last executing test programs: 25m56.726659998s ago: executing program 1 (id=735): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r1, 0x4) 25m56.280234597s ago: executing program 1 (id=739): io_setup(0xfffffff9, &(0x7f00000003c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000001840)=""/4096, 0x1000, 0x0, &(0x7f00000004c0)=""/145, 0x91}}, 0xfffffffffffffd72) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r2, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) r4 = syz_clone3(&(0x7f0000000440)={0x19000c00, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0), {0x3b}, 0x0, 0x0, &(0x7f0000000380)=""/60, &(0x7f0000000400)=[0x0], 0x1}, 0x58) sched_setattr(r4, &(0x7f00000001c0)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xffffffff, 0xda11, 0xffffffff}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r5, 0x0, 0x5, &(0x7f00000007c0)="dd", 0x1) setsockopt$inet_opts(r5, 0x0, 0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12016281965d06403e131508667e0102030109021b00d29dac9a0100000000"], 0x0) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000000000081}) r6 = open(&(0x7f0000000280)='./file0\x00', 0x2000, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) 25m52.882783221s ago: executing program 1 (id=750): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81100600000000ff84b1f00a280d7f00"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x498042, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x20, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 25m51.591201467s ago: executing program 1 (id=758): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81100600000000ff84b1f00a280d7f00"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r3) getpid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x20, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 25m49.218955383s ago: executing program 1 (id=768): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206030000000000000000000000000014000780080012400000000005001500020000000500010006000000050005000200000005"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000001200050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 25m48.537299734s ago: executing program 1 (id=769): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000280), 0x1ff, 0x41581) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}}, 0x24}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) syz_open_dev$usbfs(&(0x7f0000000280), 0x1ff, 0x41581) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) (async) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}}, 0x24}}, 0x0) (async) 25m33.433517481s ago: executing program 32 (id=769): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f0000000280), 0x1ff, 0x41581) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}}, 0x24}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) syz_open_dev$usbfs(&(0x7f0000000280), 0x1ff, 0x41581) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) (async) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}}, 0x24}}, 0x0) (async) 14m7.267822239s ago: executing program 3 (id=3902): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x31b400, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x80800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x9, 0x0, 0xa, @rand_addr=' \x01\x00', @remote, 0x20, 0x20, 0xcbbd, 0xd2}}) bind$packet(r2, &(0x7f0000000200)={0x11, 0xf5, r3, 0x1, 0xc7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) socket$unix(0x1, 0x3, 0x0) syz_usb_connect(0x0, 0x312, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x3e, 0x28, 0xc2, 0x8, 0x3340, 0x326, 0x75ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x300, 0x1, 0x17, 0xe, 0x20, 0x6, "", [{{0x9, 0x4, 0x42, 0x7f, 0xf, 0x3d, 0x44, 0x5d, 0xd, [], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x31, 0xb, 0x10}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x5, 0x55, 0x2}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x7f, 0x81, 0x3, [@generic={0xdf, 0x5, "3c29f61328a70fe3777b3f1eae0bd6340798eb6c79d63757ea4db10e54666763da12ad771ff8f5949773f0420d4c41ff67cb221443c5af159ddd5f31a2ec0ad454fdbfcbebbc295b7e5d71b228a79e17d7453d1aa13ef2154aff237883fc27fd1882587bab295bd1d49b8fec9a0aef9182816b9a4114c4cfd2b9d48ab556bff7b9856f7038b19c582f530111b456a8e24d6cfdd38d5ef3b0bf3476dd2a903743dbe24084826757de9ae1bbc6b1f3dd474e3f997d164df459324211a07b28c199b4c1913ca514bdf438a63c49bffdd518d8d7c8a1d73d44af1be7508fed"}]}}, {{0x9, 0x5, 0xa, 0x6, 0x3ff, 0x87, 0x7, 0x8, [@generic={0x8e, 0x22, "63251dc90353d2ee0dfcb13d436ef64a13f0bf8f1cc8bb92421de5b1e3d544c55f1dd9ebbbc36d1809fb7425ed9d96c3a9c974092f057dafcaf78e63fd7ec5c587e5b03c92d056f294cf60fb63bb692308b71aa5bf7e7de3e8c6b80d37cc4a4e207e574139af188943005dff6ffaa3bc3b2d2f628c66968ad07acad1e0315b34bda37006bb7124174602ac4c"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x0, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xaf}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x5, 0x4}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x2, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0x1}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x5, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x9, 0x0, 0xb4, [@generic={0xc2, 0x21, "0fbd0c461d8ef94378cee02cc49a88ec6688e37f99a3b3d877a2da172fdeeb213daaeaf6ba1f1ea35ae9da9eb487e23253e72637823894f572603db1097c2c962eaf7bda507f9067ae4062fe21c877c4047b3d10d4705e2aaaafbd8e313127139a72eeac87badf6d9c7147d168707a55e2f7e65a8b0482b1c3ac4c377b91078f88d0331cd2cc0c0e4e82031cdddf8417e3781b56bb3ed68042deb0872180819de40b629b449d04f8506c84f9fb27ce6f922087c4977fb47c480410dcf6116ca6"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x1, 0x2, 0x5}}, {{0x9, 0x5, 0x182, 0x0, 0x400, 0x2, 0x4, 0x80}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3d, 0xff, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x401}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x0, 0x4, 0x9}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x7, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff}]}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x0, 0x68, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x1c49}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x110, 0x2, 0x9, 0xcf, 0x20, 0x2}, 