a06a6a25"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0xb98}}}}, &(0x7f0000000480)={0x18, &(0x7f0000000300)={0x40, 0xd, 0x78, "6de70914af9ec3668fd3c63dec7726f80dd91a1504e4e2d11f33d5f7f6954ca1abecc25caef0c09f0fdabde60a5c97f6cb340209d63db2b4a4b79bebe908a277c0cace6ea0c6a46b7bec6f62d0b8e4d8475b384946918279ce03b9e7f568bf2916127ef3733b10f7db8ed1ed330c94df07fbdf0e353692b1"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x1, 0x27, "8bd7057ac5b59f1903957bb8600bb7effb33fb932ddf89ac9fda66fa0d2bf0174259010c4e98f4"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x40}}) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) 2.097630765s ago: executing program 2 (id=12216): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x800, 0xb, {0x0, 0xea60}, {0x1, 0x1, 0xe, 0x4, 0xf9, 0x8, "e012dd35"}, 0x8, 0x4, {}, 0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2a000000060000000000000020000000010000000087ab4b4054a5ccac7c775c4a3870db0000000004"], 0x2a) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r5}}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000000c0)={&(0x7f0000001000)={[{&(0x7f0000000100)="6e6f82e5e8bf21ed4e1a02367f8b3cf61b4a16a146dfb1851626bda845094856f52489d817e92e5a8ecce42c451dca", 0x2f}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 1.499681802s ago: executing program 7 (id=12217): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bond_slave_0\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4b, 0x41, 0x81, 0x8, 0x9, 0x1, 0x5, 0x0, 0x43, 0x5e, [0x8, 0x49, 0x1, 0x972d, 0x10001, 0x8010000, 0x6, 0xffffffff]}}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x0, 0x2, {0x77, @usage=0xf5af, 0x0, 0x5, 0xc, 0x1000, 0x20000000000000, 0x7, 0xa2, @usage=0x5, 0x101, 0x1, [0x9a6a, 0x200, 0x4, 0xffffffffffffffff, 0xc4ed, 0x7]}, {0x2, @struct={0x8, 0x5}, 0x0, 0x6035, 0x848a, 0x6, 0x10, 0x5, 0x1, @usage=0xfa67, 0x4, 0x8, [0x10, 0x8, 0x3, 0xffffffffffff7fff, 0x8, 0x9c6]}, {0x2, @usage=0x5, 0x0, 0x4, 0x3, 0x5, 0x34c76097, 0xce5, 0x49, @usage=0x4, 0x9, 0x0, [0x9, 0x6, 0x4, 0x4, 0x0, 0x80000000000000]}, {0x4, 0x2, 0x2}}) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) keyctl$chown(0x4, r2, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000840)={r1, 0x6, 0xd}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='tunl0\x00') 1.299922287s ago: executing program 7 (id=12218): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbff, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) 1.168180734s ago: executing program 7 (id=12219): r0 = socket$nl_crypto(0x10, 0x3, 0x15) fcntl$getownex(r0, 0x10, &(0x7f0000001100)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000001180)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000300)=""/206, 0xce}], 0x1, 0x9200, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1}]}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@get={0xe0, 0x13, 0x1, 0x70bd25, 0x25dfdc00, {{'drbg_nopr_ctr_aes256\x00'}, '\x00', '\x00', 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xc4, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xe73}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xa}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x72d}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0xc4}}, 0x4850) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r6, 0xc018aec0, &(0x7f0000000040)={0x1}) writev(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="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", 0x1000}], 0x1) 846.291393ms ago: executing program 7 (id=12220): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_mount_image$fuse(0x0, 0x0, 0x50000, 0x0, 0x1, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000003000)='system.posix_acl_default\x00', &(0x7f0000003180)={{}, {0x1, 0x3}, [], {0x4, 0x7}, [], {}, {0x20, 0x2}}, 0x24, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/169, 0xa9}], 0x1}, 0x102) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000f47"], 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ppoll(&(0x7f0000000080)=[{r4, 0x2000}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x7, 0xd, 0xfffffffe, 0x13, 0x8, "0000d19c791c00000e00000000f2000000004f", 0x4, 0x80000000}) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x639) read$FUSE(r5, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000002c0)={{0xfffffffc, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, r6, 0x0, 0x0, 'syz1\x00', 0x0}) move_pages(r6, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x6) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x4e7, 0x30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x90, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x47b}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x7, 0x68}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x9, 0xc, 0x0, 0x0, 0x6}, 0x4e, &(0x7f0000000540)=ANY=[], 0x1, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x410}}]}) syz_usb_connect(0x1, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100005219e8089b69bd9c2a76000000010902120001000b00000904f50000080450"], 0x0) 810.185981ms ago: executing program 4 (id=12221): openat$tun(0xffffff9c, &(0x7f00000001c0), 0x80, 0x0) r0 = openat$tun(0xffffff9c, &(0x7f0000000380), 0xa0000, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000300aaaaaaaaf9"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}}}, &(0x7f0000000140)=0x84) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x7, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x5}) 673.473443ms ago: executing program 2 (id=12222): socket$inet6_sctp(0xa, 0x5, 0x84) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = fsopen(&(0x7f0000000240)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x3dc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) pipe2$watch_queue(0x0, 0x80) fstat(r0, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000004100)={0x1, 0x1, 0xc0000000}) dup(r2) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0xb, 0xa}, {0x1, 0x1}}, ["", ""]}, 0x24}}, 0x8850) socket$inet_udp(0x2, 0x2, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x10281, 0x3) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) open$dir(&(0x7f0000000140)='./file0\x00', 0x800, 0x92) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) 642.139229ms ago: executing program 4 (id=12223): close(0x3) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044) r1 = gettid() timer_create(0x0, &(0x7f0000000d40)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000d00)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') sendto$inet(0xffffffffffffffff, &(0x7f0000000c80), 0x0, 0x4008844, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) 604.75048ms ago: executing program 0 (id=12224): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)={0x14, r4, 0x925, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x3) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000000104010200000000000000000700115e372fa5b3b78a000008000340000000028bedcaf251612e71c338289a1e96708355b276260245c007cee8aed1ad17713ca2ea23f29fa220858712233db207e6289af703c5bb0f5e70130e5ed170935dde4e682a36"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) socket$pptp(0x18, 0x1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000afc000000180a01010000000000000000040000040900010073797a31000000000800074000000002c80003800800024000000004080002400000000008000240000008d3180003801400010064756d6d7930000000000000000000000800014000000000080002400000000c08000240000041337c000380140001007465616d5f736c6176655f310000000014000100636169663000000000000000000000001400010070696d726567000000000000000000001400010070696d726567300000ff0700000000000000010076657468315f746f5f626f6e64000000140001006e"], 0x138}, 0x1, 0x0, 0x0, 0xa301bad39e36b1ce}, 0x44) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000340)=0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 536.750971ms ago: executing program 4 (id=12225): r0 = syz_io_uring_setup(0x15bf, &(0x7f0000000740)={0x0, 0x6bfb, 0x8, 0xffffffff}, &(0x7f0000000140)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x13, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e25, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580100001000130428bd700000000000ac1414aa00a4e1eb8c650c805d000000ac1e0101000000000000000000000000002000074e24e12855379404979d000013149e3ce9f81257dcf6f048ff68ac549825ae75baa982e58d364e4fe1b7dd5ec8648910e5042fbdd4c4927562af312eb4adffa35d17f3054cb48b2e", @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="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"], 0x158}}, 0x804) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="a5050f0014b50000009000000800021d005c0000000000019078ac1e0001ac1414aa16009078e0580000000000000000000000890000ac1414aaac1414aa442c000300000000000400000000000100000000ac1e000100000000ac1414bb00"/106], 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x4f4c}, @timestamp, @sack_perm, @mss={0x2, 0xfff}, @timestamp, @timestamp], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x3}}, 0x10) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x4000000, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x20, r7, 0x0) 500.528487ms ago: executing program 2 (id=12226): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xff) socket$kcm(0x10, 0x2, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r1, 0x402, 0x8000003d) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x3, 0x7, 0x1}) inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) unshare(0x2040400) r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sendfile(r3, r3, &(0x7f0000000080)=0x2, 0x7f03) 401.828046ms ago: executing program 2 (id=12227): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x800, 0xb, {0x0, 0xea60}, {0x1, 0x1, 0xe, 0x4, 0xf9, 0x8, "e012dd35"}, 0x8, 0x4, {}, 0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r5}}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 366.831822ms ago: executing program 4 (id=12228): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bond_slave_0\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4b, 0x41, 0x81, 0x8, 0x9, 0x1, 0x5, 0x0, 0x43, 0x5e, [0x8, 0x49, 0x1, 0x972d, 0x10001, 0x8010000, 0x6, 0xffffffff]}}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x0, 0x2, {0x77, @usage=0xf5af, 0x0, 0x5, 0xc, 0x1000, 0x20000000000000, 0x7, 0xa2, @usage=0x5, 0x101, 0x1, [0x9a6a, 0x200, 0x4, 0xffffffffffffffff, 0xc4ed, 0x7]}, {0x2, @struct={0x8, 0x5}, 0x0, 0x6035, 0x848a, 0x6, 0x10, 0x5, 0x1, @usage=0xfa67, 0x4, 0x8, [0x10, 0x8, 0x3, 0xffffffffffff7fff, 0x8, 0x9c6]}, {0x2, @usage=0x5, 0x0, 0x4, 0x3, 0x5, 0x34c76097, 0xce5, 0x49, @usage=0x4, 0x9, 0x0, [0x9, 0x6, 0x4, 0x4, 0x0, 0x80000000000000]}, {0x4, 0x2, 0x2}}) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) keyctl$chown(0x4, r2, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000840)={r1, 0x6, 0xd}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='tunl0\x00') 105.862171ms ago: executing program 4 (id=12229): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbff, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) 0s ago: executing program 4 (id=12230): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) eventfd2(0x8, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r6, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x0, 0xfff1}, {0xc, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x64, 0x0, 0x1, 0x80000001}]}}]}}]}, 0x44}}, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) signalfd4(r8, &(0x7f00000001c0)={[0xb07, 0x8000]}, 0x8, 0x80000) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc00864d2, &(0x7f0000000300)={r10}) kernel console output (not intermixed with test programs): 3058.050828][T17363] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11529'. [ 3058.508801][T29147] usb 1-1: USB disconnect, device number 93 [ 3059.600885][T17391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3059.624672][T17391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3059.672122][T17391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3059.695167][T17391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3060.443150][ T8556] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 3060.503478][T29147] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 3060.603121][ T8556] usb 1-1: Using ep0 maxpacket: 16 [ 3060.609886][ T8556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3060.622886][ T8556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3060.634396][ T8556] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3060.647350][ T8556] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3060.656433][ T8556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3060.666364][ T8556] usb 1-1: config 0 descriptor?? [ 3060.673404][T29147] usb 5-1: Using ep0 maxpacket: 16 [ 3060.686016][T29147] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3060.697790][T29147] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3060.708144][T29147] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3060.715436][T29147] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3060.725499][T29147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3060.738296][T29147] usb 5-1: config 0 descriptor?? [ 3060.839486][T17404] FAULT_INJECTION: forcing a failure. [ 3060.839486][T17404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3060.856204][T17404] CPU: 1 UID: 0 PID: 17404 Comm: syz.2.11541 Tainted: G L syzkaller #0 PREEMPT(full) [ 3060.856227][T17404] Tainted: [L]=SOFTLOCKUP [ 3060.856234][T17404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3060.856245][T17404] Call Trace: [ 3060.856253][T17404] [ 3060.856261][T17404] dump_stack_lvl+0xe8/0x150 [ 3060.856291][T17404] should_fail_ex+0x412/0x560 [ 3060.856313][T17404] _copy_to_user+0x31/0xb0 [ 3060.856331][T17404] simple_read_from_buffer+0xe1/0x170 [ 3060.856344][T17404] proc_fail_nth_read+0x1bb/0x230 [ 3060.856360][T17404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3060.856379][T17404] ? rw_verify_area+0x2a6/0x4d0 [ 3060.856402][T17404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3060.856426][T17404] vfs_read+0x20c/0xa70 [ 3060.856446][T17404] ? fdget_pos+0x246/0x320 [ 3060.856465][T17404] ? __pfx___mutex_lock+0x10/0x10 [ 3060.856477][T17404] ? __pfx_vfs_read+0x10/0x10 [ 3060.856491][T17404] ? __fget_files+0x2a/0x420 [ 3060.856508][T17404] ? __fget_files+0x3a0/0x420 [ 3060.856519][T17404] ? __fget_files+0x2a/0x420 [ 3060.856545][T17404] ksys_read+0x150/0x270 [ 3060.856569][T17404] ? __pfx_ksys_read+0x10/0x10 [ 3060.856595][T17404] ? asm_int80_emulation+0x1a/0x20 [ 3060.856612][T17404] ? asm_int80_emulation+0x1a/0x20 [ 3060.856621][T17404] do_int80_emulation+0x111/0x400 [ 3060.856639][T17404] ? clear_bhb_loop+0x60/0xb0 [ 3060.856649][T17404] ? clear_bhb_loop+0x60/0xb0 [ 3060.856660][T17404] asm_int80_emulation+0x1a/0x20 [ 3060.856671][T17404] RIP: 0023:0xf712572b [ 3060.856686][T17404] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 3060.856700][T17404] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3060.856719][T17404] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 3060.856732][T17404] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 3060.856743][T17404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3060.856753][T17404] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3060.856761][T17404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3060.856775][T17404] [ 3061.088074][ T7244] usb 3-1: USB disconnect, device number 62 [ 3061.362722][ T7244] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 3061.535633][ T7244] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 3061.544745][ T7244] usb 3-1: config 0 has no interface number 0 [ 3061.545029][T17400] tipc: Enabling of bearer rejected, failed to enable media [ 3061.550874][ T7244] usb 3-1: config 0 interface 255 has no altsetting 0 [ 3061.589621][ T7244] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3061.601937][ T7244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3061.611192][ T8556] usbhid 1-1:0.0: can't add hid device: -71 [ 3061.617490][ T8556] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3061.630097][ T7244] usb 3-1: config 0 descriptor?? [ 3061.646651][ T7244] cp210x 3-1:0.255: cp210x converter detected [ 3061.653035][ T8556] usb 1-1: USB disconnect, device number 94 [ 3061.867539][ T7244] cp210x 3-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 3061.879328][ T7244] usb 3-1: cp210x converter now attached to ttyUSB0 [ 3061.894532][ T7244] usb 3-1: USB disconnect, device number 63 [ 3061.905548][ T7244] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3061.915371][ T7244] cp210x 3-1:0.255: device disconnected [ 3061.976482][T17423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3061.985589][T17423] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11546'. [ 3062.339551][T17439] tipc: Started in network mode [ 3062.345229][T17439] tipc: Node identity 4, cluster identity 4711 [ 3062.351538][T17439] tipc: Node number set to 4 [ 3062.503213][ T1552] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 3062.653323][ T1552] usb 3-1: Using ep0 maxpacket: 32 [ 3062.660552][ T1552] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3062.671808][ T1552] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3062.686146][ T1552] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3062.695765][ T1552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3062.706232][ T1552] usb 3-1: config 0 descriptor?? [ 3062.716583][ T1552] hub 3-1:0.0: bad descriptor, ignoring hub [ 3062.722581][ T1552] hub 3-1:0.0: probe with driver hub failed with error -5 [ 3062.732236][ T1552] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 3063.265623][T17452] netlink: 'syz.0.11556': attribute type 23 has an invalid length. [ 3063.380378][T17452] syzkaller0: entered promiscuous mode [ 3063.391387][T17452] syzkaller0: entered allmulticast mode [ 3063.437732][T29147] usbhid 5-1:0.0: can't add hid device: -71 [ 3063.445027][T29147] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3063.465982][T29147] usb 5-1: USB disconnect, device number 119 [ 3063.477504][ T6559] Bluetooth: hci1: command 0x0406 tx timeout [ 3063.793208][T29147] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 3063.944543][T29147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3063.958418][T29147] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 3063.972097][T29147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3063.987589][T29147] usb 1-1: config 0 descriptor?? [ 3064.095437][T17459] bridge0: port 2(bridge_slave_1) entered blocking state [ 3064.102715][T17459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3064.110234][T17459] bridge0: port 1(bridge_slave_0) entered blocking state [ 3064.117441][T17459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3064.135607][T17459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3064.486933][T17464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3064.496075][T17464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3064.507570][T17464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3064.519085][T29147] usbhid 1-1:0.0: can't add hid device: -71 [ 3064.529521][T29147] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3064.543548][T29147] usb 1-1: USB disconnect, device number 95 [ 3064.558503][T17464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3065.102822][T14910] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 3065.102894][T29147] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 3065.263725][T14910] usb 4-1: Using ep0 maxpacket: 16 [ 3065.272263][T14910] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 3065.284416][T14910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 3065.287220][T29147] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3065.295983][T14910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 3065.296029][T14910] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 3065.296051][T14910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3065.298405][T14910] usb 4-1: config 0 descriptor?? [ 3065.316841][T29147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3065.351110][T29147] usb 5-1: Product: syz [ 3065.355966][T29147] usb 5-1: Manufacturer: syz [ 3065.360800][T29147] usb 5-1: SerialNumber: syz [ 3065.369587][T29147] usb 5-1: config 0 descriptor?? [ 3065.583052][T29147] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3065.733137][ T7244] usb 3-1: USB disconnect, device number 64 [ 3065.927989][T17470] netlink: 'syz.3.11559': attribute type 10 has an invalid length. [ 3065.944251][T17470] netlink: 'syz.3.11559': attribute type 2 has an invalid length. [ 3065.958530][T14910] usbhid 4-1:0.0: can't add hid device: -71 [ 3065.969310][T14910] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3065.980747][T14910] usb 4-1: USB disconnect, device number 92 [ 3066.110065][T17488] fuse: Bad value for 'user_id' [ 3066.116270][T17488] fuse: Bad value for 'user_id' [ 3066.439962][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11569'. [ 3066.468312][T17495] IPv6: Can't replace route, no match found [ 3067.234637][T29147] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 3067.247868][T29147] usb 5-1: USB disconnect, device number 120 [ 3067.272853][T14910] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 3067.436511][T14910] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 3067.453003][T14910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3067.461221][T14910] usb 4-1: Product: syz [ 3067.465933][T14910] usb 4-1: Manufacturer: syz [ 3067.470537][T14910] usb 4-1: SerialNumber: syz [ 3067.686140][T17515] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3068.032014][T17513] netlink: 203340 bytes leftover after parsing attributes in process `syz.0.11571'. [ 3068.067934][T14910] rtl8150 4-1:1.0: couldn't reset the device [ 3068.074790][T14910] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 3068.086811][T14910] usb 4-1: USB disconnect, device number 93 [ 3068.870494][T17538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11585'. [ 3069.132920][ T7244] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 3069.307628][ T7244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3069.322681][ T7244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3069.336720][ T7244] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 3069.353911][ T7244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3069.364898][ T7244] usb 4-1: config 0 descriptor?? [ 3069.632534][T17568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11596'. [ 3069.820912][ T7244] usbhid 4-1:0.0: can't add hid device: -71 [ 3069.827315][ T7244] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3069.842898][ T7244] usb 4-1: USB disconnect, device number 94 [ 3070.148831][T17588] bond0: option lp_interval: invalid value (18446744073709551614) [ 3070.178256][T17588] bond0: option lp_interval: allowed values 1 - 2147483647 [ 3070.218340][T17588] bond0 (unregistering): Released all slaves [ 3070.256531][T17594] netlink: 408 bytes leftover after parsing attributes in process `syz.0.11602'. [ 3070.266877][T17594] netlink: 408 bytes leftover after parsing attributes in process `syz.0.11602'. [ 3070.292297][T17592] netlink: 'syz.6.11599': attribute type 5 has an invalid length. [ 3071.306980][T17592] ip6erspan0: entered promiscuous mode [ 3071.634136][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3072.070780][T17629] sctp: [Deprecated]: syz.0.11614 (pid 17629) Use of int in maxseg socket option. [ 3072.070780][T17629] Use struct sctp_assoc_value instead [ 3073.122700][T17639] fuse: Unknown parameter 'g:~9Y3_id' [ 3074.482736][ T7244] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 3074.588511][ T24] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 3074.643056][ T7244] usb 5-1: Using ep0 maxpacket: 8 [ 3074.653590][ T7244] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3074.662519][ T7244] usb 5-1: config 4 interface 0 has no altsetting 0 [ 3074.677538][ T7244] usb 5-1: string descriptor 0 read error: -22 [ 3074.684187][ T7244] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 3074.694061][ T7244] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 3074.722768][ T24] usb 4-1: device descriptor read/64, error -71 [ 3074.729285][ T7244] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 3074.750626][ T7244] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3074.770178][ T7244] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 3074.777733][ T7244] usb 5-1: media controller created [ 3074.797062][ T7244] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3074.929660][ T7244] zl10353_read_register: readreg error (reg=127, ret==0) [ 3074.962731][ T24] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 3074.999201][ T7244] usb 5-1: USB disconnect, device number 121 [ 3075.112732][ T24] usb 4-1: device descriptor read/64, error -71 [ 3075.226101][ T24] usb usb4-port1: attempt power cycle [ 3075.307064][T17679] FAULT_INJECTION: forcing a failure. [ 3075.307064][T17679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3075.341769][T17679] CPU: 1 UID: 0 PID: 17679 Comm: syz.2.11632 Tainted: G L syzkaller #0 PREEMPT(full) [ 3075.341799][T17679] Tainted: [L]=SOFTLOCKUP [ 3075.341806][T17679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3075.341821][T17679] Call Trace: [ 3075.341829][T17679] [ 3075.341837][T17679] dump_stack_lvl+0xe8/0x150 [ 3075.341867][T17679] should_fail_ex+0x412/0x560 [ 3075.341893][T17679] _copy_to_user+0x31/0xb0 [ 3075.341919][T17679] simple_read_from_buffer+0xe1/0x170 [ 3075.341942][T17679] proc_fail_nth_read+0x1bb/0x230 [ 3075.341969][T17679] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3075.341994][T17679] ? rw_verify_area+0x2a6/0x4d0 [ 3075.342016][T17679] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3075.342039][T17679] vfs_read+0x20c/0xa70 [ 3075.342068][T17679] ? __pfx_vfs_read+0x10/0x10 [ 3075.342093][T17679] ? kmem_cache_free+0x195/0x610 [ 3075.342111][T17679] ? __pfx_aa_sk_perm+0x10/0x10 [ 3075.342131][T17679] ? do_sock_setsockopt+0x185/0x1b0 [ 3075.342160][T17679] ksys_read+0x150/0x270 [ 3075.342184][T17679] ? __pfx_ksys_read+0x10/0x10 [ 3075.342210][T17679] ? asm_int80_emulation+0x1a/0x20 [ 3075.342230][T17679] ? asm_int80_emulation+0x1a/0x20 [ 3075.342247][T17679] do_int80_emulation+0x111/0x400 [ 3075.342273][T17679] ? clear_bhb_loop+0x60/0xb0 [ 3075.342290][T17679] ? clear_bhb_loop+0x60/0xb0 [ 3075.342310][T17679] asm_int80_emulation+0x1a/0x20 [ 3075.342330][T17679] RIP: 0023:0xf712572b [ 3075.342346][T17679] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 3075.342361][T17679] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3075.342385][T17679] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 3075.342398][T17679] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 3075.342409][T17679] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3075.342419][T17679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3075.342430][T17679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3075.342456][T17679] [ 3075.622731][ T24] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 3075.645362][ T24] usb 4-1: device descriptor read/8, error -71 [ 3075.765126][T17685] tipc: Enabling of bearer rejected, failed to enable media [ 3075.883343][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 3075.913698][ T24] usb 4-1: device descriptor read/8, error -71 [ 3076.023529][ T24] usb usb4-port1: unable to enumerate USB device [ 3076.037671][T17689] fuse: Unknown parameter 'g:~9Y3_id' [ 3076.108054][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11637'. [ 3076.289054][T17700] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=5 (10 ns) > initial count (8 ns). Using initial count to start timer. [ 3076.744797][T17707] fuse: Bad value for 'fd' [ 3078.303469][T29147] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 3078.479188][T29147] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3078.490136][T29147] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3078.512202][T29147] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3078.525338][T29147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3078.560329][T29147] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3078.602972][ T7244] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 3078.618795][T29147] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3078.764206][ T7244] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 3078.773291][ T7244] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3078.788816][ T7244] usb 1-1: config 220 has no interface number 2 [ 3078.799374][ T7244] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 3078.823973][ T7244] usb 1-1: config 220 interface 0 has no altsetting 0 [ 3078.831714][ T7244] usb 1-1: config 220 interface 76 has no altsetting 0 [ 3078.842499][ T7244] usb 1-1: config 220 interface 1 has no altsetting 0 [ 3078.856652][ T7244] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3078.869578][ T7244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3078.880972][ T7244] usb 1-1: Product: syz [ 3078.885263][ T7244] usb 1-1: Manufacturer: syz [ 3078.893100][ T7244] usb 1-1: SerialNumber: syz [ 3079.220865][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11650'. [ 3079.233495][ T24] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 3079.254634][ T7244] usb 1-1: selecting invalid altsetting 0 [ 3079.261343][ T7244] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 3079.269030][ T7244] uvcvideo 1-1:220.0: No valid video chain found. [ 3079.284692][ T7244] usb 1-1: selecting invalid altsetting 0 [ 3079.290905][ T7244] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 3079.318910][ T7244] usb 1-1: USB disconnect, device number 96 [ 3079.383175][ T24] usb 5-1: device descriptor read/64, error -71 [ 3079.623007][ T24] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 3079.762694][ T24] usb 5-1: device descriptor read/64, error -71 [ 3079.874063][ T24] usb usb5-port1: attempt power cycle [ 3080.212956][ T24] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 3080.234083][ T24] usb 5-1: device descriptor read/8, error -71 [ 3080.473014][ T24] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 3080.494943][ T24] usb 5-1: device descriptor read/8, error -71 [ 3080.604413][ T24] usb usb5-port1: unable to enumerate USB device [ 3080.845003][T17757] fuse: Unknown parameter 'g:~9Y3_id' [ 3081.003351][T17766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11658'. [ 3081.029900][ T24] usb 4-1: USB disconnect, device number 99 [ 3081.047917][T17728] delete_channel: no stack [ 3081.259554][T17773] bridge1: port 1(veth0_to_bond) entered blocking state [ 3081.302011][T17773] bridge1: port 1(veth0_to_bond) entered disabled state [ 3081.338912][T17773] veth0_to_bond: entered allmulticast mode [ 3081.365301][T17773] veth0_to_bond: entered promiscuous mode [ 3081.453454][ T5967] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 3081.536282][T17778] fuse: Bad value for 'fd' [ 3081.663639][T17782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11661'. [ 3081.696133][ T5967] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3081.713471][ T5967] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3081.746190][ T5967] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3081.764685][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3081.883120][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.889469][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3081.974829][ T5967] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3082.066130][ T5967] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3082.233968][T17774] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3082.503073][ T5967] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 3082.633448][ T5967] usb 3-1: device descriptor read/64, error -71 [ 3082.873255][ T5967] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 3083.003120][ T5967] usb 3-1: device descriptor read/64, error -71 [ 3083.113567][ T5967] usb usb3-port1: attempt power cycle [ 3083.453109][ T5967] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 3083.473418][ T5967] usb 3-1: device descriptor read/8, error -71 [ 3083.713107][ T5967] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 3083.745084][ T5967] usb 3-1: device descriptor read/8, error -71 [ 3083.863212][ T5967] usb usb3-port1: unable to enumerate USB device [ 3084.013261][ T7244] usb 1-1: USB disconnect, device number 97 [ 3084.021209][T17774] delete_channel: no stack [ 3084.117131][T17822] FAULT_INJECTION: forcing a failure. [ 3084.117131][T17822] name failslab, interval 1, probability 0, space 0, times 0 [ 3084.164444][T17822] CPU: 