last executing test programs: 26m57.954108516s ago: executing program 32 (id=808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), 0x0}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_macvtap\x00', 0x10) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x1, 0x6, 0x4, 0xf037, 0x5, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0x7) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0x8, 0x1ff, 0x9, 0x10001, 0x5, "1369a8c1f3b33cc0ffe75df4f53accdb9716d7", 0x8, 0xfffffffb}) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000180)=0x7) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000240)=0x7) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x248}}, 0xc000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x48884) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x1fe00000}}, './file0\x00'}) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0xa0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x1, 0x4, 0x0, {0x5, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0x3ff, 0xf}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x765, 0x5f6, 0x8, 0x1ff, 0x10, 0x38b, 0x5, 0x5, 0x0, 0x8000, 0x3, 0x9, 0x0, 0xffff, 0x400, 0x5]}]}, 0xa0}}, 0x44040) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r7, 0x1, 0x12, &(0x7f0000000300), 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 23m34.43386959s ago: executing program 33 (id=1343): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4055}, 0x20008001) recvfrom(r1, &(0x7f00000004c0)=""/233, 0xe9, 0x40002000, 0x0, 0x0) 22m37.220051188s ago: executing program 1 (id=1517): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x2, 0xa, 0x0, 0x20, 0x33, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xf7fffffdfffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x2b}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) 22m37.178809186s ago: executing program 1 (id=1519): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="89e6261441"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000200007f200012800b00010065727370616e0000100002800400120005000a00000000"], 0x40}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') lseek(r3, 0xfffffffffffffffe, 0x1) read$FUSE(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', r1, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x1000000, 0xe, 0x0, &(0x7f00000000c0)="86fb4e44162ce027423efa0cf942", 0x0, 0xffffff05, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 22m36.509650941s ago: executing program 1 (id=1520): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000240)={0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x468, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3d}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_USERDATA={0xf5, 0xd, 0x1, 0x0, "0b4ba08db22644712c3f7da377eae13ff9706efc025182e7dc56c678ec4943f3bddbe878c5d73bf3a7167e1fcecf6d741025f4afe974cbf1d4921dcb3eda2e27c2b3d29e8178445cfc0613f4ce029ad817a7d9a6e53b1f94917397c05554b42a80c51a79c63a35c11982deb6507e243e8b32051162c02467a3e8c13ababefc8aab86e6a038b42d4d8ada423f7fee930fb4c6f3480ed3c7c8a0d594f8f68dfd6e85af06453a633ab64f72f75ce1b449c752b6ab5475744265504d32fa74035b9152b75bb58354d13bd176f5d0bacdea52a7113943881f1440477d987099b407cc488bbb1d09e45e1f437800ea70218ae14b"}, @NFTA_SET_EXPRESSIONS={0x308, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xac}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x18c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x17c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_EXPRESSIONS={0x140, 0xa, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2240000000000}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x58, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x1b}]}}}, {0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_PACKETS={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x47}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xab}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xbc}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x544}, 0x1, 0x0, 0x0, 0x4000}, 0x4008851) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)={0x3, r1, 0x80, 0x8, 0x5, 0x8, 0x7}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r2], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0xc000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000084355470000000000000109022400010000000009040100090300060009218100090122280009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200f2900000029"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="21000000000000003000128008000100687372002400028005000300f200000005000600010000000500030008000000060000ffff0000"], 0x50}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0xffffffff, 0x0, r6}) 22m34.005688149s ago: executing program 1 (id=1527): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x2, 0xa, 0x0, 0x20, 0x33, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xf7fffffdfffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x2b}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) 22m33.691027981s ago: executing program 1 (id=1529): syz_usb_connect(0x2, 0x61, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0xf2, 0x73, 0x30, 0x40, 0x1e2d, 0x63, 0x40a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x2, 0x3, 0xc, 0x30, 0x6, "", [{{0x9, 0x4, 0xa, 0x3, 0x1, 0x3b, 0x20, 0xbf, 0xd, [], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0xf9, 0x9, 0x4, [@generic={0x8, 0xb, "3ddc3adf32c4"}]}}]}}, {{0x9, 0x4, 0xff, 0xf, 0x2, 0x5a, 0xd9, 0x8e, 0xa9, [], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x3, 0x5, 0x7, [@generic={0x9, 0x4, "4200362fd8d3aa"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x8, 0x8d, 0x2, [@generic={0x8, 0xb, "3b88d8a1f9b1"}]}}]}}]}}]}}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0xffeffffe}, {0x16, 0x0, 0x0, 0x40000000}]}, 0x10) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001dc0)=""/159) 22m32.667508799s ago: executing program 1 (id=1531): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000056c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005680)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x90}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xa9060f31db21bd07}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELSETELEM={0x1a28, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x19e4, 0x3, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x140, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x17, 0x1, "90137f4538326c7a9d068f4f67d30aaa4a3ca9"}, @NFTA_DATA_VALUE={0xcb, 0x1, "b97accdaf6d1cc2c163073e379ae95c5c75d6a313769cd86e9e1c5220fdd781567c9dccb8236115409309c4740413f86a1f955a26f6b56244740b7d93ba3b3149367a30bf6276119a41e9d5b0c7883751d5c5c315b6c30664950e184ee8f3df167d8353d3ea930b6c492e56dcc415b1902d3e7cae808d64b563e394374b03301b02a6170cc6dbcefb2d77c76ae12d83dfa3cd05fbda461ebe462cbcf18854b4bd05ffa4fb22d679953f9249bf9f8b18cb8345cd1d4dbbc53cb0a5d147460d8d323798dc068bc52"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, {0x324, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_DATA={0x304, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "008af67240efb26bb88f666da985b03fc6721ea34f11a202ecfc582c96826a4481cb01001e116870972ceee36e62cc30d3d82350fed540e459d67622e706e1661cfbd7a51ff3a01b1326aa3b23b4f4cdac812dc1cb21e341de8ea3ad286ab9d8c47a3da52c6ec451ca3be31253b743105f9e6f0d9e2f273c3b4bf7a6b3bdde99474e54f77d2adb3c0e57045570962e"}, @NFTA_DATA_VALUE={0xc4, 0x1, "3db8ba095848b9d8c66e0fc4871785e9889bbd8f923818fa6a3058e1d7f9191eb8c923fd2a0842cc9f955e960a674ae829e75111a0cb25fa528e974106aab7731d59402eb3e0c54f86ce29eef797e84b5b9271620bba9ecf146f35c15bd88736dc746a91f0117d58a9ded512c7fe8558a15defece0db06ce791b5d5c2e033f6f04609dde67984c39b159afeb45056894e4c04db31fd7a7fc34f23aea3f53ab3cb6c9976e0e1675843824b05dda770179175d096bcc90f2117325cbc12f8beb24"}, @NFTA_DATA_VALUE={0xb0, 0x1, "98043be40be5a03fbf90f21ffd6869da23f01451e7c711ec01cc3918bfa85e3effbae65191d547e1d45de0ca5121facbc0d4ccfa1d6163a44916fc06796413cae00eade8753f17056aa019b11f2cb0afed2eedbd7207b6740dcc9964cd3d7f7c79a121d08a64ab9c0f20da506728f6856232d7e68ce93045e13fd00e82a4f5362b527a79eed87b19f62745938910ca367230bcd15ccedc8ce8b3067bcbaba31c55d03217f661a74c23d98872"}, @NFTA_DATA_VALUE={0xb4, 0x1, "a991a654d6a0513dff6001ab6fbee97b792d2559ef6452361ab4605e6f908861d058a35d2719721b7d4edda54ec6389dde895250697817f35ebd6cdc217bd2653625a0bca386e4a83512085675569b8cc4123e4269003db7b23b1b6f1b01ddd408c7c12bddcd97b4936cbacef9e11c769f175100f6ad60cdf062b491f0b1f69b96abe74abfc7d241843a48b4daa0742cda2346bce901ab8defdd3ce1dd52f891027a61527f7d3d56e79e6c943a2a4aef"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, {0x1564, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "f6fa1b7b0cf6619880d3ecdf9239c57baa91c5663e10e86aee436f0d3ceebd539d7d242e3048ab0d90d7486551f6a55ca8fec351c83485422889"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x140, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xe8, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xd8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xc5, 0x3, "2a6527544fa4a840123dae676a26391b8c575ec0bb22ae30d0d35b8561d4bd53421e0bf85604d43c6575b224a9b7f71f098172b18f9b69c5497c66cf4ef7b3c466e6c8c28bf6e3d1f6eca30d4688df7c8a4393f05fb903268db484831c7d6b2fce745f67573be279d21d983d1fd5040581b28a31de7b1b05fd346150fa5b14c584102a7c5f545af612d03b75af4bfb39341f90299d27405e8eff3c5aaa807027d021d2cc2305ce56ce7c30d67ff78064c7a732ec4b97ca9ef73c8b39b4789e82e8"}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}, {0x44, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x5e}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x1384, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x69, 0x1, "b269d7e4d2673a0a5e46ba565d95a216131b63bab182bd48033f62a347e3c7a44d71fda83d706c3c3a2e860aa04de55586c50856c5200a6ee88c427a829e62d4c9252cfc12e5e2d3ab1b3458dc6e847b71b83898c7a8ffae5a19b578d72940dfe810736686"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x66, 0x1, "aae2e53753b2bc898d756df4de7bc77849086f338ee6ef8c214281f11a03ea299668050264ee28a611e86d6830a9064e6acd1f28093cb24c9f2433ed28c75dab64e0add1386023ca9d31e8b6618b08bbbc6f28059f477649b80d3522e24a6b34a902"}, @NFTA_DATA_VALUE={0x15, 0x1, "413cd8e98464f94103ea8741c8be846962"}, @NFTA_DATA_VALUE={0x63, 0x1, "09703527cb3e9e8c8364b030351f79d3a9c371058ba7f70c83bafd99f620ca6eb0a753e2fd787c21ed212e3a31cde85494b331b36cae7526ce33fb1de413069352b9d2eba932009567f63cb4b155b0aa49ec90d554ca58722275979641257f"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "3f315a92f1a1d594b7b2fcb73050ffe2a0b39042f37d169af0148b0d70e39af035a25a2da8b0ce8b8e9d933766d15130158d9507ccf2525eeb9001786d2aa5064ad1bd000ec5684b962aeefebe0ccb1324ddca08c8256081c02c62b041e093cb18a2f3335dbd31f540da128ae83c122feae717aecb3476fdfd9aa3d9d2593715343c41c29edbe609726bbafaee76e5a6ab127847a5a5c1ad2f1347e520b043707fc46988183036e95821803d26bf0995704fb7d2aaf183879f2d391b429b3c0b"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xf4, 0x1, "c24fb7f8eaa7e4345da292a7e320c9a3fabf41e5b46d0743335ca510be7e64aca7f7a1fdd13ee5222764e0f5f57e05d84cdcf5186cae04b732e29167e163792888dc3d1b675df991f59c83bbcb0b64b840bdc66dd67f2f57bb3d8586cd7ffa7a9a92251ce150a544563e19d38df38bbcdd77b9be9945379c5636c07287f4cdb3c40d4fd9f473991bac73a6161ccf8b11c95b3db4c98669d3c3859588876073d9f9faeec8eefaed5f6707bf7a32ce55b79b2979ea186f4c10f0ce1efd3fc558284235e18ed11a93a1cc0f100ed4b109467e522615dbca8b4cf16916c638d70b5469dbaedc679f8ed739bf8418e7d19ea1"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELRULE={0xd0, 0x8, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_USERDATA={0x9b, 0x7, 0x1, 0x0, "96d907d972366674804723c596c16bba3bf354e5e79348b2f7b05728904877eedcd15edb99e52ac069aa9ab05de62ad2e26501257b4ff293072b89533b01096e79664a072f398797fd759be548752a679cc49f20d08587cfabfd66eb277e9dd9d4c40cdf17c6b9349ce63b2043f675a84d279f962ff0c9be922a2e2e798623a6106fc67a41cf98eadeaa1394b57e3ab40699f00c08aa9d"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1bdc}}, 0x20000000) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000003980)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x61, 0x36, 0xba01e0adf2cb9a42, 0x37, 0x35, 0x39, 0x38], 0x2d, [0x32, 0x30, 0x7, 0x32], 0x2d, [0x62, 0x62, 0x62, 0x61], 0x2d, [0x35, 0x30, 0x31, 0x36], 0x2d, [0x32, 0x34, 0x61, 0x34, 0x66, 0x0, 0x62, 0x36]}}}, {@fsname={'fsname', 0x3d, '^)'}}, {@smackfsroot={'smackfsroot', 0x3d, 'rfdno'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@uid_gt}, {@uid_eq}, {@fsname}, {@subj_type={'subj_type', 0x3d, ')}%'}}, {@dont_hash}, {@audit}]}}) 22m17.559935229s ago: executing program 34 (id=1531): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000056c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005680)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x90}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xa9060f31db21bd07}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELSETELEM={0x1a28, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x19e4, 0x3, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x140, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x17, 0x1, "90137f4538326c7a9d068f4f67d30aaa4a3ca9"}, @NFTA_DATA_VALUE={0xcb, 0x1, "b97accdaf6d1cc2c163073e379ae95c5c75d6a313769cd86e9e1c5220fdd781567c9dccb8236115409309c4740413f86a1f955a26f6b56244740b7d93ba3b3149367a30bf6276119a41e9d5b0c7883751d5c5c315b6c30664950e184ee8f3df167d8353d3ea930b6c492e56dcc415b1902d3e7cae808d64b563e394374b03301b02a6170cc6dbcefb2d77c76ae12d83dfa3cd05fbda461ebe462cbcf18854b4bd05ffa4fb22d679953f9249bf9f8b18cb8345cd1d4dbbc53cb0a5d147460d8d323798dc068bc52"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, {0x324, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_DATA={0x304, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "008af67240efb26bb88f666da985b03fc6721ea34f11a202ecfc582c96826a4481cb01001e116870972ceee36e62cc30d3d82350fed540e459d67622e706e1661cfbd7a51ff3a01b1326aa3b23b4f4cdac812dc1cb21e341de8ea3ad286ab9d8c47a3da52c6ec451ca3be31253b743105f9e6f0d9e2f273c3b4bf7a6b3bdde99474e54f77d2adb3c0e57045570962e"}, @NFTA_DATA_VALUE={0xc4, 0x1, "3db8ba095848b9d8c66e0fc4871785e9889bbd8f923818fa6a3058e1d7f9191eb8c923fd2a0842cc9f955e960a674ae829e75111a0cb25fa528e974106aab7731d59402eb3e0c54f86ce29eef797e84b5b9271620bba9ecf146f35c15bd88736dc746a91f0117d58a9ded512c7fe8558a15defece0db06ce791b5d5c2e033f6f04609dde67984c39b159afeb45056894e4c04db31fd7a7fc34f23aea3f53ab3cb6c9976e0e1675843824b05dda770179175d096bcc90f2117325cbc12f8beb24"}, @NFTA_DATA_VALUE={0xb0, 0x1, "98043be40be5a03fbf90f21ffd6869da23f01451e7c711ec01cc3918bfa85e3effbae65191d547e1d45de0ca5121facbc0d4ccfa1d6163a44916fc06796413cae00eade8753f17056aa019b11f2cb0afed2eedbd7207b6740dcc9964cd3d7f7c79a121d08a64ab9c0f20da506728f6856232d7e68ce93045e13fd00e82a4f5362b527a79eed87b19f62745938910ca367230bcd15ccedc8ce8b3067bcbaba31c55d03217f661a74c23d98872"}, @NFTA_DATA_VALUE={0xb4, 0x1, "a991a654d6a0513dff6001ab6fbee97b792d2559ef6452361ab4605e6f908861d058a35d2719721b7d4edda54ec6389dde895250697817f35ebd6cdc217bd2653625a0bca386e4a83512085675569b8cc4123e4269003db7b23b1b6f1b01ddd408c7c12bddcd97b4936cbacef9e11c769f175100f6ad60cdf062b491f0b1f69b96abe74abfc7d241843a48b4daa0742cda2346bce901ab8defdd3ce1dd52f891027a61527f7d3d56e79e6c943a2a4aef"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, {0x1564, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "f6fa1b7b0cf6619880d3ecdf9239c57baa91c5663e10e86aee436f0d3ceebd539d7d242e3048ab0d90d7486551f6a55ca8fec351c83485422889"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x140, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xe8, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xd8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xc5, 0x3, "2a6527544fa4a840123dae676a26391b8c575ec0bb22ae30d0d35b8561d4bd53421e0bf85604d43c6575b224a9b7f71f098172b18f9b69c5497c66cf4ef7b3c466e6c8c28bf6e3d1f6eca30d4688df7c8a4393f05fb903268db484831c7d6b2fce745f67573be279d21d983d1fd5040581b28a31de7b1b05fd346150fa5b14c584102a7c5f545af612d03b75af4bfb39341f90299d27405e8eff3c5aaa807027d021d2cc2305ce56ce7c30d67ff78064c7a732ec4b97ca9ef73c8b39b4789e82e8"}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}, {0x44, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x5e}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x1384, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x69, 0x1, "b269d7e4d2673a0a5e46ba565d95a216131b63bab182bd48033f62a347e3c7a44d71fda83d706c3c3a2e860aa04de55586c50856c5200a6ee88c427a829e62d4c9252cfc12e5e2d3ab1b3458dc6e847b71b83898c7a8ffae5a19b578d72940dfe810736686"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x66, 0x1, "aae2e53753b2bc898d756df4de7bc77849086f338ee6ef8c214281f11a03ea299668050264ee28a611e86d6830a9064e6acd1f28093cb24c9f2433ed28c75dab64e0add1386023ca9d31e8b6618b08bbbc6f28059f477649b80d3522e24a6b34a902"}, @NFTA_DATA_VALUE={0x15, 0x1, "413cd8e98464f94103ea8741c8be846962"}, @NFTA_DATA_VALUE={0x63, 0x1, "09703527cb3e9e8c8364b030351f79d3a9c371058ba7f70c83bafd99f620ca6eb0a753e2fd787c21ed212e3a31cde85494b331b36cae7526ce33fb1de413069352b9d2eba932009567f63cb4b155b0aa49ec90d554ca58722275979641257f"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "3f315a92f1a1d594b7b2fcb73050ffe2a0b39042f37d169af0148b0d70e39af035a25a2da8b0ce8b8e9d933766d15130158d9507ccf2525eeb9001786d2aa5064ad1bd000ec5684b962aeefebe0ccb1324ddca08c8256081c02c62b041e093cb18a2f3335dbd31f540da128ae83c122feae717aecb3476fdfd9aa3d9d2593715343c41c29edbe609726bbafaee76e5a6ab127847a5a5c1ad2f1347e520b043707fc46988183036e95821803d26bf0995704fb7d2aaf183879f2d391b429b3c0b"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xf4, 0x1, "c24fb7f8eaa7e4345da292a7e320c9a3fabf41e5b46d0743335ca510be7e64aca7f7a1fdd13ee5222764e0f5f57e05d84cdcf5186cae04b732e29167e163792888dc3d1b675df991f59c83bbcb0b64b840bdc66dd67f2f57bb3d8586cd7ffa7a9a92251ce150a544563e19d38df38bbcdd77b9be9945379c5636c07287f4cdb3c40d4fd9f473991bac73a6161ccf8b11c95b3db4c98669d3c3859588876073d9f9faeec8eefaed5f6707bf7a32ce55b79b2979ea186f4c10f0ce1efd3fc558284235e18ed11a93a1cc0f100ed4b109467e522615dbca8b4cf16916c638d70b5469dbaedc679f8ed739bf8418e7d19ea1"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELRULE={0xd0, 0x8, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_USERDATA={0x9b, 0x7, 0x1, 0x0, "96d907d972366674804723c596c16bba3bf354e5e79348b2f7b05728904877eedcd15edb99e52ac069aa9ab05de62ad2e26501257b4ff293072b89533b01096e79664a072f398797fd759be548752a679cc49f20d08587cfabfd66eb277e9dd9d4c40cdf17c6b9349ce63b2043f675a84d279f962ff0c9be922a2e2e798623a6106fc67a41cf98eadeaa1394b57e3ab40699f00c08aa9d"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1bdc}}, 0x20000000) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000003980)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x61, 0x36, 0xba01e0adf2cb9a42, 0x37, 0x35, 0x39, 0x38], 0x2d, [0x32, 0x30, 0x7, 0x32], 0x2d, [0x62, 0x62, 0x62, 0x61], 0x2d, [0x35, 0x30, 0x31, 0x36], 0x2d, [0x32, 0x34, 0x61, 0x34, 0x66, 0x0, 0x62, 0x36]}}}, {@fsname={'fsname', 0x3d, '^)'}}, {@smackfsroot={'smackfsroot', 0x3d, 'rfdno'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@uid_gt}, {@uid_eq}, {@fsname}, {@subj_type={'subj_type', 0x3d, ')}%'}}, {@dont_hash}, {@audit}]}}) 18m43.474102648s ago: executing program 7 (id=2263): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) timer_gettime(r0, 0x0) 18m43.211865893s ago: executing program 7 (id=2265): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x1, 0x20, 0x5, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0xd, {{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x6, 0x0, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0xa3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xb0, 0x2, 0x36}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x2, 0x4}}}}}]}}]}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000200)=0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$kcm(0x11, 0x0, 0x0) symlink(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) r4 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x60001) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r4, 0x89e7, &(0x7f0000000440)={0x50}) syz_emit_vhci(&(0x7f00000010c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x4, 0xc9}}}, 0x6) ioctl$I2C_TENBIT(r4, 0x704, 0x1) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r5 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) pread64(r5, 0x0, 0x0, 0x72) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002380)="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", 0x23f}], 0x1}, 0x9cdc2384056f0939) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000480)=[@sack_perm, @window={0x3, 0xa, 0x7}, @window={0x3, 0x8001, 0x9}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @window={0x3, 0x2, 0xfffe}, @timestamp], 0x8) sendto$inet(r1, &(0x7f0000000380)='j', 0x1, 0x24024095, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000d5}, 0x40) 18m42.994907614s ago: executing program 7 (id=2267): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0x2eb, 0x6, 0x5, 0x1}, 0x10) syz_io_uring_setup(0xf01, &(0x7f0000000400)={0x0, 0x5963, 0x40, 0x0, 0x14e}, &(0x7f0000000100), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @loopback, 0xba6}, {0xa, 0x4e24, 0x0, @mcast2, 0xfffffffb}, r2, 0x7}}, 0x48) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089", 0xa6}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000008f000000000000000500000018110000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r5, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 18m42.782148634s ago: executing program 7 (id=2268): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_getparam(r0, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) unshare(0x2c020400) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x14}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 18m42.638358301s ago: executing program 7 (id=2270): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (fail_nth: 3) 18m42.416178899s ago: executing program 7 (id=2271): r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b1773", 0x5, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 18m27.244187787s ago: executing program 35 (id=2271): r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b1773", 0x5, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 17m46.312773478s ago: executing program 6 (id=2436): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000340)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000500)="32e797218b009be992d19c38cb12645451c5e3dfdadde58ce5ade9de55b84e71a9d587501a", 0x25}], 0x1, 0x0, 0x0, 0xc044000}, 0x0) 17m45.200563047s ago: executing program 6 (id=2441): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x6d5, 0x4) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=""/21, 0x15}, 0x5}], 0x1, 0x1000000000fe, 0x0) 17m44.957991697s ago: executing program 6 (id=2443): r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x402) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x10001, 