last executing test programs: 10m3.539844587s ago: executing program 1 (id=1333): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xf) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x18) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x9, @vbi={0x7, 0x5, 0x33565348, 0x34363248, [0x7fffffff, 0xfffd], [0xa, 0x3], 0x1}}) connect$inet6(r3, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r8, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r8, 0xda90) accept4(r8, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x1e, 0x5, 0x0) 10m2.369757609s ago: executing program 1 (id=1343): unshare(0x22020400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0xfe, "0042007d82000000160020000000f738096304"}) r2 = syz_open_pts(r1, 0x80) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r3 = dup3(r2, r1, 0x80000) read$watch_queue(r3, &(0x7f0000001d40)=""/4095, 0xfdef) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000077c000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000572000/0x3000)=nil, &(0x7f0000323000/0x2000)=nil, &(0x7f0000503000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xff04}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score_adj\x00') write$sysctl(r6, &(0x7f0000000280)='0\x00', 0xffffffef) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d40)=@newtfilter={0x12c8, 0x2c, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x0, 0xf}, {0x8, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1290, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x7}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_EMATCHES={0x1274, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x9}, {{0x2, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xffff, 0x7, 0x9}, {{0x2, 0x1, 0x1, 0x1}, {0x2}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x9}, {{0x2, 0x0, 0x1, 0x1}, {0x4}}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x7cf1}, {0x9, 0xa, 0x1, "f6a870cf477724259bae"}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xfc, 0x0, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x2, 0x40}, {0x100, 0xa, 0x0, "8b3c96319324e42c79f9"}}}, @TCF_EM_META={0xf0, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x10005, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="837beecf899831f5995c", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="294a83c607fc64fb0b", @TCF_META_TYPE_VAR="5fb60cc14eb8831163eb"]}, @TCA_EM_META_RVALUE={0x2f, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="fe042ace3b5182", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="faa24d1c17", @TCF_META_TYPE_VAR='F', @TCF_META_TYPE_VAR="fab934009e59958c0eee", @TCF_META_TYPE_VAR="905efcb519d1573b"]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="a4df42651169"]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="744d02789cdadf6066b5", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x46, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="6512be74", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="97f0e862980799ef12"]}]}}, @TCF_EM_CONTAINER={0x28, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x8}, "2e55c3a81852c74d121b83d612bf94e80042d4d1ee25820beee0"}}]}, @TCA_EMATCH_TREE_LIST={0x10d0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x7ea0, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_IPT={0x1094, 0x3, 0x0, 0x0, {{0x8000, 0x9, 0xe}, [@TCA_EM_IPT_MATCH_DATA={0x33, 0x5, "6c22af0d939f5a1e1821cffecc13631cdd04be3ea15f31ffc2f627a0d78cd8eb2f123335adce71d5b54cbe6b66a3ca"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x26, 0x5, "f7244bc7b495e60f3b0b2ad26363c30a4176a1bf49e7fc5ecc9ad98e9b82b76e511a"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}]}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x85d6}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x9}, {0xffffffffffffffff, 0x5, 0x2}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xc}}]}, 0x12c8}, 0x1, 0x0, 0x0, 0x24000041}, 0x0) fsopen(&(0x7f0000000240)='ocfs2_dlmfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000007000000270b0000010000804a080280", @ANYRES32=r6, @ANYBLOB="0600"/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="00000000020000000500"/28], 0x50) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0040000001, 0x892, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) 10m1.273225067s ago: executing program 1 (id=1348): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}}, 0x20004005) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r5, &(0x7f0000000380)={'full', 0x20, 0xffffffffffff8000, 0x20, 0x3000000000000}, 0x2f) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendto$unix(r2, &(0x7f00000001c0)="39197f70c5a623b556324cedb0e9b03208697c10a0db2996706721859c0686f59a9426e1121c1cf37d6f2072682875ae172b4bfae28880dc0283412e34ee4dfbd9ea3e10dc4841c56633669b7ebdef8a612b49a698551734c8565d9592cd01b98eae24444bc59fe6dc189edc1fc92728688a863fb7aeae836b6f26b762055ab74b2b41dee7a02d24a53c808850121b49d3a13300bfd88df2c02314f2", 0x9c, 0x24000020, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x3ff, 0x5, 0x6, 0x3, 0x6, 0xfffffffe, 0x4, 0x5, 0x80000001, 0x5, 0x7, 0x8, 0x4, 0x6, 0x300, 0x6, 0x2, 0x3, 0x1ff, 0x3, 0x5, 0x3a7, 0x6, 0x6, 0xeea, 0x4, 0x4, 0x9, 0x9, 0x7, 0x0, 0x3fca, 0x62e6, 0x3, 0x4, 0x8, 0x2e2, 0x400, 0x6, 0x3, 0x9, 0xffffffff, 0x7f, 0xd, 0x1, 0x4, 0x7f, 0x9, 0x0, 0x0, 0x5a4, 0x101, 0x3, 0x3, 0xeb, 0x2, 0x8, 0x7, 0xffff8000, 0x0, 0x5, 0x8, 0x6, 0xb2, 0xca0e, 0x5, 0x200, 0x9, 0x1, 0x6, 0xffffffff, 0x3, 0x80, 0x6, 0x401b0, 0x2, 0x6, 0x8, 0xfffffffc, 0x3ad, 0x47d1, 0x4, 0x1, 0xf, 0x189, 0x9, 0x3, 0x3, 0x5, 0x4, 0x0, 0x2, 0x5, 0x2, 0x1, 0x6b3, 0x3, 0x4, 0x8, 0xffff8001, 0x3, 0x81, 0x7, 0xcb0a, 0xe51, 0x6, 0x8000, 0x5, 0x9, 0x8c73, 0x1, 0x81, 0x800, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0x3, 0x80, 0x6, 0xffffffa5, 0x1, 0x4f23dcfd, 0x0, 0xfd, 0x65, 0x9, 0x1ff, 0x101, 0x3, 0x0, 0xb, 0x80, 0x3, 0x7f, 0x9, 0xfffffff8, 0x1ff, 0x8000, 0xa, 0x8, 0x2, 0x1, 0x5, 0x3, 0x0, 0x1, 0x4, 0x200000, 0x10000000, 0xffffffff, 0xe, 0x2, 0x2bf4, 0x1d50, 0x9, 0x400, 0x4, 0x1, 0x7, 0x1000, 0x5af7, 0x6, 0x40, 0x5, 0x44, 0x15dbc6d1, 0xfd, 0x7fffffff, 0x0, 0x2, 0x6, 0x2, 0x10000, 0x0, 0x6, 0x1000, 0xe314, 0x5, 0x9, 0xffffff45, 0x2, 0x3f, 0xffffffff, 0x5, 0x7, 0x4, 0xd7, 0xe, 0x6, 0x9, 0x0, 0x7, 0x8, 0x9, 0x53e90d17, 0x2, 0x80, 0x8d4, 0x7, 0xf5, 0x8000, 0xbb6, 0x0, 0x10001, 0xd7, 0x4, 0x0, 0x7, 0x0, 0x0, 0x60, 0x0, 0x0, 0x4, 0x3, 0x8, 0xf9a0, 0x0, 0xd48, 0xf24, 0x1, 0x1, 0x6, 0x8, 0x2, 0x7, 0x22e, 0x6f4, 0x5, 0xfffffff9, 0x9, 0x3ff, 0xd91, 0x5, 0x1, 0x40, 0x9, 0xcd, 0xfffffffa, 0x2, 0x6, 0x6, 0x10, 0x2, 0x4, 0xffffff00, 0x6223, 0x7, 0x100, 0x9, 0x0, 0x6, 0x2, 0x3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x20400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x2, 0x184) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c00000800018004"], 0x1c}}, 0xc000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m1.049349736s ago: executing program 1 (id=1351): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x4, 0x4, 0x410, 0x0, 0x218, 0x130, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010101, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x4, 0x8, 0xd, 0x8, 0xe8, 0x6, 'wg2\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10000, 0x6, 0xff0c, 0x0, 0x0, "2e3db46bbd54492c3b8b94a26d2b6f09949a2c5d377e1886c36b8e355354a160d73a311a2ee6b7547689bb9a515857b39523fadabc9d55f111b9f1dbe8567b8a"}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0x64c, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x81, 0xff03}}}, {{@arp={@multicast2, @local, 0x0, 0xff000000, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local, {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010100, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) r2 = fcntl$getown(r1, 0x9) fcntl$setown(r0, 0x8, r2) 10m0.970934263s ago: executing program 1 (id=1354): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000140)={@remote, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x6, 0x9, 0x80000000, 0x8000, 0x8}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) 9m57.42306134s ago: executing program 1 (id=1362): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x183100, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ftruncate(r2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000240)=""/157, &(0x7f0000000100)=0x9d) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) write(r3, &(0x7f0000000000), 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x440001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x4400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x408000, 0x0) dup3(r7, r3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9m41.864803794s ago: executing program 32 (id=1362): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x183100, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ftruncate(r2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000240)=""/157, &(0x7f0000000100)=0x9d) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) write(r3, &(0x7f0000000000), 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x440001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x4400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x408000, 0x0) dup3(r7, r3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 50.624563827s ago: executing program 0 (id=3353): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000004d0a4000076ed37dd1baf594a761e27ea37d37aa0755df8ef97f512b9c3137b3d8fb462efbda189a8ff6917258553696f119800ad67ea58651dda3c95d4d7ffc5d17217f7321c12b8cd39b4acab27404414d659afccfb8bd01c57601af5f2be737f2b358e96539397d81f7d8d7bfd7e10fb6a23de2873b1ba953ce6f40e6b543bd457fadd88255bbd01c7320649be0e9ead40b4f9b23f1752391b8ef37f0d61223113e3116d004f9d9f5a52f7de8bfbb8cbb7f7a252ecb263970bfadf29b6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffff8}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x2301, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000003f80)) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x400000000000143, 0x0) unshare(0x66020000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000100)={0x6, 0x6f, 0x3, 0x0, 0x10, "88bd91aa28528000000000007500000400"}) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550002f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000001, 0x0, 0x2, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x0, 0x1}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)) ioctl$TIOCGLCKTRMIOS(r9, 0x5456, &(0x7f0000000200)={0x3, 0xfffff001, 0x3ff, 0x2, 0x1, "1ec52111a34ddc0ac1569269c0982b007cc623"}) recvmmsg(r7, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket(0x10, 0x3, 0x0) 47.195274131s ago: executing program 0 (id=3367): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000140)={@remote, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x6, 0x9, 0x80000000, 0x8000, 0x8}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) 43.980732248s ago: executing program 0 (id=3378): socket$xdp(0x2c, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r3, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r11, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r2, r6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4088800) io_setup(0x239f, &(0x7f0000000380)=0x0) r14 = eventfd2(0x5, 0x1) io_submit(r13, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r14, 0x0, 0x0, 0x800002, 0x0, 0x0, r14}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r14, &(0x7f0000000080)="e2", 0x1, 0x5, 0x0, 0x0, r14}]) 42.269963345s ago: executing program 0 (id=3387): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffff8, 0x9, 0x59}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0xfff2, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xa, 0x5}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xffffc82e, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 42.057425255s ago: executing program 0 (id=3391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'sit0\x00', 0x200}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', r4, 0x4, 0x8, 0x0, 0xf84, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8000, 0xff30, 0x2, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', r7, 0x80, 0x1, 0x800, 0xffffffff, {{0x14, 0x4, 0x2, 0x1c, 0x50, 0x65, 0x0, 0x8, 0x0, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x3c, 0xf2, 0x1, 0xe, [{@multicast2, 0xfff}, {@multicast1, 0x7}, {@local, 0x9}, {@empty}, {@broadcast, 0x2}, {@loopback, 0x8}, {@remote, 0xfffffffd}]}]}}}}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x20000000) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000040)={0xe, 0xfff}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}]}, 0x100}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a00"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd0000050005000000"], 0x70}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) 41.712614758s ago: executing program 0 (id=3394): r0 = socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000c40)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000400)={0x3f, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r8, 0x0, 0x0, 0x10000009, 0xffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x0, 0x0}, 0x10) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}}}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x20, 0x1000, "5e83243f809fff21a672ee0b60a5bde68653c4fd0bb19eb4ef88eb3c6f3bf088d3463ec88f9aae573bbcfd96a0a9efe5c5464915e046bd14a5fb2bb50f6ba26f744ca20855a6cacc043dcc28fcaac73ac4aa1c5c5fce32675a92c6750b671126a9469ef1aef4d80636c3588970ab307d8b86c15503c98bb8e2b6ef7c33ce1b3c8b2a2be15253c875004ebaf0353312cdbbd4048d76f75164a5900cc4cb09eedb242f86e1884ae9d8b56733505d4725885c12209cc7315f0596833b77c0db2ff6c8e8c0606b3bf0b939cf2d81b1dbd66196ac0e92871076e13ebbeb73031f984d4356e8a79c04d476c753cfb1b6c4ccb891f61fe92c0616b65ad11d0be7c0f632f06c9800527a9b7d17ab590228b539049fae1075f668b3be7abf25ff2a3706d21420a1beb0b1a9d0aade12be8c129b4b742badfa433782a438d7e04c5408f4aa47077b2b7a83046466186779d4744c1367097cf23681b6e8fda25276d5fd9f811ad3358612a462d1884687774dbd0a20063882190d928aab9eff16f151fa35c4d6292d86439eeded723bc855fb0f213bd9c2744a105277be94debac05cf1e82b18837fe22724cea251103d34653f7d4996ff7483c90b3678333909e172dd67275245b03f955e6d655196b80e49364faa16fdf7dca610b011fe49fe76124300a306413e3327f07395740268b25e76a3d22c58f93132ae6dd079118883453fba69cc7d315eaa2d23510a2e6ad5a45cf96177a8c765f97be3244fb43bf930b3464d6a75864d2f48f3e41fa41597a3e6613f94347c3091c0d5f20e7cd95a59edf50a5e22eed2bf8b6fd33ec9f0a3028cf1c289336e7cae36302898365c5e778fa0ab978b49fc9135a35c5aebaeb21b93e325d4ded04038b159515a7382f6b33e46dd67440111b4bce9c5679b96b79b41dffb0a203e0dcd01b392e99df0d8c19e7f95877ccbc9f1da1f7cfb6007b76b232cacd634e0dfb1598b28351786489c7665279034f02278a2116c3b8cc2798ca35af2ae139ab40820164f1b4013ecdc6573dbd541df492f6e85b05fb83934a92410bc780aceb42a7954192580c633bc4c52c802b33a827c1c872337ad61e6ca6ac7177ced19f8900933b9d546a62ab0d353c249370833a1e9351cf47c35ecd40714ddf979080e5ea629329f0b1718b73b33a4967cdb193566369c45dd2e901f26a587007e0c1bd9d542caa55cd5d863f8bfe22e2233c1f74ab347d4f1388514b1944059a7003f6545f41d1b7fead8e92266f745759c81f2e181032f6d320f084e89ba08153e44483760229c48e8eac08feb2702864bb891d16619ab5016c54d0eb1e69f046e014ba7c21c1e4dd6ddb40aa446800bbbf383142a146fbc8fd406a6976b60124efeb5024daf6b527d1473c167301bdb9ade52f60e898be4960efbfda14c9e498cef9ca72c198f1a7996269250293ff8ecf6d8f91ca52963b52c733996e8c77636038db294ba5c408ed4c331921a5c2d2caf56fd6e85508d54ef61007e69bf4114af4352fb3366f3f3472fd4ab1a1e37ad30fed13b9d3508bd768f5b0e5ffd90ae0ec8a336b0adcd6073cfd990720432dcb648fc274df80f3179345d5a368af5872c3dda6f02fc0fea69385bfefeb5e0f53088592914c231178ebe4a62fa2cc2a62d41c7d3908009c78bfcfd58e7dcf7e7fed0b80a9eec8debeb77b252745a7003faefc1fafe4f08ae8e55edb94871e8000037ee031c07cc00f271972f7924504cf3a4dd668588f1b242124c84ffb0612402ba9fc7b54b010a195553bc725059e967df0689f8277bbd57ac7b9228c969137dc9bb24287a97d1e4b9523f265e20d79e4f642251bdb0ac52a3d861261db899aea59e1ed0461fba1b771e24412ef7e235d06d4d8ac563793055d4db53ab9f8a441ec9025aeca0289c6c40902324edecd8a953ea611efc3c79c3e123111237122a2a4fc66d5d0fb42bde97f00d601d2a6cbf7bb5fd939e3ae14d881fa36e9329281672f7647f32fcbf704d38f777beee53d7b28cc91fd949cfcaf2eff87707dbdb937863196dae9ae7b2a2845966e812c1d41282b0fbc2654fe3369580968e31fa44a209ceef888dc33fe92d13f0722866452c0c1f9cf2a5ea14d78f75eec0d13ed525e095f2ba00ba909b068c14efa56d391bc264fd34eccaa9407bbef89c127a39452034483e400a655e61322d376a5f248cd84376517486ee5e98bf3219135bb27a78910d4c84b2f83a44c1396bb64eb1f34e8a22c4332edcdf4e3f1dc8d5342cdff6d86f5c71752df621799d378e26ec4ae2927465364e2fbc6ad01b11e3c5d1c6f914c4d428afb359caea87493b9fdcbf0a22aeece4775d71b14d3a8dcc81692e00068ae78e9be1cbf1dfe483426c7a11a55d57727a2c941b67572f25eeed251350c1d2dd4fd92ad851ec882616a37eca2811e7ce2169c04215898b429e5bbdfb5f7bbf2c3c9aac3e6d1f761ebb6ed5b4a506dedaf1c51e3ee8e3f3e5a3b0c06f40ce50b481643576d2bb3895ee1306a8b6609fba45fdb8e983e384fcee752644baaff1e81f647dfbb5d62ffb96013c3443703cf7cc96f71fa7d31a2e37a24d28a8e0107643e51e1ed7bc107f0db73818ff0183bf8f96ff7d3af5225d6e71ee79a8998b2cdd898299519f980630b53bb5d71e532cb31ef0c01feae2b0b558e210725d294649f0a06ee3c8f0f2b0322af417b6c47126cb88157fe7a220f8e03dfa8f504168075c9581b2df441cc39cefb7b9c6690417e370bd1f9c7e6fc760357d6c91fd800fe66d253f8c441bfd974110746ebd0e5712bb4dea64239b5040f2443786219bf9ff01b14f75a6b6ae5ed773f8f319f90e8922cbe2dcb39f46d2e1cd182538db996213573560a1e2387b634c3960a79a834b56246f4ac31371828b69c2230f39a1f8a03d43e9cb97bdc288a8f4b5715637039a127b4c6561f6dba3450333f8c9ba0c7f2532974643947dce594745d2b56158bdad94c67de1bee2dd18aef2bb847a2031060a4fe5c8cba88cb0dda5cd78f787cafd57493bab816afb5be91f5c9436197c52f34c224d10d9e4ba54e9ae9ecc374e392d15e1034e62aca385250348241f06cdd6b853596faad48b85b2157596e43be4c0cfa81a51ef7be68f2823da7a45da9237bcd40d96b3ab1810e1f734ce3ea2d7f65b9e28e0ce5d3a243942e6bd0b6c853871ae5e3a2dfffc67e67305125670b3fe8a037338188dd87983daa795ef5513abc65ff60bc1e4862b7098b2072e7e7bae658590d05d8eb30e0b3df773ad24a810f770d9b6ef4cb47ba9f230a3623ab5c6ce2b6af37bbee823b4e1adf1e3410832f16a20d0cb8f494be10dea8fd94a6809267ceaf454ed0f2898f9531996cf8f68cc5b6cf5c48b93794eac01813309b4e98e4bd33ef1ed465fce8eecdc748280d48745d1acbd9e3fcb2617282a2e3824250e7a59f05d018d9a645ff284ea5626f63d95efbb867baca409e493df239c41c2f916c1ca5d237d2510def2ff187d8d8359d6d9d08ca45304e355d6f96a06f97d1a6d896579c41e753a2740246fac859fe74e4e5a0ac375f1e9ab69b24520eb6cdb92a73f78278f4da94e7b62a8d8239243a7c60f27d0469fe288f28b05ad74b029362656413f501829f0a7997553bd07f3808228116d0322cb1a940a2efb0e0d3392c01aa934843b9c44eb30a5138a2b6d85dac9cbeeb6db3dadef3713af23e4e591b1f3b199a76e84bda74ca33080c8ab08b56557a1266fcf327c9f70ba3ed92cdfcdef812d4db788884ef921714c9eb5260995c79ae2fbd125c6ef7787fecc39e83bac5003a172c3f0d235aa536bbb6c510fd7bfb749d26d1ac04a4198eaec741f53d2989f2a9e5f8d5fb31029a690a7c2e16a570d0023f389d679ca16d5d6be045743cbe78e7260778bf076bcf9469f687d624a33180724d8f47872a9da9b81ea9cb007ad499af532cf88b913f7a4c03501511304ad41621fe5609d8c98f23b5ef8b58b0e5f6fc2bd02386698e4308436cdda025a4f310f5dbfe63b4c4a18a51b6151864c923d65b2d8a076b4347fbb92cded19a69b6aaea15642a15812152ee0bef357a3683ab5e542df8d275aea43db9d73d738c4180636c5d6ca1edee54d3bd913f30aaf32acc7a629c318cb36490596bc3c35a9f6a9b92cb034d7371bc920198453afbe96dd7f16a9317fb9ef365ab9073c994f8380ad80ab80135c9138564563c4cedfe1cbc1345719d001b648e114175d2b18784b600e93bdc51335dc7b00d2579d6dcfb1e0654bfc4aeb5d1c90b115e10bb2b48a89a2ba299ae207c0f958da64d7ce7d67165ddfce999f183070a6222cb451527f8811f225fad5f0ba81005f749129bd20551efedd2a0ff2c9142e8559de1242c499b66d3e5f15fe9d0e9c469f21cf8a5950812f92c1ec3167f3766b14fb3e7be8ce651ec061210f1262d14615a9f345b92a03ff1ac4eb56bcf4f0e6c39e434ac2a871488c01d884206932deb22851ed09aecf3a2a8825d166d063ea81f72c7b4d41d1d525d125fec80a1f40f1c070453b94ead1c4bf02a5a1a4e9e4730a8afb43ccb62a5954639e81e84d6aa0e408d34028fa23db00db089aeebb9c05eb3daf144860a41158aa2d9615d09645abe2a101995a30040964c95be510c76c39993ef577cfddd2fa162445583d0119837e76a45cbe4d0d94564e59cfd01791aeaa3b9728619e77b885143783423ec15653b1dfdf3b221ccb8b7db29cec576c75b41d47f6cfe915b301cef72157fa6de75172ba50892c2938a6b5661b71e679b828f3634dc8f4d86d5d6d1c03a47e195d9633aeb7571e31b706e14514b3e54ac2ea56649f8aa18bb3b726b4b5aa7bf4220d0507c5e0d7e071325cbaed4434380259604ac8940b8674a1cbedc721ea371334912d25e147895951e19196f839e68c2b1fe692d78b2ad6d430855f974188db4540e186ac4451b33ea67a1e5b25a364fc0f0a05fec541bae629437301afa7b41eea76bb7124bcdc8ef4322dd20ccbeea28c5b2d4a8e073b252de9746a64772bcf76bd0b21015c8bea4d7fff5f799a6806fe2424083e606a268ea49e3395e5719075fdcb7f7b6f786fcef54c9ba06adacf9e11ee72f8e8300067f8b36f43f5d94465fdad41cb3300101d5fa8373906209cdcfc5d0ab3c60c4066aebef5d5be4835900ac02c968d78858edec225d1326baf15bcbfaa7c1907a8c0634573287674800bac839e68cc9aa5813be33b045a0665d29fbe321f37f66fd06b5734e455088cb3b0ccf727cd73a508bf633336e5758f1c609343a2a9aa69644362dc0de2dad1e449ea91f150152d912576465adfcb2608e852ce394529385f10acfc0d4df45205bdd93f284d678c4cfaa75e82a6d32f6b2b489097f6e2db57fe526dc3cc3c33dd2145fe0e4d09e1c7d2d359dd6f0126134374357a55bf2a6b35cd69005da23b47271f48e33f3c73c07c603b39812320a4bd5e6f91d31aa506e3c5e2e04b4d7bd0386b1e76024cf95c4c097bdc7d8e1839ddcd8a14c64a2556759ca950bd84974138baaa18471c5a9a367fd687846884ccb86b5fa44f138cbc122100e728851c8ef5f7e2c647a4845b5c4f9ce09d2a91c8017b6cb31bce699da293dea9ecac791f2329ea5c58ddabd6ebdc3dae9c7efcef0079c1d0942be0c10c64e14d937ca93ed4b7b1745aaf8cae78f74827d0cd313684d48c1ca5073ce246d0f23a7decd12ecdc929afaa7886f24d55e1350fa7559cce51e5c69cef3379141b919596db655d910d901af048c36cedf68b5450f85c1a70f8d029e5223a6627"}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) 41.406228023s ago: executing program 33 (id=3394): r0 = socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000c40)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000400)={0x3f, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r8, 0x0, 0x0, 0x10000009, 0xffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x0, 0x0}, 0x10) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}}}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x20, 0x1000, "5e83243f809fff21a672ee0b60a5bde68653c4fd0bb19eb4ef88eb3c6f3bf088d3463ec88f9aae573bbcfd96a0a9efe5c5464915e046bd14a5fb2bb50f6ba26f744ca20855a6cacc043dcc28fcaac73ac4aa1c5c5fce32675a92c6750b671126a9469ef1aef4d80636c3588970ab307d8b86c15503c98bb8e2b6ef7c33ce1b3c8b2a2be15253c875004ebaf0353312cdbbd4048d76f75164a5900cc4cb09eedb242f86e1884ae9d8b56733505d4725885c12209cc7315f0596833b77c0db2ff6c8e8c0606b3bf0b939cf2d81b1dbd66196ac0e92871076e13ebbeb73031f984d4356e8a79c04d476c753cfb1b6c4ccb891f61fe92c0616b65ad11d0be7c0f632f06c9800527a9b7d17ab590228b539049fae1075f668b3be7abf25ff2a3706d21420a1beb0b1a9d0aade12be8c129b4b742badfa433782a438d7e04c5408f4aa47077b2b7a83046466186779d4744c1367097cf23681b6e8fda25276d5fd9f811ad3358612a462d1884687774dbd0a20063882190d928aab9eff16f151fa35c4d6292d86439eeded723bc855fb0f213bd9c2744a105277be94debac05cf1e82b18837fe22724cea251103d34653f7d4996ff7483c90b3678333909e172dd67275245b03f955e6d655196b80e49364faa16fdf7dca610b011fe49fe76124300a306413e3327f07395740268b25e76a3d22c58f93132ae6dd079118883453fba69cc7d315eaa2d23510a2e6ad5a45cf96177a8c765f97be3244fb43bf930b3464d6a75864d2f48f3e41fa41597a3e6613f94347c3091c0d5f20e7cd95a59edf50a5e22eed2bf8b6fd33ec9f0a3028cf1c289336e7cae36302898365c5e778fa0ab978b49fc9135a35c5aebaeb21b93e325d4ded04038b159515a7382f6b33e46dd67440111b4bce9c5679b96b79b41dffb0a203e0dcd01b392e99df0d8c19e7f95877ccbc9f1da1f7cfb6007b76b232cacd634e0dfb1598b28351786489c7665279034f02278a2116c3b8cc2798ca35af2ae139ab40820164f1b4013ecdc6573dbd541df492f6e85b05fb83934a92410bc780aceb42a7954192580c633bc4c52c802b33a827c1c872337ad61e6ca6ac7177ced19f8900933b9d546a62ab0d353c249370833a1e9351cf47c35ecd40714ddf979080e5ea629329f0b1718b73b33a4967cdb193566369c45dd2e901f26a587007e0c1bd9d542caa55cd5d863f8bfe22e2233c1f74ab347d4f1388514b1944059a7003f6545f41d1b7fead8e92266f745759c81f2e181032f6d320f084e89ba08153e44483760229c48e8eac08feb2702864bb891d16619ab5016c54d0eb1e69f046e014ba7c21c1e4dd6ddb40aa446800bbbf383142a146fbc8fd406a6976b60124efeb5024daf6b527d1473c167301bdb9ade52f60e898be4960efbfda14c9e498cef9ca72c198f1a7996269250293ff8ecf6d8f91ca52963b52c733996e8c77636038db294ba5c408ed4c331921a5c2d2caf56fd6e85508d54ef61007e69bf4114af4352fb3366f3f3472fd4ab1a1e37ad30fed13b9d3508bd768f5b0e5ffd90ae0ec8a336b0adcd6073cfd990720432dcb648fc274df80f3179345d5a368af5872c3dda6f02fc0fea69385bfefeb5e0f53088592914c231178ebe4a62fa2cc2a62d41c7d3908009c78bfcfd58e7dcf7e7fed0b80a9eec8debeb77b252745a7003faefc1fafe4f08ae8e55edb94871e8000037ee031c07cc00f271972f7924504cf3a4dd668588f1b242124c84ffb0612402ba9fc7b54b010a195553bc725059e967df0689f8277bbd57ac7b9228c969137dc9bb24287a97d1e4b9523f265e20d79e4f642251bdb0ac52a3d861261db899aea59e1ed0461fba1b771e24412ef7e235d06d4d8ac563793055d4db53ab9f8a441ec9025aeca0289c6c40902324edecd8a953ea611efc3c79c3e123111237122a2a4fc66d5d0fb42bde97f00d601d2a6cbf7bb5fd939e3ae14d881fa36e9329281672f7647f32fcbf704d38f777beee53d7b28cc91fd949cfcaf2eff87707dbdb937863196dae9ae7b2a2845966e812c1d41282b0fbc2654fe3369580968e31fa44a209ceef888dc33fe92d13f0722866452c0c1f9cf2a5ea14d78f75eec0d13ed525e095f2ba00ba909b068c14efa56d391bc264fd34eccaa9407bbef89c127a39452034483e400a655e61322d376a5f248cd84376517486ee5e98bf3219135bb27a78910d4c84b2f83a44c1396bb64eb1f34e8a22c4332edcdf4e3f1dc8d5342cdff6d86f5c71752df621799d378e26ec4ae2927465364e2fbc6ad01b11e3c5d1c6f914c4d428afb359caea87493b9fdcbf0a22aeece4775d71b14d3a8dcc81692e00068ae78e9be1cbf1dfe483426c7a11a55d57727a2c941b67572f25eeed251350c1d2dd4fd92ad851ec882616a37eca2811e7ce2169c04215898b429e5bbdfb5f7bbf2c3c9aac3e6d1f761ebb6ed5b4a506dedaf1c51e3ee8e3f3e5a3b0c06f40ce50b481643576d2bb3895ee1306a8b6609fba45fdb8e983e384fcee752644baaff1e81f647dfbb5d62ffb96013c3443703cf7cc96f71fa7d31a2e37a24d28a8e0107643e51e1ed7bc107f0db73818ff0183bf8f96ff7d3af5225d6e71ee79a8998b2cdd898299519f980630b53bb5d71e532cb31ef0c01feae2b0b558e210725d294649f0a06ee3c8f0f2b0322af417b6c47126cb88157fe7a220f8e03dfa8f504168075c9581b2df441cc39cefb7b9c6690417e370bd1f9c7e6fc760357d6c91fd800fe66d253f8c441bfd974110746ebd0e5712bb4dea64239b5040f2443786219bf9ff01b14f75a6b6ae5ed773f8f319f90e8922cbe2dcb39f46d2e1cd182538db996213573560a1e2387b634c3960a79a834b56246f4ac31371828b69c2230f39a1f8a03d43e9cb97bdc288a8f4b5715637039a127b4c6561f6dba3450333f8c9ba0c7f2532974643947dce594745d2b56158bdad94c67de1bee2dd18aef2bb847a2031060a4fe5c8cba88cb0dda5cd78f787cafd57493bab816afb5be91f5c9436197c52f34c224d10d9e4ba54e9ae9ecc374e392d15e1034e62aca385250348241f06cdd6b853596faad48b85b2157596e43be4c0cfa81a51ef7be68f2823da7a45da9237bcd40d96b3ab1810e1f734ce3ea2d7f65b9e28e0ce5d3a243942e6bd0b6c853871ae5e3a2dfffc67e67305125670b3fe8a037338188dd87983daa795ef5513abc65ff60bc1e4862b7098b2072e7e7bae658590d05d8eb30e0b3df773ad24a810f770d9b6ef4cb47ba9f230a3623ab5c6ce2b6af37bbee823b4e1adf1e3410832f16a20d0cb8f494be10dea8fd94a6809267ceaf454ed0f2898f9531996cf8f68cc5b6cf5c48b93794eac01813309b4e98e4bd33ef1ed465fce8eecdc748280d48745d1acbd9e3fcb2617282a2e3824250e7a59f05d018d9a645ff284ea5626f63d95efbb867baca409e493df239c41c2f916c1ca5d237d2510def2ff187d8d8359d6d9d08ca45304e355d6f96a06f97d1a6d896579c41e753a2740246fac859fe74e4e5a0ac375f1e9ab69b24520eb6cdb92a73f78278f4da94e7b62a8d8239243a7c60f27d0469fe288f28b05ad74b029362656413f501829f0a7997553bd07f3808228116d0322cb1a940a2efb0e0d3392c01aa934843b9c44eb30a5138a2b6d85dac9cbeeb6db3dadef3713af23e4e591b1f3b199a76e84bda74ca33080c8ab08b56557a1266fcf327c9f70ba3ed92cdfcdef812d4db788884ef921714c9eb5260995c79ae2fbd125c6ef7787fecc39e83bac5003a172c3f0d235aa536bbb6c510fd7bfb749d26d1ac04a4198eaec741f53d2989f2a9e5f8d5fb31029a690a7c2e16a570d0023f389d679ca16d5d6be045743cbe78e7260778bf076bcf9469f687d624a33180724d8f47872a9da9b81ea9cb007ad499af532cf88b913f7a4c03501511304ad41621fe5609d8c98f23b5ef8b58b0e5f6fc2bd02386698e4308436cdda025a4f310f5dbfe63b4c4a18a51b6151864c923d65b2d8a076b4347fbb92cded19a69b6aaea15642a15812152ee0bef357a3683ab5e542df8d275aea43db9d73d738c4180636c5d6ca1edee54d3bd913f30aaf32acc7a629c318cb36490596bc3c35a9f6a9b92cb034d7371bc920198453afbe96dd7f16a9317fb9ef365ab9073c994f8380ad80ab80135c9138564563c4cedfe1cbc1345719d001b648e114175d2b18784b600e93bdc51335dc7b00d2579d6dcfb1e0654bfc4aeb5d1c90b115e10bb2b48a89a2ba299ae207c0f958da64d7ce7d67165ddfce999f183070a6222cb451527f8811f225fad5f0ba81005f749129bd20551efedd2a0ff2c9142e8559de1242c499b66d3e5f15fe9d0e9c469f21cf8a5950812f92c1ec3167f3766b14fb3e7be8ce651ec061210f1262d14615a9f345b92a03ff1ac4eb56bcf4f0e6c39e434ac2a871488c01d884206932deb22851ed09aecf3a2a8825d166d063ea81f72c7b4d41d1d525d125fec80a1f40f1c070453b94ead1c4bf02a5a1a4e9e4730a8afb43ccb62a5954639e81e84d6aa0e408d34028fa23db00db089aeebb9c05eb3daf144860a41158aa2d9615d09645abe2a101995a30040964c95be510c76c39993ef577cfddd2fa162445583d0119837e76a45cbe4d0d94564e59cfd01791aeaa3b9728619e77b885143783423ec15653b1dfdf3b221ccb8b7db29cec576c75b41d47f6cfe915b301cef72157fa6de75172ba50892c2938a6b5661b71e679b828f3634dc8f4d86d5d6d1c03a47e195d9633aeb7571e31b706e14514b3e54ac2ea56649f8aa18bb3b726b4b5aa7bf4220d0507c5e0d7e071325cbaed4434380259604ac8940b8674a1cbedc721ea371334912d25e147895951e19196f839e68c2b1fe692d78b2ad6d430855f974188db4540e186ac4451b33ea67a1e5b25a364fc0f0a05fec541bae629437301afa7b41eea76bb7124bcdc8ef4322dd20ccbeea28c5b2d4a8e073b252de9746a64772bcf76bd0b21015c8bea4d7fff5f799a6806fe2424083e606a268ea49e3395e5719075fdcb7f7b6f786fcef54c9ba06adacf9e11ee72f8e8300067f8b36f43f5d94465fdad41cb3300101d5fa8373906209cdcfc5d0ab3c60c4066aebef5d5be4835900ac02c968d78858edec225d1326baf15bcbfaa7c1907a8c0634573287674800bac839e68cc9aa5813be33b045a0665d29fbe321f37f66fd06b5734e455088cb3b0ccf727cd73a508bf633336e5758f1c609343a2a9aa69644362dc0de2dad1e449ea91f150152d912576465adfcb2608e852ce394529385f10acfc0d4df45205bdd93f284d678c4cfaa75e82a6d32f6b2b489097f6e2db57fe526dc3cc3c33dd2145fe0e4d09e1c7d2d359dd6f0126134374357a55bf2a6b35cd69005da23b47271f48e33f3c73c07c603b39812320a4bd5e6f91d31aa506e3c5e2e04b4d7bd0386b1e76024cf95c4c097bdc7d8e1839ddcd8a14c64a2556759ca950bd84974138baaa18471c5a9a367fd687846884ccb86b5fa44f138cbc122100e728851c8ef5f7e2c647a4845b5c4f9ce09d2a91c8017b6cb31bce699da293dea9ecac791f2329ea5c58ddabd6ebdc3dae9c7efcef0079c1d0942be0c10c64e14d937ca93ed4b7b1745aaf8cae78f74827d0cd313684d48c1ca5073ce246d0f23a7decd12ecdc929afaa7886f24d55e1350fa7559cce51e5c69cef3379141b919596db655d910d901af048c36cedf68b5450f85c1a70f8d029e5223a6627"}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) 