0 UID: 0 PID: 17822 Comm: syz.0.11671 Tainted: G L syzkaller #0 PREEMPT(full) [ 3084.164473][T17822] Tainted: [L]=SOFTLOCKUP [ 3084.164480][T17822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3084.164490][T17822] Call Trace: [ 3084.164498][T17822] [ 3084.164507][T17822] dump_stack_lvl+0xe8/0x150 [ 3084.164533][T17822] should_fail_ex+0x412/0x560 [ 3084.164556][T17822] should_failslab+0xa8/0x100 [ 3084.164576][T17822] __kmalloc_cache_noprof+0x83/0x6e0 [ 3084.164596][T17822] ? nfs_init_fs_context+0x58/0x1330 [ 3084.164623][T17822] nfs_init_fs_context+0x58/0x1330 [ 3084.164646][T17822] ? mutex_init_lockep+0xf9/0x130 [ 3084.164665][T17822] alloc_fs_context+0x9e3/0xd60 [ 3084.164693][T17822] do_new_mount+0x179/0xa50 [ 3084.164708][T17822] ? apparmor_capable+0x137/0x1a0 [ 3084.164733][T17822] ? security_capable+0x7e/0x2c0 [ 3084.164753][T17822] ? __pfx_do_new_mount+0x10/0x10 [ 3084.164770][T17822] ? ns_capable+0x89/0xe0 [ 3084.164789][T17822] ? path_mount+0x690/0x10e0 [ 3084.164804][T17822] __se_sys_mount+0x31d/0x420 [ 3084.164817][T17822] ? __pfx___se_sys_mount+0x10/0x10 [ 3084.164828][T17822] ? __secure_computing+0xe1/0x2a0 [ 3084.164842][T17822] ? __ia32_sys_mount+0x20/0xc0 [ 3084.164854][T17822] __do_fast_syscall_32+0x1d2/0x540 [ 3084.164866][T17822] ? lockdep_hardirqs_on+0x7a/0x110 [ 3084.164875][T17822] ? do_fast_syscall_32+0x33/0x70 [ 3084.164885][T17822] ? asm_int80_emulation+0x1a/0x20 [ 3084.164894][T17822] ? do_int80_emulation+0x20e/0x400 [ 3084.164904][T17822] ? rcu_is_watching+0x15/0xb0 [ 3084.164915][T17822] do_fast_syscall_32+0x33/0x70 [ 3084.164926][T17822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3084.164938][T17822] RIP: 0023:0xf748d539 [ 3084.164948][T17822] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3084.164957][T17822] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 3084.165059][T17822] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 3084.165066][T17822] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 3084.165073][T17822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3084.165079][T17822] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3084.165085][T17822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3084.165098][T17822] [ 3084.797062][T17832] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 3085.911877][T17843] syzkaller0: entered promiscuous mode [ 3085.922363][T17843] syzkaller0: entered allmulticast mode [ 3086.203204][T14910] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 3086.402920][T14910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3086.415143][T14910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3086.425977][T14910] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3086.435553][T14910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3086.487457][T14910] usb 4-1: SerialNumber: syz [ 3086.709100][T14910] usb 4-1: 0:2 : does not exist [ 3086.719143][T14910] usb 4-1: unit 5 not found! [ 3086.743468][T14910] usb 4-1: USB disconnect, device number 100 [ 3087.422877][T14910] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 3087.624240][T14910] usb 5-1: config 1 has an invalid descriptor of length 151, skipping remainder of the config [ 3087.637954][T14910] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 3087.663046][T14910] usb 5-1: New USB device found, idVendor=1d76, idProduct=0101, bcdDevice= 0.00 [ 3087.672106][T14910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3087.680868][T14910] usb 5-1: SerialNumber: syz [ 3088.258312][T17864] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11686'. [ 3088.299280][T17869] macvlan2: entered promiscuous mode [ 3088.571389][T17875] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11688'. [ 3088.719988][T17875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11688'. [ 3088.740619][T17875] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11688'. [ 3089.582411][T17832] Set syz1 is full, maxelem 65536 reached [ 3089.854307][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11692'. [ 3089.893927][T17895] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3089.910398][T17895] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11691'. [ 3089.995141][T14910] usb 5-1: USB disconnect, device number 126 [ 3090.177255][T29147] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 3090.355248][T29147] usb 1-1: Using ep0 maxpacket: 8 [ 3090.366459][T29147] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 3090.391989][T29147] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 3090.404053][T29147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3090.415739][T29147] usb 1-1: Product: syz [ 3090.421970][T29147] usb 1-1: Manufacturer: syz [ 3090.430505][T29147] usb 1-1: SerialNumber: syz [ 3090.450984][T29147] usb 1-1: config 0 descriptor?? [ 3090.470825][T29147] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 3090.691843][T29147] usb 1-1: USB disconnect, device number 98 [ 3091.094461][ T7244] usb 5-1: new low-speed USB device number 127 using dummy_hcd [ 3091.286239][ T7244] usb 5-1: config 64 has an invalid interface number: 122 but max is 1 [ 3091.296638][ T7244] usb 5-1: config 64 has an invalid interface number: 188 but max is 1 [ 3091.321450][ T7244] usb 5-1: config 64 has no interface number 0 [ 3091.329047][ T7244] usb 5-1: config 64 has no interface number 1 [ 3091.336522][ T7244] usb 5-1: config 64 interface 122 altsetting 7 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 3091.350315][ T7244] usb 5-1: config 64 interface 122 altsetting 7 endpoint 0x1 has invalid maxpacket 16, setting to 8 [ 3091.370168][ T7244] usb 5-1: config 64 interface 122 altsetting 7 endpoint 0x4 is Bulk; changing to Interrupt [ 3091.382669][ T7244] usb 5-1: config 64 interface 122 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 3091.398139][ T7244] usb 5-1: config 64 interface 122 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 3091.413111][ T7244] usb 5-1: config 64 interface 122 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 3091.432226][ T7244] usb 5-1: config 64 interface 188 altsetting 168 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 3091.444056][ T7244] usb 5-1: config 64 interface 122 has no altsetting 0 [ 3091.451614][ T7244] usb 5-1: config 64 interface 188 has no altsetting 0 [ 3092.714327][T17922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11699'. [ 3092.954927][T17926] fuse: Bad value for 'user_id' [ 3092.966081][T17926] fuse: Bad value for 'user_id' [ 3093.624870][ T9] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 3093.772582][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 3093.779083][ T30] audit: type=1326 audit(1769676804.229:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.6.11704" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x0 [ 3093.824957][ T9] usb 4-1: config 0 has no interfaces? [ 3093.831929][ T9] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 3093.846743][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3093.860151][ T9] usb 4-1: config 0 descriptor?? [ 3093.889970][ T7244] usb 5-1: New USB device found, idVendor=19d2, idProduct=1260, bcdDevice=f7.13 [ 3093.915591][ T7244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3093.946318][ T7244] usb 5-1: can't set config #64, error -71 [ 3093.966189][ T7244] usb 5-1: USB disconnect, device number 127 [ 3093.977101][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11705'. [ 3094.153657][ T7244] usb 4-1: USB disconnect, device number 101 [ 3094.199757][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11708'. [ 3094.209913][T17949] netlink: 'syz.2.11708': attribute type 14 has an invalid length. [ 3094.239280][T17949] vxlan0: entered promiscuous mode [ 3094.256434][ T4888] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3094.269427][ T4888] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3094.286050][ T4888] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3094.296351][ T4888] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3094.583286][T29147] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 3094.684697][T17957] fuse: Bad value for 'user_id' [ 3094.689794][T17957] fuse: Bad value for 'user_id' [ 3094.736906][T29147] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3094.750341][T29147] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3094.768066][T29147] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3094.777847][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 3094.786037][T29147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3094.832057][T29147] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3094.891076][T29147] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3094.943395][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 3094.950583][ T9] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 3094.970500][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3094.983844][ T9] usb 1-1: config 0 descriptor?? [ 3095.003334][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 3095.198934][T17955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3095.219638][T17955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3095.278887][T17950] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3095.551305][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11718'. [ 3095.728887][T17985] netlink: 'syz.6.11720': attribute type 1 has an invalid length. [ 3095.753166][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11719'. [ 3095.770864][T17985] bond1: entered promiscuous mode [ 3095.778580][T17985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3095.815529][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11720'. [ 3096.043376][T17955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3096.074349][T17955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3096.085728][T17985] bond1 (unregistering): Released all slaves [ 3096.269261][T17991] tipc: Enabling of bearer rejected, failed to enable media [ 3096.324146][ T9] gspca_vc032x: reg_w err -71 [ 3096.328869][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.345304][T17993] fuse: Bad value for 'user_id' [ 3096.350211][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.356278][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.371937][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.378648][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.384990][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.390367][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.397070][T17993] fuse: Bad value for 'user_id' [ 3096.401969][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.407875][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.413735][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.420002][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.428010][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.435581][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.441758][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.450269][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.457492][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.465640][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.472099][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 3096.479560][ T9] gspca_vc032x: Unknown sensor... [ 3096.486166][ T9] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 3096.500678][ T9] usb 1-1: USB disconnect, device number 99 [ 3096.586979][T17999] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11724'. [ 3096.907348][T18016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11729'. [ 3096.953289][T18018] FAULT_INJECTION: forcing a failure. [ 3096.953289][T18018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3096.967558][T18018] CPU: 1 UID: 0 PID: 18018 Comm: syz.0.11730 Tainted: G L syzkaller #0 PREEMPT(full) [ 3096.967576][T18018] Tainted: [L]=SOFTLOCKUP [ 3096.967580][T18018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3096.967586][T18018] Call Trace: [ 3096.967591][T18018] [ 3096.967596][T18018] dump_stack_lvl+0xe8/0x150 [ 3096.967612][T18018] should_fail_ex+0x412/0x560 [ 3096.967627][T18018] _copy_from_iter+0x1d3/0x1670 [ 3096.967645][T18018] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 3096.967662][T18018] ? __pfx__copy_from_iter+0x10/0x10 [ 3096.967675][T18018] ? __build_skb_around+0x22d/0x3c0 [ 3096.967688][T18018] ? __alloc_skb+0x193/0x390 [ 3096.967699][T18018] ? netlink_sendmsg+0x650/0xb40 [ 3096.967709][T18018] ? skb_put+0x11b/0x210 [ 3096.967722][T18018] netlink_sendmsg+0x6c0/0xb40 [ 3096.967737][T18018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3096.967748][T18018] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3096.967766][T18018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3096.967778][T18018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3096.967788][T18018] ____sys_sendmsg+0xa68/0xad0 [ 3096.967805][T18018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3096.967819][T18018] ? kstrtoull+0x12f/0x1d0 [ 3096.967834][T18018] ___sys_sendmsg+0x2a5/0x360 [ 3096.967846][T18018] ? __lock_acquire+0x6b5/0x2cf0 [ 3096.967863][T18018] ? __pfx____sys_sendmsg+0x10/0x10 [ 3096.967876][T18018] ? get_pid_task+0x20/0x1f0 [ 3096.967887][T18018] ? get_pid_task+0x20/0x1f0 [ 3096.967896][T18018] ? get_pid_task+0x20/0x1f0 [ 3096.967918][T18018] ? __fget_files+0x2a/0x420 [ 3096.967929][T18018] ? __fget_files+0x3a0/0x420 [ 3096.967944][T18018] __sys_sendmsg+0x183/0x260 [ 3096.967958][T18018] ? __pfx___sys_sendmsg+0x10/0x10 [ 3096.967976][T18018] ? __pfx_ksys_write+0x10/0x10 [ 3096.967994][T18018] __do_fast_syscall_32+0x1d2/0x540 [ 3096.968006][T18018] ? lockdep_hardirqs_on+0x7a/0x110 [ 3096.968015][T18018] ? do_fast_syscall_32+0x33/0x70 [ 3096.968025][T18018] ? asm_int80_emulation+0x1a/0x20 [ 3096.968034][T18018] ? do_int80_emulation+0x20e/0x400 [ 3096.968047][T18018] do_fast_syscall_32+0x33/0x70 [ 3096.968058][T18018] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3096.968069][T18018] RIP: 0023:0xf748d539 [ 3096.968079][T18018] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3096.968088][T18018] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 3096.968100][T18018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 3096.968107][T18018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3096.968113][T18018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3096.968119][T18018] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3096.968125][T18018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3096.968139][T18018] [ 3097.289492][T14910] usb 5-1: USB disconnect, device number 2 [ 3097.300666][T17952] delete_channel: no stack [ 3097.384830][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 3097.467486][T18026] tipc: Enabling of bearer rejected, failed to enable media [ 3097.553998][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 3097.564870][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3097.586719][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3097.603180][ T9] usb 3-1: Product: syz [ 3097.613334][ T9] usb 3-1: Manufacturer: syz [ 3097.628948][ T9] usb 3-1: SerialNumber: syz [ 3097.655274][ T9] usb 3-1: config 0 descriptor?? [ 3097.889721][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3098.811682][ T6559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3098.822249][ T6559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3098.843342][ T6559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3098.851517][ T6559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3098.859796][ T6559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3098.897770][ T1157] bridge_slave_1: left allmulticast mode [ 3098.915485][ T1157] bridge_slave_1: left promiscuous mode [ 3098.927231][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 3098.985363][ T1157] bridge_slave_0: left allmulticast mode [ 3098.991041][ T1157] bridge_slave_0: left promiscuous mode [ 3098.998533][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 3099.009297][ T1157] veth0_to_bond: left allmulticast mode [ 3099.018212][ T1157] veth0_to_bond: left promiscuous mode [ 3099.038727][ T1157] bridge1: port 1(veth0_to_bond) entered disabled state [ 3099.630444][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3099.653403][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3099.663399][ T1157] bond0 (unregistering): Released all slaves [ 3100.130621][T18044] chnl_net:caif_netlink_parms(): no params data found [ 3100.214174][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 3100.376554][ T1157] hsr_slave_0: left promiscuous mode [ 3100.386073][ T1157] hsr_slave_1: left promiscuous mode [ 3100.392205][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3100.403417][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3100.527140][ T9] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 3100.648377][T29147] usb 3-1: USB disconnect, device number 69 [ 3100.744302][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3100.794781][ T9] usb 4-1: config 81 has an invalid interface number: 13 but max is 0 [ 3100.803543][ T9] usb 4-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 3100.819755][ T9] usb 4-1: config 81 has no interface number 0 [ 3100.856252][ T9] usb 4-1: config 81 interface 13 has no altsetting 0 [ 3100.896807][ T9] usb 4-1: New USB device found, idVendor=12d1, idProduct=0ec1, bcdDevice=29.23 [ 3100.923187][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3100.931206][ T9] usb 4-1: Product: syz [ 3100.936112][ T9] usb 4-1: Manufacturer: syz [ 3100.940951][ T9] usb 4-1: SerialNumber: syz [ 3101.011800][ T6559] Bluetooth: hci3: command tx timeout [ 3101.210594][ T9] qmi_wwan 4-1:81.13: bogus CDC Union: master=0, slave=1 [ 3101.219159][ T9] qmi_wwan 4-1:81.13: probe with driver qmi_wwan failed with error -22 [ 3101.255771][ T9] usb 4-1: USB disconnect, device number 102 [ 3101.449357][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 3101.473599][ T7244] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 3101.524962][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 3101.645097][ T7244] usb 3-1: device descriptor read/64, error -71 [ 3101.878531][ T30] audit: type=1326 audit(1769676812.339:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18085 comm="syz.3.11751" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740d539 code=0x0 [ 3101.883854][ T7244] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 3102.074130][ T7244] usb 3-1: device descriptor read/64, error -71 [ 3102.203393][ T7244] usb usb3-port1: attempt power cycle [ 3102.287306][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11753'. [ 3102.299240][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11753'. [ 3102.487818][T18044] bridge0: port 1(bridge_slave_0) entered blocking state [ 3102.505864][T18044] bridge0: port 1(bridge_slave_0) entered disabled state [ 3102.523033][T18044] bridge_slave_0: entered allmulticast mode [ 3102.530647][T18044] bridge_slave_0: entered promiscuous mode [ 3102.548236][T18044] bridge0: port 2(bridge_slave_1) entered blocking state [ 3102.556026][ T7244] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 3102.564443][T18044] bridge0: port 2(bridge_slave_1) entered disabled state [ 3102.571749][T18044] bridge_slave_1: entered allmulticast mode [ 3102.597031][ T7244] usb 3-1: device descriptor read/8, error -71 [ 3102.606420][T18044] bridge_slave_1: entered promiscuous mode [ 3102.657711][T18044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3102.670646][T18044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3102.747165][T18044] team0: Port device team_slave_0 added [ 3102.766067][T18044] team0: Port device team_slave_1 added [ 3102.810555][T18044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3102.823795][T18044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3102.851405][ T7244] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 3102.880790][ T7244] usb 3-1: device descriptor read/8, error -71 [ 3102.888225][T18044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3102.914507][T18044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3102.922682][T18044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3102.972921][T18044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3103.009200][ T7244] usb usb3-port1: unable to enumerate USB device [ 3103.032778][T18044] hsr_slave_0: entered promiscuous mode [ 3103.042545][T18044] hsr_slave_1: entered promiscuous mode [ 3103.050930][T18044] debugfs: 'hsr0' already exists in 'hsr' [ 3103.063966][T18044] Cannot create hsr debugfs directory [ 3103.073250][ T5147] Bluetooth: hci3: command tx timeout [ 3103.517398][T18044] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3103.530824][T18044] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3103.540439][T18044] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3103.550170][T18044] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3103.692254][T18132] syzkaller0: entered promiscuous mode [ 3103.698849][T18132] syzkaller0: entered allmulticast mode [ 3103.856355][T18044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3103.925838][T18044] 8021q: adding VLAN 0 to HW filter on device team0 [ 3103.967833][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 3103.974971][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3104.030349][T18044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3104.041375][T18044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3104.060508][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 3104.067610][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3104.167037][T18044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3104.183218][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 3104.264912][T18044] veth0_vlan: entered promiscuous mode [ 3104.297668][T18044] veth1_vlan: entered promiscuous mode [ 3104.359429][T18044] veth0_macvtap: entered promiscuous mode [ 3104.370040][T18044] veth1_macvtap: entered promiscuous mode [ 3104.371724][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3104.410033][ T9] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3104.426634][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3104.433641][ T5147] Bluetooth: hci5: command 0x0406 tx timeout [ 3104.447490][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3104.472479][T18044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3104.481473][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3104.564903][T18044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3104.596077][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3104.809038][T18137] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3104.823652][ T1114] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3104.832486][ T1114] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3104.851777][ T1114] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3104.863879][ T1114] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3104.957098][T18153] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3105.087705][T19151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3105.106461][T19151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3105.155411][ T6559] Bluetooth: hci3: command tx timeout [ 3105.205796][T19151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3105.218439][T19151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3105.457316][T18174] loop6: detected capacity change from 0 to 2640 [ 3105.505172][T27907] buffer_io_error: 9 callbacks suppressed [ 3105.505184][T27907] Buffer I/O error on dev loop6, logical block 0, async page read [ 3105.550181][T27907] Buffer I/O error on dev loop6, logical block 0, async page read [ 3105.578216][T18178] Buffer I/O error on dev loop6, logical block 0, async page read [ 3105.727425][T27907] Buffer I/O error on dev loop6, logical block 0, async page read [ 3105.746001][T18178] Buffer I/O error on dev loop6, logical block 0, async page read [ 3105.770287][T27907] Buffer I/O error on dev loop6, logical block 0, async page read [ 3105.779047][T27907] Buffer I/O error on dev loop6, logical block 0, async page read [ 3105.813298][T27907] Buffer I/O error on dev loop6, logical block 0, async page read [ 3105.823206][T27907] Buffer I/O error on dev loop6, logical block 0, async page read [ 3105.837899][T27907] Buffer I/O error on dev loop6, logical block 0, async page read [ 3105.852037][T27907] ldm_validate_partition_table(): Disk read failed. [ 3105.868466][T27907] Dev loop6: unable to read RDB block 0 [ 3105.889332][T27907] loop6: unable to read partition table [ 3105.973532][T18174] ldm_validate_partition_table(): Disk read failed. [ 3106.045839][T18174] Dev loop6: unable to read RDB block 0 [ 3106.095766][T18174] loop6: unable to read partition table [ 3106.130871][T18174] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 3106.255893][T29147] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 3106.325371][ T5196] ldm_validate_partition_table(): Disk read failed. [ 3106.336668][ T5196] Dev loop6: unable to read RDB block 0 [ 3106.346595][ T5196] loop6: unable to read partition table [ 3106.423864][T29147] usb 3-1: Using ep0 maxpacket: 8 [ 3106.438536][T29147] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 3106.457907][T29147] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3106.476115][T29147] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3106.496832][T29147] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3106.517395][T29147] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3106.545660][T29147] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3106.569020][T29147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3106.792300][ T5967] usb 1-1: USB disconnect, device number 100 [ 3106.827568][T18134] delete_channel: no stack [ 3106.853091][T14910] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 3107.013085][T14910] usb 5-1: Using ep0 maxpacket: 32 [ 3107.020721][T14910] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3107.038637][T14910] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3107.049187][T14910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3107.058972][T14910] usb 5-1: config 0 descriptor?? [ 3107.071657][T14910] hub 5-1:0.0: bad descriptor, ignoring hub [ 3107.078642][T14910] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3107.093057][T14910] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 3107.177638][T18207] delete_channel: no stack [ 3107.243352][ T6559] Bluetooth: hci3: command tx timeout [ 3107.332392][T18212] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 3107.947458][T18221] FAULT_INJECTION: forcing a failure. [ 3107.947458][T18221] name failslab, interval 1, probability 0, space 0, times 0 [ 3107.964050][T18221] CPU: 1 UID: 0 PID: 18221 Comm: syz.0.11773 Tainted: G L syzkaller #0 PREEMPT(full) [ 3107.964097][T18221] Tainted: [L]=SOFTLOCKUP [ 3107.964109][T18221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3107.964132][T18221] Call Trace: [ 3107.964148][T18221] [ 3107.964164][T18221] dump_stack_lvl+0xe8/0x150 [ 3107.964205][T18221] should_fail_ex+0x412/0x560 [ 3107.964230][T18221] should_failslab+0xa8/0x100 [ 3107.964251][T18221] __kvmalloc_node_noprof+0x166/0x8d0 [ 3107.964272][T18221] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 3107.964300][T18221] alloc_netdev_mqs+0x8a6/0x11b0 [ 3107.964329][T18221] rtnl_create_link+0x31f/0xd70 [ 3107.964356][T18221] rtnl_newlink_create+0x277/0xb70 [ 3107.964376][T18221] ? __pfx___nla_validate_parse+0x10/0x10 [ 3107.964406][T18221] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 3107.964430][T18221] ? __pfx___mutex_lock+0x10/0x10 [ 3107.964459][T18221] ? ns_capable+0x89/0xe0 [ 3107.964492][T18221] rtnl_newlink+0x1666/0x1be0 [ 3107.964527][T18221] ? __pfx_rtnl_newlink+0x10/0x10 [ 3107.964544][T18221] ? do_fast_syscall_32+0x33/0x70 [ 3107.964561][T18221] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3107.964611][T18221] ? kasan_quarantine_put+0xbb/0x1f0 [ 3107.964635][T18221] ? lockdep_hardirqs_on+0x7a/0x110 [ 3107.964658][T18221] ? kmem_cache_free+0x195/0x610 [ 3107.964675][T18221] ? nlmon_xmit+0xb0/0x100 [ 3107.964702][T18221] ? __lock_acquire+0x6b5/0x2cf0 [ 3107.964734][T18221] ? __local_bh_enable_ip+0xd0/0x130 [ 3107.964750][T18221] ? lockdep_hardirqs_on+0x7a/0x110 [ 3107.964767][T18221] ? __dev_queue_xmit+0x274/0x3850 [ 3107.964788][T18221] ? __local_bh_enable_ip+0xd0/0x130 [ 3107.964802][T18221] ? __dev_queue_xmit+0x274/0x3850 [ 3107.964830][T18221] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 3107.964863][T18221] ? __pfx_rtnl_newlink+0x10/0x10 [ 3107.964886][T18221] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 3107.964909][T18221] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 3107.964927][T18221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3107.964944][T18221] ? ref_tracker_free+0x693/0x840 [ 3107.964963][T18221] ? __copy_skb_header+0xa3/0x4a0 [ 3107.964986][T18221] ? __pfx_ref_tracker_free+0x10/0x10 [ 3107.965004][T18221] ? __skb_clone+0x63/0x7a0 [ 3107.965032][T18221] netlink_rcv_skb+0x232/0x4b0 [ 3107.965051][T18221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3107.965073][T18221] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3107.965102][T18221] ? netlink_deliver_tap+0x2e/0x1b0 [ 3107.965128][T18221] netlink_unicast+0x80f/0x9b0 [ 3107.965160][T18221] ? __pfx_netlink_unicast+0x10/0x10 [ 3107.965182][T18221] ? __alloc_skb+0x193/0x390 [ 3107.965202][T18221] ? netlink_sendmsg+0x650/0xb40 [ 3107.965218][T18221] ? skb_put+0x11b/0x210 [ 3107.965241][T18221] netlink_sendmsg+0x813/0xb40 [ 3107.965257][T18221] ? _parse_integer_limit+0x1ae/0x1f0 [ 3107.965280][T18221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3107.965297][T18221] ? kstrtouint+0x6e/0xe0 [ 3107.965311][T18221] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3107.965332][T18221] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3107.965354][T18221] sock_write_iter+0x503/0x550 [ 3107.965379][T18221] ? __pfx_sock_write_iter+0x10/0x10 [ 3107.965412][T18221] ? bpf_lsm_file_permission+0x9/0x20 [ 3107.965430][T18221] ? security_file_permission+0x75/0x260 [ 3107.965456][T18221] vfs_write+0x61d/0xb90 [ 3107.965478][T18221] ? __pfx_vfs_write+0x10/0x10 [ 3107.965502][T18221] ? __fget_files+0x2a/0x420 [ 3107.965518][T18221] ksys_write+0x150/0x270 [ 3107.965533][T18221] ? __pfx_ksys_write+0x10/0x10 [ 3107.965546][T18221] ? __pfx_ksys_write+0x10/0x10 [ 3107.965564][T18221] __do_fast_syscall_32+0x1d2/0x540 [ 3107.965576][T18221] ? lockdep_hardirqs_on+0x7a/0x110 [ 3107.965585][T18221] ? do_fast_syscall_32+0x33/0x70 [ 3107.965595][T18221] ? asm_int80_emulation+0x1a/0x20 [ 3107.965604][T18221] ? do_int80_emulation+0x20e/0x400 [ 3107.965616][T18221] do_fast_syscall_32+0x33/0x70 [ 3107.965627][T18221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3107.965639][T18221] RIP: 0023:0xf748d539 [ 3107.965649][T18221] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3107.965658][T18221] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 3107.965671][T18221] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 3107.965678][T18221] RDX: 000000000000033a RSI: 0000000000000000 RDI: 0000000000000000 [ 3107.965684][T18221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3107.965689][T18221] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3107.965695][T18221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3107.965710][T18221] [ 3108.458953][T18184] delete_channel: no stack [ 3108.932068][T18238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3109.006594][T18238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3109.045608][T14910] usb 3-1: USB disconnect, device number 74 [ 3109.117382][T18238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3109.176106][T18238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3109.283118][ T5967] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 3109.456560][ T5967] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3109.469969][ T5967] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3109.490297][ T5967] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3109.507212][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3109.539493][ T5967] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3109.584591][ T5967] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3110.473835][ T5967] usb 5-1: USB disconnect, device number 3 [ 3111.049276][T18274] fuse: Unknown parameter 'g:~9Y3_id' [ 3111.971250][T18277] tipc: Enabling of bearer rejected, failed to enable media [ 3112.375028][T18283] fuse: Bad value for 'user_id' [ 3112.386499][T18283] fuse: Bad value for 'user_id' [ 3113.022526][ T7244] usb 4-1: USB disconnect, device number 103 [ 3113.040293][T18241] delete_channel: no stack [ 3113.053703][ T5967] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 3113.203614][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 3113.213477][ T5967] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3113.228044][ T5967] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3113.238254][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3113.249743][ T5967] usb 5-1: config 0 descriptor?? [ 3113.264990][ T5967] hub 5-1:0.0: bad descriptor, ignoring hub [ 3113.278806][ T5967] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3113.288136][ T5967] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 3113.343826][T18306] fuse: Unknown parameter 'g:~9Y3_id' [ 3115.055167][T18346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3115.064902][T29147] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 3115.125076][T18346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3115.170633][T18342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3115.175400][T18349] netlink: 988 bytes leftover after parsing attributes in process `syz.3.11805'. [ 3115.210825][T18342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3115.250641][T29147] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3115.262939][T29147] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3115.275991][T29147] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3115.285407][T29147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3115.305720][T29147] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3115.386475][T29147] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3115.625870][T18339] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3115.710635][T18349] binder: 18327:18349 ioctl 4018620d 0 returned -22 [ 3115.764420][T18354] fuse: Unknown parameter 'g:~9Y3_id' [ 3116.639799][T29147] usb 5-1: USB disconnect, device number 4 [ 3116.896924][T18374] sctp: [Deprecated]: syz.4.11810 (pid 18374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3116.896924][T18374] Use struct sctp_sack_info instead [ 3117.363746][T14910] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3117.751445][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11814'. [ 3117.768358][T29147] usb 1-1: USB disconnect, device number 101 [ 3117.769405][T18399] fuse: Bad value for 'user_id' [ 3117.779864][T18399] fuse: Bad value for 'user_id' [ 3117.818108][T18338] delete_channel: no stack [ 3117.830473][T18397] netlink: 268 bytes leftover after parsing attributes in process `syz.2.11814'. [ 3118.194929][T14910] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3143.315501][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.321836][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.755448][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.761740][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3222.193501][ T6559] Bluetooth: hci3: command 0x0406 tx timeout [ 3230.431472][T18473] netlink: 'syz.4.11824': attribute type 2 has an invalid length. [ 3230.769674][T18491] bridge_slave_0: left allmulticast mode [ 3230.776852][T18491] bridge_slave_0: left promiscuous mode [ 3230.789462][T18491] bridge0: port 1(bridge_slave_0) entered disabled state [ 3230.886904][T18491] bridge_slave_1: left allmulticast mode [ 3230.893432][T18491] bridge_slave_1: left promiscuous mode [ 3230.958365][T18491] bridge0: port 2(bridge_slave_1) entered disabled state [ 3231.039260][T18484] fuse: Unknown parameter 'g:~9Y3_id' [ 3231.062286][T18491] bond0: (slave bond_slave_0): Releasing backup interface [ 3231.182533][T18491] bond0: (slave bond_slave_1): Releasing backup interface [ 3231.273444][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11824'. [ 3231.307063][T18491] team0: Port device team_slave_0 removed [ 3231.401354][T18491] team0: Port device team_slave_1 removed [ 3231.455207][T18491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3231.488351][T18491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3231.663810][T18491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3231.713827][T18491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3231.915164][T18491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3232.003998][T18485] : entered promiscuous mode [ 3232.366878][ T6559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3232.377483][ T6559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3232.395530][ T6559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3232.422460][ T6559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3232.437100][ T6559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3232.445172][ T5967] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 3232.605161][ T5967] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3232.616957][ T5967] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 3232.628260][ T5967] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3232.635603][ T5967] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 3232.662899][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3232.686751][ T5967] usb 4-1: config 0 descriptor?? [ 3232.728373][T18498] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3232.775879][T18508] chnl_net:caif_netlink_parms(): no params data found [ 3232.916218][T18508] bridge0: port 1(bridge_slave_0) entered blocking state [ 3232.928508][T18508] bridge0: port 1(bridge_slave_0) entered disabled state [ 3232.938730][T18508] bridge_slave_0: entered allmulticast mode [ 3232.970288][T18508] bridge_slave_0: entered promiscuous mode [ 3232.981076][T18508] bridge0: port 2(bridge_slave_1) entered blocking state [ 3232.999154][T18508] bridge0: port 2(bridge_slave_1) entered disabled state [ 3233.009506][T18508] bridge_slave_1: entered allmulticast mode [ 3233.029399][T18508] bridge_slave_1: entered promiscuous mode [ 3233.099448][T18508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3233.131460][T18508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3233.187874][T18508] team0: Port device team_slave_0 added [ 3233.208038][T18508] team0: Port device team_slave_1 added [ 3233.252433][T18508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3233.276387][T18508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3233.293873][ T5967] logitech 0003:046D:C24F.0052: hidraw0: USB HID v0.07 Device [HID 046d:c24f] on usb-dummy_hcd.3-1/input0 [ 3233.332704][T18508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3233.352093][T18508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3233.359562][ T5967] logitech 0003:046D:C24F.0052: no inputs found [ 3233.371651][T18508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3233.439968][T18508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3233.530126][T18508] hsr_slave_0: entered promiscuous mode [ 3233.547750][T18508] hsr_slave_1: entered promiscuous mode [ 3233.603212][T18508] debugfs: 'hsr0' already exists in 'hsr' [ 3233.609348][T18508] Cannot create hsr debugfs directory [ 3233.825241][ T5967] usb 4-1: USB disconnect, device number 104 [ 3233.950089][T18508] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3233.962134][T18508] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3233.972494][T18508] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 3234.098962][T18508] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3234.109383][T18508] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3234.120329][T18508] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 3234.220623][T18508] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3234.230965][T18508] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3234.241441][T18508] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 3234.307059][T18508] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3234.321468][T18508] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3234.333393][T18508] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 3234.449198][T19151] bridge_slave_1: left allmulticast mode [ 3234.464924][T19151] bridge_slave_1: left promiscuous mode [ 3234.484391][T19151] bridge0: port 2(bridge_slave_1) entered disabled state [ 3234.498821][T19151] bridge_slave_0: left allmulticast mode [ 3234.514021][ T5147] Bluetooth: hci4: command tx timeout [ 3234.514620][T19151] bridge_slave_0: left promiscuous mode [ 3234.528318][T19151] bridge0: port 1(bridge_slave_0) entered disabled state [ 3234.920229][T18530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11832'. [ 3234.980416][T19151] dvmrp8 (unregistering): left allmulticast mode [ 3235.080451][T19151] team0: Port device vxlan0 removed [ 3235.104084][T19151] bridge0 (unregistering): left allmulticast mode [ 3235.186957][T19151] bond0 (unregistering): Released all slaves [ 3235.302003][T18508] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3235.330860][T19151] : left promiscuous mode [ 3235.351086][T18508] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3235.364308][T18508] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3235.377303][T18508] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3235.407272][T19151] tipc: Disabling bearer [ 3235.414831][T18539] netlink: 'syz.0.11834': attribute type 4 has an invalid length. [ 3235.423069][T19151] tipc: Disabling bearer [ 3235.431485][T19151] tipc: Left network mode [ 3235.466497][T18535] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11833'. [ 3235.815335][T18508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3235.834636][T18508] 8021q: adding VLAN 0 to HW filter on device team0 [ 3235.867696][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 3235.874880][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3236.029613][T19151] hsr_slave_0: left promiscuous mode [ 3236.035744][T19151] hsr_slave_1: left promiscuous mode [ 3236.041529][T19151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3236.051084][T19151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3236.079928][T19151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3236.089493][T19151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3236.127772][T19151] veth1_macvtap: left promiscuous mode [ 3236.137066][T19151] veth0_macvtap: left promiscuous mode [ 3236.151772][T19151] veth1_vlan: left promiscuous mode [ 3236.172027][T19151] veth0_vlan: left promiscuous mode [ 3236.594325][ T5147] Bluetooth: hci4: command tx timeout [ 3236.595558][T18549] syz.3.11835 (18549): drop_caches: 1 [ 3236.890787][T18549] syz.3.11835 (18549): drop_caches: 1 [ 3237.414630][T19151] team0 (unregistering): Port device team_slave_1 removed [ 3237.503334][T19151] team0 (unregistering): Port device team_slave_0 removed [ 3237.943461][ T9] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 3238.104835][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 3238.118728][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 3238.121328][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 3238.134043][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3238.171770][ T9] usb 4-1: config 0 has no interface number 0 [ 3238.203514][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 3238.327293][T18508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3238.350308][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 3238.372709][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3238.381731][ T9] usb 4-1: Product: syz [ 3238.405680][ T9] usb 4-1: Manufacturer: syz [ 3238.410529][ T9] usb 4-1: SerialNumber: syz [ 3238.450159][ T9] usb 4-1: config 0 descriptor?? [ 3238.490902][T18508] veth0_vlan: entered promiscuous mode [ 3238.511324][T18508] veth1_vlan: entered promiscuous mode [ 3238.673375][ T5147] Bluetooth: hci4: command tx timeout [ 3238.725713][T18508] veth0_macvtap: entered promiscuous mode [ 3238.736716][T18508] veth1_macvtap: entered promiscuous mode [ 3238.761784][T18508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3238.776990][T18508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3238.815154][T28036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3238.824815][T28036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3238.864140][T28036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3238.873198][T28036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3239.129036][T28036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3239.164101][T28036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3239.224012][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3239.232224][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3239.526984][T18580] ptrace attach of "./syz-executor exec"[18044] was attempted by "./syz-executor exec"[18580] [ 3239.964173][T18569] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 3240.213085][T18569] usb 3-1: Using ep0 maxpacket: 8 [ 3240.220875][T18569] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3240.239954][T18569] usb 3-1: config 7 has an invalid interface number: 67 but max is 0 [ 3240.263533][T18569] usb 3-1: config 7 has no interface number 0 [ 3240.346443][T18569] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 3240.366538][T18569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3240.383243][T18580] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11839'. [ 3240.401562][T18569] usb 3-1: Product: syz [ 3240.411520][T18569] usb 3-1: Manufacturer: syz [ 3240.422847][T18569] usb 3-1: SerialNumber: syz [ 3240.667325][T18593] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3240.685194][T18594] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11842'. [ 3240.753113][ T5147] Bluetooth: hci4: command tx timeout [ 3241.069670][T18565] syz.3.11838 (18565): drop_caches: 2 [ 3241.258293][ T9] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -32 [ 3241.291389][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 3241.307531][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 3241.335773][ T9] f81534 4-1:0.12: probe with driver f81534 failed with error -32 [ 3241.513324][T14910] usb 4-1: USB disconnect, device number 105 [ 3241.687541][T18569] usb 3-1: USB disconnect, device number 75 [ 3242.652896][T18569] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 3242.768065][T18578] syz.4.11828 (18578) used greatest stack depth: 18080 bytes left [ 3242.865225][T18569] usb 1-1: Using ep0 maxpacket: 8 [ 3242.887321][T18569] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3242.905103][T18569] usb 1-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 3242.926161][T18569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3242.942914][T18569] usb 1-1: Product: syz [ 3242.949461][T18569] usb 1-1: Manufacturer: syz [ 3242.956468][T18569] usb 1-1: SerialNumber: syz [ 3243.143121][T14910] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 3243.303161][T14910] usb 3-1: Using ep0 maxpacket: 32 [ 3243.317244][T14910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3243.344513][T14910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3243.355965][T14910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3243.372708][T14910] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 3243.386406][T14910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3243.435250][T14910] usb 3-1: config 0 descriptor?? [ 3243.887587][T14910] hid (null): global environment stack underflow [ 3243.927211][T14910] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0053/input/input211 [ 3244.027283][T14910] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0053/input/input212 [ 3244.183244][T14910] kye 0003:0458:5011.0053: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 3244.546616][ T7244] usb 3-1: USB disconnect, device number 76 [ 3245.357040][T18569] usbhid 1-1:1.0: can't add hid device: -71 [ 3245.371254][T18569] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 3245.428880][T18569] usb 1-1: USB disconnect, device number 102 [ 3245.802326][T18637] netlink: 'syz.0.11851': attribute type 4 has an invalid length. [ 3245.857504][ T30] audit: type=1400 audit(1769676956.289:2295): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=18631 comm="syz.0.11851" [ 3247.750254][T18647] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 3249.370649][T18669] tipc: Enabling of bearer rejected, failed to enable media [ 3250.474096][T18688] fuse: Unknown parameter 'g:~9Y3_id' [ 3250.705700][T18691] netlink: 