0x8001) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r2, r2, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, &(0x7f0000000300)) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'{e \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000006c0)=ANY=[@ANYRES16=r1], 0x2b0}}, 0x4000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 17m42.934653777s ago: executing program 6 (id=2448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703007500000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "140080", 0x44, 0x2f, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x104, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x8, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x5, 0x0, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000b40)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x404}, 0x10) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r6, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2800000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x200048c4}, 0x41) 17m41.041225777s ago: executing program 6 (id=2453): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$vga_arbiter(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x0, 0x0, {0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x3a) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00001d0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f000074e000/0x4000)=nil, &(0x7f000040b000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17m40.16701625s ago: executing program 6 (id=2457): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@private1, 0x0}, &(0x7f0000000100)=0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb2, 0xb2, 0x7, [@decl_tag={0xc8, 0x0, 0x0, 0x11, 0x1, 0x5}, @typedef={0x5}, @datasec={0x8, 0x8, 0x0, 0xf, 0x2, [{0x2, 0x400, 0x80000000}, {0x2, 0x8, 0x4}, {0x3, 0xd, 0x40}, {0x1, 0x4d09ffe3, 0x8000}, {0x4, 0xd6, 0xbf4}, {0x2, 0x2, 0x1ab5566}, {0x2, 0x73938059, 0x7}, {0x4, 0x5, 0x800}], "1d60"}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x19, 0x0, 0x7f, 0x1}, @volatile={0xf, 0x0, 0x0, 0x9, 0x1}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x0, 0x30, 0x0, 0x30, 0x4e]}}, &(0x7f0000000240)=""/29, 0xd3, 0x1d, 0x1, 0x40e, 0x10000}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x69e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x93}, [@generic={0xd4, 0x1, 0x9, 0x76, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x29, &(0x7f0000000080)=""/41, 0x41100, 0x4, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0xf, 0x5, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r2, r3], 0x0, 0x10, 0x7}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x118, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8018}, 0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000007c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000008c0)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)=@getpolicy={0xec, 0x15, 0x20, 0x70bd25, 0x25dfdbfb, {{@in=@empty, @in=@broadcast, 0x4e24, 0x6, 0x4e23, 0x214, 0x2, 0x0, 0xa0, 0x3c, r0, r7}, 0x6e6bb7}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in=@broadcast, @in6=@local, @in6=@mcast1, 0x32, 0x1, 0x0, 0x3500, 0x2, 0x2}, {@in6=@mcast1, @in6=@remote, @in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x32, 0x1, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xbdd6c2dd01a296e5}, 0x8000) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x74, r9, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) syz_open_dev$dri(&(0x7f0000000c80), 0x2, 0x480) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000cc0)={'ip6gretap0\x00', {0x2, 0x4e22, @multicast1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000e00)={'sit0\x00', &(0x7f0000000d40)={'sit0\x00', r0, 0x7800, 0x10, 0x2, 0xffffffff, {{0x1f, 0x4, 0x3, 0x0, 0x7c, 0x67, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, {[@end, @ssrr={0x89, 0x17, 0xb7, [@empty, @dev={0xac, 0x14, 0x14, 0x31}, @empty, @multicast1, @local]}, @cipso={0x86, 0x43, 0x1, [{0x2, 0x5, "23a11c"}, {0x1, 0x10, "3110a6b0e7b9133e78c4dc0f336c"}, {0x2, 0x8, "68d3ae7ce363"}, {0x1, 0x7, "9a28c95340"}, {0x7, 0x7, "7936495d15"}, {0x5, 0x12, "51ec918a2171aeb008d28ae7c817ad95"}]}, @ra={0x94, 0x4, 0x1}, @end, @noop, @generic={0x88, 0x3, "98"}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f00000010c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000e40)={0x228, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000804) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)={0x1b, 0x0, 0x0, 0x800, 0x0, r2, 0x6, '\x00', 0x0, r1, 0x1, 0x0, 0x2}, 0x50) r12 = getpgrp(0x0) fcntl$lock(r11, 0x24, &(0x7f0000001180)={0x1, 0x6, 0x7, 0x6, r12}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x2c, r13, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4, '\x00', r10, r1, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={r4, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000015c0)=[0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0], 0x0, 0xbe, &(0x7f0000001640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001680), &(0x7f00000016c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)={0x1b, 0x0, 0x0, 0x1, 0x0, r11, 0xa, '\x00', 0x0, r4, 0x0, 0x1, 0x5}, 0x50) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001940)=@o_path={&(0x7f0000001900)='./file0\x00', 0x0, 0x8, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x3, 0x13, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001480)='GPL\x00', 0x8, 0x3a, &(0x7f00000014c0)=""/58, 0x41000, 0x0, '\x00', r6, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001540)={0x3, 0xe, 0xf, 0x2}, 0x10, r16, 0xffffffffffffffff, 0x1, &(0x7f0000001980)=[r17, r18, r2], &(0x7f00000019c0)=[{0x2, 0x4, 0x7, 0xb}], 0x10, 0x200}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x34, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008045}, 0x20041) 17m24.744194476s ago: executing program 36 (id=2457): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@private1, 0x0}, &(0x7f0000000100)=0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb2, 0xb2, 0x7, [@decl_tag={0xc8, 0x0, 0x0, 0x11, 0x1, 0x5}, @typedef={0x5}, @datasec={0x8, 0x8, 0x0, 0xf, 0x2, [{0x2, 0x400, 0x80000000}, {0x2, 0x8, 0x4}, {0x3, 0xd, 0x40}, {0x1, 0x4d09ffe3, 0x8000}, {0x4, 0xd6, 0xbf4}, {0x2, 0x2, 0x1ab5566}, {0x2, 0x73938059, 0x7}, {0x4, 0x5, 0x800}], "1d60"}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x19, 0x0, 0x7f, 0x1}, @volatile={0xf, 0x0, 0x0, 0x9, 0x1}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x0, 0x30, 0x0, 0x30, 0x4e]}}, &(0x7f0000000240)=""/29, 0xd3, 0x1d, 0x1, 0x40e, 0x10000}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x69e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x93}, [@generic={0xd4, 0x1, 0x9, 0x76, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x29, &(0x7f0000000080)=""/41, 0x41100, 0x4, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0xf, 0x5, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r2, r3], 0x0, 0x10, 0x7}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x118, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8018}, 0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000007c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000008c0)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)=@getpolicy={0xec, 0x15, 0x20, 0x70bd25, 0x25dfdbfb, {{@in=@empty, @in=@broadcast, 0x4e24, 0x6, 0x4e23, 0x214, 0x2, 0x0, 0xa0, 0x3c, r0, r7}, 0x6e6bb7}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in=@broadcast, @in6=@local, @in6=@mcast1, 0x32, 0x1, 0x0, 0x3500, 0x2, 0x2}, {@in6=@mcast1, @in6=@remote, @in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x32, 0x1, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xbdd6c2dd01a296e5}, 0x8000) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x74, r9, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) syz_open_dev$dri(&(0x7f0000000c80), 0x2, 0x480) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000cc0)={'ip6gretap0\x00', {0x2, 0x4e22, @multicast1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000e00)={'sit0\x00', &(0x7f0000000d40)={'sit0\x00', r0, 0x7800, 0x10, 0x2, 0xffffffff, {{0x1f, 0x4, 0x3, 0x0, 0x7c, 0x67, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, {[@end, @ssrr={0x89, 0x17, 0xb7, [@empty, @dev={0xac, 0x14, 0x14, 0x31}, @empty, @multicast1, @local]}, @cipso={0x86, 0x43, 0x1, [{0x2, 0x5, "23a11c"}, {0x1, 0x10, "3110a6b0e7b9133e78c4dc0f336c"}, {0x2, 0x8, "68d3ae7ce363"}, {0x1, 0x7, "9a28c95340"}, {0x7, 0x7, "7936495d15"}, {0x5, 0x12, "51ec918a2171aeb008d28ae7c817ad95"}]}, @ra={0x94, 0x4, 0x1}, @end, @noop, @generic={0x88, 0x3, "98"}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f00000010c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000e40)={0x228, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000804) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)={0x1b, 0x0, 0x0, 0x800, 0x0, r2, 0x6, '\x00', 0x0, r1, 0x1, 0x0, 0x2}, 0x50) r12 = getpgrp(0x0) fcntl$lock(r11, 0x24, &(0x7f0000001180)={0x1, 0x6, 0x7, 0x6, r12}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x2c, r13, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4, '\x00', r10, r1, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={r4, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000015c0)=[0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0], 0x0, 0xbe, &(0x7f0000001640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001680), &(0x7f00000016c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)={0x1b, 0x0, 0x0, 0x1, 0x0, r11, 0xa, '\x00', 0x0, r4, 0x0, 0x1, 0x5}, 0x50) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001940)=@o_path={&(0x7f0000001900)='./file0\x00', 0x0, 0x8, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x3, 0x13, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001480)='GPL\x00', 0x8, 0x3a, &(0x7f00000014c0)=""/58, 0x41000, 0x0, '\x00', r6, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001540)={0x3, 0xe, 0xf, 0x2}, 0x10, r16, 0xffffffffffffffff, 0x1, &(0x7f0000001980)=[r17, r18, r2], &(0x7f00000019c0)=[{0x2, 0x4, 0x7, 0xb}], 0x10, 0x200}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x34, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008045}, 0x20041) 10m21.180004643s ago: executing program 9 (id=3906): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4f}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) r5 = socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c7266648f6f3dcc890bd8a97fe45834905b77f373", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000200)=@arm64_fp_extra={0x60200000001000d4, &(0x7f00000000c0)=0xed7}) 10m20.324528594s ago: executing program 9 (id=3917): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x300, './file0\x00'}, 0x6e) 10m19.167403932s ago: executing program 9 (id=3920): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/ip6_mr_vif\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0xac60d562a6e8d89d}, {&(0x7f0000000640)="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", 0xfd}, {&(0x7f0000000340)="625b6cc9712dd2e18c0e96d62fa1451990ab6fe82222975e55b0ed3be5cccf9ea70380b2051423d76f9ac7fbd4a429b61186bad426997c01c91f3a891ea3e5a08feddb391c0a05f9def10931cbd35975885a80a4d4ad213cfb3bdf90b5a89df8d3abf4d8de78394ae9fac68c121225c6eb7712c6f3ac45e7ed5b0ea54f27f504ad05ba009387d0ca"}], 0x2) r4 = io_uring_setup(0x5ae4, &(0x7f0000005840)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040) r7 = epoll_create1(0x0) dup3(r7, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="189f37247ce2f54800001fb90802f25a000000ff", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9, r8}, 0xc) r10 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$clear(0x7, r10) pread64(r1, &(0x7f0000000280)=""/172, 0xac, 0xe0) 10m19.024577072s ago: executing program 9 (id=3922): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r1, 0x0) shutdown(r1, 0x1) listen(r0, 0x1000000) 10m18.815709821s ago: executing program 9 (id=3923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000040)={0x0, "23a2fc9ef665756eab702ddb82773953"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/shm\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000097, 0x0, 0x5}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb090000000000000000000c0000000c000000050000000200000000000008000000000030615f00"], 0x0, 0x29, 0x0, 0x1, 0x800}, 0x28) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) utime(&(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x2, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001040)={r1, 0x4, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r7, &(0x7f0000000b00)={0x2020}, 0x2020) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x810) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0xffffffffffffffff, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r11, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000700)=0x10) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) futex(&(0x7f0000000140)=0x8, 0x5, 0x802, 0x0, &(0x7f00000001c0), 0xb1000000) ioctl$sock_inet_tcp_SIOCATMARK(r12, 0x8905, &(0x7f0000000000)) 10m15.003544877s ago: executing program 9 (id=3931): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0xfffffffffffffe9f) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0x100000e4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="0c03573afa64193fd5be4b06fdb024415c0c675f66a648201426236ae476434d7c6d4dbb48b6af27b75412ff", 0x2c}, {&(0x7f0000000180)="47b6b1bcf13967b3c4bf3cc68f653effb380625761263b1720c5cb1c081f2af91cfebdad5d8f59f17b8a1d71b9c27079e4fe363d15d9fd80591447d7dce56e707f13b3168cd1dbb94cbf2a21264246d1b563d39bab7e3e105e9956260704ea72f04250aa97c76a1683207d3de919bc0b5196b965553881bb5e792e93c42885cd11f181ac41811b073e5dcf5bc549aaa4181bdd03fe1d", 0x96}, {0x0}, {&(0x7f0000000540)="0600e0cd32d83200756364effed0f2af1d3cf08c773ed42ce15614c5edac3347621ee0f03e9e0aaa967a12ca6242aea66f7a3d0c9c46c91c44962932ca0fab7a01c88aa7a0a3", 0x46}, {&(0x7f0000000740)="8fd7e1a2dae37ddf36b42888adb33b24cd5e70270cb2d35209544b64813d0308ff978c073d5ba9a9e32da3814e10996ef7943420ecfecc2de257612ab795efafd45429621b51fc18dc6321", 0x4b}], 0x5}}], 0x1, 0x40080) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() syz_emit_ethernet(0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffff0d003db752e9a10004aa"], 0x0) (fail_nth: 1) sched_setscheduler(r6, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 9m58.434152234s ago: executing program 37 (id=3931): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0xfffffffffffffe9f) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0x100000e4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="0c03573afa64193fd5be4b06fdb024415c0c675f66a648201426236ae476434d7c6d4dbb48b6af27b75412ff", 0x2c}, {&(0x7f0000000180)="47b6b1bcf13967b3c4bf3cc68f653effb380625761263b1720c5cb1c081f2af91cfebdad5d8f59f17b8a1d71b9c27079e4fe363d15d9fd80591447d7dce56e707f13b3168cd1dbb94cbf2a21264246d1b563d39bab7e3e105e9956260704ea72f04250aa97c76a1683207d3de919bc0b5196b965553881bb5e792e93c42885cd11f181ac41811b073e5dcf5bc549aaa4181bdd03fe1d", 0x96}, {0x0}, {&(0x7f0000000540)="0600e0cd32d83200756364effed0f2af1d3cf08c773ed42ce15614c5edac3347621ee0f03e9e0aaa967a12ca6242aea66f7a3d0c9c46c91c44962932ca0fab7a01c88aa7a0a3", 0x46}, {&(0x7f0000000740)="8fd7e1a2dae37ddf36b42888adb33b24cd5e70270cb2d35209544b64813d0308ff978c073d5ba9a9e32da3814e10996ef7943420ecfecc2de257612ab795efafd45429621b51fc18dc6321", 0x4b}], 0x5}}], 0x1, 0x40080) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() syz_emit_ethernet(0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffff0d003db752e9a10004aa"], 0x0) (fail_nth: 1) sched_setscheduler(r6, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4m14.177784893s ago: executing program 0 (id=5237): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x3554000) openat$cgroup_procs(r1, &(0x7f0000000480)='tasks\x00', 0x2, 0x0) fadvise64(r1, 0x3, 0x4000000005, 0x4) 4m12.402407486s ago: executing program 0 (id=5243): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0x2eb, 0x6, 0x5, 0x1}, 0x10) syz_io_uring_setup(0xf01, &(0x7f0000000400)={0x0, 0x5963, 0x40, 0x0, 0x14e}, &(0x7f0000000100), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @loopback, 0xba6}, {0xa, 0x4e24, 0x0, @mcast2, 0xfffffffb}, r2, 0x7}}, 0x48) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e", 0xe2}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089", 0xa6}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000008f000000000000000500000018110000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r5, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf15}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4m10.496485271s ago: executing program 0 (id=5246): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0xf, 0xffffffffffffffff}, 0x0, &(0x7f0000000440)={0x3ff, 0xfffffffffffffffe, 0x0, 0x4, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffe}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={0x0, 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRESHEX=r3, @ANYBLOB="7a2878a5e39e0000000057c826be93d28c5522cc912422fc7f84bcf44998c3c5e860a8bfd476"], 0x50}, 0x1, 0x0, 0x0, 0x20008090}, 0x40040) 4m9.419663787s ago: executing program 0 (id=5255): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000700)={0xce8, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0xc94, 0x8, 0x0, 0x1, [{0x3c8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @local, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}}, @WGPEER_A_ALLOWEDIPS={0x314, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @mcast1, 0x2cc}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9c38443e926d924efbe1da8a304635bedb28588e3dcbb8c3a194646d43cbd4d8"}]}, {0x6cc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @local, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x28c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1000}}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @remote, 0xfffffff7}}]}, {0x1b4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9a2, @remote, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xce8}, 0x1, 0x0, 0x0, 0x40}, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4m9.148400498s ago: executing program 0 (id=5257): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0x2eb, 0x6, 0x5, 0x1}, 0x10) syz_io_uring_setup(0xf01, &(0x7f0000000400)={0x0, 0x5963, 0x40, 0x0, 0x14e}, &(0x7f0000000100), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @loopback, 0xba6}, {0xa, 0x4e24, 0x0, @mcast2, 0xfffffffb}, r2, 0x7}}, 0x48) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e", 0xe2}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089", 0xa6}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000008f000000000000000500000018110000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r5, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf15}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4m5.603139386s ago: executing program 0 (id=5261): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000200000000100000000000000", @ANYRES32], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0xc881, 0xc000, 0xa, 0x222}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x40000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r8, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r2}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218"], 0x2c}}, 0x4000010) sendto$inet6(r0, &(0x7f0000000180)='s', 0x1, 0x800, 0x0, 0x0) 3m49.083939853s ago: executing program 38 (id=5261): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000200000000100000000000000", @ANYRES32], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0xc881, 0xc000, 0xa, 0x222}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x40000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r8, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r2}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218"], 0x2c}}, 0x4000010) sendto$inet6(r0, &(0x7f0000000180)='s', 0x1, 0x800, 0x0, 0x0) 25.23610981s ago: executing program 4 (id=5908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) exit(0xc) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r3, 0x40304580, 0x0) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000080)=""/29) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r8, 0xc0245720, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "3a6b633cc97d7821", "889714886a4dcadc00", "58ff4fd6", "9b13fcf0a048ff82"}, 0x28) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x2}, 0x8) 23.214292437s ago: executing program 4 (id=5910): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2001) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400", @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1e) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r7, 0x4068aea3, &(0x7f00000002c0)={0xcc, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r8, r12, 0x0, 0x0, 0x4}) 21.189721518s ago: executing program 4 (id=5915): bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$smackfs_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf9, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x54000, 0x2000, 0x1}) 20.806446194s ago: executing program 4 (id=5918): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) 20.576729301s ago: executing program 4 (id=5920): socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2]}}}) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f00000001c0)={0xc, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x4}, 0x0, 0x0, 0x0) 20.232318935s ago: executing program 4 (id=5922): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120008000000000904", @ANYRES32=r0], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x40040) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0xc000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$kcm(0x11, 0x3, 0x0) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) 12.117357402s ago: executing program 8 (id=5939): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0xf, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRESHEX=r2, @ANYBLOB="7a2878a5e39e0000000057c826be93d28c5522cc912422fc7f84bcf44998c3c5e860a8bfd476"], 0x50}, 0x1, 0x0, 0x0, 0x20008090}, 0x40040) 11.011903035s ago: executing program 8 (id=5946): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @empty}, {0x1, @local}, 0x58, {0x440, 0x4, @loopback}, 'bridge_slave_1\x00'}) unshare(0x22020600) r4 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r4, 0x29, 0x24, 0xffffffffffffffff, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r5, 0x5, 0x8, 0xffffffff80000000}) r7 = geteuid() lsetxattr$system_posix_acl(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000025c0)={{}, {0x1, 0x1}, [{0x2, 0x4, r7}], {0x4, 0x5}, [], {0x10, 0x1}, {0x20, 0x3}}, 0x2c, 