0x32, &(0x7f00000005c0)={0x5, 0xf, 0x32, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x7, 0x101}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x101, 0xf78f, 0x8000, [0x1fe0000]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x7, 0x780, 0xf24, [0xc000]}]}, 0x9, [{0x18, &(0x7f0000000600)=@string={0x18, 0x3, "95a4f604f33696c9839619a7f27cd3cb225c5bc7a1ca"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x807}}, {0x9b, &(0x7f0000000680)=@string={0x9b, 0x3, "e364c02a01a4326d13917d0f0ff592e32201138574ef32f2059c2b330262efde7651e91971059141224471f9ab8327044c2da2a8d8893712eabac61865d2b79335c449389a74be7070285f9cdce544d3d7c40f6f403df28e6964c09c0d35f6266a7c291def445a94a1a271449409516c9071cc7eaba0f51405414a07e88f9cac48b7e32ca2299a70bec982d57d43468e7b82f6634bf41f8ccd"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x457}}]}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f00000009c0)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000980)=0x5}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000a00), 0x400482, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000a40)={0x0, 0x9}, &(0x7f0000000a80)=0x8) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000b00), 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000b40)={0x7, 0x7, 0x2}, &(0x7f0000000b80)=0x28) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000c00), 0x13f, 0x3}}, 0x20) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000c80)={0x99, 0x0, r1}) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r8, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4040) open_by_handle_at(r4, &(0x7f0000000e40)=@reiserfs_4={0x10, 0x4, {0xa3a7, 0xf, 0xfffffff3, 0x6}}, 0x800) write$vhost_msg_v2(r8, &(0x7f0000000f80)={0x2, 0x0, {&(0x7f0000000e80)=""/117, 0x75, &(0x7f0000000f00)=""/102, 0x1, 0x4}}, 0x48) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) write$vhost_msg(r10, &(0x7f0000001140)={0x1, {&(0x7f0000001040)=""/49, 0x31, &(0x7f0000001080)=""/167, 0x2, 0x2}}, 0x48) io_uring_register$IORING_REGISTER_PBUF_STATUS(r8, 0x1a, &(0x7f00000011c0)={0x401}, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x2, 0x5, 0xb, 0x5}, {0x40, 0xc, 0x9, 0x6}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 14m5.603778534s ago: executing program 3 (id=3906): socket$inet6_udp(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100fefffffffddbd525fe8800000000000000008f0700000000000000000000000001000107144e230005000000803c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcffffff2abd700000000000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x30}}, 0x2000d804) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x3, 0x803, 0x6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r7 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r7, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)="e0669ee5", 0x4}], 0x2) r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r8, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\v\xdb\x06\x00\x00\x00\x00\x00\x00\x00\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x00\x00\x80\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xcc\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8cI\xdcn\x9b\xa5\xd4\x13\xc0\x82^\x10,\xfa\x88\x93\xc6K2\xf2\xce\x95\x1bG\xb2m\xad\xe7\xd1P.XT\xc1\xc5\xd9\xaf\v\x8d\xcf\x8f`{F\xc7\x95!\xcc\vq0\xd0\x80\x06{\x97\xb0\xdb+Z\xc5\x9d\xf4\x0eS\xd2\xd4\xb5\\\x96\x1dN\xe6\xfd\\\xe32_p\xee\x15JU\x11\x1f\xc6\xeb\xafm\x1e\xb3\xb5\xfe\x02\xe24\x90Uo\xaf\xce/\x9c\xd4\vE \x81\x14\xdf\x9b\x12b\x1a\x173\x8d\t\xab\xec\xf0n\xa5\x95\x9c\xc3\xf2\xb6CS\xf3\xa8p\t!\xb3\x912`\n\xd2\xe2S\x9cU\xcc\"\xf2d(Ec\xb2\x7f\x02'}]}, 0x130) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a6b000/0x1000)=nil, &(0x7f0000cf1000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ca2000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000cae000/0x2000)=nil, 0x0}, 0x68) (async) syz_open_dev$radio(0x0, 0x2, 0x2) (async) r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r9, 0xc0e85667, &(0x7f0000000240)={0x40000000, 0x4d, "bd2493fba84ccfec93389531dd17d780f83344a1c421de30ac97ab0321fe5d0a", 0x8, 0x3, 0x5b, 0x1, 0xe, 0x80000001, 0x6, 0x8, [0x800, 0x6, 0x6, 0x4]}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 14m4.436678707s ago: executing program 3 (id=3911): fsopen(&(0x7f00000002c0)='overlay\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ffffffff00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000fefffffffffffffd00000000000000000000008000000000000000000000000009000000040000000001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="14000d8008000142183c422e11726faadc2fe27ecba80f63939a5dacd73e13bd0857238491638224795ff973d78f082732a260ca583ccae9499ee5a302f9577b90d2c4f960752850d7afe16a602d89acca9006036cedb4405dc5a8838e3147966f7997916d322475c30476da781b09ccf844cda6", @ANYRESOCT=r3, @ANYRES16=r1, @ANYRES32=r0, @ANYRESOCT, @ANYRES64=r1], 0x24}, 0x1, 0x5502000000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86e7d62fdce0b68c2a7502b5b00c9f", "fad16f5a00"}, 0xe, 0x5}) openat$tun(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x1, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], 0x1, 0x400, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x8000006, 0x10001, 0x3}) r8 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) eventfd(0x8) socket$unix(0x1, 0x5, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e26, 0x0, @empty}, 0x1c) listen(r9, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x11, 0x0, 0x2}}}}}}}, 0x0) 14m2.367204977s ago: executing program 3 (id=3914): r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0xfffffffe, 0x4) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x21) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4c890}, 0x884) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14m1.988162238s ago: executing program 3 (id=3916): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0xffffffff, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r5 = socket(0x18, 0x800, 0x0) sendfile(r5, r4, 0x0, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@deltaction={0xe8, 0x31, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc858}, 0x80) socket$unix(0x1, 0x5, 0x0) 14m0.845702579s ago: executing program 3 (id=3923): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) iopl(0x0) close_range(r6, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) (async) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) iopl(0x0) (async) close_range(r6, 0xffffffffffffffff, 0x2) (async) 13m55.254699509s ago: executing program 2 (id=3941): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000006000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x10) 13m55.043797075s ago: executing program 2 (id=3942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000005050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900034073797a300000000008000a4000000103"], 0xc4}, 0x1, 0x1000000}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x40}}, 0x20000000) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000000)) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x29, 0x8, 0x0, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x100000001, 0x5}) 13m54.789505565s ago: executing program 2 (id=3943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x50001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0xfd}]}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) unshare(0x8000280) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) r3 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e7", @ANYRESDEC], 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000e80)={0xa0, 0x7}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000000c0)={0x0, 0x16, 0x6, '\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000880)={0x1c, &(0x7f00000007c0)={0x0, 0xe, 0x2, "ace1"}, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) r4 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff08) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xb8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x22, 0x3, "3318000058a8056dd9a87f963d140de6993ac869f3a8609133b07523679a"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 13m51.405322021s ago: executing program 2 (id=3955): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) 13m51.361550793s ago: executing program 2 (id=3956): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240102000a000201020904010000010200000904010101010200000905010910000206000725010c00400009040200000102d904bdcb03100725010c08ff03"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000980)=ANY=[@ANYBLOB="4014af0000004f59ba7dbdf63c88405843475539c4f7c36e4d05430fc1488b4e5028748423c9e8519ab5eb47a38199cee93dfc494d1bdfc28c374b592f2b401bec9a520a993f19a100db461a85c7475be8852ea98d000000000000f48168303973fadd176a37ba5f53c5cfdb8f7f90d4086e8e3237fc47b34a1a3bd6e16ed3bf6c8722ce282c6f5617ed6e57b82c1028401c5d35983386e3beaf57f01ecaf664e31dd09e67e213c402b4a6e41ed948d39700821677"], 0x0, 0x0}) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000008c0)="a905000000007464000100000000ae5774ee", 0x12}, {&(0x7f0000000000)="5787", 0x2}], 0x2}}], 0x1, 0x24004044) syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000940)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=r0]}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000001a80)={0x14, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001f80)={0x2c, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000000c0)=r5, 0x4) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="000c00800000"], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r6, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "aad836ad1cf39e4cca13fd66f1a50dbf8b8a54b546498f94329665e23123200a6dfb31cfa92abe07a1d09898e0217971a84fa797628bd99d3f0a8943841b63399afd92c45dc49e0c254c607c085ed4eb2ff26633ff772f441a7dc37d922947c5e36ac1c76ecb7cdd539c14ced9"}}}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r4, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000001000)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x130a, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0x10a}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @free_buffer], 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x10800) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, 0x0) r10 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x60, 0xf2, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xfc, 0x3, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x2, 0x2, 0x63, 0x8, 0x30}, 0x63, &(0x7f0000000500)={0x5, 0xf, 0x63, 0x1, [@generic={0x5e, 0x10, 0xb, "6f82778d94bfe2e150dde987467872874310065f3474e2bb1f544c85096102b54ad730618014378dbf4df5b4a380af8e7f099c448276d25e4dcc1b656cdacda75da4cb7dd2474e45c9211319251e2345eb1115b56935b0389ddb7f"}]}, 0x9, [{0x7, &(0x7f0000000580)=@string={0x7, 0x3, "2781e32526"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x240a}}, {0x10, &(0x7f0000000680)=@string={0x10, 0x3, "c202d79688828df38da97eb7c2dc"}}, {0x63, &(0x7f0000000d00)=ANY=[@ANYBLOB="63033452d2f88157234505543f00e08d30022a830771573bf813859b5ecc28f02db92a01820cd5c34f8d0d8f47533227442872b43d91270fe6bf8e3ce28d1e452dfeab09c4e204bd32296096a31ca40877cf256a3fe5684c50aaa1e8620a1cdb5eff2fd90d6a9ad7a61ada13256f671f21b48cbb4032a0db19fd2d705bfc653b08204189339900000000ff32c70ad7"]}, {0x39, &(0x7f00000006c0)=@string={0x39, 0x3, "5a424b14087f373936f826baf8d4564f9c73f680b9da215c558a1c39c97ef3ff1bb5ad4ae95cdf1ad8ab46412abbe3b9f3bf41d9d2d645"}}, {0xda, &(0x7f0000000ac0)=@string={0xda, 0x3, "ae16f774898d6d5c6413ad3cf369b2e47f285856c18e3d68a25a66c6938981b2ddea9b459f707b650d1b2bb35f51e2a5d8ac5596b5cd37ba97819b8f511dc25d84f3617418ef37ba6b86b01f5b1897a33e15fba9e8c273278ebf0095fcd918e2722458ca6211cf5eea1dd418f3e901c7d5192c82d23e8deae6b7d1ab2959220827e4ec488be3cd48117721edaaca328ca2bdf329936ab7901abf279b387a702f10e1aefc0fc75364a67d63e3f271eaa93d012d65bc4275405fe8ecf5d5726670df74d63812ceced3ee1bfedfcf34588295c7cfca1c5aa785"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x2403}}]}) syz_usb_control_io$printer(r10, &(0x7f0000000dc0)={0x14, &(0x7f0000000d00)=ANY=[], &(0x7f0000001180)=ANY=[@ANYBLOB="00030800000000cc12d0d4c17b6338e400006b41a4722e8012a98914884f92afa8a35ee73433b3b62825138e81c730a94088579a5d9fbb865777ac9fc90686df584f8902a08e836187093823762c4a4cfc8fdcf53688e3d490bde0affeaec3d665b377f40d7725bc02316de655471d40aaa9e30678187b4929cbd7f7196cbb131c401d387c7a2b4bcaeb201ea5c3d491cbf24a53aca0c124d7f3f0abb7b029f00674278fa0375a76f9d915db50d33687108928812df1332b2cbc1a5630de3995233b74731630c242ee", @ANYRESOCT=r3]}, &(0x7f0000000fc0)={0x34, &(0x7f0000000e00)={0x20, 