9.488802535s ago: executing program 2 (id=3516): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x8, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x25a5, 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r4, 0x0, 0x0) sendmsg(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) r9 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r8, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x70000, 0x0, r9}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60842, 0x0) 7.408855735s ago: executing program 3 (id=3527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xff, 0xbac9}, {0x80000006, 0x66, 0x0, 0x40}]}, 0x10) r2 = dup(r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc2041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="083c86dd000111000460"], 0xfdef) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df780052501013a"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f08000103100b3d797dda9cb253ede8d06a432fac1e81be175e2c74d61a346d06d7cde9adea62b4f973ec0efc64fb72c3dafe092a81f9fc6dcd98c0e8013ac69765a4c4a48e641cdf954190a5f32346775e90aa8572db8140209476acc2784069260c352d0d7a54eabfa351812878a691ae4601000000cee491859a1857ba2d54ea6de5090c6a1ab1034f2de74a33a10a6e7459c82f87820545527fded64b567edb8a8ab5b6a78c257c21ab9589169d019cb76f789a31606263b9da99e65d0e17e686df3f58c83b06c45f2eb26f6cfa6ce40a9917354a3890ea0f0f8bbb845897a6e0659f4463284d0ba94671a907dfeb332c737efa86a75e4716991dc31969d8213ca4f0518741473361c42f93f34ab785008103843169c43f"], 0x60}) r5 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001140)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001180)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e22, 0x9, 0x4e21, 0x3, 0xa, 0x0, 0x80, 0x88, 0x0, r6}, {0x0, 0x1, 0x80000001, 0x7ff, 0x0, 0x8, 0x1ff, 0x71}, {0x5, 0x593bfc13, 0x9, 0xfffffffffffffffd}, 0x4, 0x0, 0x1, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d3, 0x3c}, 0x2, @in6=@loopback, 0x34ff, 0x4, 0x2, 0xb1, 0x81, 0x1fe000, 0x4}}, 0xe8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) syz_usb_connect(0x4, 0xaa6, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0xff, 0xc7, 0xa2, 0x8, 0xbf8, 0x1001, 0x6664, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa94, 0x4, 0x2, 0x3, 0x0, 0x2, "", [{{0x9, 0x4, 0x53, 0x9, 0x4, 0xfa, 0xb0, 0x90, 0x42, [@generic={0xbc, 0x22, "18a93d984d4e8f0c512605b9f04e7752d83556e1b92bb587196a688f6815f4bcb192e7c4c49189304006f829836dba65926ebd93a2b125248fefe83dae7ccc6b87e95bc4fc405f7c1bceb7f6a12d6f6697116669d5d6f1e89eb1f064e47c27bb3a5ff6c0f367dbe6674750e6733142a2c0ba75dd598fb71467ac96893e1db236a737da583024eadd3edd7d44a9c4ca4bd0a07e864dccb0d398e342f9a58e4c0585b085391bc54ea3a14ab7346d865ea978a4bc6dbd330e88e36d"}], [{{0x9, 0x5, 0x80, 0x2, 0x404, 0xa4, 0x13, 0x9, [@generic={0x25, 0x4, "86c1507c98c013c2a9a8ba804b2a8dc99008d8d562d5cdd38a260b1d6d373aa17e68b4"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x8}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0xc0, 0x0, 0x5}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x0, 0xc5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x6a}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x6c, 0x4, 0x1, [@generic={0x70, 0x10, "b549a1deb00ff209869a046484a2cf3b8055a2b39c7bc4ca5af3085e93d7fed63bdd069bf619f2858b7f7919a79eb62d03d448f0c52acdeb519896b2fb6b023678a064600e65afe99f87e6401f3951f44c508d65dfca3426b5a4b50434eae861c24669045beea382b1d26b369110"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xe8}]}}]}}, {{0x9, 0x4, 0x47, 0x4, 0x6, 0x81, 0x8f, 0x8a, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0xa}}], [{{0x9, 0x5, 0xa, 0x10, 0x8, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xd6, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x800}]}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x38, 0xb8, 0xfd, [@generic={0x26, 0x3, "f79fcda6ae865bd7cb2c687d5af8cc5f883682d03b15e5de1d8484d0d062ed4bec6582d2"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x800}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x5, 0x6, 0xad, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd, 0xbb7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6e, 0x7ff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x4, 0xe5, 0xd, [@generic={0x63, 0x18, "77a6d46b03a7abaa6ba6a149be0a6f55c9d7bc8c438b54d18073a0ddbb7a79338e884c26d797e59a6f6c201f2aca0aabbb9321b4146eaeb53e7ffff677fb5a54988173ae9bab29284370c4915ec90e55285b389eec5a5f6ba1df68aa7d09f337f2"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1a, 0xc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x2}, @generic={0x5c, 0x7, "018d1bd663eb40f27fc7f4e5ba99491ae063f2ce9e8945a4d4a95c48e0b72076b007cf9fd3d0a54a3519aea9d5a50f7776e1b9a9efbee73713120ff73c832e0c796879d7e0e038fbbb8f4b71a1307d93288a0deb4855d1b00303"}]}}]}}, {{0x9, 0x4, 0x84, 0x5, 0xd, 0xc8, 0xa9, 0x98, 0xd, [@uac_as], [{{0x9, 0x5, 0x3, 0x0, 0x10, 0x1, 0x6, 0x8, [@generic={0x6e, 0xe, "c50e9f00db2fb1afcb6512aac5df6016e506d221438ee076e8abce5f3e27c4256f42eb17268f5493f0cae39cf19113d2c0c6836760084b2c268d615fc27819c6d5eddfe42f236b585d800c435cb79702e70b99d350672327b65ac14e04e0914ddb8f71010d65c6c3fee5d174"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x7, 0x81, 0x2b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x8, 0x5, 0x4, [@generic={0xec, 0x30, "d7ff5d2432ac4a5a408cf64276f08a51fadfb3ee0a167f8142685d58772ce51e6e834bfd24a6efbe50ac5698717484c333091d371b77a3a93a9fc319fda611448167e5b19a863cc0ae26f630b08c6a380f8e2636a6e0f0b0f9cc0fab762d4f2ad32dd213efffff1429bb7db3cc3ac435e7439d3b7e7861104171cf5e1403e31aa5eb164a993975cb9a5ea856f9e1aaa6e4db4151066f082ac49e5a12debbd80ed6bcb295cfcdda86e9fc68b95f4571936c1f7eaa1dbefbef921d2af3516846a2b4a688523e07e1ba5a5dde5686e812d3250f5834a4b17b23cee388ecd940eccf3680ea9b4568c6dc9f01"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xfa, 0x7fff}]}}, {{0x9, 0x5, 0x86, 0x2, 0x10, 0x1, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x7, 0x75, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x6}]}}, {{0x9, 0x5, 0x2, 0xc, 0x0, 0xf7, 0x8, 0x3}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x0, 0x9, 0x6, [@generic={0xfe, 0x30, "12b8f2ad7851fba929280e85fd33506be341634f9a69561adecaa6642dbf4e272ce6c5e97ec836b407f5552fdca65a1caf4b4f733507afa333023ad416123876d4dac7ea04c7ddacde650c063b5fb5ce8c80bcdaf9182a9c58e6d63220e7c56668118ba2fe3fc8cfa49576ab0c0760545a11971b3a1617c218ca1194378e4ec3f999ab0052f89817477bf422a5ee5c7788de07dbd9804c5f022c61135390cceddd5b93d8bc71f241674dfba4ca30a87d444b9879b9f40f524a6743b4f2223241c271214e9fdbb14e1830ad299759d1de5a0ebb4c9f660afddaa725af320b4d4ef11994cec5379bad5424644581a60c714c68879c9dfac0e58c9703e2"}, @generic={0x45, 0x0, "3bf67dfef4fe4ab45d661f116fd70426e2ad2a2b1d366e5e10522239b1c9cdf382d51ff87e5afef96f927b7758879cf7802492d4c2185eaeda30712eadc925da10edce"}]}}, {{0x9, 0x5, 0xc3362de5e4cefef7, 0x10, 0x20, 0x1, 0xcb, 0x91}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x3, 0x1, 0x1, [@generic={0xc, 0x11, "7fd2d3b789d638ac1a01"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x4}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x4, 0x34, 0x81, [@generic={0x66, 0x31, "69456245e40dfc8d287d66a609ce8974c5fd668c47b46c82e01e08ed3bffa06be4c132272349fd907e5db9fbf2c9d1f99270ba52a0fcc9392b3935ffbad62e61d6360abd3dd2180dffbe309f31063df000b913577cc042a46fb047b48201271473e483fa"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x8, 0xb7, 0x81, [@generic={0xe8, 0xd, "073b144e674f4b2df7ce5fd55160b42dcbad435c08495d895ec83c099952b20d0ceab1b70acda637a8972d5e5e5b5e1ff1168153ca2359e8bc18a4b748a89250c03d73f8aecf91bbfe6fda400baa289c22330f22032d51c13d879476a65011b137397dcec87a270cd95a3ef64a4e75064fb4987aba300775dea0d3b108dea6a88d7a75febd504a7e976becc303cf92735db99e554d3e2c017e3751fe1500a490693bcfab3c5916cd9d5ca163cfe44861b3e52d4452043d7216c8593cfeff44395c9f9ae1ed4936eb199812e435d7cefdf00e1752b25ca94dc3a5f0d048793ab8c9bbd70fd48e"}, @generic={0xce, 0x2, "69e7af3c44f5d082b80f95ac984f018c784646c661609d8e25511aafe8e636b61ba1f032673284d6ae5b7f1a07109e1e543702eba5c1b60642cd1bd93f9591364933319fbe74cf687b816719c5db2884366e0dbf5f67be466632df43c586bd9902551413fb991acc4163e6835557b3d5263b77272179b5e627ec3ef8faba43ee737d9ab88e437fa9f2e293de9cea081acc5680f3dc88d2691809065d72a76991b4df54a87b662b6c487ef921a8096ce317cc69552073bf384993ae30783afe3a95dfcf6f34a53ed287640433"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x0, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x7}]}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x3, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x4472}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xff}]}}]}}, {{0x9, 0x4, 0x93, 0x4, 0x4, 0xff, 0xff, 0xff, 0x9, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x5, 0xd9, "db1b961fd4e22a9533"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x7, 0x0, "e966fa", 'X'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x7fff, 0x5, 0xd}]}], [{{0x9, 0x5, 0x5, 0x0, 0x610, 0x2, 0x54, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x1, 0x5, 0x18, [@generic={0xb9, 0x23, "04f4f9f65467d543282a2b15b668ba4d49907e5447c560f4e214bfd672f5e62ff323ef732571b53f37915502bf7a4e298d030871fa579fdc68d56554f5179f5752db9dc698bd1e123d3b75764b98698a9846ddf9afc630d35d086c7be305af85e66fa29903ed3e2f169900d8f924c25b5b374eeab142b723e4b60e791a4532dafb31fd0416a6f03dd82e961dcd3df95ae73a97c179533a56f7c40c9f05dd8e7c3a2f05df8b60f41192ca56292d1f26c03f018da749b440"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3f, 0xffff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x5, 0xff, 0x8, [@generic={0xf4, 0x8, "a790bea61249723f5a2e32b7af93c55a540463018e92318bb93294a8d1cff7c36392ec703c78ef7610dfaf0b42f87e0b892e0d81da1103773d9af21caa9ea6e2298b6dc6ab537858c44a0675a918e6d65893aa4351af297365dd266462d20bb85d4207ca9999af18e278aadf9424924494bcdceb0e6a08a59343eda312259166bc795d8cf7b7addf55eb3bb7a695f9df60c1275a1bdd3151ac8d45ff50867e90abc541d6af230f43ad55e4518920700524e38e9325b8017c68c988b9de56777bef6e9c3011dc12aa9fbba783143ea794a9db561b1d23c71d976b319852fca7c1da6e42b7e8076788bb5fac4f315ce31feb7b"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x80, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x3}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xf, 0x6, 0x9, 0x20, 0xb0}, 0x69, &(0x7f0000000200)={0x5, 0xf, 0x69, 0x5, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xf5, 0xa, 0xe89}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x6, 0xff}, @generic={0x3c, 0x10, 0x3, "eec430cb1634d02d1562ab53469d1de7fea1de9c47e12d55eb905ac7d5b9d990bd296c8dd47e3150c5d2f535c15c2701d5de3fc914c951d9b6"}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "06ce657f417c223f126c42da9cd59f40"}]}, 0x7, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x40e}}, {0xec, &(0x7f00000002c0)=@string={0xec, 0x3, "79d2b6e1e36a048cab1aaef01d92ab472e207abb1f06aea7c513755f0a369c1d9334412f8cd16204cee2d4f26f39e9ca32a7e8c1ef857d9c0f73c9d3e180d0042120833fcaa74ea9efee4d6e1581de1aebb0b9971cb3e04342096a22928efc5e84dfcdbd1d194d6ceab318ddd67f6be468cbf298c6a10aafe83323cbe5ff411cca66d27479b06412630b16e4ce7357167ba05f276c44cd6e038b92024b20674404037748a07875edad250325a99f3c68dcb33216dff58a99ad547ac57d5efefb60efc83a784b5fc4a600cb257f5a1a4d966ca938d7967911753e69e41bc72718a05e62d6f676f41f3c15"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x52, &(0x7f0000000400)=@string={0x52, 0x3, "3720120c867b72c590fdeea0ddac4e64cc425cadaae61663dd04bebf0866db99e5e76d5634d48c47950e9ab6cb518c9731b14e626c978a9eb1cb46f9e9505f5254eef970007b27ef17fbc338755fd1c9"}}, {0x98, &(0x7f0000000480)=@string={0x98, 0x3, "c3fa30c4a0bc806c4274f01cfc7193d46cda3ccf33c365a2ef35e6cf6761ee4bea749f8861f19e26c4556be14ccac25f4d0a4ad5470ddf185b46fc7c7eaa246ac2ae12d1bfa5a9920f6bf8df743dd6f650a160c66cdac54abfda889989ebcb298f9a790213896bafd61d56b334f74fdb69bd363902a459e5e7a195d5aa2815a76a81423695785d97ef89287acfbbcf49d6c0700ca7ac"}}, {0x39, &(0x7f0000000540)=@string={0x39, 0x3, "07ff1287ceebe369363fbcc93eac62f320d913acb8a627624e9df6b2ee472b44b6074e286f31ceb963ade4ec41bc499646f998473e05ae"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x423}}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.179256593s ago: executing program 2 (id=3529): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0xa6d63000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x20008000) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="66b9800000c00f326635010000000f30bf44000f4af90f30b80e008ed8650f01c4f30fc7b1001066b8d38fffff0f23c80f21f866350000c0000f23f8ba2000b006ee660f380761e2", 0x48}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x104) 5.790757783s ago: executing program 2 (id=3532): socket$xdp(0x2c, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r3, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r11, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r2, r6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4088800) io_setup(0x239f, &(0x7f0000000380)=0x0) r14 = eventfd2(0x5, 0x1) io_submit(r13, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r14, 0x0, 0x0, 0x800002, 0x0, 0x0, r14}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r14, &(0x7f0000000080)="e2", 0x1, 0x5, 0x0, 0x0, r14}]) 5.441966881s ago: executing program 4 (id=3533): socket$rds(0x15, 0x5, 0x0) r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x7d, {0x7d, 0x21, "d610154b5f5d13993cccef780e3d5b2196c611b4dcb8d10b90214e56e479b5a47a78ac2a634cc2f0568e5fca72893b9497ba7002d4515fab0e097aa55ee93d828676df31ae30c393d8923c61f16ddc7f5efd8963b6143d3b910ca10dfc64054a56f5502e8930fa4b012b102f917567f58c4a3d8d582eb646ec291f"}}, &(0x7f00000001c0)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "a6b9aba924570d8030db3af68c191dac12054d6d25813af4daf6e536404711bd41db8c07f674523127f4dd0b6745c11779f2dcefaf83fc7654e68a47c1ca583085babbbb417b19f7ec25619ce426094840b177760658276d79167eb3ea6e860954abb8d8af9befd01440106b222588adf84ed574229b93a0a267abd4372c7c26331fc5ece250401bee9b730c47fdb0836851610ab5196d26da746d9f6f86c4a1151e74f5b090c145da054d7c993c1d3ba43117c7fed5f77095108dad9e8a8bb60496580dd8a0cd573662d8bca934dc9d76f5636032fb38826318747e5244ee80997d5b4f22324d4d5bdf83d16229af"}}}, &(0x7f0000000500)={0x34, &(0x7f00000003c0)={0x40, 0xe, 0x68, "96eb2f80ca5aac1ecc494b99fedf45d5f0e0089cd3c959f3128b26c843aacade06b9b823fc352cfa45cbee39fe1699b87634cd752affaab6d9e0d65d1b6ffb69a252b1d5c85082c80d437ee1b67b04617ba890fcce4878f884ae9ed749812f3a98d52a0a29039320"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x19}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000440)={0x20, 0x0, 0x68, {0x66, "f3969155188f1708d4f034d97674b2f982d63739c95851b2793b4818c1cdd89ae5563264719d4528cc4ac2fb9fd4b3b6f892959b3afe5f3518129808f03b6b60d62d78df0a3da95c9f54225ef18561332193f3bd370f1fd9932d589bbd7061b882d1a705b63d"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0xd}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x80}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000300)=[{0x9, 0x4000, 0x0, 0x0}, {0x6, 0xf201, 0x0, 0x0}, {0xfffe, 0x3210, 0x0, 0x0}], 0x3}) 4.944818903s ago: executing program 3 (id=3535): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000300)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f0000000340)=0x14) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@broadcast, @in6=@local, 0x4e20, 0x18, 0x4e23, 0x5, 0x2, 0x20, 0x80, 0x2e, r1, 0xffffffffffffffff}, {0xaa75, 0x6, 0x800, 0x8, 0x7, 0x9, 0x0, 0x6}, {0x5, 0x0, 0x7, 0x2}, 0x38, 0x6e6bb0, 0x2, 0x0, 0x3}, {{@in6=@mcast1, 0x4d5, 0xff}, 0xa, @in6=@local, 0x3506, 0x5, 0x2, 0x78, 0x1, 0x6, 0x3}}, 0xe8) socket$inet6(0xa, 0x7, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r4, 0xc008aec1, &(0x7f0000000780)={0xa, 0x0, [{0x80000008, 0x0, 0x0, 0xfff, 0xe80, 0x9, 0xffff}, {0x0, 0x3, 0x7, 0x40, 0x6, 0xb6a, 0x6}, {0x40000000, 0x1, 0x1, 0x8, 0x6d, 0x8}, {0xc0000000, 0x60, 0x7, 0x2, 0x9, 0x8, 0x800}, {0x4, 0x4, 0x2, 0x7, 0x0, 0x6, 0x1}, {0x80000007, 0xb, 0x2, 0x9, 0x20001, 0x6, 0x7}, {0xa, 0x5, 0x0, 0x3, 0x2, 0x1}, {0x10000000f, 0x0, 0x2, 0xd0, 0x1, 0x6, 0x3}, {0xc0000000, 0x1ff, 0x6, 0x8001, 0x6, 0x9, 0xe7}, {0x6, 0x4, 0x4, 0x1, 0x800, 0x5, 0x34000000}]}) 4.760199626s ago: executing program 6 (id=3536): r0 = gettid() r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="080e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="170002000000b387"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x42, 0xfffffffffffffdf6, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x4}, 0x48) timer_settime(r2, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = io_uring_setup(0x28a3, &(0x7f00000001c0)={0x0, 0x904b, 0x3000, 0x0, 0x2d6}) poll(&(0x7f0000009b00)=[{r4}], 0x20, 0x72) 4.444680508s ago: executing program 3 (id=3537): shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0xf, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) request_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0) syz_io_uring_setup(0x83e, &(0x7f00000000c0)={0x0, 0x5, 0x400, 0x3, 0x3c4}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) unshare(0x2040400) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x86a, &(0x7f00000000c0)={0x0, 0x2822, 0x400, 0x4, 0xc1}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r8, 0x47f5, 0x0, 0x0, 0x0, 0x0) 3.870884139s ago: executing program 2 (id=3538): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) socket$kcm(0x2d, 0x2, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x1000, 0x0, 0x379, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf258900000008000300", @ANYRES32=r6, @ANYBLOB="18001d801400008006000500b200000005000b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_io_uring_setup(0x68da, &(0x7f0000000280)={0x0, 0xf6ff, 0x400, 0xffbffffb, 0x18c}, &(0x7f0000000000), 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0xa7ff) creat(&(0x7f0000000400)='./bus\x00', 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) (async) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x1000, 0x0, 0x379, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000080)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf258900000008000300", @ANYRES32=r6, @ANYBLOB="18001d801400008006000500b200000005000b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_setup(0x68da, &(0x7f0000000280)={0x0, 0xf6ff, 0x400, 0xffbffffb, 0x18c}, &(0x7f0000000000), 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) (async) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0xa7ff) (async) 3.161128528s ago: executing program 3 (id=3540): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x21, 0x1, {0xa32, 0x6, 0x1, 0x5, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpid() r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sendmsg$inet6(r0, &(0x7f0000003900)={&(0x7f0000002380)={0xa, 0x4e23, 0x5, @empty, 0xb}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}, 0x840) 3.140803515s ago: executing program 5 (id=3541): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x2003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x2) (fail_nth: 7) 3.139272476s ago: executing program 4 (id=3542): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) close(0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) statx(r4, &(0x7f00000003c0)='./file0\x00', 0x2000, 0x10, &(0x7f0000000400)) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\xfe\x96\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[', 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$tipc(r4, &(0x7f0000000300), &(0x7f0000000380)=0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x244c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x23f8, 