0x1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000780)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@blksize}, {@blksize={'blksize', 0x3d, 0x3800}}, {@blksize}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x96}}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x33, 0x30, 0x42285ff0791793f8, 0x35, 0x38, 0x63, 0x33], 0x2d, [0x39, 0x31, 0x36, 0x35], 0x2d, [0x0, 0x64, 0x35, 0x33], 0x2d, [0x62, 0x34, 0x64, 0x32], 0x2d, [0x37, 0x35, 0x31, 0x61, 0x63, 0x63, 0x63, 0x31]}}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x1c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x200080c0) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = fsopen(&(0x7f0000000000)='gfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x1c, 0x39, 0x1, 0x70bd26, 0x25dfdbfc, {0x15}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="dac41b26"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000002400128009000100626f6e640000000014000280080009000200000008000a0001"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) 8.853019212s ago: executing program 2 (id=5955): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00\x00l', @ANYRES32, @ANYRES64=0x0], 0x20) 8.611342789s ago: executing program 5 (id=5956): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0xf, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRESHEX=r2, @ANYBLOB="7a2878a5e39e0000000057c826be93d28c5522cc912422fc7f84bcf44998c3c5e860a8bfd476"], 0x50}, 0x1, 0x0, 0x0, 0x20008090}, 0x40040) 2.83490946s ago: executing program 39 (id=5922): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120008000000000904", @ANYRES32=r0], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x40040) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0xc000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$kcm(0x11, 0x3, 0x0) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) 2.780296923s ago: executing program 2 (id=5958): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xe4a381, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xf24a, 0x4}}, './file0\x00'}) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000180)={0x2, {0x8, 0xfffffffc, 0x100, 0x7}, {0x0, 0xad02, 0x800, 0x1}, {0x400, 0x4}}) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 2.770074839s ago: executing program 8 (id=5959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="210000000000000000000000000000400004"], 0x48) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x21, 0x70bd25, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4810) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1, "", [{{0x9, 0x4, 0x0, 0xff, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x4, 0x80}}}}}]}}]}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001e00110227bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)={0x74, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x2, &(0x7f0000000040)={0x0}, 0x20) 2.767729236s ago: executing program 5 (id=5960): r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x6, 0x10000) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000180)={0x3, 0x80000}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000200)) socket$key(0xf, 0x3, 0x2) r2 = eventfd(0x81) readv(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/182, 0xb6}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x1, 0x403, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x81, 0x1001, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r4}) getegid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140020001000010000000000000000000300000a2c000000060a010400000000000000000a00000409000100f9ffffff000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x281, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}, 0x1, 0x0, 0x0, 0x48000}, 0x4040000) r6 = mq_open(&(0x7f00000004c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x40, 0x10a, 0x0) mq_notify(r6, &(0x7f0000000a00)={0x0, 0x2d, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000380)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#%\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce5+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000003a40)=""/4093, 0xffd}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x3) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000003c0)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x200007, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r8 = socket(0x10, 0x803, 0x3) getsockname$packet(r8, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 2.487907703s ago: executing program 2 (id=5962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000005c0), 0x10) read(r1, &(0x7f00000027c0)=""/4073, 0xfe9) (fail_nth: 4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "eb778610de7e3023"}, 0x10}}, 0x4000040) 2.197554411s ago: executing program 3 (id=5963): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000700)={0x9fc, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x9e0, 0x8, 0x0, 0x1, [{0x3c8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @local, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}}, @WGPEER_A_ALLOWEDIPS={0x314, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @mcast1, 0x2cc}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9c38443e926d924efbe1da8a304635bedb28588e3dcbb8c3a194646d43cbd4d8"}]}, {0x614, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @local, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x28c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0x9fc}, 0x1, 0x0, 0x0, 0x40}, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.115110533s ago: executing program 3 (id=5964): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000700)={0x10d0, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0xc94, 0x8, 0x0, 0x1, [{0x3c8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @local, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}}, @WGPEER_A_ALLOWEDIPS={0x314, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @mcast1, 0x2cc}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9c38443e926d924efbe1da8a304635bedb28588e3dcbb8c3a194646d43cbd4d8"}]}, {0x6cc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @local, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x28c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1000}}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @remote, 0xfffffff7}}]}, {0x1b4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9a2, @remote, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x400}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x400, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @mcast2, 0x8}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "67ca1ade0b9669d849257994c1bf6794c59597313fb832c36570676293a02f63"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4e8aa8c92efbdc6e0272923afc11af87fc72266cc3af016e06b371e43631cb3a"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x304, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a7914918ec523664945e153c7be9483a438bf0f2651650f15bdcdc639ed8904d"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xb5b7, @mcast2, 0x677e}}, @WGPEER_A_ALLOWEDIPS={0x2bc, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}]}, 0x10d0}, 0x1, 0x0, 0x0, 0x40}, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.987081799s ago: executing program 3 (id=5965): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xffffffffffffffff, 0x5, 0x2f, 0xf3, 0x22, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x21, {0x10000001, 0x6fd8e849}, 0x3, 0x9}}) (fail_nth: 1) 1.584271261s ago: executing program 3 (id=5966): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x400, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2008, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xfffffffb, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0x10000, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xfff, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x101c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20005, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1c, 0x404, 0x4, 0x4008, 0x1d7a, 0x7, 0x9, 0x1e88, 0x1000, 0x80000001, 0xffff0000, 0x3f92, 0x1000, 0x10000, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x5, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x1000, 0xffffffff, 0x9, 0x4, 0x1000, 0x9, 0x7fffffbf, 0x3, 0x80, 0x0, 0x7c, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x1, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x4, 0x4, 0x10200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x5, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x21) (fail_nth: 1) 1.166640674s ago: executing program 2 (id=5967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00\x00l', @ANYRES32, @ANYRES64=0x0], 0x20) 932.114474ms ago: executing program 5 (id=5968): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x1, 0x0, 0x337740ff}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x38, 0x1, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x700, 0x3c2c, 0x800}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000200)={@initdev, @remote, 0x0}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x29c, 0x0, 0x20f, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x174, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0xfffffd79, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x880}, 0xc004) 866.554181ms ago: executing program 2 (id=5969): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x8000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x9, 0x0, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x5, 0x2, r2}) 866.416539ms ago: executing program 3 (id=5970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x8000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x9, 0x0, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x5, 0x2, r2}) (fail_nth: 1) 827.47164ms ago: executing program 8 (id=5971): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xe4a381, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000180)={0x2, {0x8, 0xfffffffc, 0x100, 0x7}, {0x0, 0xad02, 0x800, 0x1}, {0x400, 0x4}}) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 595.939649ms ago: executing program 5 (id=5972): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) 435.695037ms ago: executing program 8 (id=5973): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000700)={0x9fc, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x9e0, 0x8, 0x0, 0x1, [{0x3c8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @local, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}}, @WGPEER_A_ALLOWEDIPS={0x314, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @mcast1, 0x2cc}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9c38443e926d924efbe1da8a304635bedb28588e3dcbb8c3a194646d43cbd4d8"}]}, {0x614, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @local, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x28c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0x9fc}, 0x1, 0x0, 0x0, 0x40}, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 307.972477ms ago: executing program 5 (id=5974): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000700)={0x10d0, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0xc94, 0x8, 0x0, 0x1, [{0x3c8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @local, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}}, @WGPEER_A_ALLOWEDIPS={0x314, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @mcast1, 0x2cc}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9c38443e926d924efbe1da8a304635bedb28588e3dcbb8c3a194646d43cbd4d8"}]}, {0x6cc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @local, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x28c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1000}}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @remote, 0xfffffff7}}]}, {0x1b4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9a2, @remote, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x400}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x400, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @mcast2, 0x8}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "67ca1ade0b9669d849257994c1bf6794c59597313fb832c36570676293a02f63"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4e8aa8c92efbdc6e0272923afc11af87fc72266cc3af016e06b371e43631cb3a"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x304, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a7914918ec523664945e153c7be9483a438bf0f2651650f15bdcdc639ed8904d"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xb5b7, @mcast2, 0x677e}}, @WGPEER_A_ALLOWEDIPS={0x2bc, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}]}, 0x10d0}, 0x1, 0x0, 0x0, 0x40}, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 264.047868ms ago: executing program 8 (id=5975): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x5}) 139.921236ms ago: executing program 5 (id=5976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0xddfb75d992ca6e78, 0xffffffffffffffff, 0x5a06a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="07000000010000", 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x2, 0x0) 79.158145ms ago: executing program 2 (id=5977): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r6}, 0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7cfa}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48c0}, 0x48081) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000140)=ANY=[@ANYRES64=r7], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r8, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0xe, 0x2}) 0s ago: executing program 3 (id=5978): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000000)=""/78, 0x4e) getdents(r1, &(0x7f0000000200)=""/251, 0xfb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): criptor, different from the interface descriptor's value: 2 [ 1854.043031][ T1253] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1854.043066][ T1253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.043088][ T1253] usb 6-1: Product: syz [ 1854.043104][ T1253] usb 6-1: Manufacturer: syz [ 1854.043119][ T1253] usb 6-1: SerialNumber: syz [ 1854.101674][ T1253] usb 6-1: config 0 descriptor?? [ 1854.132645][ T1253] redrat3 6-1:0.83: Couldn't find all endpoints [ 1856.172493][T25364] tipc: Disabling bearer [ 1856.383522][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1856.457593][T21316] usb 6-1: USB disconnect, device number 85 [ 1856.746642][T25417] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.5449'. [ 1858.074839][ T5616] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1858.345945][ T5616] usb 9-1: Using ep0 maxpacket: 16 [ 1858.351801][ T5616] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1858.354517][ T5616] usb 9-1: config 0 has an invalid interface number: 169 but max is 0 [ 1858.354546][ T5616] usb 9-1: config 0 has no interface number 0 [ 1858.354597][ T5616] usb 9-1: config 0 interface 169 altsetting 13 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1858.354627][ T5616] usb 9-1: config 0 interface 169 altsetting 13 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1858.354656][ T5616] usb 9-1: config 0 interface 169 has no altsetting 0 [ 1858.420665][ T5616] usb 9-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=4d.fc [ 1858.420698][ T5616] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.420720][ T5616] usb 9-1: Product: syz [ 1858.420736][ T5616] usb 9-1: Manufacturer: syz [ 1858.420751][ T5616] usb 9-1: SerialNumber: syz [ 1858.508920][ T5616] usb 9-1: config 0 descriptor?? [ 1858.891029][T25445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5457'. [ 1858.902640][T25438] 9pnet_fd: Insufficient options for proto=fd [ 1858.931810][T25438] binder: BC_ATTEMPT_ACQUIRE not supported [ 1858.931828][T25438] binder: 25437:25438 ioctl c0306201 200000000080 returned -22 [ 1858.966963][ T5616] usbtest 9-1:0.169: couldn't get endpoints, -71 [ 1858.967073][ T5616] usbtest 9-1:0.169: probe with driver usbtest failed with error -71 [ 1859.011727][ T5616] usb 9-1: USB disconnect, device number 41 [ 1859.239355][T25454] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.5462'. [ 1859.785965][ T9012] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1859.948405][ T9012] usb 3-1: device descriptor read/64, error -71 [ 1860.197575][ T7251] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1860.208583][ T9012] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1860.360002][ T7251] usb 9-1: Using ep0 maxpacket: 32 [ 1860.386357][T25471] FAULT_INJECTION: forcing a failure. [ 1860.386357][T25471] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.387535][T25471] CPU: 1 UID: 0 PID: 25471 Comm: syz.8.5465 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1860.387568][T25471] Tainted: [L]=SOFTLOCKUP [ 1860.387575][T25471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1860.387588][T25471] Call Trace: [ 1860.387596][T25471] [ 1860.387606][T25471] dump_stack_lvl+0xe8/0x150 [ 1860.387645][T25471] should_fail_ex+0x467/0x600 [ 1860.387677][T25471] should_failslab+0xa8/0x100 [ 1860.387708][T25471] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1860.387736][T25471] ? __alloc_skb+0x1d7/0x7a0 [ 1860.387760][T25471] ? __alloc_skb+0x1d7/0x7a0 [ 1860.387799][T25471] __alloc_skb+0x1d7/0x7a0 [ 1860.387831][T25471] netlink_sendmsg+0x5d4/0xb40 [ 1860.387870][T25471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1860.387903][T25471] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1860.387929][T25471] ? __kernel_text_address+0xd/0x30 [ 1860.387955][T25471] ? unwind_get_return_address+0x4d/0x90 [ 1860.387986][T25471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1860.388014][T25471] sock_sendmsg_nosec+0x13a/0x180 [ 1860.388039][T25471] ____sys_sendmsg+0x565/0x870 [ 1860.388068][T25471] ? __might_fault+0xaf/0x130 [ 1860.388102][T25471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1860.388139][T25471] ? import_iovec+0x73/0xa0 [ 1860.388174][T25471] ___sys_sendmsg+0x2a5/0x360 [ 1860.388202][T25471] ? __lock_acquire+0x683/0x2ce0 [ 1860.388235][T25471] ? __pfx____sys_sendmsg+0x10/0x10 [ 1860.388299][T25471] ? __fget_files+0x2a/0x420 [ 1860.388325][T25471] ? __fget_files+0x3a8/0x420 [ 1860.388361][T25471] __x64_sys_sendmsg+0x1b7/0x290 [ 1860.388394][T25471] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1860.388442][T25471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.388466][T25471] do_syscall_64+0x174/0x580 [ 1860.388491][T25471] ? trace_irq_disable+0x3b/0x140 [ 1860.388517][T25471] ? clear_bhb_loop+0x40/0x90 [ 1860.388544][T25471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.388565][T25471] RIP: 0033:0x7f28db06ce59 [ 1860.388587][T25471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1860.388606][T25471] RSP: 002b:00007f28d92c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1860.388630][T25471] RAX: ffffffffffffffda RBX: 00007f28db2e5fa0 RCX: 00007f28db06ce59 [ 1860.388647][T25471] RDX: 0000000020008000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1860.388662][T25471] RBP: 00007f28d92c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1860.388675][T25471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1860.388687][T25471] R13: 00007f28db2e6038 R14: 00007f28db2e5fa0 R15: 00007ffc7e69d568 [ 1860.388721][T25471] [ 1860.395179][ T9012] usb 3-1: device descriptor read/64, error -71 [ 1860.426966][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1860.713789][ T9012] usb usb3-port1: attempt power cycle [ 1860.823903][ T7251] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1860.825141][ T7251] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1860.825181][ T7251] usb 9-1: can't read configurations, error -71 [ 1861.206425][ T9012] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1861.246655][ T9012] usb 3-1: device descriptor read/8, error -71 [ 1861.520268][ T9012] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1861.537567][ T5819] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1861.547894][ T9012] usb 3-1: device descriptor read/8, error -71 [ 1861.685753][ T9012] usb usb3-port1: unable to enumerate USB device [ 1861.781586][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 1861.836301][ T5819] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1861.836333][ T5819] usb 4-1: config 0 has no interface number 0 [ 1861.843352][ T5819] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1861.843385][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.843406][ T5819] usb 4-1: Product: syz [ 1861.843421][ T5819] usb 4-1: Manufacturer: syz [ 1861.843436][ T5819] usb 4-1: SerialNumber: syz [ 1861.861459][T23108] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1861.909086][ T5819] usb 4-1: config 0 descriptor?? [ 1862.034615][T23108] usb 5-1: config 2 has an invalid interface number: 105 but max is 0 [ 1862.034648][T23108] usb 5-1: config 2 has no interface number 0 [ 1862.034680][T23108] usb 5-1: config 2 interface 105 has no altsetting 0 [ 1862.037801][T23108] usb 5-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice= 1.c0 [ 1862.037831][T23108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.037853][T23108] usb 5-1: Product: syz [ 1862.037868][T23108] usb 5-1: Manufacturer: syz [ 1862.037882][T23108] usb 5-1: SerialNumber: syz [ 1862.373655][T25491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.388707][T25491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.437903][T25491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5468'. [ 1862.460858][T25491] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1862.508176][T23108] rndis_host 5-1:2.105: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1862.573916][T23108] usb 5-1: USB disconnect, device number 50 [ 1862.771678][ T5819] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1862.771714][ T5819] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1862.872112][T25514] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.5474'. [ 1862.931057][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1863.207716][T25520] sg_write: data in/out 732/136 bytes for SCSI command 0x0-- guessing data in; [ 1863.207716][T25520] program syz.5.5476 not setting count and/or reply_len properly [ 1863.216085][ T5819] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1863.216451][ T5819] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 1863.271524][T25523] netlink: 'syz.2.5477': attribute type 1 has an invalid length. [ 1863.880719][ T9012] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1864.021439][ T5819] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1864.046698][ T9012] usb 6-1: config 2 has an invalid interface number: 105 but max is 0 [ 1864.046731][ T9012] usb 6-1: config 2 has no interface number 0 [ 1864.046765][ T9012] usb 6-1: config 2 interface 105 has no altsetting 0 [ 1864.052515][ T9012] usb 