0xb, 0x1, "96"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000ec0)={0x20, 0x0, 0x50, {0x4e, "3e9787a7c39a1f54ac2a409733ec0f0c6e2bb1098ff2940aff5c7aa8bb81860d314761df57e9872aa0a0fb7d47c698643bef9d70d21b685aa3b6a05f1ffc10faaebde0877a949ee8cc82057490f3"}}, &(0x7f0000000f40)={0x20, 0x1, 0x1, 0xfc}, &(0x7f0000000f80)={0x20, 0x0, 0x1, 0x3}}) 13m49.463987175s ago: executing program 2 (id=3962): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESOCT], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$video(0x0, 0x0, 0x10b200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 64) unshare(0x8040600) (async, rerun: 64) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) tee(r3, r3, 0x9, 0xb) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) (async, rerun: 32) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 13m45.827426135s ago: executing program 33 (id=3923): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) iopl(0x0) close_range(r6, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) (async) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) iopl(0x0) (async) close_range(r6, 0xffffffffffffffff, 0x2) (async) 13m34.291174943s ago: executing program 34 (id=3962): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESOCT], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$video(0x0, 0x0, 0x10b200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 64) unshare(0x8040600) (async, rerun: 64) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) tee(r3, r3, 0x9, 0xb) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) (async, rerun: 32) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 10m4.100822998s ago: executing program 6 (id=4694): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000290000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x10) 10m3.956331883s ago: executing program 6 (id=4696): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 10m2.167359427s ago: executing program 6 (id=4706): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffd00, 0x2, 0x1800}]}}]}, 0x48}}, 0x0) 10m1.929403077s ago: executing program 6 (id=4707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='vlan1\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='vlan1\x00', 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c17ff7f00000000000a0d1b8cbe317f48c0f46d7d8d72517c175f47c596009651115f1396e0970300010000be576b8e0000000000000000004610054e59ad5b4689bf900ec80b2ccb1c4527534c2eeddf"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c17ff7f00000000000a0d1b8cbe317f48c0f46d7d8d72517c175f47c596009651115f1396e0970300010000be576b8e0000000000000000004610054e59ad5b4689bf900ec80b2ccb1c4527534c2eeddf"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43aeffe800000000000000000000000000010fffe000000090000000000000000000189", @ANYRESOCT=r0], 0x340a) 10m1.115825243s ago: executing program 6 (id=4709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x168}, 0x1, 0x0, 0x0, 0x42000}, 0x0) 10m0.961837848s ago: executing program 6 (id=4711): r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000000)="13085011", 0x4, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r0, r0, r0}, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) creat(&(0x7f0000000100)='./file0\x00', 0x7a) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000100, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x3, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf1000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x8001, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x100, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x65, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x722c1cc4, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x58fb3db, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0xcca, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x3, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x41, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000015c0)=@secondary) add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="e1a742a3", 0x4, r4) keyctl$unlink(0x9, r0, r4) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) sync_file_range(0xffffffffffffffff, 0x407, 0x3fffc00, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10, 0xffffffffffffffff}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x118, 0x9, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x6}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x140}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r5, 0x5, 0x6, 0x3}) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f00000003c0)={0xa7, 0x7, @value=0x3}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000000514000128bd7000fbdb7e0c000000000000000008000300010000000000000800010002000000080003000419000008000100010000000800030002000000080b010000000000250003000400000008000100010000000800030003000000080001000200000008000300e87203000000b5813444f6c9056df6adfc3b7f7b6bb243c60977c9ebf8c67bc246"], 0x80}}, 0x4004000) 9m45.765103138s ago: executing program 35 (id=4711): r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000000)="13085011", 0x4, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r0, r0, r0}, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) creat(&(0x7f0000000100)='./file0\x00', 0x7a) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000100, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x3, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf1000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x8001, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x100, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x65, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x722c1cc4, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x58fb3db, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0xcca, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x3, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x41, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000015c0)=@secondary) add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="e1a742a3", 