0x3, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xf5}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x21b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x2178, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "232bd1c4961c2dc7c780ccea0d914f7debf85bfbc5392d471c19f0a377fcf07d6533510bca47eec9398dba57ec3cd2fdde980ec42683360e2c6b87bf646ad3593f190f9c570f9105b21656e24aa504dc9a7f23093c998b5ea1e37d1a81653187104d2ab5be49241639e04b1289b97a0b068ec5b509c0afa9466a1bdea61db7825f440cacc2ecb44a49734f9908f9bd6817137042e9652f3633979a203492c006c7fd7321b9ceb6deac8ae2f169631e3508dccb32ee57145a75c34d151ad40dfbcb49afe74fbdc7f02c438bc178e47710ed192c743f20d83df31429d4d27debfaa948ae16fdb7be1828ab06b6cae00cbb47a9a14929d6a8a1ba699f5bf560d8c90ee692a1f40a6a358e74de3cbd8ec824f5fdc92c7697d424acbe5340d4a995f486f9848df733b2dbfc66c612c04bfda4edb2d148aaec5482c7b808930e976d6b1e7ec41d6a1fb3414a55e8fb3e107ba20b3dbd4e2ed836c0603addba7ece1c227166d9dc67ec06962b60f0134c37ca00733cd800bb77b58dd0103780cdca04095ba2bcad0ed2b2513533d14fb9342dbeb4ba117a85e59bb58c1ff1eb628e72e3381426aab9d69f330eb7793e353128f36f9683e4705620d2c4fc30ad481e5db37f8579e6ef1fc9047d3b30e2577b3edb712893c0728ee57779d68552be3db8cf5016f06bfe99e3262b44b164dbf0e21b2fe97ac5807c2d7268317ab3b1c6a52d91944a187c41531120ccea87be4e9fdb5871d6a0f5eca0b66c9fd3ab33f827d43ebad6a6b335afcc37ec96608fba7121d8bde2a0ae990d5462f679e2cf2e8d82794581ff0a226f38f128d790ed443a256f9aa4e55a6727aee892d6794a56aa9fcedd01536a5ba0fe402c25ea4cce4c071bcd629e16953423af1c0468103cb43033c548a248aa41ef1b8a6823bca0c8e3a16966e33044e1dfbdbdf236ba8d8e6dd8c456698a16ea4ecbe3013c91676a0c625b1e6243443440178bd1faa467b93840994b422d946d5ab20f0eba67c32a6342453a83a69fc90f6f981ad7ff0efe9e207ed456ac26d92eebc96f8e4c7ca5cfe3c158dad02ed017bec565e6f69bf7aa19a20b3394375bdafc4b22e417d0fbae095cc73970919cc9d56de2045ccb496a250859265ebcdcccf9f8614c8faa0814ee6a2e15c78b72a2e060c169dd7bb51a6a87d4e0586cb235ff68ac44c3dcead52b1b8faad6b2c42aa19184ccf1c60d490b023c99f0c49db622c7cf9307137b9f9c970977ea3f7f4cbc946df994e1c3d2009f5a5ad2c8713089752fc4b40ee1a2e3050df28f9c2d08a7231e77bb290be6626687d102e4852c34a5b93046352f99aa95128542c0d64b88a99e7f0bad8adc733c38854f4adb60a1089f1d316e672c75189907bae2213d6ae990dc856ccc8606fef3485659f1fe4240e8d40c2dcdb35932f8593b48db664eddb4d21cbe5fdee3096c11b06f61dece38049b171e8f66409d867c8ab4091fd62df86b0374847b338343b75839951904055039809ba7ba93b8c9cbb5433456a27f4a1f894879592adfd52daeaab29ee791c49d5ac097e404e44c555d85df1b677a1c5e0a69097b6a75340bec29c4e4f68c19431a90a266bbe2a33185907b0955f672028c2fe7b959733ebdad990bb63953f4fdb405029c90e34009f4df1dd3260358fef341905ae864041815fed41e317eb40bbbf64e7b81074be1382a926ebe0a1e0487f0d5fe76ace87de0e2be1778ad94eb4e57b5a5a9d5da4e1b836d8b7ca570b05ae69f9af1bebbe1b1fbd13dc7d20d4c7c4d4f6def6de2248d3738afbc3476a2619a9ba577b09b83702696a7494f1a453987cbc23a026baf56e4b078699f32a802d057cfff8bdfb310f70ebb2ee5e7602e2dd8c6c16e07ea57214905b11fdc4f487f39c838670f76f28e72201f120e969b2f175c1a83b9a65b7ec270644d78ba38516ab1861017e18cb860db668a5f342e061713d832aea49d88f29951d991750f64fbc76f140901ee625d7501b64302ad9443d62488890648203ceb16fbbcd27969206c2364c49876a6141c3cd3471cdbdd16bc76770edacbd92976b0b64ba5d2c83f5a7ebda03ca6d5e0b4358e9e2617038f72968023d3bc5f2e7aabe6a728cc112ab5450430ad178cb4f701ac6a24bf3b8882a0ffb04a7ede037960e649c8768833b1d4763ee40813636d547565bdd79134463a8a35dd4347721e51e8cf25f3c3633efe7288bbfa3244528008bd641769fdcce899929996323479a5bec16cccfbb3dec5b4b65d4349208c459af3e97d153293fb31c14abecef4c0fed4e42a55fb0efb6586946915bd5d90a868e890d8c8b8aa4e0d8ca19695d736085ff562a9b2814a971be907dd32a1f79fa1121110b61f8e7f38e0be4422b8fff54cd6cd4a27ed6eb5fab538b1fabe237dda981692114e245170ba211e55c27b9658315185e5598032ab83fb0490bd1f02c9f96636742ffa3d21ee26cd22df36aba7912a55ffbce9e5d53dd16dc71668cda0e35c2ecfaebb99850d248c345fdafa5aab5e654f9670e7a517c64953fd35f714f105bfc504b5b82058760e9a812278737aedadac8fabf2230715c0025feacce5d31d7da8690d14d9c0a33f67bdc1f8f1b9184ab604ee8aa37b4495686ffc4cb20b3eb91c69a34ba7d844957cf8dcc1bc3c548319baa94397b4327154753e0f181a1eb220be48fdd136eb4ec636c630db10ea612f97b8362ec09d99a451061cf0bf2490817843b89e064128273753167cf15b904a7f58f68eaed24cb743d71203e372fc628408f26ea011b7736b2271f595d168fdc2d534695146d97e302805f58c5f589cf831b3e04f2083f7290ff9933f08ca323b9e0f4622dc882a97e1eceeaa3ebf99d5e1716edb86f1a9b32c638a735dc64e3cd1205e1e83cba0509bad4176863b7c0c0de8f580e29f72c9adeb42bac4cdff208272595cff4cee4eb6b1179a91f03d1e262b16f6c475ef7d0bd0740d9f2fa85eae114486d82ff35fbf6d62157854d339a4ed3bedf92399e1d0e2967b82c7edcd3d1a8a8be057f8ea4d52267914e6b75ff5337875f879e373c726df3e0de1165fbdba858d301d9318b7cfed3f28545efc8051c8c857cfce1ef6c5de5d8c1f44603df76ffc498a49b37dee09656f71c2dd7a89b7d96da0417841acf62d386e0b5eea8e86d8b6ce1403148b59866e9920a810e2c10be7dcb1b53988fb583612dae7904d9ce72d5325eec9b00ca550bfe9c1bbd6f00567ff402a8d2dc3bbf566ad088adb27a68c80afcd3007fba1066e14738d42da7f3cd88d1ce7f4de93fc6b94fd3eb86bf184735d92cc77e5a8f138fdfa5da3617f2a222c24fa5e4242ef90ad2604fb69e7638b8b574aabb4d03c6edd63f7331e69120c8fcd591918c07ac7ea43204a0501374d20ced9e5d49b3a47cba2865d73009a7ad81b63c0cc1427c0766251183b8e35fbd8ce40acf9fcbcb54b2374967b29cd98db5410a888068adf584c8723cd0d5dbf3fca6aa9d01c16a888e7ace5cfb391c68226743a2a5ee9882b6c21113ee94bc2167f8859c614e0592c535cbbc472277c05db33ef9c43e79d31d8de3fa35ea48c2db7d12a481fe8b78a1d9f2e53de10548b790445a167369a3e41b74a85c3511e42183c901135b857eab5faf97c385d00ecd23e269ccd090330e9a8f6932059bb09b622dc813eec9864c6b01f088c747c9c6d8b60b6ee7324749b09a4c63d0855ba0d11e808810288668e9872d6f0d80d3fb7bbd51f12968aabaf835652a234b35d2b7b9b909ffcf7d4f82b16cae8a1a916ceba1ba0986939674e15dfba734d88c98ecc7a5b5e0465df9c8e670fff032478e39fb4ba992c6413f935b81d5459c0f79ac173bd005a5d18fd3ac311c730f6a110ad002553e40476c5023670b00a8ab1d0789bb43e44a1e721a0998637632e35dda56797d3f6f6b8ea0ee149f58fba95bcaa212fc497459ab12aa707fa2d72ab247daf87d53e2c18c8140f2a9d68590709670eab11d8f978b9cb6f24f363929783c433be49a3c3b6d44381d232077104005d97ac0a6629ab41cb69017bfc0b70433f1d35b750c680f5134d0735e09a6a661d970606ae5ce52f72faa92d3c487f473bd4a4fde7af90f16abf19637088da6fbfb7762580aafe38f15ed68e7bc1d044205a2f8c0a90f412b197074f5bff3ce3469fc492d16633c5f1765fe49579adc4ec0fbd4aefb18be497f84e738b8e7cc38f5385f60809c80b2d53223060e98e50b4da3438c845a0394740c5481450c57af5819b609aafa7fd2376370a2be2a5149145afdcffba043939db27bb323cfd758a9e635488411a2c808a0b168d6b0fa5643327b9a3f09222d5f7b465ba6d3c15cd4ecc9e7ec714c4ade4c2bc64eb7f7b43916d9499046699ca0a596fb57a121fdd8a479ea2d017129008f3f9af0d4d38eff9db93a897028a806fc7a5082ac3426d873c1d6fdbe32023672b17896b136facbfff3ca1ec9e9d79f8bdfb4c7f61bcd74c0a5c55d1648beae6f877635c5b19965c847f28b194a62e857e2f4a8578f221a1991b246f57a431b9247ccbf86cc743fc8e37b645013d69b7b4673a5087bfacf590bfd3554024576ee82780ca463798ae651c81b3b94c617ff656e4bd140aec4479302f9c3dcc4f122867f22a1f7f96951a049a02fdbcdddde98593f571728feca3b441df5792a049db2be0ab209c2a443790b89c3a4fe59ede64d78405d01821348216bcedcde5e6bfe55c5b7dea16f3a1b0a2f48c16fb1e95cd4615bbf816f8d0b235802506335042bd9eea58b786745e3e955bba26f4d9fd83b344c9f7591ebe73d943482d318869f518b34e40f1f55d7b4987a3f82f4e04947190757b7e57d0d8361aa56a0d9deb218ee30226ef9695ae1f0ba5a70cbc1900e8675db9b14266eaa9d4f2600f2f007b3bbac8b70f5659e9e2a5646af139ee0516365e8a5f49033c949c74733712e5f1b0ba97c29450f3776e6446aae370d259b05b3a06ee0fd3e6c77febaaaa370e7118b40134641cd084c123afee64576283662e0e651e5a27ec6acec8ef333cc27ffe41b95e814d369266cdc3ee8befbc66ba5c6eaff0b03b3f9a81a768a307ce3f4d65d5b9ab4d5afcc7b7f5350dab2fd33521d5736cb1533c5f49f2b08c3229c0b0ec2a4c3dc6d4cf6d3aba5fe25a0c75f99b60e256eac8e67faf873bb0fff08beec2e92e2b81d761636b651d24e6ee236354c81c8ebd93db425d4c51dcf20b6980f10cb80debec6adc9cb37074660da09ba002dfb13734387e371d36b0ffb6c80d369f4cb38dd60f81ac5e73cfd7d508a6fefd363f4c73c8c5c5c588d21d5178702aa60a4a5f86a5293239ee6bf50d317012766f0f9ead4949d2ef3190dce736b60b75d062728efc975b25192f296758f690a623d6fd37f5f418c8e1a789d32d7cd3f65162ac92de316c0b31a7e7a4fccf85006653110c0ae8a6f11a5d74173d310094075e56ccbcf353ce09e7995db2fc626fc2fd247d899904844447351222fe55a06b0886b6ed3e5d06cf8e76b8bcb6215eb938e17a15aec4cc5ba8bd86ed2019378b268e7a8182bafe6dd98f64c710f493024f5f03ee1d51394b04e4cb4b7fe03fde0f306d35cfcf74477072bf517e3be923b1dd9d22eb02a3e7c1b724ab8bf35789540f76ca93395d120fae836a0dd72df96b7100af53cad990fc38ccedbcf53fee2b9cc7bd5069bdf4d7d7b2c209e5a624621b37bdbfcf9d468c57169b1573386605a54dcd54ee7afbeea9dcd09d13c42612c95d38d189bb354930a5a313bf48b5792fe7199a5883ba1a"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "bc9794e11791f27de9896c3fee3bd7f4bcbb8363b6f1d06659049e5d3aa627622816007a9858e6e47ea1156afc02c3194ebb61a4459a4e9efa7bdb308e97dd8630d2d03a7ba73cc10b89f177a045e8d1d63b9e105f98086cf83869927100c82139d78aac29edcb73c010e76e8eb3a06eca68c70812bda51f8ace86854782b24c4136d2bc6e67c50d5cf24bbb5592f40fc62ac1e69e23ef651f"}]}]}, {0x174, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x12c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "8edf6fd55e98ce37c53dee7ff409a3b1ca074bc9084f3cf0368e9741dbb0ba43518ccfbef4f9a6d7b0a788ea53703af63051d748f0fdeeaf49e4e7388d083217968e4bd1297e954c70ca4cc6e9e2ed099c80b22b0fc39a98f7c917ae1a7e60eb22dbcc8dd491c839c52a7b4e8bf2836dd351611028151815c24edbaaeca79afc2c0ec456b67f6e9dbb2524d64cacaa1f133d663d97d8ead1a7a258f1f6035c1b1736e23daa837165b7c2692c69698b62d2eb22d3aade2cf4c416ab18c26da6dad20d56f2e15e600a9968f8c6ebe689ed3611786582c62a41aef1b29b36c6ea60ad7daacaa85cb9ef9ac1b90658398f62bf79a27232"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x86}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xe6}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0xa0, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x74, 0x3, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xfffd}, @NFTA_QUEUE_FLAGS={0x6}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2514}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000500)={{&(0x7f0000498000/0x2000)=nil, 0x2000}, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffc56aaaf8130f647c00b7030000500d0000850000000600000095"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x2d, &(0x7f00000000c0)=""/45, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x55) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r6) 2.968492747s ago: executing program 2 (id=3543): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x7, 0x10842) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f9404010014000000000000000006000002000000020000000000000011"], 0x80}}], 0x1, 0x4000004) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 2.912195478s ago: executing program 5 (id=3544): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797ab1864fa4e25831000000000900010073797a3000000000080005400000003b08000640ffffff0008000340000000021c001180090001006c617374000000000c0002800800014000000000140000001000010000000000000000000084000a"], 0xb0}}, 0x0) ptrace$setregs(0xd, r0, 0x37, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)=0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000080)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) ioctl$DVB_DEMUX_DMX_STOP(0xffffffffffffffff, 0x6f2a) fcntl$lock(r4, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x10001, 0x5}) mprotect(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000200)={0x1ec55fb0, 0x8, 0x9, 0xfffffffa}, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) read$FUSE(r6, &(0x7f0000003d40)={0x2020}, 0x2020) ioctl$FBIOGET_FSCREENINFO(r6, 0x4602, &(0x7f0000000140)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x28, r9, 0x101, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3ff}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 2.422773848s ago: executing program 5 (id=3545): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003240)=@delchain={0x3ebc, 0x65, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x3, 0xffff}, {0x5, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x3d, 0x2}}, @filter_kind_options=@f_basic={{0xa}, {0x4c4, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_BASIC_POLICE={0x4b0, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x16, 0x4, 0x7, 0x9, 0x8, 0x7, 0x9, 0x35081159, 0x3, 0x9, 0x10001, 0xffffffc0, 0x10000, 0x2, 0x0, 0x5, 0x200, 0x8, 0x0, 0x400, 0xa, 0x2, 0x80000001, 0x5, 0x9, 0x0, 0x0, 0x2, 0x4, 0x1, 0x6, 0x7, 0x3, 0x7, 0x5, 0x4, 0x1, 0x0, 0x4, 0x4c, 0xfffffffe, 0x100, 0xfffffff9, 0xcf, 0x2, 0x6, 0x1, 0x9, 0x5, 0x4, 0x6e9cfcfa, 0x5, 0x35, 0x2, 0xe2, 0x9, 0x2, 0x1, 0x4, 0xfffff106, 0xd227, 0x5, 0x7, 0x300000, 0x6, 0x0, 0x0, 0xddb, 0x1c6d, 0x2, 0x4, 0x0, 0x3, 0x401, 0xb7, 0x6, 0x7, 0x4, 0x9, 0x6, 0x6, 0x80, 0x800, 0x9, 0x7fffffff, 0x5, 0x6b0, 0x1, 0x0, 0xb19a, 0x378, 0x579, 0x79b, 0x9, 0x25, 0x80000000, 0x5, 0x7, 0x0, 0x4, 0xfffffff8, 0x80, 0xfffffffc, 0x3, 0x8, 0x9, 0x4, 0x9, 0x8, 0x8, 0xfb, 0x8, 0x6, 0xbbb, 0x1, 0x4, 0xcc0, 0x8, 0xa, 0x4bb1, 0x3, 0xafa, 0x1, 0x9, 0x1, 0x4, 0x2338, 0x401, 0xa, 0x87c7, 0x0, 0x2, 0xe7, 0x9, 0xb527, 0xfffffffe, 0x3, 0x3, 0x0, 0x1, 0xffff8000, 0x2, 0x1000, 0x2, 0xfff, 0x9, 0xe4, 0x6, 0x6, 0x5, 0x1, 0x16ce, 0x10001, 0x7, 0x51, 0x1000000, 0x6, 0x4, 0x4ded, 0x8001, 0x0, 0x0, 0xfffffffe, 0x40, 0x5, 0x7, 0xfffffffe, 0x4, 0x0, 0x59e2, 0xffffffff, 0x7, 0x81, 0x3, 0x5, 0x8, 0x0, 0x81, 0x7, 0x62f881fa, 0x6, 0x8, 0x7, 0x6, 0x5, 0x7f, 0x2, 0xe92, 0x7f, 0x84b, 0x5, 0x4, 0x4, 0x87a, 0xd, 0x1, 0x7, 0x8, 0x6, 0xffff557c, 0x3, 0x1, 0x80000000, 0x3, 0x4, 0x1de, 0xc57, 0x6, 0x4, 0x6a, 0xd5c, 0x3ff, 0x6, 0x0, 0xd89, 0x1e9b, 0x9, 0x80, 0x7fffffff, 0x3, 0xffff, 0x1000, 0x8, 0x7, 0x0, 0x7, 0x1, 0x6, 0x2, 0xd, 0x1, 0x80000001, 0x2, 0xab4, 0x1, 0x9, 0x400, 0xbe, 0x6d7d, 0x8, 0x2, 0x6, 0x7fff, 0x5, 0x8, 0x29, 0x9, 0x9, 0x2, 0xd990, 0x73b8ba1, 0xecc2, 0x80000001, 0xfffffe00, 0x4, 0x800]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x30000001, 0xe, 0x2, 0x229, {0x5, 0x2, 0x9, 0xfff, 0x8000, 0x10}, {0x5, 0x2, 0x8, 0x3, 0x3, 0x9}, 0xdfe, 0x8, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x7fff, 0x4, 0x4, {0x1c, 0x0, 0x7fff, 0x6b, 0xefad, 0xc0000000}, {0x1, 0x0, 0x0, 0x2, 0x8, 0x1}, 0x7, 0x6, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x292}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xa}}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_basic={{0xa}, {0x30e8, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x4, 0x101, 0x0, 0x7, 0x9, 0x7, 0x2f9, 0x4, 0x3, 0x3, 0x0, 0x4, 0x401, 0x82, 0xd, 0xd7, 0x1, 0x2, 0x7, 0x2, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x6, 0x0, 0xfe, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x6, 0xf29, 0x4ee7, 0x81, 0xb, 0x7, 0xc, 0x3, 0x80000001, 0x2, 0x4, 0x8, 0x81, 0x4, 0x8001, 0x9, 0x1, 0x7, 0x6, 0x100, 0x10000, 0x80000001, 0x5, 0x98a, 0xbfe, 0x9, 0x3, 0x6, 0x1, 0x8, 0x3, 0x1000, 0xffffff70, 0x46e6, 0x0, 0x86, 0xc, 0xffff0000, 0x3ff, 0x1, 0x9, 0x401, 0x6, 0x3, 0x7, 0x9, 0x1, 0x8001, 0x7f, 0xd59, 0x8, 0x3, 0x5, 0x7f, 0x546, 0x0, 0x9, 0x10001, 0x3, 0x80000000, 0x4, 0x1, 0x6dc8, 0x3, 0x7fff, 0x3, 0x5, 0xc, 0x7, 0x2, 0x7, 0x7fff, 0x1ff, 0x689d, 0x0, 0x7fffffff, 0xfffffff9, 0x2689e711, 0x3, 0x100, 0x2, 0xfffff730, 0x5, 0x9, 0x4, 0x4, 0x3ff, 0x400, 0x94, 0x4, 0x91, 0x5, 0x8156, 0x186b, 0x2, 0x3, 0x4, 0xa31b, 0x80, 0x11, 0x8001, 0x0, 0x401, 0x8000, 0x4, 0x80, 0x373e, 0x2, 0x39f, 0x7, 0x5, 0x41f, 0x800, 0xb19e, 0x559, 0x3, 0xace9, 0xe5, 0x5, 0x3, 0xe30, 0xa, 0x8, 0xa1e, 0x0, 0x0, 0x8, 0xa3a, 0xffffff71, 0x4c, 0x7fffffff, 0xb, 0xffff, 0x4, 0x800, 0x5, 0xffffff4d, 0x484e, 0x5, 0xd2c00000, 0x0, 0x9, 0x401, 0xfffff66e, 0x1, 0xe2, 0x3, 0x9, 0x9c26c57a, 0x9, 0x643, 0x4, 0x8, 0x8, 0x8668, 0x4, 0x85, 0x9, 0xfffffffe, 0xd, 0x9, 0x7, 0x80000001, 0x6, 0x7, 0xffffffbd, 0x0, 0x1, 0x200, 0x8055, 0x9, 0x7ff, 0x7ff, 0x1, 0x7, 0x6, 0x6, 0x8, 0x700000, 0x800, 0x8, 0x10, 0x19, 0x6, 0x800, 0x823, 0x3, 0x80, 0x1e, 0x1, 0x1, 0x4, 0x800, 0x0, 0x1, 0x6, 0x7, 0x1d467606, 0x6, 0x6e7, 0xd, 0x7fffffff, 0x442b, 0xbb2, 0x1, 0x5, 0x3, 0x0, 0x3, 0x3e85, 0x7, 0x7, 0x3, 0x9761, 0x3, 0xfffffffa, 0xfffffff9, 0xe162, 0xfffffffa, 0x2, 0x2]}]}, @TCA_BASIC_ACT={0x1620, 0x3, [@m_nat={0x7c, 0x3, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x49, 0x37, 0x0, 0x3ff, 0x7}, @local, @remote, 0xffffff00, 0x1}}]}, {0x29, 0x6, "f3846a437f68f147eb7218d16d6d548c9a066dea02c7eebce4b2e9c60f9acab6518f12b9e8"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x12a0, 0x1a, 0x0, 0x0, {{0xb}, {0x11d4, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x81, 0x0, 0x200, {0x3, 0xef297ac2990d7884, 0x273, 0xfff7, 0x1, 0xc7}, {0x9, 0x1, 0x0, 0x9, 0x2, 0xffffffc0}, 0xff, 0x2, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa333}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0xff, 0xddbd, 0x6, 0x3, 0x332d, 0x0, 0x3, 0xa, 0xa, 0x3a2, 0x6, 0xffffffff, 0x2, 0x3, 0xd, 0x2, 0x1, 0x800, 0x80000000, 0xfffffc00, 0x8000, 0x10000, 0x3, 0x8, 0x5, 0x0, 0x6, 0x6, 0x6af5, 0x4, 0x0, 0x2, 0x7, 0xab0, 0x5, 0x80000001, 0x6, 0x5edcca56, 0x5, 0x7, 0x5, 0x9, 0x2ec, 0x1, 0x0, 0xb15e, 0x4, 0xd, 0x8, 0x9, 0xffffffff, 0x4bf4, 0xea, 0x7, 0x88f, 0x80000001, 0xb, 0x20, 0xdd, 0x171, 0x0, 0x5, 0x8, 0x4, 0x8, 0x1, 0xf, 0x6, 0xe6e, 0x0, 0x0, 0x5, 0x1, 0x1e13, 0x8000, 0x5, 0xfffffffb, 0x46f3ff87, 0x849d, 0x7b35, 0x8, 0x4, 0xfffffff9, 0x3, 0x5, 0x9b84, 0x9, 0x1, 0x0, 0x10001, 0xb09, 0x8, 0x0, 0x7f, 0x3, 0x4e, 0xf, 0x6, 0x9, 0x24a0, 0x3, 0x7ff, 0xfffff255, 0xff6, 0x0, 0x7, 0x1, 0x8, 0x767a69ba, 0x7, 0x8, 0x2, 0xffffffff, 0x80, 0x4, 0x7, 0x7ff, 0x9, 0x9, 0x8, 0x9, 0x1, 0x10, 0x5, 0x400, 0x6, 0x3, 0xaf62, 0x200, 0xff, 0x2, 0x80000001, 0x8, 0x4, 0x80000000, 0x8, 0x7, 0x7, 0xffffffd8, 0x5, 0x101, 0xffffffff, 0xc2, 0xf160, 0x4, 0x3, 0x0, 0x77, 0xa21a, 0x4, 0x9, 0xf6, 0x2, 0x10000, 0x8, 0x8, 0xe2, 0x1, 0xbe1, 0x1, 0x966, 0x6, 0x5, 0x2, 0x1000, 0x5, 0x6259, 0x8001, 0xffffffff, 0x400, 0x4, 0x1ff, 0xfffffff7, 0x2e494b0d, 0xfffffff1, 0x1ff, 0x6, 0xd5c, 0x5, 0x0, 0x9, 0x1ff, 0xa898, 0x57e, 0x2, 0x400, 0xfff, 0xe434, 0xf, 0x7, 0x6, 0x3, 0x4, 0x9, 0x8, 0xfffffff9, 0x7, 0x9, 0x0, 0x5, 0x2, 0x8, 0x0, 0x9, 0x100, 0x1000, 0x3, 0x4, 0x4, 0x4, 0x4, 0x9, 0xffffaeaa, 0x401, 0x3, 0xfffffffb, 0x0, 0x4, 0x1, 0x8cca, 0x357, 0x6, 0x9, 0x6, 0x0, 0x5, 0x8001, 0x5bf4, 0x4, 0x1, 0x2, 0x2, 0x2, 0xb, 0x1df46857, 0x8, 0xb6f, 0xf53, 0xb5, 0x725, 0x3, 0x80000000, 0x3, 0x7fffffff, 0xc8b1, 0x4, 0xffff, 0xc, 0x80000000, 0xa2e, 0x5e, 0x3, 0xfffffffb, 0x2607, 0x401]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xce7, 0x8, 0x7fffffff, 0x0, 0x2, 0xe16, 0xa, 0x9594, 0x5, 0x80000000, 0x9, 0x2, 0xfffffff8, 0x0, 0x0, 0xe, 0x9, 0x0, 0xfffffffa, 0x7, 0x100, 0x16, 0x4, 0x3, 0x5, 0xffff0425, 0x0, 0x9, 0x7, 0x8, 0x5, 0x7bf, 0x1, 0x3, 0x7a, 0xc2, 0xfffffffa, 0x7ff, 0x6, 0x6, 0x81, 0x9, 0x4, 0x200, 0xfffffff9, 0x9, 0x4, 0x5, 0x5, 0x4, 0x8, 0x9927, 0x4, 0x80000000, 0xffffda30, 0x101, 0x5, 0x1, 0xf5d, 0x2, 0x9, 0xff, 0x4, 0x6, 0x7f, 0x0, 0x9, 0x4d9, 0x5, 0x3dc, 0x7fff, 0x2, 0x0, 0x81, 0x6, 0x5, 0x2, 0x7, 0xeb, 0x2, 0x5c17, 0xf2, 0x0, 0x2, 0x7, 0x0, 0x3, 0xff, 0x6, 0x2, 0x80000001, 0xffffffc4, 0xff, 0x4, 0x8, 0x0, 0xffffffff, 0x3ff, 0x8, 0x7a, 0x3, 0x1, 0x80000000, 0xeb, 0x1000, 0x40, 0xed6, 0x0, 0x4, 0x7dc5, 0x8, 0x8000, 0x7f, 0x87, 0x9, 0x7, 0x7f977efd, 0x2, 0x6, 0x5, 0x7, 0x2, 0xff, 0x7f, 0x7, 0xffffffff, 0xd0a4, 0x9, 0xe8, 0x3ff, 0x7, 0x4, 0x7, 0x4, 0x1, 0x400, 0xffff3805, 0xae, 0x0, 0x1, 0x400, 0x9, 0xfffffff9, 0x6, 0xe, 0x6a5, 0x7, 0x4, 0x8000, 0x3, 0x6, 0xe, 0x6, 0x1, 0x6, 0x80, 0x5, 0x651a, 0x8000, 0x7, 0x9, 0x1, 0x5, 0x300e, 0xc95249d9, 0x9, 0x7a, 0x14d, 0x3, 0x1, 0x4, 0xb, 0x7, 0x4, 0x101, 0x200, 0x9, 0x6, 0xb0c4, 0x4, 0x4, 0x7, 0xffffffff, 0x1, 0xec, 0xffffccb1, 0x8, 0xee3, 0x0, 0x1, 0x7, 0xf6, 0x80, 0x1, 0x100, 0x5, 0x8b5, 0x3ff, 0x3, 0x55, 0x1d7, 0x200, 0x0, 0x3, 0x0, 0x3, 0x1, 0x3, 0x8, 0x0, 0x9, 0x7f, 0xa, 0x4, 0x4, 0x2, 0x2e, 0x6, 0x3, 0x1, 0x2, 0x0, 0xe, 0xb06, 0x0, 0x5, 0x1, 0x7, 0x1, 0x0, 0x9, 0x17, 0x80, 0x9, 0x9, 0x3, 0x5, 0xfffffffb, 0xfffffffb, 0x4, 0x6, 0x5, 0x2, 0x8, 0x1ff, 0x6, 0x4, 0xc, 0x4, 0x1000, 0x3f10, 0x9, 0xd77, 0x5, 0x6]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x2, 0x81, 0x1, 0xfffffffb, {0x6, 0x0, 0x8, 0xa75, 0x0, 0x1}, {0x1, 0x2, 0x38c8, 0x6, 0x6, 0x7}, 0x7, 0x1ff, 0x463f}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x52f, 0x3, 0x80000000, 0x3, 0xfffffff8, 0x3, 0x5, 0x0, 0x8, 0x8, 0x9, 0x6, 0x6, 0xffffffff, 0xfff, 0x8, 0x7, 0x8, 0x80, 0xfffffff8, 0x0, 0x8, 0x9, 0xfffff098, 0x7, 0xd35219f, 0x10, 0x1, 0x5f5d, 0x3, 0x9, 0x80, 0x2, 0x9, 0x14, 0x0, 0x29d, 0xf5, 0x80, 0x3, 0x10, 0xd73f, 0xfc6, 0x0, 0x4, 0x6, 0x9, 0x5, 0x7, 0x6, 0x39, 0x9, 0x9, 0x7fff, 0x1000, 0xfff, 0x47, 0x100, 0x4, 0x40, 0x9, 0x6, 0x6, 0x7, 0x0, 0x5, 0x2, 0x100, 0x3, 0x4, 0x4, 0xb, 0x6, 0x3ff, 0x7, 0xff, 0x4, 0x8, 0x1, 0xc, 0x8, 0xa, 0x1, 0x2, 0x5, 0x94, 0x3, 0xe, 0x80000000, 0xa255, 0xfffff191, 0xeb, 0x6, 0x7, 0x40, 0x800, 0x3, 0x5, 0x932, 0x4, 0x7, 0xa, 0xc5cc, 0x8, 0x9, 0x80000001, 0x4, 0x5, 0x1, 0x5, 0xaf, 0x0, 0x6, 0xcc, 0x9, 0x80000001, 0x1000, 0x3, 0x0, 0x3, 0x6, 0x0, 0x3dc, 0x0, 0x8, 0x4, 0xaf, 0x3, 0x8, 0x3ff, 0x3, 0x6, 0x5, 0x9, 0x5, 0x0, 0x81, 0x800, 0xba, 0x7, 0x5, 0x9, 0x7ff, 0x6, 0x1ee, 0x1, 0x8001, 0x6, 0x100, 0x2, 0x1, 0xb, 0xa2, 0x3, 0x38000000, 0x0, 0x5, 0xa29, 0x1, 0x7, 0x6, 0x7fffffff, 0x9, 0xffffffff, 0x9, 0x7ff, 0x2, 0x3, 0x2, 0x9, 0x3, 0x10002, 0x7, 0x0, 0x9, 0xff, 0x7, 0x88dd, 0xe7, 0x8000000, 0x1, 0x8000000, 0x9, 0x29d0708e, 0x9, 0x8, 0x400, 0x7, 0x0, 0x3, 0x4, 0xff, 0x7fffffff, 0x9, 0x5, 0x3ff, 0x9, 0x9, 0x5, 0x1000, 0x5, 0x0, 0x9, 0x10001, 0x10, 0x200, 0x6, 0x5, 0x9, 0x6, 0xf, 0x1eb1, 0x2bf, 0x401, 0x7fffffff, 0x7, 0x8, 0x100, 0xb, 0x605f, 0xd, 0xfffff6f2, 0x100, 0x59f, 0xa, 0x6, 0x1, 0xfffffff8, 0x9, 0x9, 0x5, 0x5, 0x2, 0x7, 0xb7e, 0x6, 0x8, 0x79000, 0x6, 0x3, 0xfd, 0xf, 0x2, 0x8b, 0xbf30, 0x81, 0x7, 0xe97, 0x3, 0x101, 0x15, 0x8, 0x4, 0x80, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x800, 0xba8f, 0x2, 0x8, 0x6, 0x80000000, 0x7da0131f, 0x1, 0x3, 0x40, 0x9, 0x9, 0x4, 0x80000000, 0x7, 0xf71, 0x5, 0x2, 0x400, 0x7, 0x7, 0x3ff, 0x0, 0x6, 0x2, 0x80, 0x2, 0x6, 0x4, 0x80000001, 0x6, 0x1, 0x6ff9, 0x4, 0x4, 0x8, 0x2, 0x7f, 0x7, 0x3, 0x6, 0x0, 0x5, 0x1000, 0x26ca419, 0x5, 0x3, 0x800, 0x4, 0xfffff68e, 0x4, 0x7, 0x3, 0x2, 0x7, 0x7, 0x7, 0x80000001, 0x0, 0x6d68800, 0x7f, 0x0, 0x9, 0x7, 0x70, 0x7, 0x3, 0xbb, 0x1, 0xfffffffc, 0x8, 0xfffffff8, 0x7, 0x5, 0x7, 0x2, 0x9, 0x8, 0x3d, 0x5, 0x101, 0x0, 0xffffffff, 0x800, 0x3ff, 0x8, 0x7, 0x95f6, 0x3, 0xffffffff, 0xfffffe00, 0xd, 0x9, 0x10, 0x5, 0x7ff, 0x372, 0xff, 0xf3, 0x1, 0x2, 0x7, 0x10000, 0x1, 0x6, 0xfffffefc, 0x8, 0xf7d6, 0x7dca, 0x8, 0x6, 0xfffffffd, 0x8eb, 0x7, 0x3d075734, 0x4, 0xd1d, 0x9e82, 0x7, 0x0, 0x8, 0x3, 0x5, 0x0, 0x9, 0x6, 0x7f, 0x7c5, 0x27e, 0x8, 0x4, 0xfffffffc, 0x1000, 0x6, 0xc0000000, 0x7f, 0x3ff4, 0x1, 0x1, 0x7fff, 0x3, 0x5, 0x7f, 0xfffffffa, 0x3, 0x2, 0x5, 0x92, 0x5, 0x3, 0x10001, 0x3, 0x0, 0x101, 0x9, 0x6, 0x10001, 0x8, 0x8, 0xfff, 0xffffff68, 0x500000, 0x8, 0x0, 0x5, 0xb, 0x9, 0x2, 0x3, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x0, 0xfe, 0x5, 0x2, 0x9, 0x2, 0x6d93, 0x3, 0x5, 0x7, 0x8001, 0x7, 0x3, 0xff, 0x7f, 0xd, 0x80000001, 0x5, 0xa3d, 0x156, 0xffff, 0x200, 0x10, 0xfffffff7, 0x8, 0xfffff12b, 0x8000, 0x40, 0x3, 0x7, 0x10, 0xfc, 0x9, 0x4fb, 0x8, 0xc3e7, 0xf3, 0x4, 0x5d, 0x7d, 0x23d5, 0x1, 0xf74, 0x5, 0xa618, 0x6, 0xfffffffd, 0x1, 0x8, 0x5, 0x4, 0x2, 0x8, 0x7fffffff, 0x6d6, 0xfffffffd, 0xff, 0x8, 0x8, 0x1ff, 0x5, 0x7fff, 0x1, 0xe, 0x0, 0x7, 0xe946, 0xfffffff9, 0xf, 0x80000000, 0xfd, 0x4000000, 0xe, 0x75e3, 0x9, 0x101, 0x25, 0xdba8, 0x8]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x74e, 0x9, 0xffffffff, {0x19, 0x0, 0xb, 0x9, 0x800, 0x1}, {0x7, 0x2, 0x3, 0x9, 0xfff2, 0x5}, 0x3, 0x6, 0x8}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x4, 0x4, 0xa1, {0x0, 0x1, 0x6bc, 0x0, 0x9, 0x9}, {0x0, 0x2, 0x2, 0x7f5, 0x6483, 0xd4}, 0x9, 0x1f, 0xc840}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x1, 0x80, 0x6, {0x2, 0x2, 0x0, 0x1, 0x4, 0xf47}, {0x6, 0x1, 0x0, 0x0, 0x1ff, 0x6}, 0x10001, 0x5, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0x1, 0x10000000, 0x749, {0x3, 0x2, 0x7, 0x1, 0xfffb, 0x5}, {0x6, 0x2, 0xfffe, 0xffff, 0x80, 0x1000}, 0x9, 0xa0, 0x81}}]]}, {0xa1, 0x6, "711a4f9906bbf518f07ee8d4960814aadaebb9c4f4c37c6d75d844015fe85366688c0c5402f488fa7919e14423337f450047b8eab6d38d818558e387eaa330827c41051e4993c075d17e1a7ed3aa3089e43f7fe7142f942ddcc4289863ecfdc46c7a87fdfed8cb085536178d06a73c16817693ae7dc70e00a3b5c9f007dfb25a920d38de3c38743a1f2602017376b1efe9801f3e9e711e4bd5a21bfc5a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x1c0, 0x1e, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x20000000, 0x5, 0x4}, @remote, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x20000000, 0x8, 0x7fff}, @local, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x7, 0x0, 0x4b9, 0x6c}, @empty, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x1, 0x0, 0x1}, @remote, @dev={0xac, 0x14, 0x14, 0x10}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x6, 0x7, 0x8, 0x200}, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x101, 0x6, 0x7, 0x6}, @rand_addr=0x64010100, @rand_addr=0x64010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x25b, 0x4, 0x1, 0x8, 0x9}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0xb, 0x8, 0x1, 0x6}, @remote, @private=0xa010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x543f2f36, 0x5, 0xfffff800, 0x81}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0x1, 0x5, 0x6}, @loopback, @rand_addr=0x64010101, 0xff, 0x1}}]}, {0x5, 0x6, 'g'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x140, 0xb, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x7fffffff, 0x4, 0x3, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0xb9, 0x6, 0x3, 0x0, 0x7}}]}, {0xe1, 0x6, "1a1597e6a492f48a4cd15633bfe500ad4af3dfaee4780226f7bc6bc2b66187f2402c393bd3d908f0f315b5a779ab22e2d354f547e1c95cab1291f3e944343ab3ecaee60284fbbddab84b2c35959b79bc7f34b4c2c73d53aefd9113f5093ccc0510a50ae539a55ce885156c368da935cd5eda6a3bbb995e13d385431637b166457127ec3a0c670cdfddfa199f30c9547e8d749701e9decdafc539637e25da693b08becea5a17bad1156ab7be766256558a501ccd30b37ffdef4197bd63e90019af4aabd218c573696256690b3a88e775f05a4eca0208b0cc2ff9f756486"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_BASIC_EMATCHES={0x16b4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x2c, 0x2, 0x0, 0x0, {{0x8}, "364554da5c707727246fff48a332387beb3b4f1944b407ebcf2b55fc5945"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0x3}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x10, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x89}, {0x1000, 0x1, 0x2, '6'}}}, @TCF_EM_CONTAINER={0x34, 0x2, 0x0, 0x0, {{0x3, 0x0, 0xba}, "4451a578c5401faf51bb78afec51212337e1ec4aae5c7c43d29a8ba73107e9c7d44a337d5d"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0xfff0}, {0x8, 0x3ff, 0xfffffffa}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x8}, {{0x4, 0x0, 0x1}, {0x3}}}}]}, @TCA_EMATCH_TREE_LIST={0x2d0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x1ff, 0x4, 0xc}, [@TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="9320f6894e883cf376", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="57fe9fa5", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xd, 0x1}, {0x5, 0x4, 0x1}}}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="44a88e959d", @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_CONTAINER={0xf0, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x8}, "3cb908b0acdcd2ce4dd8bf9a7c947ee3972bf4fb8a5b60e436c3a5f84b8aec08c0dc3abff2a25a51636363efcaf526ef7ba170ede7c01c3ce9212079767ed1e28a452be20d70ded68e4c8b2e7937a174a9a2fa543a5de898e25ad3212cb66f8ec45b7b957c4544a698024f9458ef821122e20198d46e4c56901c0208dd77f05ca5656df2dcf56faf1640e78470c276eb26099997835862f7378a055c8b0c9c59e6d9c7e9f85e72154cb15b3913e1ebae6058946064023256b8c946f089421e94eac25e9c142dc365fb078ec914a2118d8a350e87d61b6e864fc63b82257955fed2"}}, @TCF_EM_META={0x44, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="ecc0", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c9ebc9b858dbf1", @TCF_META_TYPE_VAR=';', @TCF_META_TYPE_VAR="3dc338"]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="9d1a528a8f", @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_META={0x68, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="88b06de02643a2fb", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="3bce96d439", @TCF_META_TYPE_VAR="0ed75d3f1711f672", @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_VAR="b79f0a005382c240", @TCF_META_TYPE_VAR="44ec61f4afcd5a5c79", @TCF_META_TYPE_VAR="c6d7ddb04a68d4ad", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xba3, 0x3, 0x3}, {0x8, 0x6, 0x4, 0x80}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x400}, {0x80, 0x1, 0x1, '7'}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x4}, {0x4, 0x8, 0x5, 0x2c7d}}}, @TCF_EM_META={0x9c, 0x3, 0x0, 0x0, {{0x7de4, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x2, 0x2}, {0x8}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="c5af888d22022856df", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2}, {0x53, 0x9, 0x2}}}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="60b5860945c951b105", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xc3c, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1ff, 0x3, 0x1}, {0x0, 0x5, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xff, 0xe, 0x1}, {0x0, 0x5}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100}, {0x81, 0x1, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x5, 0x2}, {0x9, 0x80}}}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="1fe46e6b128160c2d6"]}]}}]}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0xe, 0x4, 0x7fff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x39d8, 0x38, 0x1}, {0x6, 0x0, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0x7}, {0x2, 0x4}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x40, 0x1, 0x7ff}, {0x8, 0x800, 0xc, 0x4, 0x6, 0x2, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x2, 0x9}, {0x3ff, 0x9, 