6-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice= 1.c0 [ 1864.052546][ T9012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.052567][ T9012] usb 6-1: Product: syz [ 1864.052582][ T9012] usb 6-1: Manufacturer: syz [ 1864.052596][ T9012] usb 6-1: SerialNumber: syz [ 1864.237772][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 1864.240714][ T5819] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1864.242721][ T5819] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.242777][ T5819] usb 5-1: config 1 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1864.242881][ T5819] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1864.259821][ T5819] usb 5-1: New USB device found, idVendor=03f0, idProduct=0104, bcdDevice= 0.40 [ 1864.259864][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.259887][ T5819] usb 5-1: Product: syz [ 1864.259902][ T5819] usb 5-1: Manufacturer: syz [ 1864.259918][ T5819] usb 5-1: SerialNumber: syz [ 1864.345792][T25532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1864.354311][T25532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1864.462288][T25543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5479'. [ 1864.497806][ T1253] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1864.593536][T25532] netdevsim netdevsim5: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1864.675747][ T9012] rndis_host 6-1:2.105: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1864.723694][ T1253] usb 3-1: config 2 has an invalid interface number: 105 but max is 0 [ 1864.723727][ T1253] usb 3-1: config 2 has no interface number 0 [ 1864.723841][ T1253] usb 3-1: config 2 interface 105 has no altsetting 0 [ 1864.749738][ T1253] usb 3-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice= 1.c0 [ 1864.749780][ T1253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.749863][ T1253] usb 3-1: Product: syz [ 1864.749879][ T1253] usb 3-1: Manufacturer: syz [ 1864.749895][ T1253] usb 3-1: SerialNumber: syz [ 1864.759326][ T9012] usb 6-1: USB disconnect, device number 86 [ 1864.972583][ T5616] usb 4-1: USB disconnect, device number 110 [ 1865.135622][T25540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.153913][T25540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1865.229860][T25542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5483'. [ 1865.383457][T25549] netdevsim netdevsim2: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1865.589094][ T1253] rndis_host 3-1:2.105: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1865.618248][ T1253] usb 3-1: USB disconnect, device number 32 [ 1865.701528][ T5616] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1865.884326][ T5616] usb 4-1: Using ep0 maxpacket: 16 [ 1865.890367][ T5616] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1865.892482][ T5616] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1865.892523][ T5616] usb 4-1: can't read configurations, error -71 [ 1865.964362][T25536] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5481'. [ 1866.226041][ T5819] usb 5-1: USB disconnect, device number 51 [ 1866.285039][ T9012] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1866.447773][ T9012] usb 9-1: Using ep0 maxpacket: 8 [ 1866.454245][ T9012] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1866.454275][ T9012] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1866.454293][ T9012] usb 9-1: config 0 has no interface number 0 [ 1866.454338][ T9012] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1866.454366][ T9012] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1866.454389][ T9012] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1866.454416][ T9012] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1866.457893][ T9012] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1866.457925][ T9012] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1866.457946][ T9012] usb 9-1: Manufacturer: syz [ 1866.571500][ T9012] usb 9-1: config 0 descriptor?? [ 1866.576526][ T9012] hub 9-1:0.52: bad descriptor, ignoring hub [ 1866.576568][ T9012] hub 9-1:0.52: probe with driver hub failed with error -5 [ 1866.607774][T25568] FAULT_INJECTION: forcing a failure. [ 1866.607774][T25568] name failslab, interval 1, probability 0, space 0, times 0 [ 1866.607814][T25568] CPU: 0 UID: 0 PID: 25568 Comm: syz.3.5491 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1866.607843][T25568] Tainted: [L]=SOFTLOCKUP [ 1866.607850][T25568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1866.607862][T25568] Call Trace: [ 1866.607871][T25568] [ 1866.607879][T25568] dump_stack_lvl+0xe8/0x150 [ 1866.607900][T25568] should_fail_ex+0x467/0x600 [ 1866.607919][T25568] should_failslab+0xa8/0x100 [ 1866.607941][T25568] __kmalloc_noprof+0xfe/0x780 [ 1866.607967][T25568] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 1866.607996][T25568] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 1866.608031][T25568] snd_pcm_hw_refine+0xa18/0x17d0 [ 1866.608071][T25568] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1866.608108][T25568] ? __asan_memset+0x22/0x50 [ 1866.608127][T25568] ? snd_pcm_oss_change_params_locked+0x700/0x3c80 [ 1866.608152][T25568] ? snd_pcm_oss_change_params_locked+0x75d/0x3c80 [ 1866.608184][T25568] snd_pcm_oss_change_params_locked+0x885/0x3c80 [ 1866.608239][T25568] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1866.608253][T25568] ? do_raw_spin_lock+0x12b/0x2f0 [ 1866.608273][T25568] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1866.608288][T25568] ? lockdep_hardirqs_on+0x7a/0x110 [ 1866.608312][T25568] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 1866.608343][T25568] ? snd_pcm_oss_write+0x207/0xb40 [ 1866.608369][T25568] snd_pcm_oss_write+0x274/0xb40 [ 1866.608406][T25568] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1866.608426][T25568] vfs_write+0x29f/0xbb0 [ 1866.608448][T25568] ? __pfx_vfs_write+0x10/0x10 [ 1866.608466][T25568] ? __fget_files+0x2a/0x420 [ 1866.608491][T25568] ? __fget_files+0x2a/0x420 [ 1866.608514][T25568] ? __fget_files+0x3a8/0x420 [ 1866.608538][T25568] ? __fget_files+0x2a/0x420 [ 1866.608717][T25568] ksys_write+0x156/0x270 [ 1866.608800][T25568] ? __pfx_ksys_write+0x10/0x10 [ 1866.608840][T25568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1866.608865][T25568] do_syscall_64+0x174/0x580 [ 1866.608890][T25568] ? trace_irq_disable+0x3b/0x140 [ 1866.608920][T25568] ? clear_bhb_loop+0x40/0x90 [ 1866.608936][T25568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1866.608950][T25568] RIP: 0033:0x7fdc4c33ce59 [ 1866.608971][T25568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1866.608988][T25568] RSP: 002b:00007fdc4a596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1866.609012][T25568] RAX: ffffffffffffffda RBX: 00007fdc4c5b5fa0 RCX: 00007fdc4c33ce59 [ 1866.609029][T25568] RDX: 000000000000fdbc RSI: 0000200000000500 RDI: 0000000000000003 [ 1866.609042][T25568] RBP: 00007fdc4a596090 R08: 0000000000000000 R09: 0000000000000000 [ 1866.609055][T25568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1866.609068][T25568] R13: 00007fdc4c5b6038 R14: 00007fdc4c5b5fa0 R15: 00007fff55330fa8 [ 1866.609099][T25568] [ 1866.880766][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 1866.929578][ T9012] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1866.929879][ T9012] synaptics_usb 9-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1867.075880][ T5616] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1867.173702][T11920] usb 9-1: USB disconnect, device number 44 [ 1867.256249][ T5616] usb 4-1: Using ep0 maxpacket: 32 [ 1867.270046][ T5616] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1867.270079][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.270100][ T5616] usb 4-1: Product: syz [ 1867.270114][ T5616] usb 4-1: Manufacturer: syz [ 1867.270124][ T5616] usb 4-1: SerialNumber: syz [ 1867.293690][ T5616] usb 4-1: config 0 descriptor?? [ 1867.332428][ T5616] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1867.359556][T25583] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5497'. [ 1868.183083][T25570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.189613][T25570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.245904][T23108] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1868.284445][ T5616] gspca_ov534_9: reg_w failed -71 [ 1868.425003][T23108] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1868.425068][T23108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1868.426732][T23108] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1868.426762][T23108] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1868.426783][T23108] usb 6-1: Manufacturer: syz [ 1868.476025][T23108] usb 6-1: config 0 descriptor?? [ 1868.733195][T23108] rc_core: IR keymap rc-hauppauge not found [ 1868.733221][T23108] Registered IR keymap rc-empty [ 1868.739778][T23108] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1868.771546][T23108] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input27 [ 1868.789047][ T5616] gspca_ov534_9: Unknown sensor 0000 [ 1868.789151][ T5616] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1868.925748][ T5616] usb 4-1: USB disconnect, device number 112 [ 1869.249873][T25598] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5501'. [ 1869.439445][T25600] netlink: 'syz.3.5500': attribute type 1 has an invalid length. [ 1869.450313][T25600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5500'. [ 1872.674855][T25600] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5500'. [ 1872.674882][T25600] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5500'. [ 1872.710911][T23108] usb 6-1: USB disconnect, device number 87 [ 1873.188836][T25622] FAULT_INJECTION: forcing a failure. [ 1873.188836][T25622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1873.188875][T25622] CPU: 0 UID: 0 PID: 25622 Comm: syz.5.5508 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1873.188905][T25622] Tainted: [L]=SOFTLOCKUP [ 1873.188914][T25622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1873.188927][T25622] Call Trace: [ 1873.188936][T25622] [ 1873.188946][T25622] dump_stack_lvl+0xe8/0x150 [ 1873.188979][T25622] should_fail_ex+0x467/0x600 [ 1873.189013][T25622] _copy_to_user+0x31/0xb0 [ 1873.189049][T25622] simple_read_from_buffer+0xe1/0x170 [ 1873.189084][T25622] proc_fail_nth_read+0x1be/0x230 [ 1873.189116][T25622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1873.189146][T25622] ? rw_verify_area+0x250/0x4d0 [ 1873.189179][T25622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1873.189206][T25622] vfs_read+0x219/0xa90 [ 1873.189246][T25622] ? __pfx_vfs_read+0x10/0x10 [ 1873.189281][T25622] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1873.189307][T25622] ? lockdep_hardirqs_on+0x7a/0x110 [ 1873.189333][T25622] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1873.189359][T25622] ? mutex_lock_nested+0x152/0x1d0 [ 1873.189389][T25622] ? fdget_pos+0x252/0x320 [ 1873.189427][T25622] ksys_read+0x156/0x270 [ 1873.189461][T25622] ? __pfx_ksys_read+0x10/0x10 [ 1873.189503][T25622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1873.189527][T25622] do_syscall_64+0x174/0x580 [ 1873.189551][T25622] ? trace_irq_disable+0x3b/0x140 [ 1873.189577][T25622] ? clear_bhb_loop+0x40/0x90 [ 1873.189604][T25622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1873.189625][T25622] RIP: 0033:0x7fbbea45d68e [ 1873.189655][T25622] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1873.189674][T25622] RSP: 002b:00007fbbe86f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1873.189705][T25622] RAX: ffffffffffffffda RBX: 00007fbbe86f66c0 RCX: 00007fbbea45d68e [ 1873.189721][T25622] RDX: 000000000000000f RSI: 00007fbbe86f60a0 RDI: 0000000000000004 [ 1873.189735][T25622] RBP: 00007fbbe86f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1873.189748][T25622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1873.189762][T25622] R13: 00007fbbea716038 R14: 00007fbbea715fa0 R15: 00007ffcf5139468 [ 1873.189798][T25622] [ 1873.964875][ T7251] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1874.301531][ T7251] usb 5-1: Using ep0 maxpacket: 32 [ 1874.307195][ T7251] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1874.308815][ T7251] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.308873][ T7251] usb 5-1: config 1 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1874.308903][ T7251] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1874.334778][ T7251] usb 5-1: New USB device found, idVendor=03f0, idProduct=0104, bcdDevice= 0.40 [ 1874.334813][ T7251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.334834][ T7251] usb 5-1: Product: syz [ 1874.334848][ T7251] usb 5-1: Manufacturer: syz [ 1874.334863][ T7251] usb 5-1: SerialNumber: syz [ 1874.450536][T25636] FAULT_INJECTION: forcing a failure. [ 1874.450536][T25636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.450577][T25636] CPU: 0 UID: 0 PID: 25636 Comm: syz.5.5512 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1874.450607][T25636] Tainted: [L]=SOFTLOCKUP [ 1874.450615][T25636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1874.450637][T25636] Call Trace: [ 1874.450646][T25636] [ 1874.450656][T25636] dump_stack_lvl+0xe8/0x150 [ 1874.450687][T25636] should_fail_ex+0x467/0x600 [ 1874.450719][T25636] _copy_from_user+0x2d/0xb0 [ 1874.450752][T25636] copy_siginfo_from_user+0x269/0x410 [ 1874.450772][T25636] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 1874.450801][T25636] ? __pfx_copy_siginfo_from_user+0x10/0x10 [ 1874.450832][T25636] ? clockevents_program_event+0x1a6/0x630 [ 1874.450870][T25636] do_pidfd_send_signal+0x17f/0x4e0 [ 1874.450902][T25636] ? __pfx_do_pidfd_send_signal+0x10/0x10 [ 1874.450928][T25636] ? __fget_files+0x2a/0x420 [ 1874.450963][T25636] ? __fget_files+0x2a/0x420 [ 1874.450990][T25636] ? __fget_files+0x3a8/0x420 [ 1874.451012][T25636] ? __fget_files+0x2a/0x420 [ 1874.451037][T25636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1874.451065][T25636] __se_sys_pidfd_send_signal+0x286/0x320 [ 1874.451090][T25636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1874.451113][T25636] do_syscall_64+0x174/0x580 [ 1874.451136][T25636] ? trace_irq_disable+0x3b/0x140 [ 1874.451161][T25636] ? clear_bhb_loop+0x40/0x90 [ 1874.451185][T25636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1874.451205][T25636] RIP: 0033:0x7fbbea49ce59 [ 1874.451225][T25636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1874.451242][T25636] RSP: 002b:00007fbbe86f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a8 [ 1874.451266][T25636] RAX: ffffffffffffffda RBX: 00007fbbea715fa0 RCX: 00007fbbea49ce59 [ 1874.451281][T25636] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1874.451295][T25636] RBP: 00007fbbe86f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1874.451309][T25636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1874.451322][T25636] R13: 00007fbbea716038 R14: 00007fbbea715fa0 R15: 00007ffcf5139468 [ 1874.451351][T25636] [ 1875.309508][T23073] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1875.474920][T23073] usb 4-1: config 6 has an invalid interface number: 44 but max is 0 [ 1875.474955][T23073] usb 4-1: config 6 has no interface number 0 [ 1875.475071][T23073] usb 4-1: config 6 interface 44 altsetting 5 endpoint 0x1 has invalid maxpacket 2039, setting to 64 [ 1875.475104][T23073] usb 4-1: config 6 interface 44 has no altsetting 0 [ 1875.542110][T23073] usb 4-1: New USB device found, idVendor=0421, idProduct=0178, bcdDevice=ab.54 [ 1875.542206][T23073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.542228][T23073] usb 4-1: Product: syz [ 1875.542244][T23073] usb 4-1: Manufacturer: syz [ 1875.542259][T23073] usb 4-1: SerialNumber: syz [ 1880.582038][ T7251] usb 5-1: USB disconnect, device number 52 [ 1881.743149][T23073] rndis_host 4-1:6.44: invalid descriptor buffer length [ 1881.743167][T23073] rndis_host 4-1:6.44: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1881.744819][T23073] cdc_acm 4-1:6.44: invalid descriptor buffer length [ 1881.799897][T23073] usb 4-1: USB disconnect, device number 113 [ 1882.096302][ T36] audit: type=1326 audit(1782816611.287:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25665 comm="syz.2.5517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1882.096364][ T36] audit: type=1326 audit(1782816611.305:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25665 comm="syz.2.5517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1882.096414][ T36] audit: type=1326 audit(1782816611.305:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25665 comm="syz.2.5517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1882.096462][ T36] audit: type=1326 audit(1782816611.305:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25665 comm="syz.2.5517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1882.096508][ T36] audit: type=1326 audit(1782816611.305:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25665 comm="syz.2.5517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1882.096557][ T36] audit: type=1326 audit(1782816611.305:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25665 comm="syz.2.5517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1882.186230][ T36] audit: type=1326 audit(1782816611.305:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25665 comm="syz.2.5517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1882.186287][ T36] audit: type=1326 audit(1782816611.305:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25665 comm="syz.2.5517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1882.186329][ T36] audit: type=1326 audit(1782816611.360:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25665 comm="syz.2.5517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1882.186370][ T36] audit: type=1326 audit(1782816611.360:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25665 comm="syz.2.5517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1882.191762][T25670] tipc: Enabled bearer , priority 10 [ 1883.643008][T11920] tipc: Node number set to 169124502 [ 1884.298212][T25689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5522'. [ 1884.352142][T25689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5522'. [ 1884.352183][T25689] netlink: 'syz.3.5522': attribute type 11 has an invalid length. [ 1884.352199][T25689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5522'. [ 1884.905900][T11841] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1884.906266][T11841] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1884.906459][T11841] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1884.906543][T11841] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1884.908781][T25689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5522'. [ 1884.908815][T25689] netlink: 'syz.3.5522': attribute type 11 has an invalid length. [ 1884.908832][T25689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5522'. [ 1886.175912][T25704] netlink: 'syz.8.5526': attribute type 29 has an invalid length. [ 1886.191994][T25704] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5526'. [ 1886.458889][T25718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5530'. [ 1886.458915][T25718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5530'. [ 1888.074436][T25746] FAULT_INJECTION: forcing a failure. [ 1888.074436][T25746] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.074476][T25746] CPU: 0 UID: 0 PID: 25746 Comm: syz.2.5540 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1888.074506][T25746] Tainted: [L]=SOFTLOCKUP [ 1888.074513][T25746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1888.074525][T25746] Call Trace: [ 1888.074533][T25746] [ 1888.074543][T25746] dump_stack_lvl+0xe8/0x150 [ 1888.074572][T25746] should_fail_ex+0x467/0x600 [ 1888.074603][T25746] should_failslab+0xa8/0x100 [ 1888.074634][T25746] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1888.074663][T25746] ? dup_task_struct+0x4f/0x860 [ 1888.074692][T25746] ? dup_task_struct+0x4f/0x860 [ 1888.074724][T25746] ? rt_spin_unlock+0x157/0x200 [ 1888.074758][T25746] dup_task_struct+0x4f/0x860 [ 1888.074787][T25746] ? copy_process+0x80e/0x43f0 [ 1888.074819][T25746] copy_process+0x820/0x43f0 [ 1888.074867][T25746] ? kasan_save_track+0x4f/0x80 [ 1888.074889][T25746] ? kasan_save_track+0x3e/0x80 [ 1888.074915][T25746] ? create_io_worker+0xab/0x5c0 [ 1888.074935][T25746] ? io_wq_enqueue+0x675/0x8a0 [ 1888.074965][T25746] ? io_submit_sqes+0x1e74/0x2310 [ 1888.074985][T25746] ? __se_sys_io_uring_enter+0x364/0x1bb0 [ 1888.075006][T25746] ? do_syscall_64+0x174/0x580 [ 1888.075030][T25746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.075061][T25746] ? __pfx_copy_process+0x10/0x10 [ 1888.075098][T25746] ? __pfx_io_wq_worker+0x10/0x10 [ 1888.075121][T25746] ? __pfx_io_wq_worker+0x10/0x10 [ 1888.075144][T25746] create_io_thread+0xfc/0x170 [ 1888.075168][T25746] ? __pfx_create_io_thread+0x10/0x10 [ 1888.075198][T25746] ? __pfx_io_wq_worker+0x10/0x10 [ 1888.075224][T25746] ? __kasan_kmalloc+0x93/0xb0 [ 1888.075255][T25746] ? __raw_spin_lock_init+0x45/0x100 [ 1888.075282][T25746] ? __init_swait_queue_head+0xa8/0x150 [ 1888.075306][T25746] ? create_io_worker+0x27/0x5c0 [ 1888.075329][T25746] create_io_worker+0x181/0x5c0 [ 1888.075357][T25746] io_wq_enqueue+0x675/0x8a0 [ 1888.075397][T25746] ? io_wq_enqueue+0x332/0x8a0 [ 1888.075428][T25746] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1888.075467][T25746] io_submit_sqes+0x1e74/0x2310 [ 1888.075524][T25746] __se_sys_io_uring_enter+0x364/0x1bb0 [ 1888.075546][T25746] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1888.075593][T25746] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1888.075618][T25746] ? fput+0xa0/0xd0 [ 1888.075644][T25746] ? ksys_write+0x248/0x270 [ 1888.075677][T25746] ? __pfx_ksys_write+0x10/0x10 [ 1888.075714][T25746] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1888.075737][T25746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.075761][T25746] do_syscall_64+0x174/0x580 [ 1888.075785][T25746] ? trace_irq_disable+0x3b/0x140 [ 1888.075811][T25746] ? clear_bhb_loop+0x40/0x90 [ 1888.075838][T25746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.075859][T25746] RIP: 0033:0x7f41d24ace59 [ 1888.075881][T25746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.075898][T25746] RSP: 002b:00007f41d0705fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1888.075923][T25746] RAX: ffffffffffffffda RBX: 0000200000000300 RCX: 00007f41d24ace59 [ 1888.075938][T25746] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 1888.075951][T25746] RBP: 0000200000000540 R08: 0000000000000000 R09: 0000000000000008 [ 1888.075964][T25746] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1888.075978][T25746] R13: 00007f41d2726038 R14: 