'syz.7.11864': attribute type 1 has an invalid length. [ 3251.410506][T18697] fuse: Unknown parameter 'g:~9Y3_id' [ 3251.506220][T18702] Cannot find add_set index 3 as target [ 3251.803930][T14910] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 3252.002841][T14910] usb 4-1: Using ep0 maxpacket: 16 [ 3252.018497][T14910] usb 4-1: config 0 has an invalid interface number: 60 but max is 0 [ 3252.026683][T14910] usb 4-1: config 0 has no interface number 0 [ 3252.106657][T14910] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 3252.119822][T14910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3252.142988][T14910] usb 4-1: Product: syz [ 3252.153017][T14910] usb 4-1: Manufacturer: syz [ 3252.163764][T14910] usb 4-1: SerialNumber: syz [ 3252.182032][T14910] usb 4-1: config 0 descriptor?? [ 3252.288045][T14910] gspca_main: spca500-2.14.0 probing 046d:0900 [ 3253.077031][T14910] gspca_spca500: reg write: error -32 [ 3253.083336][T14910] gspca_spca500: reg write: error -32 [ 3253.112541][T14910] gspca_spca500: reg write: error -32 [ 3253.145150][T14910] gspca_spca500: reg write: error -32 [ 3253.157362][T14910] gspca_spca500: reg write: error -32 [ 3253.170298][T14910] gspca_spca500: reg write: error -32 [ 3253.181500][T14910] gspca_spca500: reg write: error -32 [ 3253.199379][T14910] gspca_spca500: reg write: error -32 [ 3253.219623][T14910] gspca_spca500: reg write: error -32 [ 3253.235738][T14910] gspca_spca500: reg write: error -32 [ 3253.264795][T14910] gspca_spca500: reg write: error -32 [ 3253.293101][T14910] gspca_spca500: reg write: error -32 [ 3253.301896][T14910] gspca_spca500: reg write: error -32 [ 3253.683238][T14910] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 3253.834208][T14910] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3253.845094][T14910] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3253.863572][T14910] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3253.872303][T14910] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3253.885535][T14910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3253.908980][T14910] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3253.918335][T14910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3253.932959][T14910] usb 5-1: Manufacturer: ⨥瀒㧊舣ᡤꮭ羄뗯로頻콛阕뿌ᚅ敷곺膲꡽噫쬲ព踾砏ꟺ븂ℨ欿񘨞潶ꎣ祬摞ｰ캫垜韥㉻ⵌ慺⩻瀣趯㒈맂涙㠵犕儡之ឝ違㽧ᾋ䱕庽 [ 3253.972766][T14910] usb 5-1: SerialNumber: ж [ 3254.283756][T14910] usb 5-1: 0:2 : does not exist [ 3254.284121][T18569] usb 4-1: USB disconnect, device number 106 [ 3254.313370][T14910] usb 5-1: USB disconnect, device number 5 [ 3254.717574][T18728] fuse: Bad value for 'rootmode' [ 3254.835693][T18569] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 3255.059853][T18569] usb 4-1: Using ep0 maxpacket: 32 [ 3255.069149][T18569] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 3255.077683][T18569] usb 4-1: config 0 has no interface number 0 [ 3255.090554][T18569] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 3255.100893][T18569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3255.126807][T18569] usb 4-1: Product: syz [ 3255.147039][T18569] usb 4-1: Manufacturer: syz [ 3255.164732][T18569] usb 4-1: SerialNumber: syz [ 3255.213362][T18569] usb 4-1: config 0 descriptor?? [ 3255.257904][T18569] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 3255.325005][T18729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3255.330098][T18729] netlink: 188 bytes leftover after parsing attributes in process `syz.7.11873'. [ 3255.581990][T18569] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 3255.598580][T18569] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 3255.751017][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 3256.610550][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 3256.620026][ T5967] usb 4-1: USB disconnect, device number 107 [ 3256.631851][ T5967] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 3256.659443][ T5967] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 3256.682571][ T5967] quatech2 4-1:0.51: device disconnected [ 3257.778748][T18755] fuse: Unknown parameter 'rooLNC% tmode' [ 3258.082258][T18760] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 3258.290679][T18765] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11890'. [ 3258.443070][T18569] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 3258.605427][T18569] usb 5-1: Using ep0 maxpacket: 32 [ 3258.656176][T18569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3258.674326][T18569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3258.687562][T18569] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3258.704651][T18569] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 3258.714335][T18569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3258.747400][T18569] usb 5-1: config 0 descriptor?? [ 3258.762315][T18779] Cannot find add_set index 3 as target [ 3258.910245][ T24] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 3259.034386][T14910] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 3259.078475][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 3259.090981][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 3259.106594][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 3259.117094][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3259.129090][ T24] usb 4-1: Product: syz [ 3259.147000][ T24] usb 4-1: Manufacturer: syz [ 3259.151709][ T24] usb 4-1: SerialNumber: syz [ 3259.169183][T18569] hid (null): global environment stack underflow [ 3259.192710][T14910] usb 1-1: Using ep0 maxpacket: 16 [ 3259.212593][T18569] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0054/input/input213 [ 3259.255722][T14910] usb 1-1: config 0 has an invalid interface number: 60 but max is 0 [ 3259.292891][T14910] usb 1-1: config 0 has no interface number 0 [ 3259.317556][T14910] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 3259.324015][T18569] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0054/input/input214 [ 3259.343196][T14910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3259.371764][T14910] usb 1-1: Product: syz [ 3259.381109][T14910] usb 1-1: Manufacturer: syz [ 3259.390260][T14910] usb 1-1: SerialNumber: syz [ 3259.428137][T14910] usb 1-1: config 0 descriptor?? [ 3259.463789][T14910] gspca_main: spca500-2.14.0 probing 046d:0900 [ 3259.520508][T18569] kye 0003:0458:5011.0054: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 3259.781862][ T7244] usb 5-1: USB disconnect, device number 6 [ 3259.954141][T18786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3259.967026][T18786] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11883'. [ 3260.183361][T14910] gspca_spca500: reg write: error -32 [ 3260.189407][T14910] gspca_spca500: reg write: error -32 [ 3260.196159][T14910] gspca_spca500: reg write: error -32 [ 3260.202511][T14910] gspca_spca500: reg write: error -32 [ 3260.209558][T14910] gspca_spca500: reg write: error -32 [ 3260.223474][T14910] gspca_spca500: reg write: error -32 [ 3260.229736][T14910] gspca_spca500: reg write: error -32 [ 3260.239503][T14910] gspca_spca500: reg write: error -32 [ 3260.246720][T14910] gspca_spca500: reg write: error -32 [ 3260.253056][T14910] gspca_spca500: reg write: error -32 [ 3260.270998][T14910] gspca_spca500: reg write: error -32 [ 3260.280349][T14910] gspca_spca500: reg write: error -32 [ 3260.289748][T14910] gspca_spca500: reg write: error -32 [ 3261.040809][T18795] ptrace attach of "./syz-executor exec"[18508] was attempted by "./syz-executor exec"[18795] [ 3261.221347][T18795] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11885'. [ 3261.690522][ T24] usbhid 4-1:1.0: can't add hid device: -71 [ 3261.700015][ T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 3261.728998][ T24] usb 4-1: USB disconnect, device number 108 [ 3261.880961][ T1552] usb 1-1: USB disconnect, device number 103 [ 3262.351553][T18813] fuse: Unknown parameter 'g:~9Y3_id' [ 3262.403547][T18814] fuse: Unknown parameter 'g:~9Y3_id' [ 3263.585453][T18829] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11894'. [ 3263.843727][T18838] fuse: Bad value for 'rootmode' [ 3265.464415][T18844] fuse: Unknown parameter 'g:~9Y3_id' [ 3265.861437][T18858] fuse: Unknown parameter 'g:~9Y3_id' [ 3266.198238][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.204719][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.622978][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 3266.789075][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3266.803080][ T24] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3266.831465][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3266.864745][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3266.898784][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3266.916831][ T24] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3266.963443][T18502] udevd[18502]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3267.249224][T18871] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3267.819321][T18876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3267.834304][T18876] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11902'. [ 3268.203107][T18883] netlink: 108 bytes leftover after parsing attributes in process `syz.7.11905'. [ 3268.844485][T18891] syzkaller0: entered promiscuous mode [ 3268.860731][T18880] syz.2.11904 (18880): drop_caches: 1 [ 3268.866351][T18891] syzkaller0: entered allmulticast mode [ 3270.626822][T18909] fuse: Unknown parameter 'g:~9Y3_id' [ 3270.890001][ T1552] usb 5-1: USB disconnect, device number 7 [ 3270.922934][ T24] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 3271.028398][T18871] delete_channel: no stack [ 3271.088648][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3271.099767][ T24] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3271.113476][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3271.122876][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3271.159521][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3271.192017][ T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3271.214948][T18502] udevd[18502]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3272.881446][T18944] syz.0.11921 (18944): drop_caches: 1 [ 3273.032744][ T1552] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 3273.041924][T18944] syz.0.11921 (18944): drop_caches: 1 [ 3273.227970][ T1552] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3273.248007][ T1552] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3273.273253][ T1552] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3273.284522][ T1552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3273.689574][ T1552] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 3273.734769][ T1552] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3274.025430][T18945] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3275.384462][T18973] fuse: Unknown parameter 'g:~9Y3_id' [ 3275.759300][T18569] usb 4-1: USB disconnect, device number 109 [ 3275.931092][T18917] delete_channel: no stack [ 3276.142778][ T7244] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 3276.305332][ T7244] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3276.314315][ T7244] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 3276.324961][ T7244] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3276.336529][ T7244] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3276.373445][ T7244] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3276.382530][ T7244] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3276.392741][ T7244] usb 5-1: Product: syz [ 3276.396932][ T7244] usb 5-1: Manufacturer: syz [ 3276.413901][ T7244] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3276.705608][T18569] usb 5-1: USB disconnect, device number 8 [ 3276.747094][T18991] fuse: Unknown parameter 'g:~9Y3_id' [ 3276.756976][ T1552] usb 3-1: USB disconnect, device number 77 [ 3277.136379][T18945] delete_channel: no stack [ 3277.963232][T18569] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 3278.120464][T19019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11938'. [ 3278.136033][T18569] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3278.153206][T18569] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3278.213352][T18569] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3278.228616][T18569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3278.266616][T18569] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3278.287009][T18569] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3278.338776][T18502] udevd[18502]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3278.477474][T19021] fuse: Unknown parameter 'g:~9Y3_id' [ 3278.575116][T19007] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3278.776642][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11938'. [ 3279.680221][T19030] binder: 19029:19030 unknown command 0 [ 3279.686487][T19030] binder: 19029:19030 ioctl c0306201 80000080 returned -22 [ 3279.699411][T19030] binder_alloc: 19029: binder_alloc_buf size 4224 failed, no address space [ 3279.711345][T19030] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 3280.132917][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 3280.294718][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3280.306121][ T24] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3280.328029][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3280.350494][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3280.391055][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 3280.411603][ T24] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3280.430771][T18502] udevd[18502]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3280.551158][ T24] usb 1-1: USB disconnect, device number 104 [ 3280.603054][T19005] delete_channel: no stack [ 3280.771681][T19034] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3280.802275][T19050] tipc: Enabling of bearer rejected, failed to enable media [ 3282.106363][T19070] fuse: Unknown parameter 'g:~9Y3_id' [ 3282.275242][T19079] netlink: 'syz.4.11955': attribute type 2 has an invalid length. [ 3282.360828][T19079] @;: entered promiscuous mode [ 3282.641449][T18569] usb 3-1: USB disconnect, device number 78 [ 3282.667675][T19032] delete_channel: no stack [ 3282.914660][T19086] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11957'. [ 3282.984390][T19095] fuse: Bad value for 'user_id' [ 3282.996458][T19095] fuse: Bad value for 'user_id' [ 3283.203587][T18569] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 3283.354863][T18569] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3283.365504][T18569] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3283.383942][T18569] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3283.395300][T18569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3283.395492][T19103] tipc: Enabling of bearer rejected, failed to enable media [ 3283.442039][T18569] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 3283.490333][T18569] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3283.840473][T19091] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3284.415708][T19114] fuse: Unknown parameter 'g:~9Y3_id' [ 3285.477750][T19126] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11969'. [ 3285.726191][T19131] fuse: Unknown parameter 'g:~9Y3_id' [ 3285.941897][T18569] usb 3-1: USB disconnect, device number 79 [ 3285.964310][T19090] delete_channel: no stack [ 3286.175952][T19148] tipc: Enabling of bearer rejected, failed to enable media [ 3286.183983][T19141] fuse: Unknown parameter 'g:~9Y3_id' [ 3287.317455][T19166] Cannot find set identified by id 0 to match [ 3288.034895][T19176] tipc: Failed to remove unknown binding: 66,1,1/0:1916599319/1916599321 [ 3288.124329][T19176] tipc: Failed to remove unknown binding: 66,1,1/0:1916599319/1916599321 [ 3288.137977][T19176] tipc: Failed to remove unknown binding: 66,1,1/0:1916599319/1916599321 [ 3288.980351][T19206] syz.3.11987 (19206): drop_caches: 1 [ 3289.007546][T19208] fuse: Bad value for 'fd' [ 3289.111569][T19209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3289.114814][T19210] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11988'. [ 3289.227287][T19206] syz.3.11987 (19206): drop_caches: 1 [ 3289.252242][T19212] random: crng reseeded on system resumption [ 