0x1, "8f23077fcef4f32ca1"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xb, 0x3, 0x7d7}, {0x0, 0x3, 0x3, 0xfffffc7e}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x6ed0}, {{0x2, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xff, 0x7, 0x3}, {{0x1, 0x1}, {0x4, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0xa4}, {0x1, 0x5, 0x6}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x8}, {{0x0, 0x1, 0x1, 0x1}, {0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0xff72}, {{0x2}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0xb8, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="ffedd6afa043c511", @TCF_META_TYPE_VAR="7cbd8913674e", @TCF_META_TYPE_VAR="9f27ac", @TCF_META_TYPE_VAR="3da752e633f9", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="a2cb7821bac7", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7f, 0x5, 0x2}, {0x1000, 0x25, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='e']}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_VAR="d416e0", @TCF_META_TYPE_VAR="41204313fabc522371", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="474453a152ce34b6", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="112a9f2e8c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6}, {0xf0, 0x1, 0x2}}}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="99fb83a35cc49c", @TCF_META_TYPE_VAR='~g']}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="089f9abaa269f9c457"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x1174, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xd, 0x8, 0x4}, {0x4, 0x3, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x7}, {0x7, 0xfdf0, 0x8, 0x3ff}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x8}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0x6}, {{0x2, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x20}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xac, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x6f}, "86e603f9756990264aa4ef06520f6eec4574ddb4fe04010986d80d9b36efa315919edb4500754f17b0fe9a7ffa822b4ab045c92f995dc498bef0c6952c978431a1dcf0344f7768b5af625a415ad31d716011e9be027326ff8be7dc2046576b6361af9df8c78dac96570a13a9474060e38f2d33104e00162337cdff4dab8f1b88d0f347c093c6eb1b0cb82bcb4e7acecfdf6e9c1750d76bbdce175f14a8"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4782, 0x8, 0x1}, {0x0, 0x3, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x400, 0x2, 0x7}, {0x3, 0x9, 0x0, "79f65a352fec068f58"}}}, @TCF_EM_IPT={0x1010, 0x2, 0x0, 0x0, {{0x81, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_DATA={0x1001, 0x5, "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"}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x3}, {0x4, 0x0, 0x40, 0x4, 0x3, 0x2, 0x1}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xe}}]}}, @filter_kind_options=@f_basic={{0xa}, {0x8a4, 0x2, [@TCA_BASIC_ACT={0x8a0, 0x3, [@m_mirred={0x89c, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x86d, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x3ebc}}, 0x44004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 2.31626997s ago: executing program 4 (id=3546): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1800000033800001dd4cbd1dc726bd7700fda1dbdf250800fb"], 0xffffffffffffff96}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @remote}, 0x33, r6}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000f80)}) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8916, &(0x7f0000000000)) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}], 0x1, 0x40) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@initdev, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r9, 0x8000, 0x8, 0x400, 0x2, {{0x12, 0x4, 0x2, 0x2, 0x48, 0x65, 0x0, 0x6f, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@end, @timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x2}, @rr={0x7, 0x23, 0xa8, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x8b, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 2.03504691s ago: executing program 5 (id=3547): socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 1.92423021s ago: executing program 5 (id=3548): socket$xdp(0x2c, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r1, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r9, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r0, r4, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4088800) io_setup(0x239f, &(0x7f0000000380)=0x0) r12 = eventfd2(0x5, 0x1) io_submit(r11, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r12, 0x0, 0x0, 0x800002, 0x0, 0x0, r12}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r12, &(0x7f0000000080)="e2", 0x1, 0x5, 0x0, 0x0, r12}]) 1.889255225s ago: executing program 3 (id=3549): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000340), 0x8002, 0x36ba03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x6}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xb57533df4456317d, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r6 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = getpid() process_vm_readv(r8, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/28, 0x1c}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f00000006c0)=[{&(0x7f0000000740)=""/148, 0x94}, {&(0x7f0000000300)=""/15, 0xf}, {&(0x7f0000000500)=""/250, 0xfa}, {&(0x7f0000000440)=""/42, 0x2a}, {&(0x7f0000000600)=""/129, 0x81}], 0x5, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r9, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 1.58462274s ago: executing program 4 (id=3550): shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0xf, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) request_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0) syz_io_uring_setup(0x83e, &(0x7f00000000c0)={0x0, 0x5, 0x400, 0x3, 0x3c4}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) unshare(0x2040400) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x86a, &(0x7f00000000c0)={0x0, 0x2822, 0x400, 0x4, 0xc1}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r8, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1.534762786s ago: executing program 6 (id=3551): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r1, 0x8955, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000001e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) 1.351613185s ago: executing program 5 (id=3552): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x7d, {0x7d, 0x21, "d610154b5f5d13993cccef780e3d5b2196c611b4dcb8d10b90214e56e479b5a47a78ac2a634cc2f0568e5fca72893b9497ba7002d4515fab0e097aa55ee93d828676df31ae30c393d8923c61f16ddc7f5efd8963b6143d3b910ca10dfc64054a56f5502e8930fa4b012b102f917567f58c4a3d8d582eb646ec291f"}}, &(0x7f00000001c0)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "a6b9aba924570d8030db3af68c191dac12054d6d25813af4daf6e536404711bd41db8c07f674523127f4dd0b6745c11779f2dcefaf83fc7654e68a47c1ca583085babbbb417b19f7ec25619ce426094840b177760658276d79167eb3ea6e860954abb8d8af9befd01440106b222588adf84ed574229b93a0a267abd4372c7c26331fc5ece250401bee9b730c47fdb0836851610ab5196d26da746d9f6f86c4a1151e74f5b090c145da054d7c993c1d3ba43117c7fed5f77095108dad9e8a8bb60496580dd8a0cd573662d8bca934dc9d76f5636032fb38826318747e5244ee80997d5b4f22324d4d5bdf83d16229af"}}}, &(0x7f0000000500)={0x34, &(0x7f00000003c0)={0x40, 0xe, 0x68, "96eb2f80ca5aac1ecc494b99fedf45d5f0e0089cd3c959f3128b26c843aacade06b9b823fc352cfa45cbee39fe1699b87634cd752affaab6d9e0d65d1b6ffb69a252b1d5c85082c80d437ee1b67b04617ba890fcce4878f884ae9ed749812f3a98d52a0a29039320"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x19}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000440)={0x20, 0x0, 0x68, {0x66, "f3969155188f1708d4f034d97674b2f982d63739c95851b2793b4818c1cdd89ae5563264719d4528cc4ac2fb9fd4b3b6f892959b3afe5f3518129808f03b6b60d62d78df0a3da95c9f54225ef18561332193f3bd370f1fd9932d589bbd7061b882d1a705b63d"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0xd}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x80}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000300)=[{0x9, 0x4000, 0x0, 0x0}, {0x6, 0xf201, 0x0, 0x0}, {0xfffe, 0x3210, 0x0, 0x0}], 0x3}) 1.324204324s ago: executing program 6 (id=3553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x2000000, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 1.323414935s ago: executing program 2 (id=3554): socket$pptp(0x18, 0x1, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000280)={0x0, 0x3, 0x0, 'queue0\x00', 0x9}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0xc, 0x6, 0x5}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x3ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80000000}}, 0x6, 0x2}, &(0x7f0000000000)=0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002780), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)={0x14, r7, 0xf1f, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}], 0x1}) syz_usb_control_io$printer(r4, 0x0, 0x0) socket$inet(0x2, 0x801, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) 1.116399543s ago: executing program 6 (id=3555): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x84b, @remote, 0x68}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x800, 0x402) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) socket$key(0xf, 0x3, 0x2) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000, 0x10000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x202, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000005000004d6a1000008090000080000000208000006f0ff00"], 0x513300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'rose0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0xfff1, 0xfff2}, {0x0, 0x7}, {0x1, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r9) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x400, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x5, 0xfff2}, {0x7}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044869}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 997.615195ms ago: executing program 3 (id=3556): shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000100)=0xf, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x86a, &(0x7f00000000c0)={0x0, 0x2822, 0x400, 0x4, 0xc1}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 968.883628ms ago: executing program 6 (id=3557): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendto$unix(r0, &(0x7f0000000380)="e509972256c6eb52fa5559", 0xb, 0x8884, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x11d9, 0x2, 0x6, 0x4002004c4, 0x1004, 0x0, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r5 = gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200040, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) sched_setattr(r5, &(0x7f0000000040)={0x38, 0x3, 0x10000050, 0xa, 0x800000, 0xa9, 0xfffffffffffffe06, 0xfffffffffffffffe, 0x7, 0x8002003}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './cgroup'}, 0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000240)=""/133, 0x85}], 0x1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) fsopen(&(0x7f0000000340)='afs\x00', 0x0) 649.116413ms ago: executing program 4 (id=3558): socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 432.903643ms ago: executing program 4 (id=3559): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x21, 0x1, {0xa32, 0x6, 0x1, 0x5, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpid() r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sendmsg$inet6(r0, &(0x7f0000003900)={&(0x7f0000002380)={0xa, 0x4e23, 0x5, @empty, 0xb}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}, 0x840) 0s ago: executing program 6 (id=3560): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f", @ANYBLOB], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) r2 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000010ba1200a1b872aa020301090224000101049009090400030203010305092105004e0122170b090581030004ec5001"], &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x7, 0x65, 0x9, 0x10, 0x12}, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="050f080001035ade9edb0d62e25987f339d97bcbf477d570e5abb161a3"], 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_ep_read(r5, 0xf8, 0xbc, &(0x7f00000002c0)=""/188) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x44, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.103071][T18369] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.347415][T18369] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 859.357069][T18369] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 859.366757][T18369] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 859.391041][T18369] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 859.547178][T18435] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3167'. [ 859.638332][T18369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.665306][T18369] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.791014][T14713] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.798158][T14713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.863218][T14713] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.870421][T14713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.170620][ T152] wlan0: Trigger new scan to find an IBSS to join [ 860.360216][ T5823] Bluetooth: hci3: command tx timeout [ 860.402759][T18455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3169'. [ 860.741356][T18369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.036451][T18466] fuse: Bad value for 'fd' [ 861.267214][T18369] veth0_vlan: entered promiscuous mode [ 861.307762][T18369] veth1_vlan: entered promiscuous mode [ 861.364503][T18369] veth0_macvtap: entered promiscuous mode [ 861.395653][T18369] veth1_macvtap: entered promiscuous mode [ 861.527238][T18369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.537355][ T29] audit: type=1800 audit(1773302343.955:593): pid=18472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3172" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 861.599629][T18369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.806620][ T146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.837125][ T146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.951573][ T146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.149220][ T146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.566637][ T5823] Bluetooth: hci3: command tx timeout [ 862.569801][ T29] audit: type=1800 audit(1773302344.975:594): pid=18480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3174" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 [ 862.634955][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.643471][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.664454][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.691297][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.301179][T18488] fuse: Bad value for 'fd' [ 863.609808][ T1209] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 863.759850][ T9] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 863.769548][ T1209] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 863.781232][ T1209] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 863.798025][ T1209] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 863.826462][ T1209] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 863.847010][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.855550][ T1209] usb 3-1: Product: syz [ 863.860882][ T1209] usb 3-1: Manufacturer: syz [ 863.865688][ T1209] usb 3-1: SerialNumber: syz [ 863.878265][ T1209] usb 3-1: config 0 descriptor?? [ 863.903419][T18495] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 863.912674][T18495] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 863.920561][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.932374][ T9] usb 6-1: config 0 has no interfaces? [ 863.943039][ T1209] usb 3-1: ucan: probing device on interface #0 [ 863.957101][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 863.967513][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.991947][ T9] usb 6-1: Product: syz [ 864.004825][ T9] usb 6-1: Manufacturer: syz [ 864.041407][ T146] wlan0: Trigger new scan to find an IBSS to join [ 864.046307][ T9] usb 6-1: SerialNumber: syz [ 864.070516][ T9] usb 6-1: config 0 descriptor?? [ 864.148713][ T1209] usb 3-1: ucan: could not read protocol version, ret=0 [ 864.158059][ T1209] usb 3-1: ucan: probe failed; try to update the device firmware [ 864.386683][ T9] usb 6-1: USB disconnect, device number 87 [ 864.420727][ T43] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 864.599874][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 864.610327][ T43] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 864.620071][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.646673][ T43] usb 5-1: config 0 descriptor?? [ 864.868841][ T43] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 864.886524][ T43] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 864.946826][ T43] dib0700: firmware download failed at 7 with -22 [ 865.047596][T18523] netlink: 'syz.5.3185': attribute type 7 has an invalid length. [ 865.269298][T18526] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3186'. [ 865.367669][T18531] FAULT_INJECTION: forcing a failure. [ 865.367669][T18531] name failslab, interval 1, probability 0, space 0, times 0 [ 865.380909][T18531] CPU: 0 UID: 0 PID: 18531 Comm: syz.3.3187 Tainted: G L syzkaller #0 PREEMPT(full) [ 865.380938][T18531] Tainted: [L]=SOFTLOCKUP [ 865.380945][T18531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 865.380957][T18531] Call Trace: [ 865.380966][T18531] [ 865.380975][T18531] dump_stack_lvl+0xe8/0x150 [ 865.381008][T18531] should_fail_ex+0x412/0x560 [ 865.381039][T18531] should_failslab+0xa8/0x100 [ 865.381064][T18531] ? dst_alloc+0x105/0x170 [ 865.381085][T18531] kmem_cache_alloc_noprof+0x87/0x650 [ 865.381110][T18531] ? __pfx_ip6_dst_gc+0x10/0x10 [ 865.381224][T18531] dst_alloc+0x105/0x170 [ 865.381248][T18531] ip6_pol_route+0xafb/0x13d0 [ 865.381297][T18531] ? ip6_pol_route+0x160/0x13d0 [ 865.381322][T18531] ? __pfx_ip6_pol_route+0x10/0x10 [ 865.381347][T18531] ? __lock_acquire+0x6b5/0x2cf0 [ 865.381381][T18531] fib6_rule_lookup+0x222/0x730 [ 865.381439][T18531] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 865.381462][T18531] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 865.381496][T18531] ? chacha_permute+0x4e6/0xf00 [ 865.381522][T18531] ip6_route_output_flags+0x364/0x5d0 [ 865.381544][T18531] ? ip6_route_output_flags+0x2e/0x5d0 [ 865.381570][T18531] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 865.381654][T18531] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 865.381680][T18531] ? chacha_block_generic+0x53/0xc80 [ 865.381712][T18531] ip6_dst_lookup_flow+0x47/0xe0 [ 865.381739][T18531] ? sctp_v6_get_dst+0x491/0x1d10 [ 865.381792][T18531] sctp_v6_get_dst+0x6ee/0x1d10 [ 865.381818][T18531] ? sctp_v6_get_dst+0x4aa/0x1d10 [ 865.381841][T18531] ? lockdep_hardirqs_on+0x7a/0x110 [ 865.381867][T18531] ? crng_make_state+0x36a/0x600 [ 865.381935][T18531] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 865.381955][T18531] ? __asan_memset+0x22/0x50 [ 865.381994][T18531] ? dst_release+0x72/0x1b0 [ 865.382016][T18531] sctp_transport_route+0x118/0x2f0 [ 865.382044][T18531] sctp_assoc_add_peer+0x650/0x13b0 [ 865.382084][T18531] sctp_connect_new_asoc+0x329/0x6b0 [ 865.382115][T18531] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 865.382142][T18531] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 865.382168][T18531] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 865.382192][T18531] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 865.382225][T18531] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 865.382248][T18531] ? security_sctp_bind_connect+0x7e/0x2c0 [ 865.382278][T18531] sctp_sendmsg+0x1528/0x2c10 [ 865.382317][T18531] ? __pfx_sctp_sendmsg+0x10/0x10 [ 865.382346][T18531] ? aa_sk_perm+0x6d5/0x900 [ 865.382377][T18531] ? __pfx_aa_sk_perm+0x10/0x10 [ 865.382402][T18531] ? sock_rps_record_flow+0x19/0x400 [ 865.382422][T18531] ? __pfx_inet_sendmsg+0x10/0x10 [ 865.382441][T18531] ? inet_sendmsg+0x2f4/0x370 [ 865.382458][T18531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 865.382477][T18531] ? __pfx_inet_sendmsg+0x10/0x10 [ 865.382496][T18531] __sys_sendto+0x5de/0x710 [ 865.382526][T18531] ? __pfx___sys_sendto+0x10/0x10 [ 865.382548][T18531] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 865.382579][T18531] ? __fget_files+0x3a0/0x420 [ 865.382615][T18531] ? ksys_write+0x242/0x270 [ 865.382637][T18531] ? __pfx_ksys_write+0x10/0x10 [ 865.382662][T18531] __x64_sys_sendto+0xde/0x100 [ 865.382690][T18531] do_syscall_64+0x14d/0xf80 [ 865.382706][T18531] ? trace_irq_disable+0x3b/0x150 [ 865.382730][T18531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.382749][T18531] ? clear_bhb_loop+0x40/0x90 [ 865.382771][T18531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.382789][T18531] RIP: 0033:0x7f5a24d9c799 [ 865.382808][T18531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.382824][T18531] RSP: 002b:00007f5a25bdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 865.382844][T18531] RAX: ffffffffffffffda RBX: 00007f5a25015fa0 RCX: 00007f5a24d9c799 [ 865.382858][T18531] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 865.382870][T18531] RBP: 00007f5a25bdf090 R08: 0000200000000100 R09: 000000000000001c [ 865.382882][T18531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.382892][T18531] R13: 00007f5a25016038 R14: 00007f5a25015fa0 R15: 00007f5a2513fa48 [ 865.382918][T18531] [ 866.211339][T18546] fuse: Bad value for 'fd' [ 866.387115][ T5911] usb 3-1: USB disconnect, device number 8 [ 866.440567][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 866.603133][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3194'. [ 866.613244][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3194'. [ 866.657887][T18559] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 867.082632][T14713] wlan0: Trigger new scan to find an IBSS to join [ 867.176451][ T5931] usb 5-1: USB disconnect, device number 43 [ 867.264160][T18564] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 867.273890][T18564] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 867.702015][ T5931] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 867.733210][T18578] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 867.973617][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 867.987395][ T5931] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 867.996572][ T5931] usb 5-1: config 0 has no interface number 0 [ 868.010217][ T5931] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 868.024683][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.047462][ T5931] usb 5-1: Product: syz [ 868.066606][ T5931] usb 5-1: Manufacturer: syz [ 868.083775][ T5931] usb 5-1: SerialNumber: syz [ 868.117981][ T5931] usb 5-1: config 0 descriptor?? [ 868.240496][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.549222][ T5931] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 868.571704][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 868.594808][ T5931] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 868.613799][ T5931] usb 5-1: media controller created [ 868.636562][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 868.800188][ T5931] zl10353_read_register: readreg error (reg=127, ret==0) [ 868.828010][ T5931] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 868.853914][ T5931] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 868.919143][ T5931] usb 5-1: USB disconnect, device number 44 [ 868.989598][ T5931] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 869.250457][T18597] fuse: Bad value for 'fd' [ 869.441892][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3207'. [ 869.459764][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3207'. [ 869.595674][T18605] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 870.288902][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.295631][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.169650][T18621] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.176916][T18621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.184501][T18621] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.191608][T18621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.284533][T18621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 872.710699][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3220'. [ 872.761796][T18653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3220'. [ 872.827123][T18655] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 873.494501][T18661] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 873.512040][T18661] bond3: (slave lo): Enslaving as an active interface with an up link [ 873.531444][T18661] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 873.752773][T18665] binder_alloc: binder_alloc_mmap_handler: 18664 200000ffd000-200000fff000 already mapped failed -16 [ 874.070990][T18674] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3226'. [ 874.123280][ T5823] Bluetooth: hci5: unexpected event for opcode 0x201c [ 874.317475][ T1209] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 874.699801][ T1209] usb 4-1: Using ep0 maxpacket: 8 [ 874.719210][ T1209] usb 4-1: config 0 has no interfaces? [ 874.730237][ T1209] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 874.740658][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.761981][ T1209] usb 4-1: config 0 descriptor?? [ 875.011220][ T5931] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 875.170165][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 875.179652][ T5931] usb 3-1: config index 0 descriptor too short (expected 526, got 367) [ 875.188185][ T5931] usb 3-1: config 0 has an invalid interface number: 209 but max is 0 [ 875.197287][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.251242][ T5931] usb 3-1: config 0 has no interface number 0 [ 875.266122][ T5931] usb 3-1: config 0 interface 209 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 875.288949][ T5931] usb 3-1: config 0 interface 209 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 875.299450][ T5931] usb 3-1: config 0 interface 209 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 875.316678][ T5931] usb 3-1: config 0 interface 209 has no altsetting 0 [ 875.327751][ T5931] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 875.341297][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.351252][ T5931] usb 3-1: Product: syz [ 