00007f41d2725fa0 R15: 00007fff8e3d5a98 [ 1888.076013][T25746] [ 1889.508629][ T823] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1889.638616][ T7251] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1889.878505][ T823] usb 9-1: Using ep0 maxpacket: 32 [ 1889.884924][ T823] usb 9-1: config 0 has an invalid interface number: 83 but max is 0 [ 1889.884952][ T823] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.884971][ T823] usb 9-1: config 0 has no interface number 0 [ 1889.885015][ T823] usb 9-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1889.885038][ T823] usb 9-1: config 0 interface 83 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1889.885060][ T823] usb 9-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1889.888437][ T823] usb 9-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1889.888469][ T823] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.888491][ T823] usb 9-1: Product: syz [ 1889.888505][ T823] usb 9-1: Manufacturer: syz [ 1889.888521][ T823] usb 9-1: SerialNumber: syz [ 1889.951806][T25756] netlink: 'syz.5.5541': attribute type 29 has an invalid length. [ 1889.958117][T25756] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5541'. [ 1890.007836][ T7251] usb 4-1: Using ep0 maxpacket: 32 [ 1890.011116][ T7251] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1890.015050][ T7251] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1890.015108][ T7251] usb 4-1: config 1 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1890.015136][ T7251] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1890.023269][ T7251] usb 4-1: New USB device found, idVendor=03f0, idProduct=0104, bcdDevice= 0.40 [ 1890.023303][ T7251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.023324][ T7251] usb 4-1: Product: syz [ 1890.023340][ T7251] usb 4-1: Manufacturer: syz [ 1890.023355][ T7251] usb 4-1: SerialNumber: syz [ 1890.026757][T25759] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5543'. [ 1890.026779][T25759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5543'. [ 1890.120494][ T823] usb 9-1: config 0 descriptor?? [ 1890.145457][ T823] redrat3 9-1:0.83: Couldn't find all endpoints [ 1891.967870][ T7251] usb 4-1: USB disconnect, device number 114 [ 1892.205775][T21316] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1892.379111][T21316] usb 3-1: Using ep0 maxpacket: 32 [ 1892.383585][T21316] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 1892.383615][T21316] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.383637][T21316] usb 3-1: config 0 has no interface number 0 [ 1892.383685][T21316] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1892.383709][T21316] usb 3-1: config 0 interface 83 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1892.383733][T21316] usb 3-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1892.387149][T21316] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1892.387169][T21316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.387181][T21316] usb 3-1: Product: syz [ 1892.387189][T21316] usb 3-1: Manufacturer: syz [ 1892.387198][T21316] usb 3-1: SerialNumber: syz [ 1892.428086][T21316] usb 3-1: config 0 descriptor?? [ 1892.447798][T21316] redrat3 3-1:0.83: Couldn't find all endpoints [ 1894.576540][T25802] netlink: 'syz.4.5554': attribute type 29 has an invalid length. [ 1894.585684][T25802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5554'. [ 1895.480114][T25809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5555'. [ 1895.480140][T25809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5555'. [ 1895.710671][ T5616] usb 9-1: USB disconnect, device number 45 [ 1895.937006][T25814] program syz.5.5556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1895.937586][T21316] usb 3-1: USB disconnect, device number 33 [ 1896.035454][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 1896.035474][ T36] audit: type=1326 audit(1782816624.174:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25812 comm="syz.8.5557" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28db06ce59 code=0x0 [ 1897.982614][T25847] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5565'. [ 1897.988658][T25847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5565'. [ 1898.102948][T25854] FAULT_INJECTION: forcing a failure. [ 1898.102948][T25854] name failslab, interval 1, probability 0, space 0, times 0 [ 1898.102983][T25854] CPU: 1 UID: 0 PID: 25854 Comm: syz.2.5567 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1898.103013][T25854] Tainted: [L]=SOFTLOCKUP [ 1898.103020][T25854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1898.103030][T25854] Call Trace: [ 1898.103038][T25854] [ 1898.103046][T25854] dump_stack_lvl+0xe8/0x150 [ 1898.103073][T25854] should_fail_ex+0x467/0x600 [ 1898.103100][T25854] should_failslab+0xa8/0x100 [ 1898.103125][T25854] __kmalloc_noprof+0xfe/0x780 [ 1898.103145][T25854] ? lockdep_hardirqs_on+0x7a/0x110 [ 1898.103167][T25854] ? vb2_core_reqbufs+0x931/0x1470 [ 1898.103190][T25854] ? vb2_core_reqbufs+0x931/0x1470 [ 1898.103214][T25854] ? vb2_core_reqbufs+0x8c4/0x1470 [ 1898.103241][T25854] vb2_core_reqbufs+0x931/0x1470 [ 1898.103282][T25854] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1898.103317][T25854] ? vb2_verify_memory_type+0x1fc/0x570 [ 1898.103343][T25854] vb2_ioctl_reqbufs+0x4be/0x850 [ 1898.103381][T25854] __video_do_ioctl+0x8b2/0xc70 [ 1898.103409][T25854] ? __pfx___video_do_ioctl+0x10/0x10 [ 1898.103440][T25854] video_usercopy+0x860/0x1430 [ 1898.103465][T25854] ? __pfx___video_do_ioctl+0x10/0x10 [ 1898.103484][T25854] ? __pfx_video_usercopy+0x10/0x10 [ 1898.103499][T25854] ? smack_file_ioctl+0x2c2/0x360 [ 1898.103537][T25854] ? __fget_files+0x2a/0x420 [ 1898.103557][T25854] ? __fget_files+0x3a8/0x420 [ 1898.103580][T25854] v4l2_ioctl+0x190/0x1e0 [ 1898.103599][T25854] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1898.103615][T25854] __se_sys_ioctl+0xff/0x170 [ 1898.103650][T25854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.103670][T25854] do_syscall_64+0x174/0x580 [ 1898.103691][T25854] ? clear_bhb_loop+0x40/0x90 [ 1898.103712][T25854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.103728][T25854] RIP: 0033:0x7f41d24ace59 [ 1898.103744][T25854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1898.103759][T25854] RSP: 002b:00007f41d0706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1898.103780][T25854] RAX: ffffffffffffffda RBX: 00007f41d2725fa0 RCX: 00007f41d24ace59 [ 1898.103792][T25854] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000003 [ 1898.103804][T25854] RBP: 00007f41d0706090 R08: 0000000000000000 R09: 0000000000000000 [ 1898.103816][T25854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1898.103827][T25854] R13: 00007f41d2726038 R14: 00007f41d2725fa0 R15: 00007fff8e3d5a98 [ 1898.103858][T25854] [ 1899.150491][T25858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5568'. [ 1899.150517][T25858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5568'. [ 1899.366930][T25860] ieee802154 phy0 wpan0: encryption failed: -90 [ 1899.799602][T23108] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 1900.174847][T23108] usb 3-1: device descriptor read/64, error -71 [ 1900.187591][ T36] audit: type=1326 audit(1782816627.978:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25868 comm="syz.3.5573" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc4c33ce59 code=0x0 [ 1900.568050][T23108] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 1900.719659][T23108] usb 3-1: device descriptor read/64, error -71 [ 1900.902228][T23108] usb usb3-port1: attempt power cycle [ 1901.061642][T25892] overlayfs: missing 'lowerdir' [ 1901.129820][T25897] FAULT_INJECTION: forcing a failure. [ 1901.129820][T25897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1901.129846][T25897] CPU: 0 UID: 0 PID: 25897 Comm: syz.3.5580 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1901.129865][T25897] Tainted: [L]=SOFTLOCKUP [ 1901.129869][T25897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1901.129877][T25897] Call Trace: [ 1901.129882][T25897] [ 1901.129887][T25897] dump_stack_lvl+0xe8/0x150 [ 1901.129907][T25897] should_fail_ex+0x467/0x600 [ 1901.129926][T25897] _copy_from_user+0x2d/0xb0 [ 1901.129944][T25897] ___sys_sendmsg+0x1c6/0x360 [ 1901.129960][T25897] ? __lock_acquire+0x683/0x2ce0 [ 1901.129977][T25897] ? __pfx____sys_sendmsg+0x10/0x10 [ 1901.130013][T25897] ? __fget_files+0x2a/0x420 [ 1901.130027][T25897] ? __fget_files+0x3a8/0x420 [ 1901.130047][T25897] __x64_sys_sendmsg+0x1b7/0x290 [ 1901.130073][T25897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1901.130118][T25897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.130140][T25897] do_syscall_64+0x174/0x580 [ 1901.130164][T25897] ? trace_irq_disable+0x3b/0x140 [ 1901.130184][T25897] ? clear_bhb_loop+0x40/0x90 [ 1901.130198][T25897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.130209][T25897] RIP: 0033:0x7fdc4c33ce59 [ 1901.130221][T25897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.130232][T25897] RSP: 002b:00007fdc4a596028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1901.130246][T25897] RAX: ffffffffffffffda RBX: 00007fdc4c5b5fa0 RCX: 00007fdc4c33ce59 [ 1901.130255][T25897] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000004 [ 1901.130263][T25897] RBP: 00007fdc4a596090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.130270][T25897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.130277][T25897] R13: 00007fdc4c5b6038 R14: 00007fdc4c5b5fa0 R15: 00007fff55330fa8 [ 1901.130295][T25897] [ 1901.450335][T23108] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 1901.468377][T23108] usb 3-1: device descriptor read/8, error -71 [ 1902.799384][T23108] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1903.026878][T23108] usb 3-1: device not accepting address 37, error -71 [ 1903.029380][T23108] usb usb3-port1: unable to enumerate USB device [ 1903.039947][T25910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5583'. [ 1903.039969][T25910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5583'. [ 1903.526539][T25921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5588'. [ 1903.907295][T25920] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1905.139424][T25940] syzkaller1: entered promiscuous mode [ 1905.142208][T25940] syzkaller1: entered allmulticast mode [ 1907.128264][T25959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5598'. [ 1907.128291][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5598'. [ 1907.337946][ T5819] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1907.460951][T25969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5601'. [ 1907.511225][ T5819] usb 9-1: Using ep0 maxpacket: 32 [ 1907.513836][ T5819] usb 9-1: config 0 has an invalid interface number: 83 but max is 0 [ 1907.513861][ T5819] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.513878][ T5819] usb 9-1: config 0 has no interface number 0 [ 1907.513921][ T5819] usb 9-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1907.513940][ T5819] usb 9-1: config 0 interface 83 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1907.513961][ T5819] usb 9-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1907.859120][ T5819] usb 9-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1907.859154][ T5819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.859173][ T5819] usb 9-1: Product: syz [ 1907.859188][ T5819] usb 9-1: Manufacturer: syz [ 1907.859202][ T5819] usb 9-1: SerialNumber: syz [ 1907.885024][ T5819] usb 9-1: config 0 descriptor?? [ 1908.308195][ T5819] redrat3 9-1:0.83: Couldn't find all endpoints [ 1908.788395][ T5819] IPVS: starting estimator thread 0... [ 1909.295065][T25978] IPVS: using max 14 ests per chain, 33600 per kthread [ 1910.751378][T25994] program syz.4.5609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1910.809909][ T7251] usb 9-1: USB disconnect, device number 46 [ 1911.035401][T26004] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5611'. [ 1911.035428][T26004] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5611'. [ 1911.403483][T26011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5614'. [ 1912.258778][T26014] netlink: 556 bytes leftover after parsing attributes in process `syz.3.5616'. [ 1912.481641][T26023] openvswitch: netlink: Flow actions attr not present in new flow. [ 1912.490654][T26025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.493282][T26025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1912.500684][T26025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.501279][T26025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1912.538815][T23108] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1912.699651][T23108] usb 9-1: Using ep0 maxpacket: 32 [ 1912.703636][T23108] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1912.704799][T23108] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.704864][T23108] usb 9-1: config 1 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1912.704894][T23108] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1912.707390][T23108] usb 9-1: New USB device found, idVendor=03f0, idProduct=0104, bcdDevice= 0.40 [ 1912.707419][T23108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.707439][T23108] usb 9-1: Product: syz [ 1912.707454][T23108] usb 9-1: Manufacturer: syz [ 1912.707469][T23108] usb 9-1: SerialNumber: syz [ 1912.743041][ T5819] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1913.873270][T26037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5625'. [ 1913.873295][T26037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5625'. [ 1914.164168][T26047] netlink: 556 bytes leftover after parsing attributes in process `syz.2.5628'. [ 1914.528234][T26053] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5629'. [ 1915.458738][T23108] usb 9-1: USB disconnect, device number 47 [ 1915.535214][ T36] audit: type=1326 audit(1782816642.168:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26061 comm="syz.2.5636" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1915.536875][ T36] audit: type=1326 audit(1782816642.168:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26061 comm="syz.2.5636" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1915.536939][ T36] audit: type=1326 audit(1782816642.168:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26061 comm="syz.2.5636" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1915.537307][ T36] audit: type=1326 audit(1782816642.168:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26061 comm="syz.2.5636" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1915.626286][ T36] audit: type=1326 audit(1782816642.232:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26061 comm="syz.2.5636" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1915.626339][ T36] audit: type=1326 audit(1782816642.232:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26061 comm="syz.2.5636" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1915.626387][ T36] audit: type=1326 audit(1782816642.232:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26061 comm="syz.2.5636" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1915.626463][ T36] audit: type=1326 audit(1782816642.260:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26061 comm="syz.2.5636" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1915.626503][ T36] audit: type=1326 audit(1782816642.260:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26061 comm="syz.2.5636" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1915.626545][ T36] audit: type=1326 audit(1782816642.260:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26061 comm="syz.2.5636" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41d24ace59 code=0x7ffc0000 [ 1916.081423][T26076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5638'. [ 1916.081451][T26076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5638'. [ 1916.631940][T23108] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 1916.661792][T26086] __nla_validate_parse: 1 callbacks suppressed [ 1916.661809][T26086] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5643'. [ 1916.817821][T23108] usb 9-1: config 193 has an invalid interface number: 10 but max is 0 [ 1916.817853][T23108] usb 9-1: config 193 has no interface number 0 [ 1916.817889][T23108] usb 9-1: config 193 interface 10 has no altsetting 0 [ 1916.823855][T23108] usb 9-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=32.0a [ 1916.823891][T23108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.823912][T23108] usb 9-1: Product: syz [ 1916.823928][T23108] usb 9-1: Manufacturer: syz [ 1916.823943][T23108] usb 9-1: SerialNumber: syz [ 1917.064240][T26100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5644'. [ 1917.259964][ T5819] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1917.440054][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.440090][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1917.440128][ T5819] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1917.440153][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.511294][ T5819] usb 5-1: config 0 descriptor?? [ 1918.598801][ T5819] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x2 [ 1918.661376][T26113] FAULT_INJECTION: forcing a failure. [ 1918.661376][T26113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1918.661410][T26113] CPU: 0 UID: 0 PID: 26113 Comm: syz.5.5650 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1918.661435][T26113] Tainted: [L]=SOFTLOCKUP [ 1918.661443][T26113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1918.661455][T26113] Call Trace: [ 1918.661464][T26113] [ 1918.661474][T26113] dump_stack_lvl+0xe8/0x150 [ 1918.661506][T26113] should_fail_ex+0x467/0x600 [ 1918.661538][T26113] _copy_from_user+0x2d/0xb0 [ 1918.661565][T26113] memdup_user+0x5e/0xd0 [ 1918.661578][T26113] __snd_timer_user_ioctl+0x459/0x4820 [ 1918.661595][T26113] ? kasan_quarantine_put+0xbb/0x1f0 [ 1918.661620][T26113] ? __pfx___snd_timer_user_ioctl+0x10/0x10 [ 1918.661646][T26113] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1918.661677][T26113] ? look_up_lock_class+0x57/0x110 [ 1918.661702][T26113] ? register_lock_class+0x31/0x2e0 [ 1918.661732][T26113] ? __lock_acquire+0x683/0x2ce0 [ 1918.661760][T26113] ? smk_tskacc+0x2fb/0x370 [ 1918.661777][T26113] ? do_raw_spin_lock+0x12b/0x2f0 [ 1918.661807][T26113] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1918.661832][T26113] ? lockdep_hardirqs_on+0x7a/0x110 [ 1918.661859][T26113] ? mutex_lock_nested+0x152/0x1d0 [ 1918.661886][T26113] ? snd_timer_user_ioctl+0x51/0x80 [ 1918.661909][T26113] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 1918.661927][T26113] snd_timer_user_ioctl+0x60/0x80 [ 1918.661941][T26113] __se_sys_ioctl+0xff/0x170 [ 1918.661958][T26113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.661977][T26113] do_syscall_64+0x174/0x580 [ 1918.661999][T26113] ? trace_irq_disable+0x3b/0x140 [ 1918.662029][T26113] ? clear_bhb_loop+0x40/0x90 [ 1918.662055][T26113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.662075][T26113] RIP: 0033:0x7fbbea49ce59 [ 1918.662096][T26113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1918.662113][T26113] RSP: 002b:00007fbbe86f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1918.662137][T26113] RAX: ffffffffffffffda RBX: 00007fbbea715fa0 RCX: 00007fbbea49ce59 [ 1918.662153][T26113] RDX: 0000200000000300 RSI: 00000000c0f85403 RDI: 0000000000000003 [ 1918.662166][T26113] RBP: 00007fbbe86f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1918.662180][T26113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1918.662192][T26113] R13: 00007fbbea716038 R14: 00007fbbea715fa0 R15: 00007ffcf5139468 [ 1918.662227][T26113] [ 1919.032927][ T5819] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1919.162072][T26116] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5651'. [ 1919.162160][T26116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5651'. [ 1919.746498][T26120] netlink: 'syz.5.5653': attribute type 10 has an invalid length. [ 1919.746523][T26120] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5653'. [ 1920.244329][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.244494][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.460934][ T5819] usb 5-1: USB disconnect, device number 53 [ 1920.976504][T23108] uvcvideo 9-1:193.10: Found UVC 0.00 device syz (0408:4033) [ 1920.976538][T23108] uvcvideo 9-1:193.10: Forcing UVC version to 1.0a [ 1920.976559][T23108] uvcvideo 9-1:193.10: No valid video chain found. [ 1921.051769][T26133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5654'. [ 1921.051833][T26133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5654'. [ 1921.802093][T23108] usb 9-1: USB disconnect, device number 48 [ 1921.997554][T21412] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1921.997923][T21412] Bluetooth: hci0: command 0x0c1a tx timeout [ 1922.177202][T26143] overlayfs: overlapping lowerdir path [ 1922.394289][T21316] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1922.559433][T21316] usb 6-1: config 2 has an invalid interface number: 105 but max is 0 [ 1922.559465][T21316] usb 6-1: config 2 has no interface number 0 [ 1922.559499][T21316] usb 6-1: config 2 interface 105 has no altsetting 0 [ 1922.577546][ T823] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1922.650895][T21316] usb 6-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice= 1.c0 [ 1922.650931][T21316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.650953][T21316] usb 6-1: Product: syz [ 1922.650967][T21316] usb 6-1: Manufacturer: syz [ 1922.650982][T21316] usb 6-1: SerialNumber: syz [ 1922.816898][ T823] usb 3-1: Using ep0 maxpacket: 32 [ 1922.825823][ T823] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1922.857007][ T823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1922.858371][ T823] usb 3-1: config 1 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1922.858406][ T823] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1923.153635][ T823] usb 3-1: New USB device found, idVendor=03f0, idProduct=0104, bcdDevice= 0.40 [ 1923.154139][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.154214][ T823] usb 3-1: Product: syz [ 1923.154754][ T823] usb 3-1: Manufacturer: syz [ 1923.154774][ T823] usb 3-1: SerialNumber: syz [ 1924.251022][T23073] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1924.251571][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 1924.484961][T23073] usb 4-1: device descriptor read/64, error -32 [ 1924.797242][T23073] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1925.058404][T23073] usb 4-1: config 6 has an invalid interface number: 44 but max is 0 [ 1925.058483][T23073] usb 4-1: config 6 has no interface number 0 [ 