0x4, r4) keyctl$unlink(0x9, r0, r4) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) sync_file_range(0xffffffffffffffff, 0x407, 0x3fffc00, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10, 0xffffffffffffffff}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x118, 0x9, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x6}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x140}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r5, 0x5, 0x6, 0x3}) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f00000003c0)={0xa7, 0x7, @value=0x3}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000000514000128bd7000fbdb7e0c000000000000000008000300010000000000000800010002000000080003000419000008000100010000000800030002000000080b010000000000250003000400000008000100010000000800030003000000080001000200000008000300e87203000000b5813444f6c9056df6adfc3b7f7b6bb243c60977c9ebf8c67bc246"], 0x80}}, 0x4004000) 5m24.575536706s ago: executing program 0 (id=6088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x38, 0x0, 0x1, 0x201, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x819, 0x9, 0xffffffff, 0x7fff, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f32, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x8000, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x1, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@remote, 0x2, r3}) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000000)=0xffff8000, 0x4) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) dup3(r1, r1, 0x80000) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x440000) pread64(r6, &(0x7f00000000c0)=""/14, 0xe, 0x7ff) 5m23.687691133s ago: executing program 0 (id=6090): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x40, 0xfffffffe, 0x235}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) socket(0x1e, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) mmap$binder(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1, 0x11, r1, 0x7a) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) 5m22.811096764s ago: executing program 0 (id=6098): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18a78420f9d8fbe5dd8c5cc9cfb8d377", @ANYRES16=0x0, @ANYBLOB="00042bbd70003c000000790000000400f400"], 0x18}}, 0x5) r6 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="3a36294ee5765a67ad9a643d26791626ba8a27005eca48c970e07b8a540583315c56c5823169c608bb07bf2dace5501953c425a9019730103ba0ca9dd29eeb759b60131fd89ef7aca7a5e019651c00566405121a74980d01fa560ed68e3e33af954504f234ba70c066d1f522a4860d5efa54789bf605140e8cfdf45a196d666ab4db345045c20ea7b71934adb42e00f80dd76fc600"/162, 0xa2}, {&(0x7f0000001a80)="1df71cd7365fc37d25e7f3713582880c550dff740b6cc5b7da93ba1add5b54fe24bfcdf8780de52f54625cd9ba7cca67641a58b901d0fcfa370c51180169330b5e633784704df594f3ca2670f7d89403b44a095f74e7d93c2ae531ce1e8d6a77cd7c3c83659d52f8c7ccb6b6a8eeb6bb23f150f3c1a48659fbb6c0aba0e2eba1381b5479e7dd98f91177b071efa7bff81d2b346c127e5f6ce0210fb953e0cd8d93d1a78af9704efbd0ef959116436bd4e3d6a8be63c7ecdd18d7bbba6ac3bd3545a1ac11568a7cbfa2b13a95774f5b2681cbc138f54638515c12fc63", 0xdc}, {&(0x7f0000000700)="54f492de3825ce7bb4c6db9e18fdee2e94635e53cf60c37a67f69728b6597010018a48b64b80c7d21cf129eb7fc88a3401fa9bd76fcd6e2a1fcfbf7c243291bdf24d354ed374960487b940c06936ee9ab720aeb6ef18b7154d76cc1df8129bc4c5ce25af05d99396ecf91757c530c2234f7d230b05b069fa611b5dd4b0e25800", 0x80}, {&(0x7f00000007c0)="01aa0d155351709a1294e9f5284d911dd7f3ad0d8927a3071b3b17a55263b526527cf69a8b16146d648cb2a344f71c9dcf6a8970355972bc755521", 0x80}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001a00)="3b65dbbd27b32701b950d7ecf5b3b8c93d26fe83b32f875af9ded07d675b4242eb869f4155e3e474678980fc47e28fe8fe7286636ecddf3adf1fd6518cdfef889d9c1cb9d87993", 0x47}, {&(0x7f0000001880)="b16bcdd321288fab53bbddda469e4d4a76a60b0544fe3f2d0e15c59bf83988c1d2aac9f6f54c174e1d9b67d52c3e142e339f0ba88cea8f42afa173c38a59fb224a94c33e960da3a3", 0x48}, {&(0x7f0000000180)="b0cb0e178fea625b17ddeb85cfc2736a9579b07a972667d8d10205be2cc3", 0x1e}], 0x8, 0x0, 0x0, 0x1f00c00e}, 0x44080) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="100015"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x12}}, 0x0) 5m21.442849443s ago: executing program 0 (id=6104): socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x5, 0x0, [{0x3, 0x6, 0x3, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0xfe, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x7f, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0x8, '\x00', 0xfa}, {0x1, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x7}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0xb, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x4000000b, 0x101, 0x1, 0x8, 0x8, 0x5, 0x4}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9001) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f00000003c0)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000340)=0x14}) ioctl$NBD_PRINT_DEBUG(r4, 0xab06) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000480)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 5m19.123371278s ago: executing program 0 (id=6115): syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086e051c0140000102030109022d000101000904002501"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="9bffda530635480a726c05d93c7a38eb59ac40497c0995c21c494ae111dec7a8d91228c988a9b0bc13f8f71b6aea9771807b8f474a78bbe19425c4d71d0e9992c7fb87001359552ea356ae729d550802f041d3d91b2f4220bf6cfba02a93aec699c3096a843a7f8b0bbaa9e02774adde25739e067a06a7d0c2bc222337d50d9ef3ad6647f091cba5bf39dee1baa0859f843bf627174db27450fde44fcb71af2bc02303544f521e91ce3b894044cf9229f737d2b3664b2d7e44079f8386beed1fe5b80108a9ba5fd150"], 0x0) 5m18.851774636s ago: executing program 0 (id=6118): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}]}, 0x3c}, 0x1, 0x0, 0x0, 0xb9a3d32915edbbe5}, 0x800) (async) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={r1, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000, 0x0) (rerun: 64) r4 = getuid() (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000027c0), 0x2, 0x0) (async) r7 = accept4$tipc(r0, &(0x7f0000002800)=@id, &(0x7f0000002840)=0x10, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000002880)={0x10000, r0, 0x80000}) (async) r9 = openat$cgroup_ro(r0, &(0x7f00000028c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async) r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002900), 0x2, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002940)=0x0) (async, rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002980)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000002a80)=0xe8) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (async) r14 = getpgrp(0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002b80)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async, rerun: 64) fstat(r0, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r18 = gettid() (async, rerun: 32) stat(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r21 = gettid() (async) newfstatat(0xffffffffffffff9c, &(0x7f00000030c0)='\x00', &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmmsg$unix(r0, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="b60e3afdf377dfd3b19ad405927adfe4fac047ec4b4528fa4bd99d2cfa645f49c68bc868bfe7bb8e61aa3ab559d29000abb229870e1750e881b37b8a5929d0c89c33b4537c3ec58009a58094e84b233c0d56c8ddd24ad14a555260fc4cadd6f1e13e636bd8d78761eb07288169567d4bd3803aa8052b33c864036679fa3ea90e8c839754a503a63058e6605381dccd406da23b9756c997b0917cac4643aa142b1aa11687b21f1ab63631bdc46cd666efe2afbcf28f243a8e657c40b28810f3e7f8e27b7c800856d6d4b6933259ae07abc2931862f5ca058fcb02a50b86b4e6dce7eb646401b895", 0xe7}, {&(0x7f0000000340)="9fdf98a3f6d8f6", 0x7}], 0x2, &(0x7f0000000480)=[@rights={{0x38, 0x1, 0x1, [r0, r2, r2, r2, r0, r2, r2, r3, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0x58, 0x4}}, {{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000000580)="6fbf280b56973161e627d79b498de14dd1ebe97414a6a7018e1efd8e9f42441fc6aac2be4d7c4be5a0d50cac4a6473e6f8013415d1d58107e784a9b32da1dfe1fdfe28ba1eaf85e06065427e60aac060db6514cba5afa57636e2c839481a4d2a712a55708673a269dbdf37a72cc986c6914fefddcf2e5700acf4221cb66698a4b4", 0x81}, {&(0x7f0000000640)="ab37cdcd4ba4d86c8bd96eab4236ff3a0f12744a6e387034d2dcfa57900e91c7f182b0063a4818464d1fe6a778c3b992a89cb925cd8267cf5314c7af0be211995bf35a6044ef78bda4cb441bd00a7e1014774d780f06f6a530f3985726c69d8817a1c4c2122cfbc29f", 0x69}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="8f9dd384ebc4b52b17133c5da93d08f47e6bf69e9b18b5d750f54ec0281e9b197c4359f04f5d3d784c77fbf68bacc18fc4d7aca8b6d9cf0820f15c351e476ec0c9f923232c2eeda01347eca4221b504c2c5422f914951ccaa41ac5eaba878e94ba8f202fb02e272fa8cc5037d46f0d3d8f06e5", 0x73}, {&(0x7f0000001740)="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", 0x1000}], 0x5, &(0x7f0000002bc0)=[@rights={{0x34, 0x1, 0x1, [r6, r0, r7, r0, r8, r2, r9, r10, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01, r16}}}], 0x78, 0x44085}}, {{&(0x7f0000002c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002cc0)="ce9f048f9fb6d7b0c68fb75a3583be9ba2e6ae", 0x13}, {&(0x7f0000002d00)="11d77f4b33eda8f4b3574f49711fad378598d387231b72462b3e9f88f91161d12d5a1bd5fc57dc63805708c0bc3b85fa61d09a70e5ada41cff5c", 0x3a}, {&(0x7f0000002d40)="aaaf25faf94754fdfceba0ba68dede11371f2af66f92cdf2324c7b3eded75d843aa22e8548fcebd5e5b6b4d85572dbf2324f287490bcfa811920a10c941a97f698ac04f4cf1bebdbbbf1dd1204a89d54cb3c8fb7f87fd5baf100f466d4cd921cf32104b294a8d4c7aa37e47619847473d3001f14442f374d2f9a677baecbb5fd7408d9b9d9a67dea98f9b47d6e218b1f82db485cf2d9f67e82cb8b5a152a806c30d57d456f0d00d0209d03", 0xab}, {&(0x7f0000002e00)="ee289e3256657f84962702ef5849c9c3ed690f0a45356d05068bc3d83a4cdb14144a1f47d237220f745e2db97180f0dea947b056df95b88a89d2d8474ab793c95189f8b47b0c5ea577912e8d26ebd3f9c907c184b0f405498d8081adaf90cb85d586549c5f3c0a391b265778709fe15519c14a9a535eea517fc784b9b66eaa9cba3696bc0635777a2f231f4cc147103ec9a607e24dbbb8b6e0c76951f50ee2082ffd3b2b9078d91f317baf81a057d7", 0xaf}], 0x4, &(0x7f0000003180)=[@cred={{0x1c, 0x1, 0x2, {0x0, r17, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, 0xffffffffffffffff, r22}}}], 0x60, 0x894}}], 0x3, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003380)={r3, 0x20, &(0x7f0000003340)={&(0x7f00000032c0)=""/43, 0x2b, 0x0, &(0x7f0000003300)=""/57, 0x39}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000033c0)={r15, r3, 0x16, 0x0, @val=@tracing={r23, 0x80000000}}, 0x20) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000003400)) (async) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x0, 0x1000008, 0x13, r3, 0x0) 5m17.450859407s ago: executing program 36 (id=6118): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}]}, 0x3c}, 0x1, 0x0, 0x0, 0xb9a3d32915edbbe5}, 0x800) (async) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={r1, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000, 0x0) (rerun: 64) r4 = getuid() (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000027c0), 0x2, 0x0) (async) r7 = accept4$tipc(r0, &(0x7f0000002800)=@id, &(0x7f0000002840)=0x10, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000002880)={0x10000, r0, 0x80000}) (async) r9 = openat$cgroup_ro(r0, &(0x7f00000028c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async) r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002900), 0x2, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002940)=0x0) (async, rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002980)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000002a80)=0xe8) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (async) r14 = getpgrp(0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002b80)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async, rerun: 64) fstat(r0, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r18 = gettid() (async, rerun: 32) stat(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r21 = gettid() (async) newfstatat(0xffffffffffffff9c, &(0x7f00000030c0)='\x00', &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmmsg$unix(r0, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="b60e3afdf377dfd3b19ad405927adfe4fac047ec4b4528fa4bd99d2cfa645f49c68bc868bfe7bb8e61aa3ab559d29000abb229870e1750e881b37b8a5929d0c89c33b4537c3ec58009a58094e84b233c0d56c8ddd24ad14a555260fc4cadd6f1e13e636bd8d78761eb07288169567d4bd3803aa8052b33c864036679fa3ea90e8c839754a503a63058e6605381dccd406da23b9756c997b0917cac4643aa142b1aa11687b21f1ab63631bdc46cd666efe2afbcf28f243a8e657c40b28810f3e7f8e27b7c800856d6d4b6933259ae07abc2931862f5ca058fcb02a50b86b4e6dce7eb646401b895", 