875.355566][ T5931] usb 3-1: Manufacturer: syz [ 875.360379][ T5931] usb 3-1: SerialNumber: syz [ 875.368870][ T5931] usb 3-1: config 0 descriptor?? [ 875.519781][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 875.583415][ T1209] usb 3-1: USB disconnect, device number 9 [ 875.669805][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 875.677469][ T24] usb 5-1: config 3 has an invalid interface number: 171 but max is 29 [ 875.686555][ T24] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 875.695745][ T24] usb 5-1: config 3 has no interface number 0 [ 875.702059][ T24] usb 5-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 875.712424][ T24] usb 5-1: config 3 interface 171 has no altsetting 0 [ 875.722116][ T24] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 875.731606][ T24] usb 5-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 875.739907][ T24] usb 5-1: Product: syz [ 875.744177][ T24] usb 5-1: Manufacturer: syz [ 875.748808][ T24] usb 5-1: SerialNumber: syz [ 875.998343][ T24] as10x_usb: device has been detected [ 876.007611][ T24] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 876.020754][ T24] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 876.033997][ T24] as10x_usb: error during firmware upload part1 [ 876.044259][ T24] Registered device Sky IT Digital Key (green led) [ 876.109590][ T24] usb 5-1: USB disconnect, device number 45 [ 876.179006][ T24] Unregistered device Sky IT Digital Key (green led) [ 876.182383][ T24] as10x_usb: device has been disconnected [ 876.326363][T18697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3232'. [ 876.346442][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3232'. [ 876.382146][T18697] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 876.797149][ T9] usb 4-1: USB disconnect, device number 39 [ 877.450147][T18723] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3236'. [ 877.462903][T18723] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 877.470362][T18717] futex_wake_op: syz.2.3238 tries to shift op by -1; fix this program [ 877.928273][T18717] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3238'. [ 878.686970][T18743] fuse: Bad value for 'fd' [ 878.729797][ T29] audit: type=1800 audit(1773302361.175:595): pid=18737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3241" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 878.929826][ T1209] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 879.188364][ T9] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 879.196119][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 879.219464][ T1209] usb 5-1: config 3 has an invalid interface number: 171 but max is 29 [ 879.228844][ T1209] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 879.316755][ T1209] usb 5-1: config 3 has no interface number 0 [ 879.334859][ T1209] usb 5-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 879.376363][ T1209] usb 5-1: config 3 interface 171 has no altsetting 0 [ 879.380264][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 879.397296][ T1209] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 879.415735][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 879.466451][ T1209] usb 5-1: Product: syz [ 879.480555][ T9] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 879.490007][ T1209] usb 5-1: Manufacturer: syz [ 879.494662][ T1209] usb 5-1: SerialNumber: syz [ 879.512435][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.551834][ T9] usb 6-1: Product: syz [ 879.560227][ T9] usb 6-1: Manufacturer: syz [ 879.565269][ T9] usb 6-1: SerialNumber: syz [ 879.585067][ T9] usb 6-1: config 0 descriptor?? [ 879.616197][ T9] as10x_usb: device has been detected [ 879.684687][ T9] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 879.786010][ T1209] as10x_usb: device has been detected [ 879.812451][T18743] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3242'. [ 879.841949][ T1209] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 879.879431][ T9] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 879.922788][ T1209] usb 5-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 879.941645][ T9] as10x_usb: error during firmware upload part1 [ 879.968915][ T9] Registered device Sky IT Digital Key (green led) [ 880.037807][ T1209] as10x_usb: error during firmware upload part1 [ 880.092113][ T1209] Registered device Sky IT Digital Key (green led) [ 880.096935][ T1209] usb 5-1: USB disconnect, device number 46 [ 880.126899][ T1209] Unregistered device Sky IT Digital Key (green led) [ 880.128084][ T1209] as10x_usb: device has been disconnected [ 880.484271][T18760] FAULT_INJECTION: forcing a failure. [ 880.484271][T18760] name failslab, interval 1, probability 0, space 0, times 0 [ 880.497183][T18760] CPU: 0 UID: 0 PID: 18760 Comm: syz.4.3250 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.497212][T18760] Tainted: [L]=SOFTLOCKUP [ 880.497219][T18760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 880.497230][T18760] Call Trace: [ 880.497236][T18760] [ 880.497243][T18760] dump_stack_lvl+0xe8/0x150 [ 880.497279][T18760] should_fail_ex+0x412/0x560 [ 880.497307][T18760] should_failslab+0xa8/0x100 [ 880.497331][T18760] __kvmalloc_node_noprof+0x178/0x8a0 [ 880.497354][T18760] ? alloc_netdev_mqs+0xa6/0x11b0 [ 880.497381][T18760] alloc_netdev_mqs+0xa6/0x11b0 [ 880.497399][T18760] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 880.497424][T18760] rtnl_create_link+0x31f/0xd70 [ 880.497451][T18760] rtnl_newlink_create+0x277/0xb70 [ 880.497478][T18760] ? __pfx___nla_validate_parse+0x10/0x10 [ 880.497511][T18760] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 880.497539][T18760] ? __pfx___mutex_lock+0x10/0x10 [ 880.497568][T18760] ? ns_capable+0x89/0xe0 [ 880.497595][T18760] rtnl_newlink+0x1666/0x1be0 [ 880.497633][T18760] ? __pfx_rtnl_newlink+0x10/0x10 [ 880.497653][T18760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.497703][T18760] ? kasan_quarantine_put+0xbb/0x1f0 [ 880.497722][T18760] ? lockdep_hardirqs_on+0x7a/0x110 [ 880.497750][T18760] ? kmem_cache_free+0x187/0x630 [ 880.497768][T18760] ? nlmon_xmit+0xb0/0x100 [ 880.497803][T18760] ? __lock_acquire+0x6b5/0x2cf0 [ 880.497828][T18760] ? __local_bh_enable_ip+0xd0/0x130 [ 880.497849][T18760] ? lockdep_hardirqs_on+0x7a/0x110 [ 880.497874][T18760] ? __dev_queue_xmit+0x277/0x3890 [ 880.497892][T18760] ? __local_bh_enable_ip+0xd0/0x130 [ 880.497912][T18760] ? __dev_queue_xmit+0x277/0x3890 [ 880.497953][T18760] ? __pfx_rtnl_newlink+0x10/0x10 [ 880.497975][T18760] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 880.498002][T18760] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 880.498024][T18760] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 880.498048][T18760] ? ref_tracker_free+0x693/0x840 [ 880.498069][T18760] ? __copy_skb_header+0xa3/0x4a0 [ 880.498089][T18760] ? __pfx_ref_tracker_free+0x10/0x10 [ 880.498109][T18760] ? __skb_clone+0x63/0x7a0 [ 880.498134][T18760] netlink_rcv_skb+0x232/0x4b0 [ 880.498168][T18760] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 880.498192][T18760] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 880.498225][T18760] ? netlink_deliver_tap+0x2e/0x1b0 [ 880.498254][T18760] netlink_unicast+0x80f/0x9b0 [ 880.498283][T18760] ? __pfx_netlink_unicast+0x10/0x10 [ 880.498306][T18760] ? netlink_sendmsg+0x650/0xb40 [ 880.498328][T18760] ? skb_put+0x11b/0x210 [ 880.498355][T18760] netlink_sendmsg+0x813/0xb40 [ 880.498386][T18760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 880.498411][T18760] ? aa_sock_msg_perm+0xf1/0x1b0 [ 880.498436][T18760] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 880.498460][T18760] ____sys_sendmsg+0x972/0x9f0 [ 880.498485][T18760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 880.498511][T18760] ? import_iovec+0x73/0xa0 [ 880.498540][T18760] ___sys_sendmsg+0x2a5/0x360 [ 880.498563][T18760] ? __pfx____sys_sendmsg+0x10/0x10 [ 880.498613][T18760] ? __fget_files+0x2a/0x420 [ 880.498637][T18760] ? __fget_files+0x3a0/0x420 [ 880.498670][T18760] __x64_sys_sendmsg+0x1bd/0x2a0 [ 880.498690][T18760] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 880.498717][T18760] ? __pfx_ksys_write+0x10/0x10 [ 880.498747][T18760] do_syscall_64+0x14d/0xf80 [ 880.498764][T18760] ? trace_irq_disable+0x3b/0x150 [ 880.498788][T18760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.498805][T18760] ? clear_bhb_loop+0x40/0x90 [ 880.498827][T18760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.498845][T18760] RIP: 0033:0x7f7a03d9c799 [ 880.498862][T18760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.498879][T18760] RSP: 002b:00007f7a04b7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 880.498898][T18760] RAX: ffffffffffffffda RBX: 00007f7a04015fa0 RCX: 00007f7a03d9c799 [ 880.498911][T18760] RDX: 00000000040008c0 RSI: 0000200000000280 RDI: 0000000000000003 [ 880.498923][T18760] RBP: 00007f7a04b7c090 R08: 0000000000000000 R09: 0000000000000000 [ 880.498933][T18760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.498944][T18760] R13: 00007f7a04016038 R14: 00007f7a04015fa0 R15: 00007f7a0413fa48 [ 880.498973][T18760] [ 881.281630][ T5931] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 881.452892][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 881.460659][ T5931] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 881.484206][ T5931] usb 5-1: config 0 has no interface number 0 [ 881.506383][ T5931] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 881.526994][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.537471][ T5931] usb 5-1: Product: syz [ 881.542256][ T5931] usb 5-1: Manufacturer: syz [ 881.545730][ T9] usb 6-1: USB disconnect, device number 88 [ 881.553210][ T5931] usb 5-1: SerialNumber: syz [ 881.568505][ T9] Unregistered device Sky IT Digital Key (green led) [ 881.570299][ T9] as10x_usb: device has been disconnected [ 881.600350][ T5931] usb 5-1: config 0 descriptor?? [ 882.103868][T18786] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3260'. [ 882.130035][T18786] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3260'. [ 882.145659][ T5931] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 882.153326][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 882.194109][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 882.214012][ T5931] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 882.228021][ T5931] usb 5-1: media controller created [ 882.260578][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 882.343827][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3261'. [ 882.359970][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3261'. [ 882.460022][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.470325][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 882.531109][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 882.543134][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 882.551313][ T24] usb 4-1: SerialNumber: syz [ 882.561588][ T24] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 882.568516][ T24] cdc_mbim 4-1:1.0: bind() failure [ 882.831400][ T5931] zl10353_read_register: readreg error (reg=127, ret==0) [ 882.840528][ T5931] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 882.939836][ T5931] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 882.954479][ T5931] usb 5-1: USB disconnect, device number 47 [ 882.985368][T18802] netlink: 'syz.2.3264': attribute type 27 has an invalid length. [ 883.038776][ T5931] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 883.739795][ T5931] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 883.971406][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.026257][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.036832][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 884.061030][ T5931] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 884.090781][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.121208][ T5931] usb 5-1: config 0 descriptor?? [ 884.182227][T18814] bridge0: entered promiscuous mode [ 884.203969][T18814] bridge0: port 3(macvlan2) entered blocking state [ 884.211445][T18814] bridge0: port 3(macvlan2) entered disabled state [ 884.221544][T18814] macvlan2: entered allmulticast mode [ 884.228109][T18814] bridge0: entered allmulticast mode [ 884.253427][T18814] macvlan2: left allmulticast mode [ 884.260259][T18814] bridge0: left allmulticast mode [ 884.274841][T18814] bridge0: left promiscuous mode [ 884.552083][ T5931] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 884.729941][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 884.800661][T18808] FAULT_INJECTION: forcing a failure. [ 884.800661][T18808] name failslab, interval 1, probability 0, space 0, times 0 [ 884.815016][T18808] CPU: 1 UID: 0 PID: 18808 Comm: syz.4.3265 Tainted: G L syzkaller #0 PREEMPT(full) [ 884.815036][T18808] Tainted: [L]=SOFTLOCKUP [ 884.815041][T18808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 884.815048][T18808] Call Trace: [ 884.815053][T18808] [ 884.815064][T18808] dump_stack_lvl+0xe8/0x150 [ 884.815087][T18808] should_fail_ex+0x412/0x560 [ 884.815105][T18808] should_failslab+0xa8/0x100 [ 884.815119][T18808] ? ep_insert+0x283/0x1a40 [ 884.815136][T18808] kmem_cache_alloc_noprof+0x87/0x650 [ 884.815148][T18808] ? percpu_counter_add_batch+0xea/0x1d0 [ 884.815162][T18808] ep_insert+0x283/0x1a40 [ 884.815177][T18808] ? __lock_acquire+0x6b5/0x2cf0 [ 884.815194][T18808] ? do_epoll_ctl+0x3c9/0xe80 [ 884.815208][T18808] ? __pfx_ep_insert+0x10/0x10 [ 884.815222][T18808] ? __pfx___mutex_lock+0x10/0x10 [ 884.815235][T18808] ? __fget_files+0x2a/0x420 [ 884.815252][T18808] ? __fget_files+0x2a/0x420 [ 884.815264][T18808] ? __fget_files+0x3a0/0x420 [ 884.815277][T18808] ? __fget_files+0x2a/0x420 [ 884.815294][T18808] do_epoll_ctl+0x7f4/0xe80 [ 884.815313][T18808] __x64_sys_epoll_ctl+0x165/0x1b0 [ 884.815329][T18808] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 884.815349][T18808] do_syscall_64+0x14d/0xf80 [ 884.815358][T18808] ? trace_irq_disable+0x3b/0x150 [ 884.815373][T18808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.815383][T18808] ? clear_bhb_loop+0x40/0x90 [ 884.815398][T18808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.815408][T18808] RIP: 0033:0x7f7a03d9c799 [ 884.815421][T18808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.815430][T18808] RSP: 002b:00007f7a04b7c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 884.815443][T18808] RAX: ffffffffffffffda RBX: 00007f7a04015fa0 RCX: 00007f7a03d9c799 [ 884.815451][T18808] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 884.815457][T18808] RBP: 00007f7a04b7c090 R08: 0000000000000000 R09: 0000000000000000 [ 884.815463][T18808] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 884.815470][T18808] R13: 00007f7a04016038 R14: 00007f7a04015fa0 R15: 00007f7a0413fa48 [ 884.815485][T18808] [ 884.816855][ T5931] usb 5-1: USB disconnect, device number 48 [ 885.079223][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.143234][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.196059][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 885.231400][ T1209] usb 4-1: USB disconnect, device number 40 [ 885.271982][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 885.305122][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.324403][T18828] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3271'. [ 885.336423][ T9] usb 3-1: config 0 descriptor?? [ 885.783565][ T9] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 885.797032][ T1209] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 886.135363][ T1209] usb 6-1: Using ep0 maxpacket: 16 [ 886.162188][ T5931] usb 3-1: USB disconnect, device number 10 [ 886.197195][ T1209] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 886.218859][ T1209] usb 6-1: config 0 has no interface number 0 [ 886.405539][ T1209] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 886.415498][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.429922][ T1209] usb 6-1: Product: syz [ 886.434257][ T1209] usb 6-1: Manufacturer: syz [ 886.438877][ T1209] usb 6-1: SerialNumber: syz [ 886.452454][ T1209] usb 6-1: config 0 descriptor?? [ 886.458432][T18850] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 886.564617][T18842] fido_id[18842]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 886.958654][ T1209] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 886.968319][ T1209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 887.027319][ T1209] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 887.072548][ T1209] usb 6-1: media controller created [ 887.154520][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 887.260232][ T1209] zl10353_read_register: readreg error (reg=127, ret==0) [ 887.284971][ T1209] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 887.305280][ T1209] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 887.387104][ T1209] usb 6-1: USB disconnect, device number 89 [ 887.426771][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3279'. [ 887.462279][ T1209] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 887.484004][T18864] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 888.099869][ T1209] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 888.492379][ T1209] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 888.502696][ T1209] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 888.592645][ T29] audit: type=1800 audit(1773302371.045:596): pid=18886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3285" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 888.618370][ T1209] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 888.628628][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 888.639037][ T1209] usb 6-1: SerialNumber: syz [ 888.655495][ T1209] cdc_mbim 6-1:1.0: MBIM functional descriptor missing [ 888.676181][ T1209] cdc_mbim 6-1:1.0: bind() failure [ 890.029829][ T5911] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 890.243747][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 890.356391][ T5911] usb 4-1: config 0 has no interfaces? [ 890.379825][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 890.511725][ T5911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 890.585700][ T5911] usb 4-1: Manufacturer: syz [ 890.676255][ T5911] usb 4-1: config 0 descriptor?? [ 890.900415][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 891.049909][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 891.061323][ T24] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 891.093207][ T24] usb 5-1: config 0 has no interface number 0 [ 891.131303][ T24] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 891.255495][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.269839][ T24] usb 5-1: Product: syz [ 891.274047][ T24] usb 5-1: Manufacturer: syz [ 891.282466][ T24] usb 5-1: SerialNumber: syz [ 891.291890][ T24] usb 5-1: config 0 descriptor?? [ 891.448884][T18903] syz_tun: entered allmulticast mode [ 891.532968][ T5911] usb 6-1: USB disconnect, device number 90 [ 891.750593][ T24] dvb_usb_dtv5100 5-1:0.32: probe with driver dvb_usb_dtv5100 failed with error -71 [ 891.858388][ T24] usb 5-1: USB disconnect, device number 49 [ 892.606021][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'. [ 892.942133][T18933] loop2: detected capacity change from 0 to 7 [ 892.949513][T18933] loop2: [ 892.952601][T18933] loop2: partition table partially beyond EOD, truncated [ 893.439965][T18900] syz_tun: left allmulticast mode [ 893.462028][ T24] usb 4-1: USB disconnect, device number 41 [ 893.571112][T18946] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 893.924229][T18952] binder: BINDER_SET_CONTEXT_MGR already set [ 893.932582][T18952] binder: 18951:18952 ioctl 4018620d 200000004a80 returned -16 [ 893.980327][T12685] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 894.131496][T12685] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.141908][T12685] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 894.163283][T12685] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 894.175696][T12685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.180033][ T5911] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 894.194010][T12685] usb 3-1: config 0 descriptor?? [ 894.320101][ T24] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 894.341390][ T5911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.351860][ T5911] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 894.367330][ T5911] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 894.386439][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 894.397181][ T5911] usb 4-1: SerialNumber: syz [ 894.420338][ T5911] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 894.427388][ T5911] cdc_mbim 4-1:1.0: bind() failure [ 894.470155][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 894.476842][ T24] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 894.485923][ T24] usb 6-1: config 0 has no interface number 0 [ 894.494281][ T24] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 894.504693][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.513076][ T24] usb 6-1: Product: syz [ 894.517363][ T24] usb 6-1: Manufacturer: syz [ 894.522717][ T24] usb 6-1: SerialNumber: syz [ 894.530892][ T24] usb 6-1: config 0 descriptor?? [ 895.037492][ T24] dvb_usb_dtv5100 6-1:0.32: probe with driver dvb_usb_dtv5100 failed with error -71 [ 895.071826][ T24] usb 6-1: USB disconnect, device number 91 [ 895.473261][T18976] FAULT_INJECTION: forcing a failure. [ 895.473261][T18976] name failslab, interval 1, probability 0, space 0, times 0 [ 895.490775][T18976] CPU: 0 UID: 0 PID: 18976 Comm: syz.4.3312 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.490807][T18976] Tainted: [L]=SOFTLOCKUP [ 895.490814][T18976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 895.490826][T18976] Call Trace: [ 895.490835][T18976] [ 895.490844][T18976] dump_stack_lvl+0xe8/0x150 [ 895.490872][T18976] should_fail_ex+0x412/0x560 [ 895.490891][T18976] should_failslab+0xa8/0x100 [ 895.490908][T18976] __kmalloc_noprof+0xe8/0x760 [ 895.490920][T18976] ? ___neigh_create+0x6d5/0x2280 [ 895.490937][T18976] ___neigh_create+0x6d5/0x2280 [ 895.490954][T18976] ? __ipv6_neigh_lookup_noref+0x531/0x710 [ 895.490977][T18976] ip6_finish_output2+0x729/0x13e0 [ 895.490996][T18976] ? ip6_output+0x126/0x550 [ 895.491010][T18976] ip6_output+0x340/0x550 [ 895.491024][T18976] ? ip6_mr_output+0x1f3/0x11c0 [ 895.491114][T18976] ip6_mr_output+0x549/0x11c0 [ 895.491128][T18976] ? __pfx_ip6t_do_table+0x10/0x10 [ 895.491170][T18976] ? ip6_mr_output+0x1f3/0x11c0 [ 895.491183][T18976] ? __pfx_ip6_mr_output+0x10/0x10 [ 895.491200][T18976] ? __ip6_local_out+0x15c/0x940 [ 895.491214][T18976] ? __ip6_local_out+0x8f8/0x940 [ 895.491225][T18976] ? __ip6_local_out+0x15c/0x940 [ 895.491246][T18976] ? ip6_local_out+0x16e/0x190 [ 895.491255][T18976] ? ip6_send_skb+0x10f/0x390 [ 895.491270][T18976] ip6_send_skb+0x1d5/0x390 [ 895.491286][T18976] udp_v6_send_skb+0xc17/0x1860 [ 895.491332][T18976] udpv6_sendmsg+0x1d3d/0x2560 [ 895.491350][T18976] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 895.491370][T18976] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 895.491402][T18976] ? inet_send_prepare+0x5c/0x270 [ 895.491415][T18976] ? inet6_sendmsg+0xe4/0x120 [ 895.491427][T18976] ____sys_sendmsg+0x5c7/0x9f0 [ 895.491437][T18976] ? __lock_acquire+0x6b5/0x2cf0 [ 895.491456][T18976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 895.491471][T18976] ? import_iovec+0x73/0xa0 [ 895.491489][T18976] ___sys_sendmsg+0x2a5/0x360 [ 895.491502][T18976] ? __pfx____sys_sendmsg+0x10/0x10 [ 895.491514][T18976] ? kstrtouint+0x6e/0xe0 [ 895.491540][T18976] ? __fget_files+0x2a/0x420 [ 895.491556][T18976] ? __fget_files+0x3a0/0x420 [ 895.491574][T18976] __sys_sendmmsg+0x27c/0x4e0 [ 895.491587][T18976] ? __pfx___sys_sendmmsg+0x10/0x10 [ 895.491595][T18976] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 895.491619][T18976] ? ksys_write+0x242/0x270 [ 895.491632][T18976] ? __pfx_ksys_write+0x10/0x10 [ 895.491645][T18976] __x64_sys_sendmmsg+0xa0/0xc0 [ 895.491663][T18976] do_syscall_64+0x14d/0xf80 [ 895.491672][T18976] ? trace_irq_disable+0x3b/0x150 [ 895.491687][T18976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.491698][T18976] ? clear_bhb_loop+0x40/0x90 [ 895.491711][T18976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.491722][T18976] RIP: 0033:0x7f7a03d9c799 [ 895.491733][T18976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.491742][T18976] RSP: 002b:00007f7a04b7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 895.491755][T18976] RAX: ffffffffffffffda RBX: 00007f7a04015fa0 RCX: 00007f7a03d9c799 [ 895.491765][T18976] RDX: 0000000000000001 RSI: 0000200000001840 RDI: 0000000000000004 [ 895.491776][T18976] RBP: 00007f7a04b7c090 R08: 0000000000000000 R09: 0000000000000000 [ 895.491786][T18976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.491796][T18976] R13: 00007f7a04016038 R14: 00007f7a04015fa0 R15: 00007f7a0413fa48 [ 895.491822][T18976] [ 896.425248][T12685] usb 3-1: USB disconnect, device number 11 [ 896.817310][T19001] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3319'. [ 896.847276][T19001] geneve2: entered promiscuous mode [ 896.977866][T19003] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 896.980247][ T5887] usb 4-1: USB disconnect, device number 42 [ 897.490224][T19023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 897.542511][ T5887] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 897.887083][T19026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 898.084271][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 898.116231][ T5887] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 898.123832][T19029] syzkaller1: entered promiscuous mode [ 898.124630][ T5887] usb 5-1: config 0 has no interface number 0 [ 898.144624][T19029] syzkaller1: entered allmulticast mode [ 898.174998][ T5887] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 898.316799][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.350398][ T5887] usb 5-1: Product: syz [ 898.358387][ T5887] usb 5-1: Manufacturer: syz [ 898.369277][ T5887] usb 5-1: SerialNumber: syz [ 898.386585][ T5887] usb 5-1: config 0 descriptor?? [ 898.399814][ T24] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 898.441369][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 