1925.058629][T23073] usb 4-1: config 6 interface 44 altsetting 5 endpoint 0x1 has invalid maxpacket 2039, setting to 64 [ 1925.059127][T23073] usb 4-1: config 6 interface 44 has no altsetting 0 [ 1925.137157][T23073] usb 4-1: New USB device found, idVendor=0421, idProduct=0178, bcdDevice=ab.54 [ 1925.137237][T23073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.137296][T23073] usb 4-1: Product: syz [ 1925.137312][T23073] usb 4-1: Manufacturer: syz [ 1925.137369][T23073] usb 4-1: SerialNumber: syz [ 1925.874568][T21316] usb 6-1: can't set config #2, error -71 [ 1925.893399][T21316] usb 6-1: USB disconnect, device number 89 [ 1926.112188][ T823] usb 3-1: USB disconnect, device number 38 [ 1926.368292][T23073] usb 4-1: can't set config #6, error -71 [ 1926.391875][T23073] usb 4-1: USB disconnect, device number 116 [ 1926.694812][T26166] netlink: 'syz.8.5667': attribute type 10 has an invalid length. [ 1926.694837][T26166] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5667'. [ 1927.225236][T24646] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1927.321767][T26172] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5671'. [ 1927.350213][T26172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.371871][T26172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.393356][T24646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1927.393394][T24646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1927.393436][T24646] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1927.393461][T24646] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.483076][T24646] usb 6-1: config 0 descriptor?? [ 1927.941493][T26176] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5671'. [ 1928.157162][T26176] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5671'. [ 1928.198928][T24646] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x2 [ 1928.214608][T24646] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1928.591198][T25546] usb 6-1: USB disconnect, device number 90 [ 1928.891466][T26183] fido_id[26183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1928.925901][T21412] Bluetooth: hci0: command 0x0c1a tx timeout [ 1928.925979][ T5609] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1929.232969][T25546] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1929.370141][ T5819] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1929.402494][T25546] usb 9-1: Using ep0 maxpacket: 32 [ 1929.409910][T25546] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1929.418839][T25546] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.418891][T25546] usb 9-1: config 1 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1929.418916][T25546] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1929.431159][T25546] usb 9-1: New USB device found, idVendor=03f0, idProduct=0104, bcdDevice= 0.40 [ 1929.431188][T25546] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.431207][T25546] usb 9-1: Product: syz [ 1929.431220][T25546] usb 9-1: Manufacturer: syz [ 1929.431234][T25546] usb 9-1: SerialNumber: syz [ 1929.532616][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 1929.558079][ T5819] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 1929.558110][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.558130][ T5819] usb 4-1: config 0 has no interface number 0 [ 1929.558241][ T5819] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1929.558266][ T5819] usb 4-1: config 0 interface 83 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1929.558289][ T5819] usb 4-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1929.594058][ T5819] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1929.594089][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.594163][ T5819] usb 4-1: Product: syz [ 1929.594177][ T5819] usb 4-1: Manufacturer: syz [ 1929.594190][ T5819] usb 4-1: SerialNumber: syz [ 1929.815824][T26188] netlink: 116 bytes leftover after parsing attributes in process `syz.8.5675'. [ 1929.851130][T26204] netlink: 'syz.5.5681': attribute type 10 has an invalid length. [ 1929.851155][T26204] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5681'. [ 1929.946161][ T5819] usb 4-1: config 0 descriptor?? [ 1929.972736][ T5819] redrat3 4-1:0.83: Couldn't find all endpoints [ 1930.082443][T25546] usb 9-1: USB disconnect, device number 49 [ 1931.796936][T26220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5685'. [ 1931.796964][T26220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5685'. [ 1932.402882][ T5609] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1932.408798][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 1933.148150][ T823] usb 4-1: USB disconnect, device number 117 [ 1933.447738][T24646] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1933.577088][T26236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1933.631471][T24646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1933.631507][T24646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1933.631549][T24646] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1933.631574][T24646] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.719445][T24646] usb 6-1: config 0 descriptor?? [ 1933.891049][T26240] netlink: 'syz.2.5694': attribute type 10 has an invalid length. [ 1933.891073][T26240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5694'. [ 1934.220932][T24646] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x2 [ 1934.241839][T24646] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1934.744061][T24646] usb 6-1: USB disconnect, device number 91 [ 1935.051204][T25546] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1935.098217][T26256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5698'. [ 1935.163642][T26257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5699'. [ 1935.163669][T26257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5699'. [ 1936.032031][T25546] usb 4-1: Using ep0 maxpacket: 32 [ 1936.049585][T25546] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1936.050760][T25546] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1936.050808][T25546] usb 4-1: config 1 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1936.050837][T25546] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1936.056549][T25546] usb 4-1: New USB device found, idVendor=03f0, idProduct=0104, bcdDevice= 0.40 [ 1936.056578][T25546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.056596][T25546] usb 4-1: Product: syz [ 1936.056610][T25546] usb 4-1: Manufacturer: syz [ 1936.056623][T25546] usb 4-1: SerialNumber: syz [ 1936.118337][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 1936.118559][T21412] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1937.121331][T26249] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5697'. [ 1937.137884][T26265] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5702'. [ 1937.318647][T25546] usb 4-1: USB disconnect, device number 118 [ 1937.573809][T26271] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5703'. [ 1937.890325][T26277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1938.247008][T25546] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1938.419024][T25546] usb 6-1: config 2 has an invalid interface number: 105 but max is 0 [ 1938.419067][T25546] usb 6-1: config 2 has no interface number 0 [ 1938.419104][T25546] usb 6-1: config 2 interface 105 has no altsetting 0 [ 1938.461532][T26286] netlink: 'syz.3.5709': attribute type 10 has an invalid length. [ 1938.461568][T26286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5709'. [ 1938.693188][T25546] usb 6-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice= 1.c0 [ 1938.693223][T25546] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.693246][T25546] usb 6-1: Product: syz [ 1938.693261][T25546] usb 6-1: Manufacturer: syz [ 1938.693276][T25546] usb 6-1: SerialNumber: syz [ 1938.797395][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5710'. [ 1938.797422][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5710'. [ 1939.469055][T26275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1939.480474][T26275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1939.585723][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 1939.822341][T26296] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5713'. [ 1939.832393][T26291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5705'. [ 1939.916303][T26275] netdevsim netdevsim5: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1940.062158][T25546] rndis_host 6-1:2.105: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1940.080003][T25546] usb 6-1: USB disconnect, device number 92 [ 1940.101706][ T823] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1940.289237][ T823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1940.289274][ T823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1940.289316][ T823] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1940.289339][ T823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.721865][ T5609] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1940.884653][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 1940.912596][T25546] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1941.085797][T25546] usb 4-1: config 6 has an invalid interface number: 44 but max is 0 [ 1941.085841][T25546] usb 4-1: config 6 has no interface number 0 [ 1941.086052][T25546] usb 4-1: config 6 interface 44 altsetting 5 endpoint 0x1 has invalid maxpacket 2039, setting to 64 [ 1941.086138][T25546] usb 4-1: config 6 interface 44 has no altsetting 0 [ 1941.145000][T25546] usb 4-1: New USB device found, idVendor=0421, idProduct=0178, bcdDevice=ab.54 [ 1941.145261][T25546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.145335][T25546] usb 4-1: Product: syz [ 1941.145457][T25546] usb 4-1: Manufacturer: syz [ 1941.145475][T25546] usb 4-1: SerialNumber: syz [ 1946.897661][T25546] rndis_host 4-1:6.44: invalid descriptor buffer length [ 1946.897725][T25546] rndis_host 4-1:6.44: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1946.927720][T25546] cdc_acm 4-1:6.44: invalid descriptor buffer length [ 1947.221811][ T823] usb 5-1: config 0 descriptor?? [ 1947.228432][ T823] usb 5-1: can't set config #0, error -71 [ 1947.254193][ T823] usb 5-1: USB disconnect, device number 54 [ 1947.265980][T25546] usb 4-1: USB disconnect, device number 119 [ 1947.523600][T26318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1948.078079][T26331] FAULT_INJECTION: forcing a failure. [ 1948.078079][T26331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1948.078119][T26331] CPU: 0 UID: 0 PID: 26331 Comm: syz.3.5721 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1948.078155][T26331] Tainted: [L]=SOFTLOCKUP [ 1948.078164][T26331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1948.078177][T26331] Call Trace: [ 1948.078186][T26331] [ 1948.078195][T26331] dump_stack_lvl+0xe8/0x150 [ 1948.078230][T26331] should_fail_ex+0x467/0x600 [ 1948.078263][T26331] _copy_from_iter+0x1d3/0x1660 [ 1948.078291][T26331] ? rcu_is_watching+0x15/0xb0 [ 1948.078324][T26331] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1948.078354][T26331] ? kmem_cache_alloc_node_noprof+0x44e/0x670 [ 1948.078391][T26331] ? __alloc_skb+0x276/0x7a0 [ 1948.078419][T26331] ? __pfx__copy_from_iter+0x10/0x10 [ 1948.078455][T26331] ? skb_set_owner_w+0x263/0x3d0 [ 1948.078489][T26331] ? skb_put+0x112/0x210 [ 1948.078519][T26331] l2tp_ip_sendmsg+0x3ce/0x1630 [ 1948.078562][T26331] ? __pfx_inet_sendmsg+0x10/0x10 [ 1948.078583][T26331] sock_sendmsg_nosec+0x10e/0x180 [ 1948.078611][T26331] __sys_sendto+0x41e/0x5d0 [ 1948.078645][T26331] ? __pfx___sys_sendto+0x10/0x10 [ 1948.078705][T26331] ? __pfx_ksys_write+0x10/0x10 [ 1948.078744][T26331] __x64_sys_sendto+0xde/0x100 [ 1948.078771][T26331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1948.078796][T26331] do_syscall_64+0x174/0x580 [ 1948.078821][T26331] ? trace_irq_disable+0x3b/0x140 [ 1948.078846][T26331] ? clear_bhb_loop+0x40/0x90 [ 1948.078872][T26331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1948.078892][T26331] RIP: 0033:0x7fdc4c33ce59 [ 1948.078912][T26331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1948.078931][T26331] RSP: 002b:00007fdc4a596028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1948.078955][T26331] RAX: ffffffffffffffda RBX: 00007fdc4c5b5fa0 RCX: 00007fdc4c33ce59 [ 1948.078971][T26331] RDX: 000000000000000c RSI: 00002000000002c0 RDI: 0000000000000003 [ 1948.078986][T26331] RBP: 00007fdc4a596090 R08: 0000200000000240 R09: 0000000000000010 [ 1948.078999][T26331] R10: 000000000400c0c1 R11: 0000000000000246 R12: 0000000000000001 [ 1948.079014][T26331] R13: 00007fdc4c5b6038 R14: 00007fdc4c5b5fa0 R15: 00007fff55330fa8 [ 1948.079050][T26331] [ 1948.996827][T26336] netlink: 'syz.4.5722': attribute type 10 has an invalid length. [ 1948.996853][T26336] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5722'. [ 1949.332497][T26346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5723'. [ 1949.332585][T26346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5723'. [ 1950.210155][T26339] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5724'. [ 1950.323542][T26351] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5725'. [ 1950.506092][ T5609] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1950.506474][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 1952.305044][T26366] tipc: Enabled bearer , priority 0 [ 1952.341426][T26366] syzkaller0: entered promiscuous mode [ 1952.341446][T26366] syzkaller0: entered allmulticast mode [ 1952.682011][T26365] tipc: Resetting bearer [ 1952.780279][ T823] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1952.901540][T26372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5735'. [ 1952.901567][T26372] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5735'. [ 1952.940061][ T823] usb 5-1: Using ep0 maxpacket: 32 [ 1952.946620][ T823] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 1952.946651][ T823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1952.946671][ T823] usb 5-1: config 0 has no interface number 0 [ 1952.946729][ T823] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1952.946768][ T823] usb 5-1: config 0 interface 83 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1952.946794][ T823] usb 5-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1952.949929][ T823] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1952.949961][ T823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.949981][ T823] usb 5-1: Product: syz [ 1952.949996][ T823] usb 5-1: Manufacturer: syz [ 1952.950020][ T823] usb 5-1: SerialNumber: syz [ 1953.060103][ T823] usb 5-1: config 0 descriptor?? [ 1953.076147][ T823] redrat3 5-1:0.83: Couldn't find all endpoints [ 1953.224346][T26365] tipc: Disabling bearer [ 1953.890156][T26390] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5740'. [ 1953.967435][T26392] overlayfs: overlapping lowerdir path [ 1954.792966][T26402] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5744'. [ 1955.746253][ T823] usb 5-1: USB disconnect, device number 55 [ 1959.215351][T26428] tipc: Started in network mode [ 1959.215381][T26428] tipc: Node identity f28de3a4ee3a, cluster identity 4711 [ 1959.215552][T26428] tipc: Enabled bearer , priority 0 [ 1959.278253][T26428] syzkaller0: entered promiscuous mode [ 1959.278283][T26428] syzkaller0: entered allmulticast mode [ 1959.321468][T26427] tipc: Resetting bearer [ 1959.482158][ T823] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1959.594813][T26427] tipc: Disabling bearer [ 1959.656810][ T823] usb 6-1: Using ep0 maxpacket: 32 [ 1959.660667][ T823] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 1959.660698][ T823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1959.660719][ T823] usb 6-1: config 0 has no interface number 0 [ 1959.660769][ T823] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1959.660792][ T823] usb 6-1: config 0 interface 83 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1959.660818][ T823] usb 6-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1959.665693][ T823] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1959.665726][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.665746][ T823] usb 6-1: Product: syz [ 1959.665761][ T823] usb 6-1: Manufacturer: syz [ 1959.665777][ T823] usb 6-1: SerialNumber: syz [ 1959.762173][T26444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5756'. [ 1960.664271][ T823] usb 6-1: config 0 descriptor?? [ 1960.670989][ T823] redrat3 6-1:0.83: Couldn't find all endpoints [ 1960.869481][T23073] tipc: Node number set to 481813412 [ 1961.899760][T23108] usb 6-1: USB disconnect, device number 93 [ 1962.358056][T26467] overlayfs: overlapping lowerdir path [ 1963.040190][T26492] overlayfs: overlapping lowerdir path [ 1963.041238][T26494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1963.492121][T26500] CIFS mount error: No usable UNC path provided in device string! [ 1963.492121][T26500] [ 1963.492146][T26500] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1963.870422][T26505] netlink: 'syz.3.5780': attribute type 10 has an invalid length. [ 1963.870449][T26505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5780'. [ 1965.348003][T26521] overlayfs: overlapping lowerdir path [ 1965.451026][ T7251] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1965.613609][ T7251] usb 6-1: Using ep0 maxpacket: 32 [ 1965.620564][ T7251] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1965.620608][ T7251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.620630][ T7251] usb 6-1: Product: syz [ 1965.620645][ T7251] usb 6-1: Manufacturer: syz [ 1965.620660][ T7251] usb 6-1: SerialNumber: syz [ 1965.673406][ T7251] usb 6-1: config 0 descriptor?? [ 1965.700185][ T7251] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1965.727054][T26539] FAULT_INJECTION: forcing a failure. [ 1965.727054][T26539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1965.727102][T26539] CPU: 0 UID: 0 PID: 26539 Comm: syz.8.5794 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1965.727136][T26539] Tainted: [L]=SOFTLOCKUP [ 1965.727145][T26539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1965.727157][T26539] Call Trace: [ 1965.727166][T26539] [ 1965.727176][T26539] dump_stack_lvl+0xe8/0x150 [ 1965.727207][T26539] should_fail_ex+0x467/0x600 [ 1965.727239][T26539] _copy_to_user+0x31/0xb0 [ 1965.727273][T26539] simple_read_from_buffer+0xe1/0x170 [ 1965.727305][T26539] proc_fail_nth_read+0x1be/0x230 [ 1965.727336][T26539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1965.727367][T26539] ? rw_verify_area+0x250/0x4d0 [ 1965.727398][T26539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1965.727424][T26539] vfs_read+0x219/0xa90 [ 1965.727463][T26539] ? __pfx_vfs_read+0x10/0x10 [ 1965.727494][T26539] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1965.727520][T26539] ? lockdep_hardirqs_on+0x7a/0x110 [ 1965.727545][T26539] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1965.727569][T26539] ? mutex_lock_nested+0x152/0x1d0 [ 1965.727597][T26539] ? fdget_pos+0x252/0x320 [ 1965.727633][T26539] ksys_read+0x156/0x270 [ 1965.727665][T26539] ? __pfx_ksys_read+0x10/0x10 [ 1965.727704][T26539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.727727][T26539] do_syscall_64+0x174/0x580 [ 1965.727751][T26539] ? trace_irq_disable+0x3b/0x140 [ 1965.727776][T26539] ? clear_bhb_loop+0x40/0x90 [ 1965.727802][T26539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.727823][T26539] RIP: 0033:0x7f28db02d68e [ 1965.727843][T26539] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1965.727862][T26539] RSP: 002b:00007f28d92a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1965.727885][T26539] RAX: ffffffffffffffda RBX: 00007f28d92a56c0 RCX: 00007f28db02d68e [ 1965.727900][T26539] RDX: 000000000000000f RSI: 00007f28d92a50a0 RDI: 0000000000000004 [ 1965.727914][T26539] RBP: 00007f28d92a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1965.727927][T26539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1965.727939][T26539] R13: 00007f28db2e6128 R14: 00007f28db2e6090 R15: 00007ffc7e69d568 [ 1965.727973][T26539] [ 1965.765135][ T5819] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1965.949560][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 1965.952871][ T5819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.952896][ T5819] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1965.966300][ T5819] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1965.966330][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.966351][ T5819] usb 3-1: Product: syz [ 1965.966364][ T5819] usb 3-1: Manufacturer: syz [ 1965.966377][ T5819] usb 3-1: SerialNumber: syz [ 1966.041078][ T5819] usb 3-1: 0:2 : does not exist [ 1966.103513][T21412] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1966.104215][T21412] Bluetooth: hci0: command 0x0c1a tx timeout [ 1966.223814][ T5819] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1966.354820][T21316] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1966.357990][ T5819] usb 3-1: USB disconnect, device number 39 [ 1966.516112][T21316] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1966.516146][T21316] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1966.516172][T21316] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 1088, setting to 1024 [ 1966.516200][T21316] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1966.516242][T21316] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1966.516265][T21316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.536736][T26517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.544153][T26517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.553511][T21316] usb 9-1: config 0 descriptor?? [ 1966.578067][T26542] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1966.783632][ T7251] gspca_ov534_9: reg_w failed -110 [ 1967.003163][T26058] udevd[26058]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1967.064474][T21316] hdpvr 9-1:0.0: firmware version 0x50 dated [ 1967.064500][T21316] hdpvr 9-1:0.0: untested firmware, the driver might not work. [ 1967.219209][T26560] hub 8-0:1.0: USB hub found [ 1967.219846][T26560] hub 8-0:1.0: 1 port detected [ 1967.325539][ T7251] gspca_ov534_9: Unknown sensor 0000 [ 1967.325647][ T7251] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 1967.366720][T21316] hdpvr 9-1:0.0: device init failed [ 1967.366903][T21316] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -12 [ 1967.440774][T21316] usb 9-1: USB disconnect, device number 50 [ 1967.682691][T26566] overlayfs: overlapping lowerdir path [ 1970.415441][T26606] overlayfs: overlapping lowerdir path [ 1970.969144][T26622] hub 8-0:1.0: USB hub found [ 