0xe7}, {&(0x7f0000000340)="9fdf98a3f6d8f6", 0x7}], 0x2, &(0x7f0000000480)=[@rights={{0x38, 0x1, 0x1, [r0, r2, r2, r2, r0, r2, r2, r3, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0x58, 0x4}}, {{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000000580)="6fbf280b56973161e627d79b498de14dd1ebe97414a6a7018e1efd8e9f42441fc6aac2be4d7c4be5a0d50cac4a6473e6f8013415d1d58107e784a9b32da1dfe1fdfe28ba1eaf85e06065427e60aac060db6514cba5afa57636e2c839481a4d2a712a55708673a269dbdf37a72cc986c6914fefddcf2e5700acf4221cb66698a4b4", 0x81}, {&(0x7f0000000640)="ab37cdcd4ba4d86c8bd96eab4236ff3a0f12744a6e387034d2dcfa57900e91c7f182b0063a4818464d1fe6a778c3b992a89cb925cd8267cf5314c7af0be211995bf35a6044ef78bda4cb441bd00a7e1014774d780f06f6a530f3985726c69d8817a1c4c2122cfbc29f", 0x69}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="8f9dd384ebc4b52b17133c5da93d08f47e6bf69e9b18b5d750f54ec0281e9b197c4359f04f5d3d784c77fbf68bacc18fc4d7aca8b6d9cf0820f15c351e476ec0c9f923232c2eeda01347eca4221b504c2c5422f914951ccaa41ac5eaba878e94ba8f202fb02e272fa8cc5037d46f0d3d8f06e5", 0x73}, {&(0x7f0000001740)="5a239bb2a7cc355333680a7783ade3461480cd98ba872d0ee255fd85f0aac15f2d3fd66b93ea66e50fc77df4b90578a85c8ae362c96ddf95eb18d3053c0ca6bf6c1dacaef55fc4e2d7d96216d7d779c099baf61dc94f959e7d218f2cb0dbc2ef3b5add649ff0049ec4f81aebe66029b153fcfa59d8a0c4caf5622b0b55f8b45c5a6b43942000cb8f74e3a24fb442c88d6b9d3bc7ba149625c38180801530513a71e745ef1d26a03f48cb702ca00fc7381f41c11547c9af0a4480e259561f8fb4617ee1d5c39dc4f4aab02e23a8f1e2b68e429154a4b23c8bd7ea9973cfa68a6a9b55cc75adb2703a627c57b3557ebb28fb826f225b1ba6d55487b1a81f948f04239c5f89aaa04852f074b3eccb91eb3beb6e614d0b2edac27358be34e037f9e7d8bb107fc7cb537272863abd829b861665d79b1299a271a1dad65b136416678945bc81b250fa5a510cc160e55d39b8c0be1583e02a161e5b2b3ac8dc97cd1ee6da128f1fc1adf46ced085020239ba28aecd860efa3916adc2faf72dda3cc580a97a66110ea78b12b9870814b11330c40839f219905a2f55874ae45c84a3283581b953b6879fbf5a906597f6f6d8ca8b4653a68bb7eee02d2fe973e966467af85a42b85540a30dff50f216d22457d9f225448e46ab449c0054665cc6a025e8b67afe447878c25da24fe66876cf7ba6b4096b26908d357ef792fe0e74d51f09771004b78bde3843942eed0ca0b986ff2cc7c6f145a80364c09e1b44c6095826bba430c60be832a7648823d52e1570d65e787eb02fd24e9e6a3be9fdb5cb79730a3e10af160fc532a003594667c4215458fb9ed88d1ea246a688f9cc7462ae29b13e359c82bad5f6951c436b14c8a7b133266a8ab4aa6efbbd6c1ea8d41cae4fbd0c9c343f3d90a7779a4ada32be21c74b4957b092b7dc90d9d436c76bd57b8f3795e304e16f8ca85cc32d6c41c9fc4f21d1211b305b70e9a73cb9586304b307ce40e429e07ab828cc6ca198325f68e1903819e845ef4cefbd4583a2cc21afad9fa8d98dc046b80d834e8e9b481adcbebf705ebab019b224a9ea67fe79d9c49f4dc27dba1872e739638459f0d875d1829b6b2c161bf87928f7ec3d12a212b2724534b5d44d7f8442af7ba0fd8f5517739fafdd5600470bfb64e331bb02188e277003c5460afb094234820155330db72bf2c26502d4d7ca3297e87e73c8511d219682c1877337232765add438993d8151d878145a7d35a8822ddaa836a92838362ebee77287215fa612e5dfba810dd51fa61a764d6dc964bac524f00c108424aa5ba70162e5925d81b1a5ea451d3f71079b18ee211782c1625b006fab25ce9beaacd30a13074b2ab7b887b1cb5a9cceeba69bc6f324299155fbc753cf626f24f98b1a9e3af6ed6a6fa9445d9853ef6273b5d9aaf31e2a660d84ce22db1ffb33023078d415325fd91cb50f726ee542a45fe5a1690972075304695d0843672ef0c9dcde138156cf067889e9f30f36f9eca4a789b2fc7f921b849715c877adb53dddfe8de445ced294be4b4b4bb88a8dcf3220db2a65c3307a00e53290763a42172e3bf779e0e10d1b6e5184f52f3d4f4039f95d74072f769be3c570f29a31e1544d06193e2032afdd1d1a41afd65c29fe86aead7f0754c5cfb9d20ce385860a70ef4db6b99c5d230c04be2e6b57c031e87d95ea7f8e7187d8f41aab626eb7bb592235d0b560ebfd89668eae7b8463dd7fdf11175dbebd7636e823c73085d808dc8be832cff630c4c118f04691968d94266032d2cb20e2d37e4443e00bb97ddf7eaa0998ee8c52aac2c2d0a22a74a50c3a64d351840460a33970496e67e573984a6290d9db59742a302f611ae53a92d00080f1f6c65970a3bec3ce0d9ccf30e6a78c5d81178333379f9ec325a110827a63ed4e5d38a45f80f73e98a349c5825f1d1cf4ae9542d8ba79dd853f2368fc1bc4b289681d95e95a36035a8e979731efc1956eaf31c186a3b94b6f767e71ef4964f3ece37f4e673eab41f04bfca1feea416e9a73e38a025e17f44be36216933d2663a1a2c98e64276593fd3c9233b8ed637ef06771e2c594bf4e91eed3fbac491d219a5a2b22a6947fa73136e514ac9c039e9df899e4e00d1c59de0381c193ad2882966e802dbf957f963de042b22aa23e82074445b0c340553fea2e3518e8eed709c2f7b9f60f241d2dc3405d503340f6e737dd649b4f9b6ae1f7fb29c2723283f0fe57ccff7315802be6c4ea47a9b7c98bab9021cd36db1358081ba5f0bea36a5d65f87425bda935146cf600b10bb58c946612727af4389dbc4e1b123f0826aef2be6da8075a3bbee32a8d729a87ecd5a190ace97454ffc2bffd4d8dde912e84691f219bb1539238505127ee2c272d175371d1294e10fbece69d4c04872fbe1c7249c4e9a6ca7c5efd36dc59ac58aa6b626b2b93aa9b8f95b718e25bdf7309175cdc746ea159518884cf848915dd0086134ad87a5dd283a199f8e10d313e9b22b23c1cffeeaaafc6fe56b18917cc048c66395ffaed50cbaa3db4994812f4031fd47c86d2b748ac347fdb4c9cecc432011cea7868a5e3988a9bdc3ec4b12da320080e959c221186839eb9388101cb5ece6c23ce4e0db4442e7072886b67dbc0280c6e76b11490b52f573803c513d03d4d73e64474d6d0806c05c6876aa5cd461a5fe5ea26e31e3da8e72ab5f085d752993fcc99b71c218a5b2ffe0fc8156a887dd7a856f65a1803b380cd9a1ccec538bad1fa26b4dee8e3310b85f24860968b1a65b0ba7588cf183a8599d70186d64cdb1110df17c2614449e43c5a4555b82d6cf4ca88b18d04c192e035b0899dbf449e760c1e45f555129ce80b3e06785f31f47306ba16d19c7dc5a1e5e592fc1b8009bd261f96f24cb2a412e1c8d82c44f2783e18f2ee6f04b65f976a56ccf0f05782103bee79985c07ead65ebf484935e163ab6705ab1f3a634fcbc2b153714d3141be00987a8c3f3dd051924afa14bee3d154dab3ec0da333ea5c50b53a961a0a523f50a4278454f5e509756d1cbdf2b737006ba04a83faedbe3f5613e7ade6b42d423d5a85768e892fa0d2547872c85b43879799893a21a1a641f4d85761dd34141967da242d352b5bcbac639adb622f8610da6e5c62782e079df186b34426232f7088232569b16cc48890ac1619bd753f898eb8e661fe20276471bef4dd429ddefd91b3fd167cd781902dc38f1abc43bdada797cf99878d72fe1fe96a2da5769566442ff837dd895452edea7cc2ba37f243820fc6516eabbfdaff3b6530c6b054e359ac9d79ee9a6d7889c6264ffa07b46e94aa9fd2e9d49caa6ae7c51549cbf4ae83d1637d92dbfd38bccff2920c7fe37ddaf087153c063c37132b52b6294b5a0ab4c5914cc94d619ee598d82ea939eeceb6236b60209965c0561259e0f003c41188d4462e2c85798a7e1ac5154116cc2be7d97ca6fd0227d8d9535643d186c77755e5974d8e401228ca60403331f540828028eeb4e2547293cf71776b08afa37c654f453cf2d423de256c2c809a3083055abf1643a76a53ef3e8121ed6c56b50c1335d517ec5950257449d45f65c0658754880e051a30684f2a4