898.551465][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.562567][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.572489][T12685] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 898.589331][ T24] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 898.610801][ T24] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 898.628755][ T24] usb 6-1: Manufacturer: syz [ 898.646593][ T24] usb 6-1: config 0 descriptor?? [ 898.756979][T12685] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.779044][T12685] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 898.817099][T12685] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 898.861667][T12685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 898.869992][ T5887] dvb_usb_dtv5100 5-1:0.32: probe with driver dvb_usb_dtv5100 failed with error -71 [ 898.910586][T12685] usb 3-1: SerialNumber: syz [ 898.935064][T12685] cdc_mbim 3-1:1.0: MBIM functional descriptor missing [ 898.959191][ T5887] usb 5-1: USB disconnect, device number 50 [ 898.995327][T12685] cdc_mbim 3-1:1.0: bind() failure [ 899.782961][ T24] uclogic 0003:256C:006D.001B: v1 frame probing failed: -71 [ 899.798497][ T24] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 899.809602][ T24] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 899.829100][ T24] usb 6-1: USB disconnect, device number 92 [ 900.397572][T19040] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 900.428741][ T152] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 901.031581][ T2344] pvrusb2: request_firmware fatal error with code=-110 [ 901.038474][ T2344] pvrusb2: Failure uploading firmware1 [ 901.098798][ T2344] pvrusb2: Device initialization was not successful. [ 901.125335][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 901.147713][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 901.169032][ T2344] pvrusb2: Failed to submit write-control URB status=-19 [ 901.176618][T12685] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 901.185365][ T5904] pvrusb2: Device being rendered inoperable [ 901.200551][ T2344] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 901.212982][ T2344] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 901.329737][T12685] usb 6-1: Using ep0 maxpacket: 32 [ 901.373500][T12685] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 901.490937][T19049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3328'. [ 901.561190][T12685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.583406][T12685] usb 6-1: Product: syz [ 901.606403][T12685] usb 6-1: Manufacturer: syz [ 901.746934][T12685] usb 6-1: SerialNumber: syz [ 901.765571][T12685] usb 6-1: config 0 descriptor?? [ 901.777865][T12685] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 901.939870][ T29] audit: type=1800 audit(1773302384.375:597): pid=19057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3330" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 902.023444][ T5931] usb 3-1: USB disconnect, device number 12 [ 902.099782][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 902.127918][T19059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3332'. [ 902.183142][T19059] team0: Port device team_slave_0 removed [ 902.251786][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.268802][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 902.292028][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 902.302731][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 902.311714][ T24] usb 4-1: SerialNumber: syz [ 902.324930][ T24] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 902.332448][ T24] cdc_mbim 4-1:1.0: bind() failure [ 902.531236][T19065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.548994][T19046] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 902.558552][T19046] syz_tun: entered allmulticast mode [ 902.566238][T19044] syz_tun: left allmulticast mode [ 902.575416][T12685] gspca_ov534_9: reg_w failed -71 [ 903.099728][T12685] gspca_ov534_9: Unknown sensor 0000 [ 903.100146][T12685] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 903.131646][T12685] usb 6-1: USB disconnect, device number 93 [ 905.053158][ T24] usb 4-1: USB disconnect, device number 43 [ 905.175595][T19099] FAULT_INJECTION: forcing a failure. [ 905.175595][T19099] name failslab, interval 1, probability 0, space 0, times 0 [ 905.223990][T19099] CPU: 1 UID: 0 PID: 19099 Comm: syz.3.3341 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.224020][T19099] Tainted: [L]=SOFTLOCKUP [ 905.224027][T19099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 905.224037][T19099] Call Trace: [ 905.224046][T19099] [ 905.224055][T19099] dump_stack_lvl+0xe8/0x150 [ 905.224088][T19099] should_fail_ex+0x412/0x560 [ 905.224116][T19099] should_failslab+0xa8/0x100 [ 905.224141][T19099] __kmalloc_cache_noprof+0x88/0x660 [ 905.224161][T19099] ? do_raw_spin_lock+0x12b/0x2f0 [ 905.224180][T19099] ? rdma_resolve_ip+0x6b/0x840 [ 905.224218][T19099] rdma_resolve_ip+0x6b/0x840 [ 905.224241][T19099] ? __pfx_addr_handler+0x10/0x10 [ 905.224273][T19099] rdma_resolve_addr+0x84a/0x21d0 [ 905.224300][T19099] ? rcu_is_watching+0x15/0xb0 [ 905.224325][T19099] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 905.224347][T19099] ? __mutex_lock+0x319/0x1300 [ 905.224376][T19099] ? ucma_resolve_ip+0x302/0x490 [ 905.224397][T19099] ? xa_load+0x60/0x210 [ 905.224430][T19099] ? do_raw_spin_unlock+0xf5/0x210 [ 905.224452][T19099] ucma_resolve_ip+0x338/0x490 [ 905.224475][T19099] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 905.224512][T19099] ucma_write+0x24e/0x2f0 [ 905.224535][T19099] ? __pfx_ucma_write+0x10/0x10 [ 905.224554][T19099] ? security_file_permission+0x75/0x260 [ 905.224575][T19099] ? rw_verify_area+0x255/0x4d0 [ 905.224595][T19099] ? __pfx_ucma_write+0x10/0x10 [ 905.224615][T19099] vfs_write+0x29a/0xb90 [ 905.224640][T19099] ? __pfx_vfs_write+0x10/0x10 [ 905.224660][T19099] ? __fget_files+0x2a/0x420 [ 905.224687][T19099] ? __fget_files+0x2a/0x420 [ 905.224710][T19099] ? __fget_files+0x3a0/0x420 [ 905.224732][T19099] ? __fget_files+0x2a/0x420 [ 905.224761][T19099] ksys_write+0x150/0x270 [ 905.224780][T19099] ? __pfx_ksys_write+0x10/0x10 [ 905.224809][T19099] do_syscall_64+0x14d/0xf80 [ 905.224825][T19099] ? trace_irq_disable+0x3b/0x150 [ 905.224850][T19099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.224869][T19099] ? clear_bhb_loop+0x40/0x90 [ 905.224889][T19099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.224907][T19099] RIP: 0033:0x7f5a24d9c799 [ 905.224924][T19099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.224939][T19099] RSP: 002b:00007f5a25bdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 905.224959][T19099] RAX: ffffffffffffffda RBX: 00007f5a25015fa0 RCX: 00007f5a24d9c799 [ 905.224972][T19099] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000003 [ 905.224983][T19099] RBP: 00007f5a25bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 905.224993][T19099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.225003][T19099] R13: 00007f5a25016038 R14: 00007f5a25015fa0 R15: 00007f5a2513fa48 [ 905.225029][T19099] [ 905.690612][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3343'. [ 905.839246][T19110] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 906.206251][T12685] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 906.359196][T19125] syz.0.3345 (19125): drop_caches: 4 [ 906.375616][T12685] usb 6-1: Using ep0 maxpacket: 16 [ 906.384057][T12685] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 906.396205][T12685] usb 6-1: config 0 has no interface number 0 [ 906.406933][T12685] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 906.418744][T12685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.427771][T12685] usb 6-1: Product: syz [ 906.438016][T12685] usb 6-1: Manufacturer: syz [ 906.442860][T12685] usb 6-1: SerialNumber: syz [ 906.468783][T12685] usb 6-1: config 0 descriptor?? [ 906.473845][ T1209] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 906.639822][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 906.658966][ T1209] usb 3-1: config 0 has no interfaces? [ 906.689473][ T1209] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 906.710749][ T1209] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 906.750331][ T5931] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 906.763513][ T1209] usb 3-1: Manufacturer: syz [ 906.807489][ T1209] usb 3-1: config 0 descriptor?? [ 906.918205][T12685] dvb_usb_dtv5100 6-1:0.32: probe with driver dvb_usb_dtv5100 failed with error -71 [ 906.934758][T12685] usb 6-1: USB disconnect, device number 94 [ 906.971283][ T5931] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 906.979735][ T5931] usb 4-1: config 5 has no interface number 0 [ 906.993640][ T5931] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 907.010062][ T5931] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 907.069947][ T5931] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 907.127725][T19120] syz_tun: entered allmulticast mode [ 907.233352][ T5931] usb 4-1: config 5 interface 123 has no altsetting 0 [ 907.364956][ T5931] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 907.374248][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.383565][ T5931] usb 4-1: Product: syz [ 907.387865][ T5931] usb 4-1: Manufacturer: syz [ 907.393533][ T5931] usb 4-1: SerialNumber: syz [ 908.199823][T17870] Bluetooth: hci4: command 0x0406 tx timeout [ 908.284100][ T29] audit: type=1326 audit(1773302390.735:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19143 comm="syz.0.3353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b0419c799 code=0x0 [ 908.631342][ T29] audit: type=1326 audit(1773302391.085:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19149 comm="syz.4.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a03d9c799 code=0x7fc00000 [ 908.811643][T19157] openvswitch: netlink: Flow actions attr not present in new flow. [ 908.812102][T19158] openvswitch: netlink: Flow actions attr not present in new flow. [ 908.885049][T19160] loop2: detected capacity change from 0 to 7 [ 908.893292][T19160] Dev loop2: unable to read RDB block 7 [ 908.899366][T19160] loop2: AHDI p1 p2 p3 [ 908.904838][T19160] loop2: partition table partially beyond EOD, truncated [ 908.913576][T19160] loop2: p1 start 1818582900 is beyond EOD, truncated [ 908.921531][T19160] loop2: p3 start 335544320 is beyond EOD, truncated [ 909.034450][T19117] syz_tun: left allmulticast mode [ 909.041648][ T5911] usb 3-1: USB disconnect, device number 13 [ 909.199823][ T29] audit: type=1326 audit(1773302391.645:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19149 comm="syz.4.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a03d9c799 code=0x7fc00000 [ 909.299514][T19164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3358'. [ 909.341806][ T5931] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 909.379123][ T5931] usb 4-1: USB disconnect, device number 44 [ 909.432205][ T5911] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 909.589917][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 909.603539][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.633875][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.670422][ T5911] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 909.679777][ T1209] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 909.692343][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.729184][ T5911] usb 3-1: config 0 descriptor?? [ 909.839763][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 909.849374][ T1209] usb 5-1: too many configurations: 214, using maximum allowed: 8 [ 909.869365][ T1209] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 909.891434][ T1209] usb 5-1: can't read configurations, error -61 [ 910.029741][ T1209] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 910.152139][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3364'. [ 910.161365][T19185] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3364'. [ 910.299726][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 910.310416][ T1209] usb 5-1: too many configurations: 214, using maximum allowed: 8 [ 910.325749][ T1209] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 910.334030][ T1209] usb 5-1: can't read configurations, error -61 [ 910.345700][ T1209] usb usb5-port1: attempt power cycle [ 910.419841][ T24] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 910.619777][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 910.627826][ T24] usb 6-1: config 0 has no interfaces? [ 910.635329][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 910.644988][ T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 910.654157][ T24] usb 6-1: Manufacturer: syz [ 910.672854][ T24] usb 6-1: config 0 descriptor?? [ 910.739783][ T1209] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 910.771292][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 910.777025][ T1209] usb 5-1: too many configurations: 214, using maximum allowed: 8 [ 910.796889][ T1209] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 910.813644][ T1209] usb 5-1: can't read configurations, error -61 [ 910.959839][ T1209] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 911.080321][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 911.084621][T19186] syz_tun: entered allmulticast mode [ 911.097669][ T1209] usb 5-1: too many configurations: 214, using maximum allowed: 8 [ 911.152242][ T1209] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 911.184821][ T1209] usb 5-1: can't read configurations, error -61 [ 911.208374][ T1209] usb usb5-port1: unable to enumerate USB device [ 912.125808][ T5911] usbhid 3-1:0.0: can't add hid device: -71 [ 912.132542][ T5911] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 912.181053][ T5911] usb 3-1: USB disconnect, device number 14 [ 912.578879][T19214] fuse: Bad value for 'fd' [ 912.813104][T19218] netlink: 'syz.4.3372': attribute type 1 has an invalid length. [ 912.849378][T19218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 912.909822][ T5911] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 912.994635][T19180] syz_tun: left allmulticast mode [ 913.002837][T12685] usb 6-1: USB disconnect, device number 95 [ 913.062307][ T5911] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 913.082509][ T5911] usb 4-1: config 5 has no interface number 0 [ 913.110486][ T5911] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 913.149329][ T5911] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 913.197684][ T5911] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 913.207918][ T5911] usb 4-1: config 5 interface 123 has no altsetting 0 [ 913.232690][ T5911] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 913.242920][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.251310][ T5911] usb 4-1: Product: syz [ 913.269783][ T5911] usb 4-1: Manufacturer: syz [ 913.280120][ T5911] usb 4-1: SerialNumber: syz [ 913.607105][T19232] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 913.634182][T19238] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 914.184820][T19246] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 914.741968][T19250] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3378'. [ 914.899077][T19250] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.906343][T19250] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.473830][ T5911] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 915.567889][ T5911] usb 4-1: USB disconnect, device number 45 [ 915.931660][T19263] FAULT_INJECTION: forcing a failure. [ 915.931660][T19263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.945650][T19263] CPU: 1 UID: 0 PID: 19263 Comm: syz.4.3383 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.945680][T19263] Tainted: [L]=SOFTLOCKUP [ 915.945688][T19263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 915.945699][T19263] Call Trace: [ 915.945707][T19263] [ 915.945715][T19263] dump_stack_lvl+0xe8/0x150 [ 915.945746][T19263] should_fail_ex+0x412/0x560 [ 915.945773][T19263] _copy_from_user+0x2d/0xb0 [ 915.945801][T19263] __sys_connect+0x156/0x450 [ 915.945828][T19263] ? __pfx___sys_connect+0x10/0x10 [ 915.945868][T19263] ? __pfx_ksys_write+0x10/0x10 [ 915.945895][T19263] __x64_sys_connect+0x7a/0x90 [ 915.945920][T19263] do_syscall_64+0x14d/0xf80 [ 915.945937][T19263] ? trace_irq_disable+0x3b/0x150 [ 915.945963][T19263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.945982][T19263] ? clear_bhb_loop+0x40/0x90 [ 915.946004][T19263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.946022][T19263] RIP: 0033:0x7f7a03d9c799 [ 915.946039][T19263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.946056][T19263] RSP: 002b:00007f7a04b7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 915.946076][T19263] RAX: ffffffffffffffda RBX: 00007f7a04015fa0 RCX: 00007f7a03d9c799 [ 915.946090][T19263] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 915.946102][T19263] RBP: 00007f7a04b7c090 R08: 0000000000000000 R09: 0000000000000000 [ 915.946113][T19263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.946124][T19263] R13: 00007f7a04016038 R14: 00007f7a04015fa0 R15: 00007f7a0413fa48 [ 915.946150][T19263] [ 916.261791][T19270] 8021q: VLANs not supported on vxcan1 [ 916.393157][T19278] FAULT_INJECTION: forcing a failure. [ 916.393157][T19278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.419435][T19278] CPU: 0 UID: 0 PID: 19278 Comm: syz.4.3389 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.419466][T19278] Tainted: [L]=SOFTLOCKUP [ 916.419473][T19278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 916.419484][T19278] Call Trace: [ 916.419492][T19278] [ 916.419499][T19278] dump_stack_lvl+0xe8/0x150 [ 916.419529][T19278] should_fail_ex+0x412/0x560 [ 916.419557][T19278] _copy_to_user+0x31/0xb0 [ 916.419586][T19278] simple_read_from_buffer+0xe1/0x170 [ 916.419615][T19278] proc_fail_nth_read+0x1bb/0x230 [ 916.419647][T19278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 916.419671][T19278] ? rw_verify_area+0x2a6/0x4d0 [ 916.419689][T19278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 916.419711][T19278] vfs_read+0x20c/0xa70 [ 916.419726][T19278] ? fdget_pos+0x246/0x320 [ 916.419747][T19278] ? ksys_write+0x1e6/0x270 [ 916.419766][T19278] ? __pfx___mutex_lock+0x10/0x10 [ 916.419784][T19278] ? __pfx_vfs_read+0x10/0x10 [ 916.419802][T19278] ? __fget_files+0x2a/0x420 [ 916.419827][T19278] ? __fget_files+0x3a0/0x420 [ 916.419859][T19278] ? __fget_files+0x2a/0x420 [ 916.419889][T19278] ksys_read+0x150/0x270 [ 916.419907][T19278] ? __pfx_ksys_read+0x10/0x10 [ 916.419930][T19278] do_syscall_64+0x14d/0xf80 [ 916.419947][T19278] ? trace_irq_disable+0x3b/0x150 [ 916.419970][T19278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.419987][T19278] ? clear_bhb_loop+0x40/0x90 [ 916.420007][T19278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.420022][T19278] RIP: 0033:0x7f7a03d5cfce [ 916.420040][T19278] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 916.420055][T19278] RSP: 002b:00007f7a04b7bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 916.420075][T19278] RAX: ffffffffffffffda RBX: 00007f7a04b7c6c0 RCX: 00007f7a03d5cfce [ 916.420090][T19278] RDX: 000000000000000f RSI: 00007f7a04b7c0a0 RDI: 0000000000000007 [ 916.420101][T19278] RBP: 00007f7a04b7c090 R08: 0000000000000000 R09: 0000000000000000 [ 916.420113][T19278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.420123][T19278] R13: 00007f7a04016038 R14: 00007f7a04015fa0 R15: 00007f7a0413fa48 [ 916.420153][T19278] [ 916.723128][T19284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 916.865072][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.955012][ T5887] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 917.082831][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.139030][ T5887] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 917.153350][ T5887] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 917.171746][ T5887] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 917.181298][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.322152][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.488816][ T5887] usb 5-1: GET_CAPABILITIES returned 0 [ 917.495756][ T5887] usbtmc 5-1:16.0: can't read capabilities [ 917.558458][T19298] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3397'. [ 917.573302][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.587401][T17870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 917.601031][T17870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 917.627646][T17870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 917.645453][T17870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 917.653693][T17870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 917.694125][ T9] usb 5-1: USB disconnect, device number 55 [ 918.104953][ T36] bridge_slave_1: left allmulticast mode [ 918.123378][ T36] bridge_slave_1: left promiscuous mode [ 918.138729][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.171798][ T36] bridge_slave_0: left allmulticast mode [ 918.186721][ T36] bridge_slave_0: left promiscuous mode [ 918.207348][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.117265][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.145347][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.166756][ T36] bond0 (unregistering): Released all slaves [ 919.627467][ T36] tipc: Left network mode [ 919.728003][ T5823] Bluetooth: hci0: command tx timeout [ 919.743477][T19302] chnl_net:caif_netlink_parms(): no params data found [ 920.122251][T19360] binder: BINDER_SET_CONTEXT_MGR already set [ 920.128282][T19360] binder: 19358:19360 ioctl 4018620d 200000000040 returned -16 [ 920.176605][T19302] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.218005][T19363] loop4: detected capacity change from 0 to 7 [ 920.227242][T19363] Dev loop4: unable to read RDB block 7 [ 920.237253][T19363] loop4: AHDI p1 p2 p3 [ 920.248117][T19363] loop4: partition table partially beyond EOD, truncated [ 920.256279][T19363] loop4: p1 start 1601398130 is beyond EOD, truncated [ 920.264362][T19363] loop4: p2 start 1702059890 is beyond EOD, truncated [ 920.288388][T19302] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.343827][ T5193] Dev loop4: unable to read RDB block 7 [ 920.349505][ T5193] loop4: AHDI p1 p2 p3 [ 920.359433][T19302] bridge_slave_0: entered allmulticast mode [ 920.384093][ T5193] loop4: partition table partially beyond EOD, truncated [ 920.491396][ T29] audit: type=1800 audit(1773302402.855:601): pid=19361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3405" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0 [ 920.497240][T19302] bridge_slave_0: entered promiscuous mode [ 920.527034][ T5193] loop4: p1 start 1601398130 is beyond EOD, truncated [ 920.535993][ T5193] loop4: p2 start 1702059890 is beyond EOD, truncated [ 920.732202][T19302] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.902355][T19302] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.948218][T19302] bridge_slave_1: entered allmulticast mode [ 920.988635][T19302] bridge_slave_1: entered promiscuous mode [ 921.009970][T19383] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3410'. [ 921.347450][T19302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.449007][T19302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.591125][T19302] team0: Port device team_slave_0 added [ 921.632314][T19302] team0: Port device team_slave_1 added [ 921.799973][ T5823] Bluetooth: hci0: command tx timeout [ 921.889488][ T36] hsr_slave_0: left promiscuous mode [ 922.016423][ T36] hsr_slave_1: left promiscuous mode [ 922.100508][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.108482][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.118195][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.135840][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.210583][ T36] veth1_macvtap: left promiscuous mode [ 922.216133][ T36] veth0_macvtap: left promiscuous mode [ 922.221832][ T36] veth1_vlan: left promiscuous mode [ 922.229886][ T36] veth0_vlan: left promiscuous mode [ 922.923875][ T29] audit: type=1800 audit(1773302405.375:602): pid=19409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3414" name="bus" dev="ramfs" ino=85216 res=0 errno=0 [ 923.293681][ T36] team0 (unregistering): Port device team_slave_1 removed [ 923.343514][ T36] team0 (unregistering): Port device team_slave_0 removed [ 923.586806][T19424] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3416'. [ 923.694027][T19302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.702985][T19302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.764522][T19302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.786002][T19398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 923.808913][T19424] FAULT_INJECTION: forcing a failure. [ 923.808913][T19424] name failslab, interval 1, probability 0, space 0, times 0 [ 923.821581][T19424] CPU: 0 UID: 0 PID: 19424 Comm: syz.5.3416 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.821608][T19424] Tainted: [L]=SOFTLOCKUP [ 923.821615][T19424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 923.821625][T19424] Call Trace: [ 923.821632][T19424] [ 923.821638][T19424] dump_stack_lvl+0xe8/0x150 [ 923.821658][T19424] should_fail_ex+0x412/0x560 [ 923.821675][T19424] should_failslab+0xa8/0x100 [ 923.821689][T19424] __kmalloc_noprof+0xe8/0x760 [ 923.821701][T19424] ? switchdev_deferred_enqueue+0x2d/0x240 [ 923.821793][T19424] ? __lock_acquire+0x6b5/0x2cf0 [ 923.821809][T19424] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 923.821819][T19424] switchdev_deferred_enqueue+0x2d/0x240 [ 923.821830][T19424] br_set_state+0x374/0x730 [ 923.821874][T19424] ? __pfx_br_set_state+0x10/0x10 [ 923.821885][T19424] ? do_raw_spin_lock+0x12b/0x2f0 [ 923.821897][T19424] ? do_raw_spin_lock+0x12b/0x2f0 [ 923.821909][T19424] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 923.821917][T19424] ? br_become_designated_port+0x20/0x250 [ 923.821931][T19424] br_stp_disable_port+0x76/0x1d0 [ 923.821947][T19424] br_stp_disable_bridge+0x81/0x150 [ 923.821970][T19424] br_dev_stop+0x2d/0x180 [ 923.821982][T19424] ? __pfx_br_dev_stop+0x10/0x10 [ 923.821995][T19424] __dev_close_many+0x368/0x6d0 [ 923.822013][T19424] ? __pfx___dev_close_many+0x10/0x10 [ 923.822024][T19424] ? __dev_change_flags+0x1b0/0x690 [ 923.822041][T19424] ? __local_bh_enable_ip+0xd0/0x130 [ 923.822056][T19424] __dev_change_flags+0x2cb/0x690 [ 