3289.667479][T19212] FAULT_INJECTION: forcing a failure. [ 3289.667479][T19212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3289.684831][T19212] CPU: 1 UID: 0 PID: 19212 Comm: syz.2.11989 Tainted: G L syzkaller #0 PREEMPT(full) [ 3289.684862][T19212] Tainted: [L]=SOFTLOCKUP [ 3289.684869][T19212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3289.684880][T19212] Call Trace: [ 3289.684889][T19212] [ 3289.684897][T19212] dump_stack_lvl+0xe8/0x150 [ 3289.684926][T19212] should_fail_ex+0x412/0x560 [ 3289.684950][T19212] prepare_alloc_pages+0x22a/0x650 [ 3289.684978][T19212] __alloc_frozen_pages_noprof+0x12f/0x380 [ 3289.685001][T19212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3289.685025][T19212] ? __pfx_policy_nodemask+0x10/0x10 [ 3289.685043][T19212] ? irqentry_exit+0x59c/0x620 [ 3289.685062][T19212] ? rcu_is_watching+0x15/0xb0 [ 3289.685086][T19212] alloc_pages_mpol+0x232/0x4a0 [ 3289.685111][T19212] alloc_pages_noprof+0xa8/0x190 [ 3289.685133][T19212] get_zeroed_page_noprof+0x1a/0x90 [ 3289.685153][T19212] get_image_page+0x36/0x330 [ 3289.685181][T19212] memory_bm_create+0x745/0xf80 [ 3289.685215][T19212] create_basic_memory_bitmaps+0x98/0x360 [ 3289.685240][T19212] snapshot_open+0x1aa/0x280 [ 3289.685271][T19212] ? __pfx_snapshot_open+0x10/0x10 [ 3289.685288][T19212] misc_open+0x2d5/0x350 [ 3289.685314][T19212] chrdev_open+0x4cd/0x5e0 [ 3289.685333][T19212] ? __pfx_chrdev_open+0x10/0x10 [ 3289.685348][T19212] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 3289.685372][T19212] ? __pfx_chrdev_open+0x10/0x10 [ 3289.685387][T19212] do_dentry_open+0x7ce/0x1420 [ 3289.685420][T19212] vfs_open+0x3b/0x340 [ 3289.685436][T19212] ? path_openat+0x346e/0x3e20 [ 3289.685459][T19212] path_openat+0x3486/0x3e20 [ 3289.685507][T19212] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 3289.685525][T19212] ? getname_flags+0xb7/0x540 [ 3289.685541][T19212] ? __pfx_path_openat+0x10/0x10 [ 3289.685564][T19212] ? __lock_acquire+0x6b5/0x2cf0 [ 3289.685599][T19212] do_filp_open+0x22d/0x490 [ 3289.685623][T19212] ? __pfx_do_filp_open+0x10/0x10 [ 3289.685664][T19212] ? _raw_spin_unlock+0x28/0x50 [ 3289.685685][T19212] ? alloc_fd+0x64b/0x6c0 [ 3289.685713][T19212] do_sys_openat2+0x12f/0x220 [ 3289.685735][T19212] ? __pfx_do_sys_openat2+0x10/0x10 [ 3289.685757][T19212] ? ksys_write+0x242/0x270 [ 3289.685784][T19212] __ia32_compat_sys_openat+0x131/0x160 [ 3289.685809][T19212] __do_fast_syscall_32+0x1d2/0x540 [ 3289.685827][T19212] ? lockdep_hardirqs_on+0x7a/0x110 [ 3289.685842][T19212] ? do_fast_syscall_32+0x33/0x70 [ 3289.685859][T19212] ? asm_int80_emulation+0x1a/0x20 [ 3289.685874][T19212] ? do_int80_emulation+0x20e/0x400 [ 3289.685896][T19212] do_fast_syscall_32+0x33/0x70 [ 3289.685914][T19212] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3289.685934][T19212] RIP: 0023:0xf73bd539 [ 3289.685949][T19212] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3289.685964][T19212] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 3289.685983][T19212] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0 [ 3289.685996][T19212] RDX: 000000000000003f RSI: 0000000000000000 RDI: 0000000000000000 [ 3289.686006][T19212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3289.686016][T19212] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3289.686027][T19212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3289.686053][T19212] [ 3290.788275][T19238] netlink: 108 bytes leftover after parsing attributes in process `syz.7.11997'. [ 3292.877502][T19263] syz.2.12004 (19263): drop_caches: 1 [ 3293.101397][T19263] syz.2.12004 (19263): drop_caches: 1 [ 3293.701219][T19285] netlink: 'syz.0.12012': attribute type 1 has an invalid length. [ 3293.748676][T19285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3293.780960][T19288] bond1: (slave gretap1): making interface the new active one [ 3293.789918][T19288] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 3293.817856][T19285] macsec1: entered promiscuous mode [ 3293.826662][T19285] macsec1: entered allmulticast mode [ 3294.202914][T18787] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 3294.358662][T18787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3294.371045][T18787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3294.381424][T18787] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 3294.390794][T18787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3294.407264][T18787] usb 3-1: config 0 descriptor?? [ 3294.819175][T19296] fuse: Unknown parameter 'g:~9Y3_id' [ 3295.014982][T18787] cp2112 0003:10C4:EA90.0055: item fetching failed at offset 5/7 [ 3295.026036][T18787] cp2112 0003:10C4:EA90.0055: parse failed [ 3295.031924][T18787] cp2112 0003:10C4:EA90.0055: probe with driver cp2112 failed with error -22 [ 3295.167244][T19311] netlink: 6 bytes leftover after parsing attributes in process `syz.7.12018'. [ 3295.214005][T19291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3295.237426][T19311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3295.282307][T19291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3295.408518][ T7244] usb 3-1: USB disconnect, device number 80 [ 3296.666893][ T7244] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 3296.833587][ T7244] usb 3-1: Using ep0 maxpacket: 32 [ 3296.840520][ T7244] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 3296.849900][ T7244] usb 3-1: config 0 has no interface number 0 [ 3296.859981][ T7244] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 3296.871113][ T7244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3296.880326][ T7244] usb 3-1: Product: syz [ 3296.886050][ T7244] usb 3-1: Manufacturer: syz [ 3296.891542][ T7244] usb 3-1: SerialNumber: syz [ 3296.906960][ T7244] usb 3-1: config 0 descriptor?? [ 3296.925286][ T7244] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 3297.125821][ T7244] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 3297.154610][ T7244] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 3297.306089][T19353] tipc: Enabling of bearer rejected, failed to enable media [ 3297.408378][T19355] fuse: Bad value for 'fd' [ 3297.530228][T19355] loop4: detected capacity change from 0 to 7 [ 3297.595155][T19355] Dev loop4: unable to read RDB block 7 [ 3297.600779][T19355] loop4: unable to read partition table [ 3297.609357][T19355] loop4: partition table beyond EOD, truncated [ 3297.621313][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 3297.629610][ T7244] usb 3-1: USB disconnect, device number 81 [ 3297.638290][T19355] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 3297.692553][ T7244] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 3297.721683][ T7244] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 3297.747313][ T7244] quatech2 3-1:0.51: device disconnected [ 3298.729139][T19386] fuse: Unknown parameter 'g:~9Y3_id' [ 3298.889003][T19395] tipc: Enabling of bearer rejected, failed to enable media [ 3299.271523][T19398] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12046'. [ 3300.117761][T19422] tipc: Enabling of bearer rejected, failed to enable media [ 3300.576826][T19437] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12061'. [ 3301.033920][T19453] binder: 19452:19453 ioctl c0306201 80000540 returned -22 [ 3301.099826][T19456] binder: 19452:19456 ioctl c0306201 80000640 returned -22 [ 3301.806534][T19461] fuse: Unknown parameter 'g:~9Y3_id' [ 3301.915445][T19469] netlink: 108 bytes leftover after parsing attributes in process `syz.2.12073'. [ 3301.975244][T19472] FAULT_INJECTION: forcing a failure. [ 3301.975244][T19472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3301.991266][T19472] CPU: 1 UID: 0 PID: 19472 Comm: syz.3.12074 Tainted: G L syzkaller #0 PREEMPT(full) [ 3301.991294][T19472] Tainted: [L]=SOFTLOCKUP [ 3301.991302][T19472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3301.991312][T19472] Call Trace: [ 3301.991319][T19472] [ 3301.991326][T19472] dump_stack_lvl+0xe8/0x150 [ 3301.991353][T19472] should_fail_ex+0x412/0x560 [ 3301.991372][T19472] _copy_to_user+0x31/0xb0 [ 3301.991389][T19472] simple_read_from_buffer+0xe1/0x170 [ 3301.991403][T19472] proc_fail_nth_read+0x1bb/0x230 [ 3301.991420][T19472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3301.991435][T19472] ? rw_verify_area+0x2a6/0x4d0 [ 3301.991449][T19472] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3301.991463][T19472] vfs_read+0x20c/0xa70 [ 3301.991476][T19472] ? fdget_pos+0x246/0x320 [ 3301.991489][T19472] ? __pfx___mutex_lock+0x10/0x10 [ 3301.991501][T19472] ? __pfx_vfs_read+0x10/0x10 [ 3301.991515][T19472] ? __fget_files+0x2a/0x420 [ 3301.991527][T19472] ? __fget_files+0x3a0/0x420 [ 3301.991537][T19472] ? __fget_files+0x2a/0x420 [ 3301.991552][T19472] ksys_read+0x150/0x270 [ 3301.991567][T19472] ? __pfx_ksys_read+0x10/0x10 [ 3301.991582][T19472] ? asm_int80_emulation+0x1a/0x20 [ 3301.991594][T19472] ? asm_int80_emulation+0x1a/0x20 [ 3301.991603][T19472] do_int80_emulation+0x111/0x400 [ 3301.991620][T19472] ? clear_bhb_loop+0x60/0xb0 [ 3301.991630][T19472] ? clear_bhb_loop+0x60/0xb0 [ 3301.991642][T19472] asm_int80_emulation+0x1a/0x20 [ 3301.991651][T19472] RIP: 0023:0xf717572b [ 3301.991661][T19472] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 3301.991670][T19472] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3301.991682][T19472] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54365d0 [ 3301.991689][T19472] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 3301.991699][T19472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3301.991705][T19472] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3301.991711][T19472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3301.991725][T19472] [ 3303.522860][T19495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3303.528707][T19495] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12082'. [ 3303.878486][T19507] pim6reg: entered allmulticast mode [ 3305.465528][T19531] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12090'. [ 3305.507326][T19531] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 3306.444795][T19557] fuse: Bad value for 'user_id' [ 3306.466112][T19557] fuse: Bad value for 'user_id' [ 3309.593775][ T1552] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 3309.755023][ T1552] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3309.765390][ T1552] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 3309.776926][ T1552] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3309.786685][ T1552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3309.805517][ T1552] usb 5-1: SerialNumber: syz [ 3310.049372][T19606] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3310.081557][ T1552] usb 5-1: USB disconnect, device number 9 [ 3310.597431][ T30] audit: type=1326 audit(1769677021.059:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19622 comm="syz.0.12117" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x80000000 [ 3311.339206][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12125'. [ 3311.350580][T19637] bridge0: port 2(bridge_slave_1) entered disabled state [ 3311.358302][T19637] bridge0: port 1(bridge_slave_0) entered disabled state [ 3311.665603][T19649] netlink: 'syz.3.12128': attribute type 61 has an invalid length. [ 3312.879193][T19660] netlink: 27 bytes leftover after parsing attributes in process `syz.2.12130'. [ 3313.542351][T19597] delete_channel: no stack [ 3314.226119][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12137'. [ 3315.026779][T19687] hsr0: entered promiscuous mode [ 3315.693044][T19699] tipc: Enabling of bearer rejected, failed to enable media [ 3316.113267][T19710] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12143'. [ 3316.122996][T19703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3316.211109][T19715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12148'. [ 3316.240796][T19713] FAULT_INJECTION: forcing a failure. [ 3316.240796][T19713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3316.288373][T19713] CPU: 1 UID: 0 PID: 19713 Comm: syz.4.12149 Tainted: G L syzkaller #0 PREEMPT(full) [ 3316.288402][T19713] Tainted: [L]=SOFTLOCKUP [ 3316.288410][T19713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3316.288420][T19713] Call Trace: [ 3316.288425][T19713] [ 3316.288430][T19713] dump_stack_lvl+0xe8/0x150 [ 3316.288448][T19713] should_fail_ex+0x412/0x560 [ 3316.288463][T19713] copy_fpstate_to_sigframe+0xa85/0xd40 [ 3316.288481][T19713] ? copy_fpstate_to_sigframe+0x196/0xd40 [ 3316.288503][T19713] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 3316.288528][T19713] ? fpu__alloc_mathframe+0xac/0x130 [ 3316.288554][T19713] get_sigframe+0x5f7/0x820 [ 3316.288572][T19713] ? __pfx_get_sigframe+0x10/0x10 [ 3316.288586][T19713] ? posixtimer_deliver_signal+0x304/0x410 [ 3316.288605][T19713] ia32_setup_rt_frame+0x110/0xae0 [ 3316.288618][T19713] ? _raw_spin_unlock_irq+0x2e/0x50 [ 3316.288633][T19713] ? get_signal+0x114f/0x1330 [ 3316.288651][T19713] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 3316.288665][T19713] arch_do_signal_or_restart+0x460/0x830 [ 3316.288680][T19713] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3316.288696][T19713] ? ksys_read+0x242/0x270 [ 3316.288715][T19713] exit_to_user_mode_loop+0x86/0x480 [ 3316.288729][T19713] ? rcu_is_watching+0x15/0xb0 [ 3316.288739][T19713] ? asm_int80_emulation+0x1a/0x20 [ 3316.288750][T19713] do_int80_emulation+0x2a0/0x400 [ 3316.288761][T19713] ? clear_bhb_loop+0x60/0xb0 [ 3316.288771][T19713] ? clear_bhb_loop+0x60/0xb0 [ 3316.288782][T19713] asm_int80_emulation+0x1a/0x20 [ 3316.288791][T19713] RIP: 0023:0xf741d537 [ 3316.288800][T19713] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3316.288808][T19713] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 3316.288821][T19713] RAX: 0000000000000003 RBX: 0000000000000004 RCX: 0000000000000000 [ 3316.288827][T19713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3316.288833][T19713] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3316.288838][T19713] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3316.288844][T19713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3316.288858][T19713] [ 3317.200226][T19730] netlink: 'syz.4.12155': attribute type 10 has an invalid length. [ 3317.265788][T19730] team0: Port device dummy0 added [ 3317.346768][T19731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12155'. [ 3317.473019][ T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 3317.649641][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 3317.661547][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 3317.684291][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 3317.710300][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3317.719740][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3317.731630][ T24] usb 3-1: Product: syz [ 3317.737369][ T24] usb 3-1: Manufacturer: syz [ 3317.742396][ T24] usb 3-1: SerialNumber: syz [ 3317.750458][ T24] usb 3-1: config 0 descriptor?? [ 3317.770565][T19729] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3318.030744][T19729] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3318.919583][T19708] delete_channel: no stack [ 3319.027545][T19754] syz.7.12160 (19754) used obsolete PPPIOCDETACH ioctl [ 3319.102041][T19756] usb usb8: usbfs: process 19756 (syz.0.12159) did not claim interface 0 before use [ 3320.240408][ T24] usb 3-1: USB disconnect, device number 82 [ 3320.567624][T19769] bond2: option arp_interval: invalid value (18446744073709551615) [ 3320.576213][T19769] bond2: option arp_interval: allowed values 0 - 2147483647 [ 3320.577487][T19772] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 3320.583970][ T7244] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 3320.610787][T19773] fuse: Bad value for 'fd' [ 3320.617611][T19769] bond2 (unregistering): Released all slaves [ 3320.700158][T19779] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12165'. [ 3320.710681][T19779] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12165'. [ 3320.743200][T19779] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12165'. [ 3320.752429][T19779] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12165'. [ 3320.764728][ T7244] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 3320.777533][ T7244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3320.787723][ T7244] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3320.804278][ T7244] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 3320.814809][ T7244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3320.834399][ T7244] usb 4-1: config 0 descriptor?? [ 3320.841882][ T7244] usb-storage 4-1:0.0: USB Mass Storage device detected [ 3320.858442][ T7244] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 3320.911763][T19779] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12165'. [ 3320.921717][T19779] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12165'. [ 3321.054383][T18569] usb 4-1: USB disconnect, device number 110 [ 3321.469825][T19794] tipc: Enabling of bearer rejected, failed to enable media [ 3323.051735][T19817] fuse: Bad value for 'fd' [ 3323.262558][T19821] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12180'. [ 3323.590557][T19802] syz.2.12172 (19802): drop_caches: 1 [ 3323.649661][T19824] fuse: Unknown parameter 'g:~9Y3_id' [ 3323.741662][T19831] tipc: Enabling of bearer rejected, failed to enable media [ 3324.145921][T19836] fuse: Unknown parameter 'g:~9Y3_id' [ 3324.156273][T19838] netlink: 108 bytes leftover after parsing attributes in process `syz.4.12185'. [ 3324.640157][T19853] netlink: 27 bytes leftover after parsing attributes in process `syz.3.12190'. [ 3325.596952][T19878] tipc: Enabling of bearer rejected, failed to enable media [ 3326.273871][T18569] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 3326.342918][ T1552] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3326.455652][T18569] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3326.466944][T18569] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3326.490166][T18569] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3326.499959][T18569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3326.508326][ T1552] usb 5-1: Using ep0 maxpacket: 32 [ 3326.518251][ T1552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3326.536727][T18569] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3326.544310][ T1552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3326.562439][ T1552] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3326.578064][T18569] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3326.588957][ T1552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3326.620191][ T1552] usb 5-1: config 0 descriptor?? [ 3326.629608][ T1552] hub 5-1:0.0: USB hub found [ 3326.835511][T19898] fuse: Unknown parameter 'g:~9Y3_id' [ 3326.911534][ T1552] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 3327.117907][T19619] udevd[19619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3327.226129][ T5967] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 3327.275646][T19901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3327.298095][T19901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3327.323841][T19901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3327.350044][T19901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3327.437156][ T5967] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3327.448764][ T5967] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3327.470818][ T5967] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3327.489073][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3327.536330][ T5967] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3327.582436][ T5967] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3327.610494][T19619] udevd[19619]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3327.646422][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.659473][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.014014][T19900] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 3328.642741][ T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 3328.722212][T19910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3328.729517][T19910] IPv6: NLM_F_CREATE should be set when creating new route [ 3328.813000][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 3328.827328][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3328.838723][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3328.851106][ T24] usb 3-1: Product: syz [ 3328.858220][ T24] usb 3-1: Manufacturer: syz [ 3328.866175][ T24] usb 3-1: SerialNumber: syz [ 3328.888996][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 3328.896027][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 3328.909105][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 3328.924410][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 3329.106323][ T1552] usbhid 5-1:0.0: can't add hid device: -71 [ 3329.112509][ T1552] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3329.115173][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 3329.137027][ T24] r8152-cfgselector 3-1: bad CDC descriptors [ 3329.145885][ T1552] usb 5-1: USB disconnect, device number 10 [ 3329.170714][T19915] tipc: Enabling of bearer rejected, failed to enable media [ 3329.396493][ T1552] usb 4-1: USB disconnect, device number 111 [ 3329.417170][T19882] delete_channel: no stack [ 3329.699705][T19925] fuse: Unknown parameter 'g:~9Y3_id' [ 3329.833256][ T24] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 3329.966362][ T24] usb 4-1: device descriptor read/64, error -71 [ 3330.009732][T19935] fuse: Unknown parameter 'g:~9Y3_id' [ 3330.045746][ T1552] r8152-cfgselector 3-1: USB disconnect, device number 83 [ 3330.252829][ T24] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 3330.483226][ T24] usb 4-1: device descriptor read/64, error -71 [ 3330.576355][T19939] fuse: Unknown parameter 'g:~9Y3_id' [ 3330.615194][ T24] usb usb4-port1: attempt power cycle [ 3330.920787][T19946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3330.973419][ T24] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 3331.007051][ T24] usb 4-1: device descriptor read/8, error -71 [ 3331.078055][T19948] netlink: 388 bytes leftover after parsing attributes in process `syz.7.12219'. [ 3331.257589][ T24] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 3331.303466][ T24] usb 4-1: device descriptor read/8, error -71 [ 3331.406031][ T1552] usb 1-1: USB disconnect, device number 105 [ 3331.413269][ T24] usb usb4-port1: unable to enumerate USB device [ 3331.446314][T19953] tipc: Enabling of bearer rejected, failed to enable media [ 3331.542218][T19900] delete_channel: no stack [ 3331.681668][T19962] netlink: 108 bytes leftover after parsing attributes in process `syz.4.12225'. [ 3332.022811][T19974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12224'. [ 3332.129171][T19978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3332.136429][T19978] IPv6: NLM_F_CREATE should be set when creating new route [ 3332.189430][T19976] fuse: Unknown parameter 'g:~9Y3_id' [ 3332.206898][ T30] audit: type=1326 audit(1769677042.669:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.4.12230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 3332.239252][ T30] audit: type=1326 audit(1769677042.669:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.4.12230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 3332.268390][ T30] audit: type=1326 audit(1769677042.699:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.4.12230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 3332.302097][ T30] audit: type=1326 audit(1769677042.699:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.4.12230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 3332.329141][ T30] audit: type=1326 audit(1769677042.699:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.4.12230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 3332.366584][ T30] audit: type=1326 audit(1769677042.759:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.4.12230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 3332.394688][ T30] audit: type=1326 audit(1769677042.759:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.4.12230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 3332.417826][ T30] audit: type=1326 audit(1769677042.759:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.4.12230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 3332.443525][ T30] audit: type=1326 audit(1769677042.759:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.4.12230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 3332.497286][ T30] audit: type=1326 audit(1769677042.759:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.4.12230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 3332.539896][T19982] ------------[ cut here ]------------ [ 3332.546525][T19982] start < 0 [ 3332.546548][T19982] WARNING: lib/idr.c:86 at idr_alloc+0xb6/0xd0, CPU#0: syz.4.12230/19982 [ 3332.558796][T19982] Modules linked in: [ 3332.563299][T19982] CPU: 0 UID: 0 PID: 19982 Comm: syz.4.12230 Tainted: G L syzkaller #0 PREEMPT(full) [ 3332.574656][T19982] Tainted: [L]=SOFTLOCKUP [ 3332.578988][T19982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3332.589625][T19982] RIP: 0010:idr_alloc+0xb6/0xd0 [ 3332.595722][T19982] Code: 04 65 48 8b 05 1b 92 65 07 48 3b 44 24 08 75 24 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d e9 41 c5 0c 00 cc e8 2b 59 37 f6 90 <0f> 0b 90 bb ea ff ff ff eb cd e8 bb df 09 00 66 66 2e 0f 1f 84 00 [ 3332.616382][T19982] RSP: 0018:ffffc90003b0f9e8 EFLAGS: 00010287 [ 3332.622478][T19982] RAX: ffffffff8b8d1e25 RBX: 0000000000002800 RCX: 0000000000080000 [ 3332.631090][T19982] RDX: ffffc9001b8f3000 RSI: 00000000000003ba RDI: 00000000000003bb [ 3332.639468][T19982] RBP: 00000000b518af2d R08: 0000000000002800 R09: 0000000000000004 [ 3332.647726][T19982] R10: dffffc0000000000 R11: fffff52000761f34 R12: 00000000b518af2e [ 3332.655855][T19982] R13: 1ffff92000761f82 R14: ffff888033a3e000 R15: ffff888069453088 [ 3332.663859][T19982] FS: 0000000000000000(0000) GS:ffff8881256f5000(0063) knlGS:00000000f5404b40 [ 3332.673410][T19982] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 3332.680004][T19982] CR2: 00000000f732bd44 CR3: 000000009b5a2000 CR4: 00000000003526f0 [ 3332.688496][T19982] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000002da [ 3332.696918][T19982] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3332.705165][T19982] Call Trace: [ 3332.708433][T19982] [ 3332.711349][T19982] drm_gem_change_handle_ioctl+0x20e/0x550 [ 3332.717559][T19982] drm_ioctl_kernel+0x2df/0x3b0 [ 3332.722418][T19982] ? __pfx_drm_gem_change_handle_ioctl+0x10/0x10 [ 3332.728970][T19982] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 3332.734514][T19982] drm_ioctl+0x6ba/0xb80 [ 3332.738757][T19982] ? __pfx_drm_gem_change_handle_ioctl+0x10/0x10 [ 3332.745142][T19982] ? __pfx_drm_ioctl+0x10/0x10 [ 3332.749897][T19982] ? __fget_files+0x3a0/0x420 [ 3332.755807][T19982] ? __fget_files+0x2a/0x420 [ 3332.760393][T19982] ? drm_compat_ioctl+0xa7/0x330 [ 3332.765655][T19982] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 3332.771196][T19982] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 3332.777032][T19982] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 3332.783592][T19982] ? kmem_cache_free+0x195/0x610 [ 3332.788607][T19982] ? __se_sys_futex_time32+0x3ab/0x440 [ 3332.794500][T19982] ? rcu_is_watching+0x15/0xb0 [ 3332.799271][T19982] __do_fast_syscall_32+0x1d2/0x540 [ 3332.804701][T19982] ? lockdep_hardirqs_on+0x7a/0x110 [ 3332.809886][T19982] ? do_fast_syscall_32+0x33/0x70 [ 3332.815088][T19982] ? asm_int80_emulation+0x1a/0x20 [ 3332.820190][T19982] ? do_int80_emulation+0x20e/0x400 [ 3332.825416][T19982] do_fast_syscall_32+0x33/0x70 [ 3332.830272][T19982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3332.837258][T19982] RIP: 0023:0xf741d539 [ 3332.841323][T19982] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3332.861340][T19982] RSP: 002b:00000000f540450c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 3332.870017][T19982] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c00864d2 [ 3332.878419][T19982] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 3332.886659][T19982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3332.894972][T19982] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3332.902980][T19982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3332.910950][T19982] [ 3332.914132][T19982] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3332.921395][T19982] CPU: 0 UID: 0 PID: 19982 Comm: syz.4.12230 Tainted: G L syzkaller #0 PREEMPT(full) [ 3332.932397][T19982] Tainted: [L]=SOFTLOCKUP [ 3332.936701][T19982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3332.946739][T19982] Call Trace: [ 3332.950005][T19982] [ 3332.952923][T19982] vpanic+0x1e0/0x670 [ 3332.956893][T19982] panic+0xc5/0xd0 [ 3332.960596][T19982] ? __pfx_panic+0x10/0x10 [ 3332.965002][T19982] __warn+0x315/0x4a0 [ 3332.968965][T19982] ? idr_alloc+0xb6/0xd0 [ 3332.973203][T19982] ? idr_alloc+0xb6/0xd0 [ 3332.977491][T19982] __report_bug+0x29a/0x540 [ 3332.981987][T19982] ? idr_alloc+0xb6/0xd0 [ 3332.986206][T19982] ? __pfx___report_bug+0x10/0x10 [ 3332.991218][T19982] ? __lock_acquire+0x6b5/0x2cf0 [ 3332.996186][T19982] ? idr_alloc+0xb6/0xd0 [ 3333.000432][T19982] report_bug+0x16a/0x220 [ 3333.004748][T19982] ? idr_alloc+0xb6/0xd0 [ 3333.008972][T19982] ? idr_alloc+0xb8/0xd0 [ 3333.013195][T19982] handle_bug+0x98/0x200 [ 3333.017428][T19982] exc_invalid_op+0x1a/0x50 [ 3333.021954][T19982] asm_exc_invalid_op+0x1a/0x20 [ 3333.026795][T19982] RIP: 0010:idr_alloc+0xb6/0xd0 [ 3333.031627][T19982] Code: 04 65 48 8b 05 1b 92 65 07 48 3b 44 24 08 75 24 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d e9 41 c5 0c 00 cc e8 2b 59 37 f6 90 <0f> 0b 90 bb ea ff ff ff eb cd e8 bb df 09 00 66 66 2e 0f 1f 84 00 [ 3333.051220][T19982] RSP: 0018:ffffc90003b0f9e8 EFLAGS: 00010287 [ 3333.057281][T19982] RAX: ffffffff8b8d1e25 RBX: 0000000000002800 RCX: 0000000000080000 [ 3333.065256][T19982] RDX: ffffc9001b8f3000 RSI: 00000000000003ba RDI: 00000000000003bb [ 3333.073217][T19982] RBP: 00000000b518af2d R08: 0000000000002800 R09: 0000000000000004 [ 3333.081188][T19982] R10: dffffc0000000000 R11: fffff52000761f34 R12: 00000000b518af2e [ 3333.089140][T19982] R13: 1ffff92000761f82 R14: ffff888033a3e000 R15: ffff888069453088 [ 3333.097098][T19982] ? idr_alloc+0xb5/0xd0 [ 3333.101328][T19982] ? idr_alloc+0xb5/0xd0 [ 3333.105551][T19982] drm_gem_change_handle_ioctl+0x20e/0x550 [ 3333.111340][T19982] drm_ioctl_kernel+0x2df/0x3b0 [ 3333.116171][T19982] ? __pfx_drm_gem_change_handle_ioctl+0x10/0x10 [ 3333.122475][T19982] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 3333.127837][T19982] drm_ioctl+0x6ba/0xb80 [ 3333.132069][T19982] ? __pfx_drm_gem_change_handle_ioctl+0x10/0x10 [ 3333.138377][T19982] ? __pfx_drm_ioctl+0x10/0x10 [ 3333.143126][T19982] ? __fget_files+0x3a0/0x420 [ 3333.147781][T19982] ? __fget_files+0x2a/0x420 [ 3333.152359][T19982] ? drm_compat_ioctl+0xa7/0x330 [ 3333.157278][T19982] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 3333.162805][T19982] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 3333.168253][T19982] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 3333.174216][T19982] ? kmem_cache_free+0x195/0x610 [ 3333.179147][T19982] ? __se_sys_futex_time32+0x3ab/0x440 [ 3333.184602][T19982] ? rcu_is_watching+0x15/0xb0 [ 3333.189360][T19982] __do_fast_syscall_32+0x1d2/0x540 [ 3333.194546][T19982] ? lockdep_hardirqs_on+0x7a/0x110 [ 3333.199724][T19982] ? do_fast_syscall_32+0x33/0x70 [ 3333.204725][T19982] ? asm_int80_emulation+0x1a/0x20 [ 3333.209825][T19982] ? do_int80_emulation+0x20e/0x400 [ 3333.215007][T19982] do_fast_syscall_32+0x33/0x70 [ 3333.219839][T19982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3333.226153][T19982] RIP: 0023:0xf741d539 [ 3333.230230][T19982] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3333.249836][T19982] RSP: 002b:00000000f540450c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 3333.258233][T19982] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c00864d2 [ 3333.266190][T19982] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 3333.274143][T19982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3333.282095][T19982] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3333.290046][T19982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3333.298003][T19982] [ 3333.301371][T19982] Kernel Offset: disabled [ 3333.305680][T19982] Rebooting in 86400 seconds..