1970.972411][T26622] hub 8-0:1.0: 1 port detected [ 1973.962287][T26659] overlayfs: overlapping lowerdir path [ 1975.935013][T26685] hub 8-0:1.0: USB hub found [ 1975.941950][T26685] hub 8-0:1.0: 1 port detected [ 1978.614992][T26702] overlayfs: overlapping lowerdir path [ 1978.892394][T26716] FAULT_INJECTION: forcing a failure. [ 1978.892394][T26716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1978.892458][T26716] CPU: 1 UID: 0 PID: 26716 Comm: syz.4.5842 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1978.892488][T26716] Tainted: [L]=SOFTLOCKUP [ 1978.892496][T26716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1978.892509][T26716] Call Trace: [ 1978.892518][T26716] [ 1978.892528][T26716] dump_stack_lvl+0xe8/0x150 [ 1978.892560][T26716] should_fail_ex+0x467/0x600 [ 1978.892605][T26716] _copy_from_iter+0x1d3/0x1660 [ 1978.892638][T26716] ? rcu_is_watching+0x15/0xb0 [ 1978.892671][T26716] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1978.892703][T26716] ? __pfx__copy_from_iter+0x10/0x10 [ 1978.892730][T26716] ? __alloc_skb+0x276/0x7a0 [ 1978.892760][T26716] ? __alloc_skb+0x276/0x7a0 [ 1978.892792][T26716] ? netlink_sendmsg+0x650/0xb40 [ 1978.892821][T26716] ? skb_put+0x112/0x210 [ 1978.892852][T26716] netlink_sendmsg+0x6c0/0xb40 [ 1978.892892][T26716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1978.892925][T26716] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1978.892950][T26716] ? __kernel_text_address+0xd/0x30 [ 1978.892977][T26716] ? unwind_get_return_address+0x4d/0x90 [ 1978.893009][T26716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1978.893038][T26716] sock_sendmsg_nosec+0x13a/0x180 [ 1978.893065][T26716] ____sys_sendmsg+0x565/0x870 [ 1978.893094][T26716] ? __might_fault+0xaf/0x130 [ 1978.893129][T26716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1978.893164][T26716] ? import_iovec+0x73/0xa0 [ 1978.893196][T26716] ___sys_sendmsg+0x2a5/0x360 [ 1978.893221][T26716] ? __lock_acquire+0x683/0x2ce0 [ 1978.893251][T26716] ? __pfx____sys_sendmsg+0x10/0x10 [ 1978.893311][T26716] ? __fget_files+0x2a/0x420 [ 1978.893335][T26716] ? __fget_files+0x3a8/0x420 [ 1978.893372][T26716] __x64_sys_sendmsg+0x1b7/0x290 [ 1978.893405][T26716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1978.893466][T26716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.893491][T26716] do_syscall_64+0x174/0x580 [ 1978.893517][T26716] ? trace_irq_disable+0x3b/0x140 [ 1978.893543][T26716] ? clear_bhb_loop+0x40/0x90 [ 1978.893570][T26716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.893592][T26716] RIP: 0033:0x7f74cb48ce59 [ 1978.893613][T26716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1978.893632][T26716] RSP: 002b:00007f74c96e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1978.893656][T26716] RAX: ffffffffffffffda RBX: 00007f74cb705fa0 RCX: 00007f74cb48ce59 [ 1978.893671][T26716] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1978.893685][T26716] RBP: 00007f74c96e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1978.893699][T26716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1978.893712][T26716] R13: 00007f74cb706038 R14: 00007f74cb705fa0 R15: 00007ffe2c435278 [ 1978.893748][T26716] [ 1980.581326][T26729] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5846'. [ 1980.598300][T26729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1980.598732][T26729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1980.641565][T26730] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5846'. [ 1980.644915][T26730] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5846'. [ 1980.942368][T26736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5849'. [ 1981.418213][T23108] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1982.136018][T23108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1982.137049][T23108] usb 5-1: not running at top speed; connect to a high speed hub [ 1982.425690][T23108] usb 5-1: config 8 has an invalid interface number: 43 but max is 0 [ 1982.425724][T23108] usb 5-1: config 8 has no interface number 0 [ 1982.425775][T23108] usb 5-1: config 8 interface 43 altsetting 17 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1982.425801][T23108] usb 5-1: config 8 interface 43 has no altsetting 0 [ 1982.435417][T23108] usb 5-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 1982.435450][T23108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.435471][T23108] usb 5-1: Product: syz [ 1982.435486][T23108] usb 5-1: Manufacturer: syz [ 1982.435501][T23108] usb 5-1: SerialNumber: syz [ 1982.483548][T26750] overlayfs: overlapping lowerdir path [ 1982.944573][ T5819] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1983.096842][T26760] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5857'. [ 1983.097667][T26760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.126130][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 1983.146928][ T5819] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 1983.146962][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.146982][ T5819] usb 3-1: config 0 has no interface number 0 [ 1983.147030][ T5819] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1983.147054][ T5819] usb 3-1: config 0 interface 83 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1983.147080][ T5819] usb 3-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1983.182208][ T5819] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1983.182240][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.182262][ T5819] usb 3-1: Product: syz [ 1983.182277][ T5819] usb 3-1: Manufacturer: syz [ 1983.182291][ T5819] usb 3-1: SerialNumber: syz [ 1983.217293][ T5819] usb 3-1: config 0 descriptor?? [ 1983.241385][T26762] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5857'. [ 1983.254533][ T5819] redrat3 3-1:0.83: Couldn't find all endpoints [ 1983.275431][T23108] ums-alauda 5-1:8.43: USB Mass Storage device detected [ 1983.304157][T26760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.345847][T26762] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5857'. [ 1983.415570][T23108] usb 5-1: USB disconnect, device number 56 [ 1983.614851][T26767] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5858'. [ 1985.403551][T26782] FAULT_INJECTION: forcing a failure. [ 1985.403551][T26782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1985.403592][T26782] CPU: 0 UID: 0 PID: 26782 Comm: syz.3.5860 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1985.403621][T26782] Tainted: [L]=SOFTLOCKUP [ 1985.403629][T26782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1985.403641][T26782] Call Trace: [ 1985.403649][T26782] [ 1985.403659][T26782] dump_stack_lvl+0xe8/0x150 [ 1985.403692][T26782] should_fail_ex+0x467/0x600 [ 1985.403721][T26782] _copy_from_user+0x2d/0xb0 [ 1985.403749][T26782] ___sys_sendmsg+0x1c6/0x360 [ 1985.403776][T26782] ? __lock_acquire+0x683/0x2ce0 [ 1985.403807][T26782] ? __pfx____sys_sendmsg+0x10/0x10 [ 1985.403841][T26782] ? kstrtouint+0x6e/0xe0 [ 1985.403894][T26782] ? __fget_files+0x2a/0x420 [ 1985.403920][T26782] ? __fget_files+0x3a8/0x420 [ 1985.403956][T26782] __sys_sendmmsg+0x279/0x4d0 [ 1985.403992][T26782] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1985.404026][T26782] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1985.404072][T26782] ? ksys_write+0x248/0x270 [ 1985.404103][T26782] ? __pfx_ksys_write+0x10/0x10 [ 1985.404140][T26782] __x64_sys_sendmmsg+0xa0/0xc0 [ 1985.404168][T26782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.404191][T26782] do_syscall_64+0x174/0x580 [ 1985.404215][T26782] ? trace_irq_disable+0x3b/0x140 [ 1985.404251][T26782] ? clear_bhb_loop+0x40/0x90 [ 1985.404277][T26782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.404297][T26782] RIP: 0033:0x7fdc4c33ce59 [ 1985.404323][T26782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1985.404341][T26782] RSP: 002b:00007fdc4a596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1985.404364][T26782] RAX: ffffffffffffffda RBX: 00007fdc4c5b5fa0 RCX: 00007fdc4c33ce59 [ 1985.404380][T26782] RDX: 0000000000000002 RSI: 0000200000007700 RDI: 0000000000000003 [ 1985.404393][T26782] RBP: 00007fdc4a596090 R08: 0000000000000000 R09: 0000000000000000 [ 1985.404406][T26782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1985.404418][T26782] R13: 00007fdc4c5b6038 R14: 00007fdc4c5b5fa0 R15: 00007fff55330fa8 [ 1985.404452][T26782] [ 1985.482334][T26778] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5861'. [ 1985.908459][ T5616] usb 3-1: USB disconnect, device number 40 [ 1986.112523][T26796] overlayfs: overlapping lowerdir path [ 1986.640601][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.640679][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1987.070859][T26799] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5869'. [ 1987.114399][T26799] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5869'. [ 1987.128213][T26799] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5869'. [ 1988.047038][ T7251] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1988.675433][ T7251] usb 9-1: device descriptor read/64, error -71 [ 1989.343586][ T7251] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1989.724810][ T7251] usb 9-1: device descriptor read/64, error -71 [ 1989.836173][ T7251] usb usb9-port1: attempt power cycle [ 1989.840870][T26819] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5877'. [ 1989.991181][T26829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5879'. [ 1990.126352][ T823] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1991.313960][ T7251] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1991.880118][ T823] usb 5-1: Using ep0 maxpacket: 32 [ 1992.069620][ T7251] usb 9-1: device not accepting address 53, error -71 [ 1992.228500][T26831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1992.228908][T26831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1992.881970][ T823] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 1992.882006][ T823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1992.882027][ T823] usb 5-1: config 0 has no interface number 0 [ 1992.882074][ T823] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1992.882096][ T823] usb 5-1: config 0 interface 83 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1992.882118][ T823] usb 5-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1994.071997][ T823] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1994.072032][ T823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.072053][ T823] usb 5-1: Product: syz [ 1994.072069][ T823] usb 5-1: Manufacturer: syz [ 1994.558151][ T823] usb 5-1: config 0 descriptor?? [ 1994.558757][ T823] usb 5-1: can't set config #0, error -71 [ 1994.561596][ T823] usb 5-1: USB disconnect, device number 57 [ 1996.007693][T21316] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1996.178801][T21316] usb 5-1: config 6 has an invalid interface number: 44 but max is 0 [ 1996.178834][T21316] usb 5-1: config 6 has no interface number 0 [ 1996.179136][T21316] usb 5-1: config 6 interface 44 altsetting 5 endpoint 0x1 has invalid maxpacket 2039, setting to 64 [ 1996.179206][T21316] usb 5-1: config 6 interface 44 has no altsetting 0 [ 1996.239202][T21316] usb 5-1: New USB device found, idVendor=0421, idProduct=0178, bcdDevice=ab.54 [ 1996.239233][T21316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.239245][T21316] usb 5-1: Product: syz [ 1996.239254][T21316] usb 5-1: Manufacturer: syz [ 1996.239263][T21316] usb 5-1: SerialNumber: syz [ 1997.060792][T26846] overlayfs: overlapping lowerdir path [ 2000.480113][T21316] rndis_host 5-1:6.44: invalid descriptor buffer length [ 2000.480140][T21316] rndis_host 5-1:6.44: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 2000.512612][T21316] cdc_acm 5-1:6.44: invalid descriptor buffer length [ 2001.114777][T21316] usb 5-1: USB disconnect, device number 58 [ 2001.316702][T26869] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5890'. [ 2001.804120][T26878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.808203][T26878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.166731][T26890] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 2003.166751][T26890] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2003.176455][T26890] vhci_hcd vhci_hcd.0: Device attached [ 2003.434907][T26897] overlayfs: overlapping lowerdir path [ 2003.492691][ T7251] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2003.499897][T23073] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 2003.763438][ T7251] usb 3-1: Using ep0 maxpacket: 16 [ 2003.849471][ T7251] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 2003.849501][ T7251] usb 3-1: config 0 has no interface number 0 [ 2003.921941][ T7251] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 2003.921974][ T7251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.921994][ T7251] usb 3-1: Product: syz [ 2003.922017][ T7251] usb 3-1: Manufacturer: syz [ 2003.922031][ T7251] usb 3-1: SerialNumber: syz [ 2004.200780][ T7251] usb 3-1: config 0 descriptor?? [ 2004.205234][ T7251] ftdi_sio 3-1:0.4: FTDI USB Serial Device converter detected [ 2004.210780][ T7251] usb 3-1: Detected FT232B [ 2005.025018][T26911] tmpfs: Bad value for 'mpol' [ 2005.567856][T26913] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5904'. [ 2006.568217][ T7251] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2006.569055][ T7251] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2007.988664][T26892] vhci_hcd: connection reset by peer [ 2007.994662][ T7251] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2008.007210][ T184] vhci_hcd vhci_hcd.2: stop threads [ 2008.007237][ T184] vhci_hcd vhci_hcd.2: release socket [ 2008.007317][ T184] vhci_hcd vhci_hcd.2: disconnect device [ 2008.206894][ T7251] usb 3-1: USB disconnect, device number 41 [ 2008.360896][T26933] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5910'. [ 2008.418071][T26937] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5910'. [ 2009.396011][T23073] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 2009.458844][ T7251] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2009.527939][ T7251] ftdi_sio 3-1:0.4: device disconnected [ 2009.673444][T26930] bond1 (unregistering): Released all slaves [ 2009.797989][T26937] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5910'. [ 2010.143788][T26954] CIFS mount error: No usable UNC path provided in device string! [ 2010.143788][T26954] [ 2010.143812][T26954] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2010.334599][T26956] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5917'. [ 2010.655714][T26962] tmpfs: Unknown parameter 'grpquota_' [ 2010.728257][T21412] Bluetooth: hci0: command 0x0c1a tx timeout [ 2010.728344][ T5609] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2010.987591][T26970] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 2010.987623][T26970] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2010.987752][T26970] vhci_hcd vhci_hcd.0: Device attached [ 2012.497588][T25546] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 2012.501271][ T5616] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2013.046483][ T5616] usb 5-1: Using ep0 maxpacket: 16 [ 2013.091043][ T5616] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 2013.091136][ T5616] usb 5-1: config 0 has no interface number 0 [ 2013.524719][ T5616] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 2013.525227][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.525724][ T5616] usb 5-1: Product: syz [ 2013.526501][ T5616] usb 5-1: Manufacturer: syz [ 2013.526635][ T5616] usb 5-1: SerialNumber: syz [ 2013.732288][ T5616] usb 5-1: config 0 descriptor?? [ 2013.798974][ T5616] ftdi_sio 5-1:0.4: FTDI USB Serial Device converter detected [ 2013.817736][ T5616] usb 5-1: Detected FT232B [ 2013.837063][T15516] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 2014.006231][T15516] usb 9-1: Using ep0 maxpacket: 32 [ 2014.022981][T15516] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2014.023011][T15516] usb 9-1: config 0 has no interface number 0 [ 2014.054086][T15516] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2014.054203][T15516] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.054226][T15516] usb 9-1: Product: syz [ 2014.054241][T15516] usb 9-1: Manufacturer: syz [ 2014.054255][T15516] usb 9-1: SerialNumber: syz [ 2014.139462][T15516] usb 9-1: config 0 descriptor?? [ 2014.202098][T15516] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2014.202278][T15516] usb 9-1: selecting invalid altsetting 1 [ 2014.202297][T15516] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2014.202703][T26993] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 2014.202703][T26993] program syz.2.5926 not setting count and/or reply_len properly [ 2014.221760][T26993] netlink: 'syz.2.5926': attribute type 49 has an invalid length. [ 2014.356504][T15516] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2014.389505][T15516] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2014.389576][T15516] usb 9-1: media controller created [ 2014.441824][T26998] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5929'. [ 2014.517236][T26993] bond0: (slave bond_slave_0): Releasing backup interface [ 2014.576379][T15516] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2014.934263][T27003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5931'. [ 2015.035373][T15516] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2015.035680][T15516] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2015.036969][T15516] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2015.095288][T26993] bond_slave_0: entered promiscuous mode [ 2015.095320][T26993] bond_slave_0: entered allmulticast mode [ 2015.243664][T15516] usb 9-1: USB disconnect, device number 55 [ 2015.588038][T27009] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5933'. [ 2015.804353][T27011] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5934'. [ 2015.878709][T27015] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5934'. [ 2016.007944][T27015] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5934'. [ 2019.222424][T27050] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5939'. [ 2019.222448][T27050] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5939'. [ 2019.330830][ T5616] ftdi_sio ttyUSB0: Unable to read latency timer: -110 [ 2019.332904][ T5616] ftdi_sio ttyUSB0: Unable to write latency timer: -32 [ 2019.337392][ T5616] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2020.065477][ T7251] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 2020.254426][ T7251] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2020.254488][ T7251] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2020.254516][ T7251] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x37, changing to 0x7 [ 2020.254543][ T7251] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x7 is Bulk; changing to Interrupt [ 2020.254564][ T7251] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2020.255764][ T7251] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2020.255820][ T7251] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2020.255848][ T7251] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x37, changing to 0x7 [ 2020.255874][ T7251] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x7 is Bulk; changing to Interrupt [ 2020.255898][ T7251] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2020.257158][ T7251] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2020.257213][ T7251] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2020.257241][ T7251] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x37, changing to 0x7 [ 2020.257267][ T7251] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x7 is Bulk; changing to Interrupt [ 2020.257289][ T7251] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2020.262770][ T7251] usb 3-1: string descriptor 0 read error: -22 [ 2020.262932][ T7251] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2020.262955][ T7251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.336400][ T7251] adutux 3-1:168.0: interrupt endpoints not found [ 2020.537302][ T5616] usb 3-1: USB disconnect, device number 42 [ 2020.689964][T27080] overlayfs: overlapping lowerdir path [ 2022.676099][ T5616] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2022.845205][ T5616] usb 4-1: config 6 has an invalid interface number: 44 but max is 0 [ 2022.845281][ T5616] usb 4-1: config 6 has no interface number 0 [ 2022.845433][ T5616] usb 4-1: config 6 interface 44 altsetting 5 endpoint 0x1 has invalid maxpacket 2039, setting to 64 [ 2022.845512][ T5616] usb 4-1: config 6 interface 44 has no altsetting 0 [ 2022.941161][ T5616] usb 4-1: New USB device found, idVendor=0421, idProduct=0178, bcdDevice=ab.54 [ 2022.941203][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.941279][ T5616] usb 4-1: Product: syz [ 2022.941340][ T5616] usb 4-1: Manufacturer: syz [ 2022.941414][ T5616] usb 4-1: SerialNumber: syz [ 2027.972320][ T5616] rndis_host 4-1:6.44: invalid descriptor buffer length [ 2027.972389][ T5616] rndis_host 4-1:6.44: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 2028.133412][ T5616] cdc_acm 4-1:6.44: invalid descriptor buffer length [ 2028.179764][ T5616] usb 4-1: USB disconnect, device number 120 [ 2028.813370][T21412] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2028.883469][T21412] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2028.887130][T21412] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2028.903139][T21412] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2028.904202][T21412] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2028.952513][T23073] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 2029.147830][T27129] FAULT_INJECTION: forcing a failure. [ 2029.147830][T27129] name failslab, interval 1, probability 0, space 0, times 0 [ 2029.147940][T27129] CPU: 1 UID: 0 PID: 27129 Comm: syz.3.5965 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2029.147970][T27129] Tainted: [L]=SOFTLOCKUP [ 2029.147978][T27129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2029.147989][T27129] Call Trace: [ 2029.147997][T27129] [ 2029.148007][T27129] dump_stack_lvl+0xe8/0x150 [ 2029.148039][T27129] should_fail_ex+0x467/0x600 [ 2029.148071][T27129] should_failslab+0xa8/0x100 [ 2029.148102][T27129] __kmalloc_noprof+0xfe/0x780 [ 2029.148128][T27129] ? rcu_is_watching+0x15/0xb0 [ 2029.148158][T27129] ? tomoyo_realpath_from_path+0xef/0x640 [ 2029.148179][T27129] ? tomoyo_realpath_from_path+0xef/0x640 [ 2029.148208][T27129] tomoyo_realpath_from_path+0xef/0x640 [ 2029.148242][T27129] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2029.148274][T27129] tomoyo_path_number_perm+0x246/0x5f0 [ 2029.148312][T27129] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2029.148339][T27129] ? __lock_acquire+0x683/0x2ce0 [ 2029.148382][T27129] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2029.148406][T27129] ? hook_file_ioctl+0x1f3/0x600 [ 2029.148431][T27129] ? lockdep_hardirqs_on+0x7a/0x110 [ 2029.148478][T27129] ? __fget_files+0x2a/0x420 [ 2029.148507][T27129] ? __fget_files+0x2a/0x420 [ 2029.148532][T27129] ? __fget_files+0x3a8/0x420 [ 2029.148557][T27129] ? __fget_files+0x2a/0x420 [ 2029.148598][T27129] security_file_ioctl+0xc3/0x2a0 [ 2029.148631][T27129] __se_sys_ioctl+0x47/0x170 [ 2029.148665][T27129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2029.148689][T27129] do_syscall_64+0x174/0x580 [ 2029.148713][T27129] ? trace_irq_disable+0x3b/0x140 [ 2029.148740][T27129] ? clear_bhb_loop+0x40/0x90 [ 2029.148767][T27129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2029.148788][T27129] RIP: 0033:0x7fdc4c33ce59 [ 2029.148808][T27129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2029.148826][T27129] RSP: 002b:00007fdc4a596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2029.148849][T27129] RAX: ffffffffffffffda RBX: 00007fdc4c5b5fa0 RCX: 00007fdc4c33ce59 [ 2029.148866][T27129] RDX: 0000200000000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 2029.148881][T27129] RBP: 00007fdc4a596090 R08: 0000000000000000 R09: 0000000000000000 [ 2029.148893][T27129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2029.148907][T27129] R13: 00007fdc4c5b6038 R14: 00007fdc4c5b5fa0 R15: 00007fff55330fa8 [ 2029.148942][T27129] [ 2029.149046][T27129] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2029.167472][T23073] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2029.167507][T23073] usb 9-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2029.167532][T23073] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2029.167565][T23073] usb 9-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2029.167595][T23073] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.183016][T23073] usb 9-1: config 0 descriptor?? [ 2029.189533][T27112] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2029.518542][T27123] FAULT_INJECTION: forcing a failure. [ 2029.518542][T27123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2029.518608][T27123] CPU: 0 UID: 0 PID: 27123 Comm: syz.2.5962 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2029.518637][T27123] Tainted: [L]=SOFTLOCKUP [ 2029.518644][T27123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2029.518657][T27123] Call Trace: [ 2029.518665][T27123] [ 2029.518675][T27123] dump_stack_lvl+0xe8/0x150 [ 2029.518708][T27123] should_fail_ex+0x467/0x600 [ 2029.518764][T27123] _copy_to_user+0x31/0xb0 [ 2029.518798][T27123] simple_read_from_buffer+0xe1/0x170 [ 2029.518830][T27123] proc_fail_nth_read+0x1be/0x230 [ 2029.518861][T27123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2029.518890][T27123] ? rw_verify_area+0x250/0x4d0 [ 2029.518920][T27123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2029.518944][T27123] vfs_read+0x219/0xa90 [ 2029.518982][T27123] ? __pfx_vfs_read+0x10/0x10 [ 2029.519014][T27123] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2029.519040][T27123] ? lockdep_hardirqs_on+0x7a/0x110 [ 2029.519061][T27123] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2029.519083][T27123] ? mutex_lock_nested+0x152/0x1d0 [ 2029.519109][T27123] ? fdget_pos+0x252/0x320 [ 2029.519143][T27123] ksys_read+0x156/0x270 [ 2029.519176][T27123] ? __pfx_ksys_read+0x10/0x10 [ 2029.519214][T27123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2029.519235][T27123] do_syscall_64+0x174/0x580 [ 2029.519259][T27123] ? trace_irq_disable+0x3b/0x140 [ 2029.519283][T27123] ? clear_bhb_loop+0x40/0x90 [ 2029.519309][T27123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2029.519330][T27123] RIP: 0033:0x7f41d246d68e [ 2029.519350][T27123] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2029.519367][T27123] RSP: 002b:00007f41d06e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2029.519390][T27123] RAX: ffffffffffffffda RBX: 00007f41d06e56c0 RCX: 00007f41d246d68e [ 2029.519406][T27123] RDX: 000000000000000f RSI: 00007f41d06e50a0 RDI: 0000000000000005 [ 2029.519419][T27123] RBP: 00007f41d06e5090 R08: 0000000000000000 R09: 0000000000000000 [ 2029.519433][T27123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2029.519446][T27123] R13: 00007f41d2726128 R14: 00007f41d2726090 R15: 00007fff8e3d5a98 [ 2029.519481][T27123] [ 2029.603722][T23073] usbhid 9-1:0.0: can't add hid device: -71 [ 2029.603870][T23073] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2029.627961][T23073] usb 9-1: USB disconnect, device number 56 [ 2029.629114][T27136] FAULT_INJECTION: forcing a failure. [ 2029.629114][T27136] name failslab, interval 1, probability 0, space 0, times 0 [ 2029.629148][T27136] CPU: 1 UID: 0 PID: 27136 Comm: syz.3.5966 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2029.629178][T27136] Tainted: [L]=SOFTLOCKUP [ 2029.629186][T27136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2029.629197][T27136] Call Trace: [ 2029.629205][T27136] [ 2029.629213][T27136] dump_stack_lvl+0xe8/0x150 [ 2029.629243][T27136] should_fail_ex+0x467/0x600 [ 2029.629271][T27136] should_failslab+0xa8/0x100 [ 2029.629298][T27136] __kmalloc_noprof+0xfe/0x780 [ 2029.629320][T27136] ? rcu_is_watching+0x15/0xb0 [ 2029.629346][T27136] ? tomoyo_realpath_from_path+0xef/0x640 [ 2029.629366][T27136] ? tomoyo_realpath_from_path+0xef/0x640 [ 2029.629393][T27136] tomoyo_realpath_from_path+0xef/0x640 [ 2029.629423][T27136] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2029.629449][T27136] tomoyo_path_number_perm+0x246/0x5f0 [ 2029.629478][T27136] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2029.629503][T27136] ? __lock_acquire+0x683/0x2ce0 [ 2029.629542][T27136] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2029.629563][T27136] ? hook_file_ioctl+0x1f3/0x600 [ 2029.629586][T27136] ? lockdep_hardirqs_on+0x7a/0x110 [ 2029.629626][T27136] ? __fget_files+0x2a/0x420 [ 2029.629651][T27136] ? __fget_files+0x2a/0x420 [ 2029.629673][T27136] ? __fget_files+0x3a8/0x420 [ 2029.629694][T27136] ? __fget_files+0x2a/0x420 [ 2029.629722][T27136] security_file_ioctl+0xc3/0x2a0 [ 2029.629752][T27136] __se_sys_ioctl+0x47/0x170 [ 2029.629780][T27136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2029.629804][T27136] do_syscall_64+0x174/0x580 [ 2029.629825][T27136] ? trace_irq_disable+0x3b/0x140 [ 2029.629848][T27136] ? clear_bhb_loop+0x40/0x90 [ 2029.629871][T27136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2029.629889][T27136] RIP: 0033:0x7fdc4c33ce59 [ 2029.629908][T27136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2029.629924][T27136] RSP: 002b:00007fdc4a575028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2029.629946][T27136] RAX: ffffffffffffffda RBX: 00007fdc4c5b6090 RCX: 00007fdc4c33ce59 [ 2029.629968][T27136] RDX: 0000000000000021 RSI: 0000000040045567 RDI: 0000000000000003 [ 2029.629980][T27136] RBP: 00007fdc4a575090 R08: 0000000000000000 R09: 0000000000000000 [ 2029.629993][T27136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2029.630004][T27136] R13: 00007fdc4c5b6128 R14: 00007fdc4c5b6090 R15: 00007fff55330fa8 [ 2029.630036][T27136] [ 2029.639690][T27136] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2029.651675][T27134] input: syz1 as /devices/virtual/input/input28 [ 2030.401870][T27149] FAULT_INJECTION: forcing a failure. [ 2030.401870][T27149] name failslab, interval 1, probability 0, space 0, times 0 [ 2030.401910][T27149] CPU: 1 UID: 0 PID: 27149 Comm: syz.3.5970 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2030.401940][T27149] Tainted: [L]=SOFTLOCKUP [ 2030.401948][T27149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2030.401960][T27149] Call Trace: [ 2030.401969][T27149] [ 2030.401979][T27149] dump_stack_lvl+0xe8/0x150 [ 2030.402009][T27149] should_fail_ex+0x467/0x600 [ 2030.402041][T27149] should_failslab+0xa8/0x100 [ 2030.402073][T27149] __kmalloc_noprof+0xfe/0x780 [ 2030.402097][T27149] ? rcu_is_watching+0x15/0xb0 [ 2030.402129][T27149] ? tomoyo_realpath_from_path+0xef/0x640 [ 2030.402151][T27149] ? tomoyo_realpath_from_path+0xef/0x640 [ 2030.402187][T27149] tomoyo_realpath_from_path+0xef/0x640 [ 2030.402222][T27149] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2030.402252][T27149] tomoyo_path_number_perm+0x246/0x5f0 [ 2030.402286][T27149] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2030.402315][T27149] ? __lock_acquire+0x683/0x2ce0 [ 2030.402369][T27149] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2030.402394][T27149] ? hook_file_ioctl+0x1f3/0x600 [ 2030.402419][T27149] ? lockdep_hardirqs_on+0x7a/0x110 [ 2030.402465][T27149] ? __fget_files+0x2a/0x420 [ 2030.402496][T27149] ? __fget_files+0x2a/0x420 [ 2030.402521][T27149] ? __fget_files+0x3a8/0x420 [ 2030.402545][T27149] ? __fget_files+0x2a/0x420 [ 2030.402576][T27149] security_file_ioctl+0xc3/0x2a0 [ 2030.402611][T27149] __se_sys_ioctl+0x47/0x170 [ 2030.402644][T27149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.402668][T27149] do_syscall_64+0x174/0x580 [ 2030.402692][T27149] ? trace_irq_disable+0x3b/0x140 [ 2030.402719][T27149] ? clear_bhb_loop+0x40/0x90 [ 2030.402745][T27149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.402767][T27149] RIP: 0033:0x7fdc4c33ce59 [ 2030.402788][T27149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2030.402806][T27149] RSP: 002b:00007fdc4a596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2030.402830][T27149] RAX: ffffffffffffffda RBX: 00007fdc4c5b5fa0 RCX: 00007fdc4c33ce59 [ 2030.402846][T27149] RDX: 0000200000000080 RSI: 000000004020ae76 RDI: 0000000000000004 [ 2030.402861][T27149] RBP: 00007fdc4a596090 R08: 0000000000000000 R09: 0000000000000000 [ 2030.402875][T27149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2030.402888][T27149] R13: 00007fdc4c5b6038 R14: 00007fdc4c5b5fa0 R15: 00007fff55330fa8 [ 2030.402925][T27149] [ 2030.404655][T27149] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2031.425727][ T5609] Bluetooth: hci5: command tx timeout [ 2031.483514][T27172] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2033.608024][T21412] Bluetooth: hci5: command tx timeout [ 2033.865102][T21412] Bluetooth: hci0: command 0x0c1a tx timeout [ 2033.865181][ T5609] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2034.195039][T27119] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.195286][T27119] bridge0: port 1(bridge_slave_0) entered disabled state [ 2034.195511][T27119] bridge_slave_0: entered allmulticast mode [ 2034.198745][T27119] bridge_slave_0: entered promiscuous mode [ 2034.203281][T27119] bridge0: port 2(bridge_slave_1) entered blocking state [ 2034.203509][T27119] bridge0: port 2(bridge_slave_1) entered disabled state [ 2034.203715][T27119] bridge_slave_1: entered allmulticast mode [ 2034.206510][T27119] bridge_slave_1: entered promiscuous mode [ 2034.271668][T27119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2034.292928][T27119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2034.377340][T27119] team0: Port device team_slave_0 added [ 2034.383339][T27119] team0: Port device team_slave_1 added [ 2034.435413][T27119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2034.435433][T27119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2034.435462][T27119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2034.438027][T27119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2034.438042][T27119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2034.438069][T27119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2034.506475][T27119] hsr_slave_0: entered promiscuous mode [ 2034.507934][T27119] hsr_slave_1: entered promiscuous mode [ 2034.508836][T27119] debugfs: 'hsr0' already exists in 'hsr' [ 2034.508860][T27119] Cannot create hsr debugfs directory [ 2035.858434][ T5609] Bluetooth: hci5: command tx timeout [ 2036.626108][T27119] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2036.643049][T27119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2036.644288][T27119] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2036.695891][T27119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2036.696928][T27119] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2036.732354][T27119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2036.733401][T27119] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2036.782082][T27119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2036.864375][T27119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2036.885885][T27119] 8021q: adding VLAN 0 to HW filter on device team0 [ 2036.902052][T25653] bridge0: port 1(bridge_slave_0) entered blocking state [ 2036.902221][T25653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2036.929921][T25653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2036.930079][T25653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2037.433212][T27119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2037.497091][T27119] veth0_vlan: entered promiscuous mode [ 2037.503735][T27119] veth1_vlan: entered promiscuous mode [ 2037.555797][T27119] veth0_macvtap: entered promiscuous mode [ 2037.566888][T27119] veth1_macvtap: entered promiscuous mode [ 2037.603842][T27119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2037.628108][T27119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2037.645333][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.646278][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.646327][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.646364][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2038.119273][ T5609] Bluetooth: hci5: command tx timeout [ 2038.538234][T25653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2038.538259][T25653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2038.722150][ T2171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2038.722174][ T2171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2053.191001][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 2053.191072][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 2119.747934][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 2119.748014][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.380468][T21412] Bluetooth: hci5: command 0x0406 tx timeout [ 2186.295979][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 2186.296058][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 2207.089111][ T37] INFO: task kworker/0:9:25546 blocked for more than 143 seconds. [ 2207.089143][ T37] Tainted: G L syzkaller #0 [ 2207.089155][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2207.089164][ T37] task:kworker/0:9 state:D stack:23768 pid:25546 tgid:25546 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2207.089228][ T37] Workqueue: usb_hub_wq hub_event [ 2207.089327][ T37] Call Trace: [ 2207.089335][ T37] [ 2207.089349][ T37] __schedule+0x16dc/0x5500 [ 2207.089408][ T37] ? __pfx___schedule+0x10/0x10 [ 2207.089444][ T37] ? schedule+0x90/0x2b0 [ 2207.089471][ T37] schedule+0x164/0x2b0 [ 2207.089498][ T37] usb_kill_urb+0x1cf/0x2f0 [ 2207.089527][ T37] ? __pfx_usb_kill_urb+0x10/0x10 [ 2207.089552][ T37] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2207.089594][ T37] usb_start_wait_urb+0x22a/0x5b0 [ 2207.089625][ T37] ? rcu_is_watching+0x15/0xb0 [ 2207.089657][ T37] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2207.089709][ T37] usb_control_msg+0x234/0x3e0 [ 2207.089743][ T37] hub_port_init+0xb0b/0x28b0 [ 2207.089796][ T37] hub_event+0x24e2/0x4cf0 [ 2207.089889][ T37] ? __pfx_hub_event+0x10/0x10 [ 2207.089917][ T37] ? process_scheduled_works+0xa20/0x14e0 [ 2207.089956][ T37] ? rcu_is_watching+0x15/0xb0 [ 2207.089989][ T37] ? process_scheduled_works+0xa20/0x14e0 [ 2207.090018][ T37] process_scheduled_works+0xa8e/0x14e0 [ 2207.090075][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 2207.090113][ T37] ? assign_work+0x3cf/0x5d0 [ 2207.090148][ T37] worker_thread+0xa47/0xfb0 [ 2207.090194][ T37] ? __kthread_parkme+0x71/0x1f0 [ 2207.090228][ T37] kthread+0x388/0x470 [ 2207.090253][ T37] ? __pfx_worker_thread+0x10/0x10 [ 2207.090282][ T37] ? __pfx_kthread+0x10/0x10 [ 2207.090308][ T37] ret_from_fork+0x514/0xb70 [ 2207.090335][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 2207.090357][ T37] ? __switch_to+0xc89/0x1420 [ 2207.090381][ T37] ? __pfx_kthread+0x10/0x10 [ 2207.090405][ T37] ret_from_fork_asm+0x1a/0x30 [ 2207.090451][ T37] [ 2207.090476][ T37] [ 2207.090476][ T37] Showing all locks held in the system: [ 2207.090488][ T37] 1 lock held by khungtaskd/37: [ 2207.090531][ T37] #0: ffffffff8dfc2fc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2207.090617][ T37] 2 locks held by getty/5351: [ 2207.090629][ T37] #0: ffff88803638b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2207.090688][ T37] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 2207.090747][ T37] 3 locks held by kworker/u8:24/12352: [ 2207.090769][ T37] 5 locks held by kworker/0:9/25546: [ 2207.090782][ T37] #0: ffff88801a10d138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2207.090850][ T37] #1: ffffc900063ffc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2207.090908][ T37] #2: ffff88823bf68210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 2207.090961][ T37] #3: ffff88802adf5658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0 [ 2207.091014][ T37] #4: ffff88802aacd458 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0 [ 2207.091070][ T37] [ 2207.091075][ T37] ============================================= [ 2207.091075][ T37] [ 2207.091085][ T37] NMI backtrace for cpu 1 [ 2207.091103][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2207.091130][ T37] Tainted: [L]=SOFTLOCKUP [ 2207.091138][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2207.091150][ T37] Call Trace: [ 2207.091159][ T37] [ 2207.091168][ T37] dump_stack_lvl+0xe8/0x150 [ 2207.091195][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 2207.091223][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2207.091250][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 2207.091287][ T37] sys_info+0x135/0x170 [ 2207.091316][ T37] watchdog+0xfd7/0x1030 [ 2207.091348][ T37] ? watchdog+0x1c7/0x1030 [ 2207.091378][ T37] kthread+0x388/0x470 [ 2207.091402][ T37] ? __pfx_watchdog+0x10/0x10 [ 2207.091424][ T37] ? __pfx_kthread+0x10/0x10 [ 2207.091449][ T37] ret_from_fork+0x514/0xb70 [ 2207.091476][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 2207.091501][ T37] ? __switch_to+0xc89/0x1420 [ 2207.091524][ T37] ? __pfx_kthread+0x10/0x10 [ 2207.091548][ T37] ret_from_fork_asm+0x1a/0x30 [ 2207.091593][ T37] [ 2207.091601][ T37] Sending NMI from CPU 1 to CPUs 0: [ 2207.091631][ C0] NMI backtrace for cpu 0 [ 2207.091648][ C0] CPU: 0 UID: 0 PID: 12352 Comm: kworker/u8:24 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2207.091672][ C0] Tainted: [L]=SOFTLOCKUP [ 2207.091678][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2207.091689][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 2207.091713][ C0] RIP: 0010:__lock_acquire+0x52e/0x2ce0 [ 2207.091737][ C0] Code: 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d a4 00 00 00 49 83 ff 31 0f 83 83 00 00 00 8b 03 25 ff 1f 00 00 48 0f a3 05 52 e6 d7 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 d0 a4 19 93 eb 32 83 3d 59 76 [ 2207.091751][ C0] RSP: 0018:ffffc900066a76f8 EFLAGS: 00000003 [ 2207.091766][ C0] RAX: 00000000000009f4 RBX: ffff888037c46978 RCX: 0000000000000003 [ 2207.091779][ C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 2207.091789][ C0] RBP: 0000000000000000 R08: ffffffff8aee49dd R09: 0000000000000000 [ 2207.091801][ C0] R10: 0000000000000000 R11: ffffffff8dfc2fc0 R12: 00000000ffffff05 [ 2207.091812][ C0] R13: ffff888037c46980 R14: ffff888037c45d00 R15: 0000000000000002 [ 2207.091824][ C0] FS: 0000000000000000(0000) GS:ffff888126111000(0000) knlGS:0000000000000000 [ 2207.091838][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2207.091851][ C0] CR2: 000055f0ea8e1660 CR3: 000000000ddb0000 CR4: 00000000003526f0 [ 2207.091869][ C0] Call Trace: [ 2207.091875][ C0] [ 2207.091889][ C0] ? __local_bh_enable+0x1e1/0x2f0 [ 2207.091916][ C0] ? batadv_iv_ogm_schedule+0x40d/0xfa0 [ 2207.091933][ C0] lock_acquire+0x106/0x350 [ 2207.091953][ C0] ? batadv_iv_ogm_schedule+0x40d/0xfa0 [ 2207.091974][ C0] ? batadv_iv_ogm_schedule+0x40d/0xfa0 [ 2207.091992][ C0] batadv_iv_ogm_schedule+0x42e/0xfa0 [ 2207.092009][ C0] ? batadv_iv_ogm_schedule+0x40d/0xfa0 [ 2207.092028][ C0] ? batadv_iv_ogm_schedule+0x40d/0xfa0 [ 2207.092048][ C0] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 2207.092066][ C0] ? batadv_skb_head_push+0x187/0x200 [ 2207.092088][ C0] ? batadv_send_skb_packet+0x40e/0x650 [ 2207.092111][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x67a/0x790 [ 2207.092136][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 2207.092157][ C0] process_scheduled_works+0xa8e/0x14e0 [ 2207.092190][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2207.092215][ C0] ? assign_work+0x3cf/0x5d0 [ 2207.092238][ C0] worker_thread+0xa47/0xfb0 [ 2207.092267][ C0] ? __kthread_parkme+0x71/0x1f0 [ 2207.092287][ C0] kthread+0x388/0x470 [ 2207.092304][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2207.092327][ C0] ? __pfx_kthread+0x10/0x10 [ 2207.092354][ C0] ret_from_fork+0x514/0xb70 [ 2207.092374][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2207.092392][ C0] ? __switch_to+0xc89/0x1420 [ 2207.092408][ C0] ? __pfx_kthread+0x10/0x10 [ 2207.092426][ C0] ret_from_fork_asm+0x1a/0x30 [ 2207.092452][ C0] [ 2207.092628][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 2207.092645][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2207.092672][ T37] Tainted: [L]=SOFTLOCKUP [ 2207.092680][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2207.092691][ T37] Call Trace: [ 2207.092700][ T37] [ 2207.092709][ T37] vpanic+0x56c/0xa60 [ 2207.092740][ T37] ? __pfx_vpanic+0x10/0x10 [ 2207.092777][ T37] panic+0xc5/0xd0 [ 2207.092803][ T37] ? __pfx_panic+0x10/0x10 [ 2207.092832][ T37] ? wq_watchdog_touch+0xf9/0x160 [ 2207.092872][ T37] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 2207.092908][ T37] watchdog+0x1030/0x1030 [ 2207.092940][ T37] ? watchdog+0x1c7/0x1030 [ 2207.092971][ T37] kthread+0x388/0x470 [ 2207.092996][ T37] ? __pfx_watchdog+0x10/0x10 [ 2207.093019][ T37] ? __pfx_kthread+0x10/0x10 [ 2207.093044][ T37] ret_from_fork+0x514/0xb70 [ 2207.093071][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 2207.093096][ T37] ? __switch_to+0xc89/0x1420 [ 2207.093120][ T37] ? __pfx_kthread+0x10/0x10 [ 2207.093145][ T37] ret_from_fork_asm+0x1a/0x30 [ 2207.093188][ T37] [ 2207.093650][ T37] Kernel Offset: disabled