923.822074][T19424] ? __pfx___dev_change_flags+0x10/0x10 [ 923.822093][T19424] netif_change_flags+0x88/0x1a0 [ 923.822110][T19424] do_setlink+0xf82/0x4590 [ 923.822126][T19424] ? trace_sched_exit_tp+0x3a/0x150 [ 923.822144][T19424] ? __pfx_do_setlink+0x10/0x10 [ 923.822156][T19424] ? __lock_acquire+0x6b5/0x2cf0 [ 923.822175][T19424] ? do_raw_spin_lock+0x12b/0x2f0 [ 923.822186][T19424] ? do_raw_spin_lock+0x12b/0x2f0 [ 923.822201][T19424] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 923.822217][T19424] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.822233][T19424] ? __mutex_lock+0xd09/0x1300 [ 923.822244][T19424] ? __mutex_lock+0x5ac/0x1300 [ 923.822255][T19424] ? rtnl_newlink+0x8a1/0x1be0 [ 923.822269][T19424] ? __pfx___mutex_lock+0x10/0x10 [ 923.822286][T19424] ? ns_capable+0x89/0xe0 [ 923.822302][T19424] rtnl_newlink+0x15a9/0x1be0 [ 923.822321][T19424] ? __pfx_rtnl_newlink+0x10/0x10 [ 923.822333][T19424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.822358][T19424] ? kasan_quarantine_put+0xbb/0x1f0 [ 923.822369][T19424] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.822385][T19424] ? kmem_cache_free+0x187/0x630 [ 923.822396][T19424] ? nlmon_xmit+0xb0/0x100 [ 923.822416][T19424] ? __lock_acquire+0x6b5/0x2cf0 [ 923.822431][T19424] ? __local_bh_enable_ip+0xd0/0x130 [ 923.822449][T19424] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.822465][T19424] ? __dev_queue_xmit+0x277/0x3890 [ 923.822474][T19424] ? __local_bh_enable_ip+0xd0/0x130 [ 923.822485][T19424] ? __dev_queue_xmit+0x277/0x3890 [ 923.822506][T19424] ? __pfx_rtnl_newlink+0x10/0x10 [ 923.822519][T19424] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 923.822534][T19424] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 923.822546][T19424] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 923.822558][T19424] ? ref_tracker_free+0x693/0x840 [ 923.822570][T19424] ? __copy_skb_header+0xa3/0x4a0 [ 923.822581][T19424] ? __pfx_ref_tracker_free+0x10/0x10 [ 923.822593][T19424] ? __skb_clone+0x63/0x7a0 [ 923.822606][T19424] netlink_rcv_skb+0x232/0x4b0 [ 923.822620][T19424] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 923.822634][T19424] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 923.822651][T19424] ? netlink_deliver_tap+0x2e/0x1b0 [ 923.822667][T19424] netlink_unicast+0x80f/0x9b0 [ 923.822682][T19424] ? __pfx_netlink_unicast+0x10/0x10 [ 923.822694][T19424] ? netlink_sendmsg+0x650/0xb40 [ 923.822706][T19424] ? skb_put+0x11b/0x210 [ 923.822721][T19424] netlink_sendmsg+0x813/0xb40 [ 923.822737][T19424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.822751][T19424] ? aa_sock_msg_perm+0xf1/0x1b0 [ 923.822765][T19424] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 923.822779][T19424] ____sys_sendmsg+0x972/0x9f0 [ 923.822793][T19424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 923.822806][T19424] ? import_iovec+0x73/0xa0 [ 923.822824][T19424] ___sys_sendmsg+0x2a5/0x360 [ 923.822835][T19424] ? __pfx____sys_sendmsg+0x10/0x10 [ 923.822860][T19424] ? __fget_files+0x2a/0x420 [ 923.822874][T19424] ? __fget_files+0x3a0/0x420 [ 923.822892][T19424] __x64_sys_sendmsg+0x1bd/0x2a0 [ 923.822903][T19424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 923.822917][T19424] ? __pfx_ksys_write+0x10/0x10 [ 923.822938][T19424] do_syscall_64+0x14d/0xf80 [ 923.822947][T19424] ? trace_irq_disable+0x3b/0x150 [ 923.822966][T19424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.822975][T19424] ? clear_bhb_loop+0x40/0x90 [ 923.822988][T19424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.822998][T19424] RIP: 0033:0x7fe26db9c799 [ 923.823010][T19424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.823019][T19424] RSP: 002b:00007fe26ea52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.823032][T19424] RAX: ffffffffffffffda RBX: 00007fe26de15fa0 RCX: 00007fe26db9c799 [ 923.823039][T19424] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000005 [ 923.823045][T19424] RBP: 00007fe26ea52090 R08: 0000000000000000 R09: 0000000000000000 [ 923.823052][T19424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.823057][T19424] R13: 00007fe26de16038 R14: 00007fe26de15fa0 R15: 00007fe26df3fa48 [ 923.823072][T19424] [ 923.823078][T19424] bridge0: error setting offload STP state on port 2(bridge_slave_1) [ 924.376366][T19424] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.398042][ T5823] Bluetooth: hci0: command tx timeout [ 924.431504][T19302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.438648][T19302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.464904][T19302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.622014][T19302] hsr_slave_0: entered promiscuous mode [ 924.629017][T19302] hsr_slave_1: entered promiscuous mode [ 924.637165][T19302] debugfs: 'hsr0' already exists in 'hsr' [ 924.674247][T19302] Cannot create hsr debugfs directory [ 924.863140][T19434] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 925.008543][T19441] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3421'. [ 925.060510][T19441] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.067864][T19441] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.029106][T19302] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 926.169525][T19302] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 926.257739][T19302] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 926.309041][T19302] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 926.346618][T19462] FAULT_INJECTION: forcing a failure. [ 926.346618][T19462] name failslab, interval 1, probability 0, space 0, times 0 [ 926.388205][T19462] CPU: 1 UID: 0 PID: 19462 Comm: syz.3.3426 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.388227][T19462] Tainted: [L]=SOFTLOCKUP [ 926.388232][T19462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 926.388238][T19462] Call Trace: [ 926.388243][T19462] [ 926.388248][T19462] dump_stack_lvl+0xe8/0x150 [ 926.388268][T19462] should_fail_ex+0x412/0x560 [ 926.388285][T19462] should_failslab+0xa8/0x100 [ 926.388299][T19462] __kmalloc_cache_noprof+0x88/0x660 [ 926.388312][T19462] ? basic_init+0x50/0x130 [ 926.388409][T19462] basic_init+0x50/0x130 [ 926.388420][T19462] tcf_proto_create+0x248/0x330 [ 926.388456][T19462] tc_new_tfilter+0x12ff/0x1780 [ 926.388483][T19462] ? __pfx_tc_new_tfilter+0x10/0x10 [ 926.388512][T19462] ? __pfx_tc_new_tfilter+0x10/0x10 [ 926.388526][T19462] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 926.388542][T19462] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 926.388555][T19462] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 926.388567][T19462] ? ref_tracker_free+0x693/0x840 [ 926.388579][T19462] ? __copy_skb_header+0xa3/0x4a0 [ 926.388591][T19462] ? __pfx_ref_tracker_free+0x10/0x10 [ 926.388603][T19462] ? __skb_clone+0x63/0x7a0 [ 926.388616][T19462] netlink_rcv_skb+0x232/0x4b0 [ 926.388630][T19462] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 926.388643][T19462] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 926.388661][T19462] ? netlink_deliver_tap+0x2e/0x1b0 [ 926.388677][T19462] netlink_unicast+0x80f/0x9b0 [ 926.388693][T19462] ? __pfx_netlink_unicast+0x10/0x10 [ 926.388705][T19462] ? netlink_sendmsg+0x650/0xb40 [ 926.388723][T19462] ? skb_put+0x11b/0x210 [ 926.388739][T19462] netlink_sendmsg+0x813/0xb40 [ 926.388756][T19462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 926.388770][T19462] ? aa_sock_msg_perm+0xf1/0x1b0 [ 926.388784][T19462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 926.388798][T19462] ____sys_sendmsg+0x972/0x9f0 [ 926.388812][T19462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 926.388826][T19462] ? import_iovec+0x73/0xa0 [ 926.388843][T19462] ___sys_sendmsg+0x2a5/0x360 [ 926.388856][T19462] ? __pfx____sys_sendmsg+0x10/0x10 [ 926.388882][T19462] ? __fget_files+0x2a/0x420 [ 926.388896][T19462] ? __fget_files+0x3a0/0x420 [ 926.388914][T19462] __x64_sys_sendmsg+0x1bd/0x2a0 [ 926.388926][T19462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 926.388940][T19462] ? __pfx_ksys_write+0x10/0x10 [ 926.388956][T19462] do_syscall_64+0x14d/0xf80 [ 926.388966][T19462] ? trace_irq_disable+0x3b/0x150 [ 926.388980][T19462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.388991][T19462] ? clear_bhb_loop+0x40/0x90 [ 926.389003][T19462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.389012][T19462] RIP: 0033:0x7f5a24d9c799 [ 926.389024][T19462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.389033][T19462] RSP: 002b:00007f5a25bdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.389045][T19462] RAX: ffffffffffffffda RBX: 00007f5a25015fa0 RCX: 00007f5a24d9c799 [ 926.389053][T19462] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 926.389059][T19462] RBP: 00007f5a25bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 926.389065][T19462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.389071][T19462] R13: 00007f5a25016038 R14: 00007f5a25015fa0 R15: 00007f5a2513fa48 [ 926.389086][T19462] [ 926.389901][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 926.482294][ T5823] Bluetooth: hci0: command tx timeout [ 927.030448][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 927.038626][ T9] usb 5-1: config 0 has no interfaces? [ 927.053715][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 927.064546][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 927.101568][ T9] usb 5-1: Manufacturer: syz [ 927.119065][T19302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.132184][ T9] usb 5-1: config 0 descriptor?? [ 927.162802][T12685] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 927.204013][T19302] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.229881][ T10] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 927.252881][T14713] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.260106][T14713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.307600][T14713] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.314771][T14713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.370710][T12685] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.385546][T12685] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 927.432841][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.450355][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 927.476994][T12685] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.489005][T12685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 927.511106][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.530098][T12685] usb 4-1: SerialNumber: syz [ 927.534856][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 927.572046][T12685] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 927.584679][ T10] usb 6-1: SerialNumber: syz [ 927.595329][T12685] cdc_mbim 4-1:1.0: bind() failure [ 927.614589][T19302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.637817][ T10] cdc_mbim 6-1:1.0: MBIM functional descriptor missing [ 927.656508][ T10] cdc_mbim 6-1:1.0: bind() failure [ 927.915393][T19459] syz_tun: entered allmulticast mode [ 927.945871][T19302] veth0_vlan: entered promiscuous mode [ 928.465518][T19302] veth1_vlan: entered promiscuous mode [ 928.840098][T19302] veth0_macvtap: entered promiscuous mode [ 929.006058][T19302] veth1_macvtap: entered promiscuous mode [ 929.131474][T19302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.167618][T19302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.192861][T14713] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.240594][T14713] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.298258][T14713] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.404560][T14713] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.687879][T14713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.698109][T14713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.796068][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.805521][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.906328][T19454] syz_tun: left allmulticast mode [ 929.943195][ T9] usb 5-1: USB disconnect, device number 56 [ 930.344661][ T5931] usb 6-1: USB disconnect, device number 96 [ 930.453207][ T86] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 930.540158][ T9] usb 4-1: USB disconnect, device number 46 [ 930.788171][T19529] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3434'. [ 930.829807][ T5931] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 930.990526][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 930.999849][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 931.007440][ T5931] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 931.019609][ T5931] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 931.031058][ T5931] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 931.041549][ T5931] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 931.056872][ T5931] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 931.067572][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.139886][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 931.149846][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 931.161597][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.172149][ T9] usb 4-1: Product: syz [ 931.177296][ T9] usb 4-1: Manufacturer: syz [ 931.182337][ T9] usb 4-1: SerialNumber: syz [ 931.190183][ T9] usb 4-1: config 0 descriptor?? [ 931.527825][ T5931] usb 6-1: usb_control_msg returned -32 [ 931.549796][ T5931] usbtmc 6-1:16.0: can't read capabilities [ 931.607641][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 931.620039][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 931.642050][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 931.651020][ T9] usb 4-1: media controller created [ 931.693636][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 931.741009][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.747411][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.295178][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 932.305130][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 932.313902][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 932.323172][T19480] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 932.360704][ T86] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 932.375914][ T9] usb 4-1: USB disconnect, device number 47 [ 932.429171][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 932.511998][T19480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.531736][T19480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.548428][T19480] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 932.562264][T19480] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 932.579963][T19480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.602138][T19480] usb 3-1: config 0 descriptor?? [ 933.029495][T19480] plantronics 0003:047F:FFFF.001C: reserved main item tag 0xd [ 933.052942][T19480] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 933.065074][T19480] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 933.083387][T19480] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 933.100847][T19480] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 933.114648][T19480] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 933.142354][T19480] plantronics 0003:047F:FFFF.001C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 933.238176][T19552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.265193][T19552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.437621][ T5931] usb 6-1: USB disconnect, device number 97 [ 933.478746][ T24] usb 3-1: USB disconnect, device number 15 [ 933.594605][T19575] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3448'. [ 933.675719][T19573] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 933.918479][T19585] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3451'. [ 934.466616][T19597] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 935.734747][T19609] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 935.835610][T19616] fuse: Bad value for 'fd' [ 936.998354][ T5931] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 937.034187][T19645] syz_tun: entered allmulticast mode [ 937.299997][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 937.330171][ T5931] usb 4-1: config 3 has an invalid interface number: 171 but max is 29 [ 937.345040][ T5931] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 937.397659][ T5931] usb 4-1: config 3 has no interface number 0 [ 937.408426][ T5931] usb 4-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 937.475990][ T5931] usb 4-1: config 3 interface 171 has no altsetting 0 [ 937.504708][ T5931] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 937.515318][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 937.527660][ T5931] usb 4-1: Product: syz [ 937.533749][ T5931] usb 4-1: Manufacturer: syz [ 937.538723][ T5931] usb 4-1: SerialNumber: syz [ 937.783986][ T5931] as10x_usb: device has been detected [ 937.806693][ T5931] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 937.912403][ T5931] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 937.963403][ T5931] as10x_usb: error during firmware upload part1 [ 937.981570][ T5931] Registered device Sky IT Digital Key (green led) [ 937.991277][ T5931] usb 4-1: USB disconnect, device number 48 [ 938.263443][ T5931] Unregistered device Sky IT Digital Key (green led) [ 938.266000][ T5931] as10x_usb: device has been disconnected [ 938.832704][ T5931] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 938.929752][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 938.969852][ T5931] usb 3-1: device descriptor read/64, error -71 [ 939.091173][ T24] usb 4-1: config index 0 descriptor too short (expected 65535, got 27) [ 939.100146][ T24] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 939.112502][ T24] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 939.128580][ T24] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 939.147933][ T24] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 939.167330][ T24] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 939.185318][ T24] usb 4-1: Manufacturer: syz [ 939.219848][ T5931] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 939.350168][ T5931] usb 3-1: device descriptor read/64, error -71 [ 939.416825][T19670] FAULT_INJECTION: forcing a failure. [ 939.416825][T19670] name failslab, interval 1, probability 0, space 0, times 0 [ 939.429574][T19670] CPU: 1 UID: 0 PID: 19670 Comm: syz.3.3470 Tainted: G L syzkaller #0 PREEMPT(full) [ 939.429595][T19670] Tainted: [L]=SOFTLOCKUP [ 939.429599][T19670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 939.429607][T19670] Call Trace: [ 939.429615][T19670] [ 939.429621][T19670] dump_stack_lvl+0xe8/0x150 [ 939.429655][T19670] should_fail_ex+0x412/0x560 [ 939.429681][T19670] should_failslab+0xa8/0x100 [ 939.429703][T19670] __kmalloc_noprof+0xe8/0x760 [ 939.429723][T19670] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 939.429751][T19670] tomoyo_realpath_from_path+0xe3/0x5d0 [ 939.429779][T19670] ? tomoyo_path_number_perm+0x219/0x630 [ 939.429799][T19670] tomoyo_path_number_perm+0x246/0x630 [ 939.429821][T19670] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 939.429837][T19670] ? __lock_acquire+0x6b5/0x2cf0 [ 939.429857][T19670] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 939.429878][T19670] ? __fget_files+0x2a/0x420 [ 939.429902][T19670] ? __fget_files+0x2a/0x420 [ 939.429914][T19670] ? __fget_files+0x3a0/0x420 [ 939.429927][T19670] ? __fget_files+0x2a/0x420 [ 939.429942][T19670] security_file_ioctl+0xc3/0x2a0 [ 939.429956][T19670] __se_sys_ioctl+0x47/0x170 [ 939.429969][T19670] do_syscall_64+0x14d/0xf80 [ 939.429979][T19670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.429990][T19670] ? clear_bhb_loop+0x40/0x90 [ 939.430002][T19670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.430012][T19670] RIP: 0033:0x7f5a24d9c799 [ 939.430025][T19670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.430035][T19670] RSP: 002b:00007f5a25bdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.430048][T19670] RAX: ffffffffffffffda RBX: 00007f5a25015fa0 RCX: 00007f5a24d9c799 [ 939.430056][T19670] RDX: 0000200000000140 RSI: 00000000c018aa06 RDI: 0000000000000009 [ 939.430063][T19670] RBP: 00007f5a25bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 939.430069][T19670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.430075][T19670] R13: 00007f5a25016038 R14: 00007f5a25015fa0 R15: 00007f5a2513fa48 [ 939.430090][T19670] [ 939.903361][ T5931] usb usb3-port1: attempt power cycle [ 939.909373][T19670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 939.947443][ T24] usb 4-1: USB disconnect, device number 49 [ 940.080120][T19644] syz_tun: left allmulticast mode [ 940.157155][ T5887] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 940.202870][ T5887] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 940.217458][ T5887] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 940.246519][ T5887] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 940.265999][T19688] fuse: Bad value for 'fd' [ 940.273708][ T5931] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 940.283749][ T5887] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 940.291704][ T5887] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 940.318500][ T5931] usb 3-1: device descriptor read/8, error -71 [ 940.325788][ T5887] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 940.335814][ T5887] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 940.372248][ T5887] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 940.387278][ T5887] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0 [ 940.417236][ T5887] hid-generic 0000:0000:0004.001D: hidraw0: HID v0.03 Device [syz1] on syz0 [ 940.569910][ T5931] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 940.600780][ T5931] usb 3-1: device descriptor read/8, error -71 [ 940.637212][T19700] binder_alloc: binder_alloc_mmap_handler: 19699 200000ffd000-200000fff000 already mapped failed -16 [ 940.755795][ T5931] usb usb3-port1: unable to enumerate USB device [ 941.339801][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 941.509725][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 941.519531][ T10] usb 4-1: config 0 has no interfaces? [ 941.550237][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 941.576335][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.607040][ T10] usb 4-1: config 0 descriptor?? [ 942.197932][T19743] FAULT_INJECTION: forcing a failure. [ 942.197932][T19743] name failslab, interval 1, probability 0, space 0, times 0 [ 942.235462][T19743] CPU: 0 UID: 0 PID: 19743 Comm: syz.6.3482 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.235492][T19743] Tainted: [L]=SOFTLOCKUP [ 942.235500][T19743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 942.235511][T19743] Call Trace: [ 942.235519][T19743] [ 942.235527][T19743] dump_stack_lvl+0xe8/0x150 [ 942.235562][T19743] should_fail_ex+0x412/0x560 [ 942.235592][T19743] should_failslab+0xa8/0x100 [ 942.235618][T19743] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 942.235642][T19743] ? nf_ct_ext_add+0x1b6/0x460 [ 942.235762][T19743] ? __nf_conntrack_alloc+0x81/0x3e0 [ 942.235778][T19743] ? nf_ct_ext_add+0x1b6/0x460 [ 942.235795][T19743] krealloc_node_align_noprof+0x1ae/0x390 [ 942.235820][T19743] nf_ct_ext_add+0x1b6/0x460 [ 942.235843][T19743] ctnetlink_new_conntrack+0x12a7/0x22a0 [ 942.235864][T19743] ? ctnetlink_new_conntrack+0x726/0x22a0 [ 942.235885][T19743] ? rcu_is_watching+0x15/0xb0 [ 942.235911][T19743] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 942.235929][T19743] ? __mutex_lock+0x319/0x1300 [ 942.235968][T19743] ? nfnetlink_rcv_msg+0xa6e/0x12c0 [ 942.235987][T19743] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 942.236013][T19743] ? lockdep_hardirqs_on+0x7a/0x110 [ 942.236040][T19743] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 942.236080][T19743] nfnetlink_rcv_msg+0xc00/0x12c0 [ 942.236100][T19743] ? unwind_get_return_address+0x4d/0x90 [ 942.236129][T19743] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 942.236166][T19743] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 942.236230][T19743] netlink_rcv_skb+0x232/0x4b0 [ 942.236254][T19743] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 942.236276][T19743] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 942.236309][T19743] ? bpf_lsm_capable+0x9/0x20 [ 942.236334][T19743] ? security_capable+0x7e/0x2c0 [ 942.236366][T19743] nfnetlink_rcv+0x2c0/0x27b0 [ 942.236395][T19743] ? __local_bh_enable_ip+0xd0/0x130 [ 942.236418][T19743] ? lockdep_hardirqs_on+0x7a/0x110 [ 942.236442][T19743] ? __dev_queue_xmit+0x277/0x3890 [ 942.236458][T19743] ? __local_bh_enable_ip+0xd0/0x130 [ 942.236478][T19743] ? __dev_queue_xmit+0x277/0x3890 [ 942.236496][T19743] ? __dev_queue_xmit+0x1e78/0x3890 [ 942.236513][T19743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.236539][T19743] ? __dev_queue_xmit+0x277/0x3890 [ 942.236561][T19743] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 942.236587][T19743] ? __pfx___dev_queue_xmit+0x10/0x10 [ 942.236612][T19743] ? ref_tracker_free+0x693/0x840 [ 942.236634][T19743] ? __copy_skb_header+0xa3/0x4a0 [ 942.236654][T19743] ? __pfx_ref_tracker_free+0x10/0x10 [ 942.236675][T19743] ? __skb_clone+0x63/0x7a0 [ 942.236696][T19743] ? __skb_clone+0x483/0x7a0 [ 942.236720][T19743] ? skb_clone+0x246/0x3a0 [ 942.236741][T19743] ? __netlink_deliver_tap+0x807/0x850 [ 942.236762][T19743] ? netlink_deliver_tap+0x2e/0x1b0 [ 942.236791][T19743] ? netlink_deliver_tap+0x2e/0x1b0 [ 942.236820][T19743] netlink_unicast+0x80f/0x9b0 [ 942.236849][T19743] ? __pfx_netlink_unicast+0x10/0x10 [ 942.236871][T19743] ? netlink_sendmsg+0x650/0xb40 [ 942.236892][T19743] ? skb_put+0x11b/0x210 [ 942.236919][T19743] netlink_sendmsg+0x813/0xb40 [ 942.236950][T19743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 942.236983][T19743] ? aa_sock_msg_perm+0xf1/0x1b0 [ 942.237007][T19743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 942.237030][T19743] ____sys_sendmsg+0x972/0x9f0 [ 942.237056][T19743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 942.237081][T19743] ? import_iovec+0x73/0xa0 [ 942.237111][T19743] ___sys_sendmsg+0x2a5/0x360 [ 942.237133][T19743] ? __pfx____sys_sendmsg+0x10/0x10 [ 942.237183][T19743] ? __fget_files+0x2a/0x420 [ 942.237209][T19743] ? __fget_files+0x3a0/0x420 [ 942.237243][T19743] __x64_sys_sendmsg+0x1bd/0x2a0 [ 942.237263][T19743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 942.237290][T19743] ? __pfx_ksys_write+0x10/0x10 [ 942.237319][T19743] do_syscall_64+0x14d/0xf80 [ 942.237336][T19743] ? trace_irq_disable+0x3b/0x150 [ 942.237360][T19743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.237378][T19743] ? clear_bhb_loop+0x40/0x90 [ 942.237399][T19743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.237417][T19743] RIP: 0033:0x7f039b79c799 [ 942.237448][T19743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.237464][T19743] RSP: 002b:00007f039c5cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.237484][T19743] RAX: ffffffffffffffda RBX: 00007f039ba15fa0 RCX: 00007f039b79c799 [ 942.237497][T19743] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 942.237509][T19743] RBP: 00007f039c5cc090 R08: 0000000000000000 R09: 0000000000000000 [ 942.237521][T19743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.237532][T19743] R13: 00007f039ba16038 R14: 00007f039ba15fa0 R15: 00007f039bb3fa48 [ 942.237561][T19743] [ 942.839441][T19751] trusted_key: encrypted_key: insufficient parameters specified [ 943.145536][ T5887] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 943.292160][ T5887] usb 6-1: device descriptor read/64, error -71 [ 943.429778][ T5931] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 943.529835][ T5887] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 943.580302][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 943.587440][ T5931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 943.617942][ T5931] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 943.680160][ T5887] usb 6-1: device descriptor read/64, error -71 [ 943.687366][ T5931] usb 3-1: config 13 has no interface number 0 [ 943.694240][ T24] usb 4-1: USB disconnect, device number 50 [ 943.703156][ T5931] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 943.716610][ T5931] usb 3-1: config 13 interface 50 has no altsetting 0 [ 943.738318][ T5931] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 943.784120][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.793237][ T5887] usb usb6-port1: attempt power cycle [ 943.799019][ T5931] usb 3-1: Product: syz [ 943.803854][ T5931] usb 3-1: Manufacturer: syz [ 943.808529][ T5931] usb 3-1: SerialNumber: syz [ 943.825351][T19763] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 943.853748][T19779] Cannot find add_set index 3312 as target [ 944.120406][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 944.149917][ T5887] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 944.180552][ T5887] usb 6-1: device descriptor read/8, error -71 [ 944.274232][ T5931] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 944.284400][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 944.298199][ T5931] usb 3-1: MIDIStreaming interface descriptor not found [ 944.307805][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.328137][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 944.355279][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 944.384945][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.406832][ T24] usb 4-1: Product: syz [ 944.416228][ T24] usb 4-1: Manufacturer: syz [ 944.421061][ T5887] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 944.435730][ T24] usb 4-1: SerialNumber: syz [ 944.448864][ T5931] usb 3-1: USB disconnect, device number 20 [ 944.460779][ T5887] usb 6-1: device descriptor read/8, error -71 [ 944.602686][ T5887] usb usb6-port1: unable to enumerate USB device [ 944.663450][ T24] usb 4-1: 0:2 : does not exist [ 944.688940][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 944.765112][ T29] audit: type=1800 audit(1773302427.215:603): pid=19801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3490" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 944.818217][ T24] usb 4-1: USB disconnect, device number 51 [ 944.859144][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 945.470637][T19815] loop4: detected capacity change from 0 to 524287936 [ 946.640768][T19836] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 947.041712][T19844] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3502'. [ 947.044220][T19845] fuse: Unknown parameter 'groúÆ{¾G§L' [ 947.122615][ T29] audit: type=1326 audit(1773302429.525:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.5.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26db9c799 code=0x7ffc0000 [ 947.185173][T19850] IPv6: addrconf: prefix option has invalid lifetime [ 947.203186][ T29] audit: type=1326 audit(1773302429.525:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.5.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26db9c799 code=0x7ffc0000 [ 947.296147][ T29] audit: type=1326 audit(1773302429.525:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.5.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fe26db9c799 code=0x7ffc0000 [ 947.299861][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 947.345695][T19852] fuse: Bad value for 'rootmode' [ 947.394828][ T29] audit: type=1326 audit(1773302429.525:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.5.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26db9c799 code=0x7ffc0000 [ 947.474587][ T29] audit: type=1326 audit(1773302429.525:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.5.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26db9c799 code=0x7ffc0000 [ 947.535790][ T29] audit: type=1326 audit(1773302429.525:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.5.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fe26db9c799 code=0x7ffc0000 [ 947.539762][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 947.596911][ T24] usb 3-1: config 1 has an invalid interface number: 9 but max is 2 [ 947.598187][ T29] audit: type=1326 audit(1773302429.525:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.5.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26db9c799 code=0x7ffc0000 [ 947.631237][ T29] audit: type=1326 audit(1773302429.525:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.5.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26db9c799 code=0x7ffc0000 [ 947.640227][ T24] usb 3-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 947.655696][ T29] audit: type=1326 audit(1773302429.525:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.5.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe26db9c799 code=0x7ffc0000 [ 947.706753][ T24] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 947.724478][ T24] usb 3-1: config 1 has no interface number 3 [ 947.731728][ T24] usb 3-1: config 1 interface 1 has no altsetting 0 [ 947.741130][ T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=4141, bcdDevice= 0.40 [ 947.760027][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.768522][ T24] usb 3-1: Product: syz [ 947.778772][ T24] usb 3-1: Manufacturer: syz [ 947.784324][ T24] usb 3-1: SerialNumber: syz [ 947.876646][T19861] tipc: Enabled bearer , priority 0 [ 947.955219][T19861] tipc: Disabling bearer [ 948.379748][ T1209] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 948.432347][ T24] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 948.439069][ T24] usb 3-1: selecting invalid altsetting 0 [ 948.539787][ T1209] usb 4-1: Using ep0 maxpacket: 16 [ 948.545543][ T24] snd_usb_toneport 3-1:1.9: Line 6 TonePort UX1 found [ 948.550156][ T1209] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 948.561957][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.570988][ T1209] usb 4-1: Product: syz [ 948.575451][ T1209] usb 4-1: Manufacturer: syz [ 948.604215][ T1209] usb 4-1: SerialNumber: syz [ 948.631297][ T1209] usb 4-1: config 0 descriptor?? [ 948.745355][ T24] usb 3-1: selecting invalid altsetting 2 [ 948.851270][ T24] snd_usb_toneport 3-1:1.9: set_interface failed [ 949.010313][ T24] snd_usb_toneport 3-1:1.9: Line 6 TonePort UX1 now disconnected [ 949.018414][ T24] snd_usb_toneport 3-1:1.9: probe with driver snd_usb_toneport failed with error -22 [ 949.060973][ T24] snd_usb_toneport 3-1:1.2: Line 6 TonePort UX1 found [ 949.067813][ T1209] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 949.070152][ T24] usb 3-1: selecting invalid altsetting 2 [ 949.096233][ T24] snd_usb_toneport 3-1:1.2: set_interface failed [ 949.116125][ T24] snd_usb_toneport 3-1:1.2: Line 6 TonePort UX1 now disconnected [ 949.128714][ T1209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 949.164560][T17870] Bluetooth: hci1: command 0x0406 tx timeout [ 949.174174][ T24] snd_usb_toneport 3-1:1.2: probe with driver snd_usb_toneport failed with error -22 [ 949.177121][ T1209] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 949.207630][ T24] usb 3-1: USB disconnect, device number 21 [ 949.284185][ T1209] usb 4-1: media controller created [ 949.319578][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 949.510118][ T1209] zl10353_read_register: readreg error (reg=127, ret==0) [ 949.566583][ T1209] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 949.607106][ T1209] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 949.646961][ T1209] usb 4-1: USB disconnect, device number 52 [ 949.841146][ T1209] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 950.272564][T19480] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 950.479850][T19480] usb 5-1: Using ep0 maxpacket: 32 [ 950.490839][T19480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.545504][T19480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.770111][T19480] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 950.779474][T19480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.790546][T19480] usb 5-1: config 0 descriptor?? [ 951.402323][T19480] koneplus 0003:1E7D:2D51.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 951.860213][ T1209] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 951.940970][T19934] binder: 19932:19934 ioctl c0306201 0 returned -14 [ 952.150386][ T1209] usb 4-1: Using ep0 maxpacket: 32 [ 952.169265][ T1209] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 952.213632][ T1209] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 952.236582][ T1209] usb 4-1: string descriptor 0 read error: -22 [ 952.246485][ T1209] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 952.256589][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.288179][T19931] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 952.309045][ T1209] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 952.320699][ T1209] usb 4-1: MIDIStreaming interface descriptor not found [ 952.748262][ T1209] usb 4-1: USB disconnect, device number 53 [ 953.030122][T19946] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3532'. [ 953.084832][T19480] koneplus 0003:1E7D:2D51.001E: couldn't init struct koneplus_device [ 953.100969][T19480] koneplus 0003:1E7D:2D51.001E: couldn't install mouse [ 953.150772][T19480] koneplus 0003:1E7D:2D51.001E: probe with driver koneplus failed with error -71 [ 953.190310][T19480] usb 5-1: USB disconnect, device number 58 [ 953.709831][T19480] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 953.859985][T19480] usb 5-1: Using ep0 maxpacket: 16 [ 953.876929][T19480] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 953.898722][T19480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.940099][T19480] usb 5-1: Product: syz [ 953.944558][T19480] usb 5-1: Manufacturer: syz [ 953.950788][T19480] usb 5-1: SerialNumber: syz [ 953.965189][T19480] usb 5-1: config 0 descriptor?? [ 954.378958][T19480] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 954.406177][T19480] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 954.520881][T19480] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 954.592261][T19480] usb 5-1: media controller created [ 954.620472][T19480] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 954.661289][T19480] zl10353_read_register: readreg error (reg=127, ret==0) [ 954.684982][T19480] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 954.699799][T19480] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 954.713665][T19480] usb 5-1: USB disconnect, device number 59 [ 954.776946][T19480] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 954.792913][T19968] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3538'. [ 954.960918][T19973] FAULT_INJECTION: forcing a failure. [ 954.960918][T19973] name failslab, interval 1, probability 0, space 0, times 0 [ 955.000865][T19973] CPU: 0 UID: 0 PID: 19973 Comm: syz.5.3539 Tainted: G L syzkaller #0 PREEMPT(full) [ 955.000896][T19973] Tainted: [L]=SOFTLOCKUP [ 955.000904][T19973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 955.000916][T19973] Call Trace: [ 955.000924][T19973] [ 955.000933][T19973] dump_stack_lvl+0xe8/0x150 [ 955.000965][T19973] should_fail_ex+0x412/0x560 [ 955.000995][T19973] should_failslab+0xa8/0x100 [ 955.001020][T19973] __kmalloc_cache_noprof+0x88/0x660 [ 955.001042][T19973] ? sctp_association_new+0x89/0x25e0 [ 955.001076][T19973] sctp_association_new+0x89/0x25e0 [ 955.001105][T19973] ? sctp_has_association+0x1cd/0x1f0 [ 955.001166][T19973] ? sctp_has_association+0x2f/0x1f0 [ 955.001187][T19973] ? __ipv6_addr_type+0x14d/0x2f0 [ 955.001212][T19973] sctp_connect_new_asoc+0x2e4/0x6b0 [ 955.001241][T19973] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 955.001267][T19973] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 955.001293][T19973] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 955.001317][T19973] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 955.001343][T19973] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 955.001364][T19973] ? security_sctp_bind_connect+0x7e/0x2c0 [ 955.001387][T19973] sctp_sendmsg+0x1528/0x2c10 [ 955.001425][T19973] ? __pfx_sctp_sendmsg+0x10/0x10 [ 955.001453][T19973] ? aa_sk_perm+0x6d5/0x900 [ 955.001481][T19973] ? __pfx_aa_sk_perm+0x10/0x10 [ 955.001504][T19973] ? sock_rps_record_flow+0x19/0x400 [ 955.001530][T19973] ? __pfx_inet_sendmsg+0x10/0x10 [ 955.001548][T19973] ? inet_sendmsg+0x2f4/0x370 [ 955.001564][T19973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 955.001583][T19973] ? __pfx_inet_sendmsg+0x10/0x10 [ 955.001601][T19973] __sys_sendto+0x5de/0x710 [ 955.001630][T19973] ? __pfx___sys_sendto+0x10/0x10 [ 955.001652][T19973] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 955.001683][T19973] ? __fget_files+0x3a0/0x420 [ 955.001717][T19973] ? ksys_write+0x242/0x270 [ 955.001738][T19973] ? __pfx_ksys_write+0x10/0x10 [ 955.001761][T19973] __x64_sys_sendto+0xde/0x100 [ 955.001789][T19973] do_syscall_64+0x14d/0xf80 [ 955.001804][T19973] ? trace_irq_disable+0x3b/0x150 [ 955.001828][T19973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.001845][T19973] ? clear_bhb_loop+0x40/0x90 [ 955.001867][T19973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.001884][T19973] RIP: 0033:0x7fe26db9c799 [ 955.001901][T19973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.001914][T19973] RSP: 002b:00007fe26ea52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 955.001932][T19973] RAX: ffffffffffffffda RBX: 00007fe26de15fa0 RCX: 00007fe26db9c799 [ 955.001944][T19973] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 955.001954][T19973] RBP: 00007fe26ea52090 R08: 0000200000000000 R09: 000000000000001c [ 955.001964][T19973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.001973][T19973] R13: 00007fe26de16038 R14: 00007fe26de15fa0 R15: 00007fe26df3fa48 [ 955.001998][T19973] [ 955.807910][T19987] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3544'. [ 956.032260][T19988] vivid-004: disconnect [ 956.248677][T19991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 956.460111][T19980] vivid-004: reconnect [ 956.745117][T20005] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3548'. [ 956.829670][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 956.829691][ T29] audit: type=1800 audit(1773302439.275:638): pid=20008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3549" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0 [ 957.100027][T20014] netlink: 'syz.6.3551': attribute type 9 has an invalid length. [ 957.315386][T20021] netlink: 'syz.6.3553': attribute type 8 has an invalid length. [ 957.530060][ T1209] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 957.600114][T19480] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 957.689737][ T1209] usb 6-1: Using ep0 maxpacket: 16 [ 957.699941][ T29] audit: type=1326 audit(1773302440.145:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20028 comm="syz.6.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039b79c799 code=0x7ffc0000 [ 957.703441][ T1209] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 957.737359][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.752382][ T1209] usb 6-1: Product: syz [ 957.771115][ T1209] usb 6-1: Manufacturer: syz [ 957.780720][ T1209] usb 6-1: SerialNumber: syz [ 957.789954][T19480] usb 3-1: Using ep0 maxpacket: 32 [ 957.790651][ T29] audit: type=1326 audit(1773302440.145:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20028 comm="syz.6.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039b79c799 code=0x7ffc0000 [ 957.802398][T19480] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 957.818119][ T29] audit: type=1326 audit(1773302440.145:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20028 comm="syz.6.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f039b79c799 code=0x7ffc0000 [ 957.830964][ T1209] usb 6-1: config 0 descriptor?? [ 957.850298][ T29] audit: type=1326 audit(1773302440.145:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20028 comm="syz.6.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039b79c799 code=0x7ffc0000 [ 957.939789][T19480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.955221][T19480] usb 3-1: config 0 descriptor?? [ 957.969178][ T29] audit: type=1326 audit(1773302440.145:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20028 comm="syz.6.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039b79c799 code=0x7ffc0000 [ 958.164030][T19480] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 958.187326][T19480] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 958.258902][T19480] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 958.294147][T19480] usb 3-1: media controller created [ 958.354881][ T1209] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 958.366334][ T1209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 958.382230][T19480] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 958.480346][ T1209] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 958.513232][ T1209] usb 6-1: media controller created [ 958.555290][T20017] ------------[ cut here ]------------ [ 958.561378][T20017] usb 3-1: BOGUS control dir, pipe 80001680 doesn't match bRequestType c0 [ 958.570059][T20017] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.5.3552/20017 [ 958.580576][T20017] Modules linked in: [ 958.585041][T20017] CPU: 0 UID: 0 PID: 20017 Comm: syz.5.3552 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.596068][T20017] Tainted: [L]=SOFTLOCKUP [ 958.601839][T20017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 958.612237][T20017] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 958.617901][T20017] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 958.637649][T20017] RSP: 0018:ffffc90004d4f948 EFLAGS: 00010246 [ 958.643799][T20017] RAX: 0000000000000000 RBX: ffff8880850d7f00 RCX: 0000000080001680 [ 958.651965][T20017] RDX: ffff8880491c3260 RSI: ffffffff8c7f04a0 RDI: ffffffff901ec500 [ 958.660047][T20017] RBP: 1ffff1100f51d0b0 R08: 00000000000000c0 R09: 0000000000000000 [ 958.668016][T20017] R10: ffffc90004d4fa40 R11: fffff520009a9f54 R12: ffff888028132100 [ 958.676030][T20017] R13: ffff88807a8e8580 R14: 0000000080001680 R15: ffff8880491c3260 [ 958.684443][T20017] FS: 00007fe26ea526c0(0000) GS:ffff888125463000(0000) knlGS:0000000000000000 [ 958.693458][T20017] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.700096][T20017] CR2: 00007f039c5456b8 CR3: 00000000a0f8e000 CR4: 00000000003526f0 [ 958.708084][T20017] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000003e4f [ 958.716099][T20017] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 958.724263][T20017] Call Trace: [ 958.727557][T20017] [ 958.730515][T20017] ? __init_swait_queue_head+0xa9/0x150 [ 958.736083][T20017] usb_start_wait_urb+0x12b/0x510 [ 958.741194][T20017] ? rcu_is_watching+0x15/0xb0 [ 958.745957][T20017] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 958.751555][T20017] ? trace_kmalloc+0x2a/0x110 [ 958.756296][T20017] usb_control_msg+0x232/0x3e0 [ 958.761457][T20017] dib0700_i2c_xfer+0xbb2/0xf80 [ 958.766511][T20017] __i2c_transfer+0x79a/0x2020 [ 958.771431][T20017] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 958.777270][T20017] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 958.783159][T20017] ? i2c_transfer+0xc8/0x2d0 [ 958.787793][T20017] i2c_transfer+0x1cc/0x2d0 [ 958.793234][T20017] i2cdev_ioctl_rdwr+0x460/0x740 [ 958.798197][T20017] i2cdev_ioctl+0x6a5/0x880 [ 958.803089][T20017] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 958.808216][T20017] ? __fget_files+0x3a0/0x420 [ 958.813280][T20017] ? __fget_files+0x2a/0x420 [ 958.817943][T20017] ? bpf_lsm_file_ioctl+0x9/0x20 [ 958.823259][T20017] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 958.828295][T20017] __se_sys_ioctl+0xfc/0x170 [ 958.833201][T20017] do_syscall_64+0x14d/0xf80 [ 958.838027][T20017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.844445][T20017] ? clear_bhb_loop+0x40/0x90 [ 958.849507][T20017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.855972][T20017] RIP: 0033:0x7fe26db9c799 [ 958.860556][T20017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.880344][T20017] RSP: 002b:00007fe26ea52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.888838][T20017] RAX: ffffffffffffffda RBX: 00007fe26de15fa0 RCX: 00007fe26db9c799 [ 958.897006][T20017] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000004 [ 958.905068][T20017] RBP: 00007fe26dc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 958.913105][T20017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.921337][T20017] R13: 00007fe26de16038 R14: 00007fe26de15fa0 R15: 00007fe26df3fa48 [ 958.929345][T20017] [ 958.932465][T20017] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 958.939751][T20017] CPU: 0 UID: 0 PID: 20017 Comm: syz.5.3552 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.950682][T20017] Tainted: [L]=SOFTLOCKUP [ 958.955000][T20017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 958.965070][T20017] Call Trace: [ 958.968359][T20017] [ 958.971279][T20017] vpanic+0x56c/0xa60 [ 958.975303][T20017] ? __pfx__printk+0x10/0x10 [ 958.979872][T20017] ? __pfx_vpanic+0x10/0x10 [ 958.984358][T20017] ? is_bpf_text_address+0x292/0x2b0 [ 958.989628][T20017] ? is_bpf_text_address+0x26/0x2b0 [ 958.994830][T20017] panic+0xc5/0xd0 [ 958.998551][T20017] ? __pfx_panic+0x10/0x10 [ 959.002989][T20017] __warn+0x315/0x4f0 [ 959.006967][T20017] ? usb_submit_urb+0x1052/0x18b0 [ 959.011984][T20017] ? usb_submit_urb+0x1052/0x18b0 [ 959.016998][T20017] __report_bug+0x29a/0x540 [ 959.021596][T20017] ? usb_submit_urb+0x1052/0x18b0 [ 959.026697][T20017] ? __pfx___report_bug+0x10/0x10 [ 959.031720][T20017] ? lockdep_hardirqs_on+0x7a/0x110 [ 959.036924][T20017] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 959.042727][T20017] report_bug_entry+0x19a/0x290 [ 959.047587][T20017] ? usb_submit_urb+0x1114/0x18b0 [ 959.052599][T20017] ? usb_submit_urb+0x1119/0x18b0 [ 959.057707][T20017] handle_bug+0xce/0x200 [ 959.061940][T20017] exc_invalid_op+0x1a/0x50 [ 959.066541][T20017] asm_exc_invalid_op+0x1a/0x20 [ 959.071412][T20017] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 959.077053][T20017] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 959.096691][T20017] RSP: 0018:ffffc90004d4f948 EFLAGS: 00010246 [ 959.102778][T20017] RAX: 0000000000000000 RBX: ffff8880850d7f00 RCX: 0000000080001680 [ 959.110757][T20017] RDX: ffff8880491c3260 RSI: ffffffff8c7f04a0 RDI: ffffffff901ec500 [ 959.118733][T20017] RBP: 1ffff1100f51d0b0 R08: 00000000000000c0 R09: 0000000000000000 [ 959.126694][T20017] R10: ffffc90004d4fa40 R11: fffff520009a9f54 R12: ffff888028132100 [ 959.134672][T20017] R13: ffff88807a8e8580 R14: 0000000080001680 R15: ffff8880491c3260 [ 959.142929][T20017] ? usb_submit_urb+0x10a3/0x18b0 [ 959.147964][T20017] ? __init_swait_queue_head+0xa9/0x150 [ 959.153504][T20017] usb_start_wait_urb+0x12b/0x510 [ 959.158535][T20017] ? rcu_is_watching+0x15/0xb0 [ 959.163314][T20017] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 959.168848][T20017] ? trace_kmalloc+0x2a/0x110 [ 959.173520][T20017] usb_control_msg+0x232/0x3e0 [ 959.178314][T20017] dib0700_i2c_xfer+0xbb2/0xf80 [ 959.183162][T20017] __i2c_transfer+0x79a/0x2020 [ 959.187937][T20017] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 959.193827][T20017] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 959.199632][T20017] ? i2c_transfer+0xc8/0x2d0 [ 959.204228][T20017] i2c_transfer+0x1cc/0x2d0 [ 959.208740][T20017] i2cdev_ioctl_rdwr+0x460/0x740 [ 959.213669][T20017] i2cdev_ioctl+0x6a5/0x880 [ 959.218165][T20017] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 959.223179][T20017] ? __fget_files+0x3a0/0x420 [ 959.227857][T20017] ? __fget_files+0x2a/0x420 [ 959.232555][T20017] ? bpf_lsm_file_ioctl+0x9/0x20 [ 959.237504][T20017] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 959.242525][T20017] __se_sys_ioctl+0xfc/0x170 [ 959.247117][T20017] do_syscall_64+0x14d/0xf80 [ 959.251692][T20017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.257769][T20017] ? clear_bhb_loop+0x40/0x90 [ 959.262450][T20017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.268337][T20017] RIP: 0033:0x7fe26db9c799 [ 959.272739][T20017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.292337][T20017] RSP: 002b:00007fe26ea52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 959.300759][T20017] RAX: ffffffffffffffda RBX: 00007fe26de15fa0 RCX: 00007fe26db9c799 [ 959.308718][T20017] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000004 [ 959.316670][T20017] RBP: 00007fe26dc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 959.324627][T20017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.332581][T20017] R13: 00007fe26de16038 R14: 00007fe26de15fa0 R15: 00007fe26df3fa48 [ 959.340567][T20017] [ 959.343856][T20017] Kernel Offset: disabled [ 959.348272][T20017] Rebooting in 86400 seconds..