a8254537725a7d45c76b88cb88908e05859f0b8bfec5620b9b8c740180efe39ef71430f8559032299c22795b88ffc3544911d6e23a52f6c1b29923b818aa3390353d584888db07cda9fe4f586cc97e8616024573e3efb589ab2ffeb687dd32e5fcc1e12163d199d61f2d3d7d0191dffeb47a7a89179630d9334a5f328e4dbf5b299c8762b5a1abd3fcbb7781b6fc47f9e5b8fc263bf3b2723e370816c514c4bc18c124682d4ccc45255abd4dd63ca23c3780537a2db922b31e33a71689c72de04f65a4d94249126b7ad43bac76df7f0ec2f7a223fb01f2cafd3401aa11379e20d0a1334b782b06fe02594dcc71b2633b703ea48bfee4c95ac7ff6c992ab44fddbaba19379e9dd5178b5433075fc04b2c515e473e987f01630ceeed694468a8fa3ac8023d820747956236a3404909f9a4ff93eb84f0ed7bc18fbc057cd2d01bb2a11d3bb3d2136d35921a669cd11a866c82e1029323635583c7417727874dc81429f059afca4832b50d280793fcb5bcd9b1276461459bf2963c3617f87bb1859551c1e57fd74d31fab0d234060a17e921c0293d03a89eeb54d02b58c04b5dabc34b3954bc702330c8a91865c8e951e1c3e5398922a00afcd4b7781a2110476e57689915081bd9067cc8ebc87d2f7821ba6339f942c52eac49227dddd1087b41a4add2f7de65138e372cdffd5943b8194b7125b2a00e36a99dc872296f4afe48999fad561002734223ce9fe46ebbb75b54e0eeda6d3fc7a06403d97a7b309bb763a301e941765fd4f5b6db1c2fa626be6bc2436b0a6ed8b239fa9dad487f3df20cc3d65857d5b221d8120e829a7e2a14b8f89779420b475cee16e4bd6c20c4bf2f91c81874eea1a81cee500dffb716524db4357b58742d54cd41812a8882e054b3ede21fbaf178c58fb8b691a0f83f05cea727a420d2cd0ee494d48a4cb13da81f5f1872c6deaf6c95531f83c489cae3c1c691ad37ac26addbf8a7cfeca61c36dd84c75aecf439e01b01f4f61cb2ef4623d1e2222c9f4cb239c7271e56cbeed44a57ea9caee37101a80499fe94ce5074275ca9f832d21885cd6e35f6c26d0774320d958de0eddb7ccef886bfffabec3b801af22884c92526615676b56e35e997abba84c71db752321b383e86f05ab0aa7a5a4525e5426829d12ab8862d6745478e0cf68fe43674d6b492476a1efbe378624a6761563b9e0de8d87ea7ac4ece07cf7312ce17dfe15ee74249ec1c2d6cf0108ed806b1f3f005b50adbba52675f118c15b672fe5fbcc2b704e4c274917c845446d96710a76d39544bbe32647013f2a6ece3db76333f03a0fefb705b6737a92a0061ac9529333333d6ca470b1251df0cb21f407880dfdbba04003bcba262f5e805e928a087e6cf1d5219ed72cd388598e5b762fa79d146630bfc2e286db410947495ee444dcfc5d2d35d594af17914c061b166695602e02fe6d3fee0144fca5a6b96b82eeae9b0334713a7cf471a44a3192ffb435dcfa2ee4c1ef3e4e757a3fae4b3c68d4b639b549815108f6b9c55574c52248bf8d19f56b12711c9e58190b8b3bf969d1bdf129f26bcb7b41c437c1810a17764c97ec1db87bdec6263aa22e7be4e7f0ede804562c1bcc51db8e4cf9412781a7c10c7e5bc91270b607926cad3cf81c1e1d611f5bc54b12c42b18388472a9e303cc3c8464c62ce58b08e85ccea3d6625e7be902e1a85bb67912026673af219d59b37d24f2284e4cafe22649f93412e78b4a5d4ad1c3c2e88beabf715e3ca25a31a194c7588d3e4b9e5b1d2072cc089d734c887b5da379548df6615d370ade65bccf4b96419f25721e214d43ada510ee9138f03ded9d6b5c0a4fc4a2d4f21c682ac68cb05b1273d305abe8d3e15853c5b9b8f10096a166a75bfd3bba2fbe58161aafe4d0c9fee96a9dedfe0c3b2014584f6a37e9e0e8ca8e97fd05ab39d4e419f837997ad0b26e5bb63a158c3960a3826418af0e018513c2c224bfb55dc6c856b3761119b7da048ad1fcd625f29d9375d5de43a990f74175473a6c0b5d7c95f66f756adc68804becf28252ae6d3af8cf46cdbd0b01fca0a7aa67e965440fc0c7e05c81c78716371d895fd1037f513f9cbc98b3c875afd3e36325e33f1b54ab42cd771678bb101fea3193b304b5bbc31354a8753a1c14605482af9a479f30f9b000b74cc28b3", 0x1000}], 0x5, &(0x7f0000002bc0)=[@rights={{0x34, 0x1, 0x1, [r6, r0, r7, r0, r8, r2, r9, r10, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01, r16}}}], 0x78, 0x44085}}, {{&(0x7f0000002c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002cc0)="ce9f048f9fb6d7b0c68fb75a3583be9ba2e6ae", 0x13}, {&(0x7f0000002d00)="11d77f4b33eda8f4b3574f49711fad378598d387231b72462b3e9f88f91161d12d5a1bd5fc57dc63805708c0bc3b85fa61d09a70e5ada41cff5c", 0x3a}, {&(0x7f0000002d40)="aaaf25faf94754fdfceba0ba68dede11371f2af66f92cdf2324c7b3eded75d843aa22e8548fcebd5e5b6b4d85572dbf2324f287490bcfa811920a10c941a97f698ac04f4cf1bebdbbbf1dd1204a89d54cb3c8fb7f87fd5baf100f466d4cd921cf32104b294a8d4c7aa37e47619847473d3001f14442f374d2f9a677baecbb5fd7408d9b9d9a67dea98f9b47d6e218b1f82db485cf2d9f67e82cb8b5a152a806c30d57d456f0d00d0209d03", 0xab}, {&(0x7f0000002e00)="ee289e3256657f84962702ef5849c9c3ed690f0a45356d05068bc3d83a4cdb14144a1f47d237220f745e2db97180f0dea947b056df95b88a89d2d8474ab793c95189f8b47b0c5ea577912e8d26ebd3f9c907c184b0f405498d8081adaf90cb85d586549c5f3c0a391b265778709fe15519c14a9a535eea517fc784b9b66eaa9cba3696bc0635777a2f231f4cc147103ec9a607e24dbbb8b6e0c76951f50ee2082ffd3b2b9078d91f317baf81a057d7", 0xaf}], 0x4, &(0x7f0000003180)=[@cred={{0x1c, 0x1, 0x2, {0x0, r17, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, 0xffffffffffffffff, r22}}}], 0x60, 0x894}}], 0x3, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003380)={r3, 0x20, &(0x7f0000003340)={&(0x7f00000032c0)=""/43, 0x2b, 0x0, &(0x7f0000003300)=""/57, 0x39}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000033c0)={r15, r3, 0x16, 0x0, @val=@tracing={r23, 0x80000000}}, 0x20) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000003400)) (async) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x0, 0x1000008, 0x13, r3, 0x0) 14.759270152s ago: executing program 7 (id=7360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000100)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000200)='GPL\x00'}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48081}, 0x4000004) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x1, 0x1, 0x4}}) 14.432543811s ago: executing program 7 (id=7363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0x9, 0xb}, {0xfff7, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x83, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0x12, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) sendmmsg$inet(r4, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="140000000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000797000094040000820d212aab96bad6cdf92da325000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000290000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001000000000000001c000000000000000000000008000000", @ANYRES32=r7], 0x168}}], 0x1, 0x8000004) 10.435783728s ago: executing program 7 (id=7371): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000100)={0x0, 0xa00}) unshare(0x20000400) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2230100080045000020000000000024907800000000e00000012001880b000c907875d00021"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r4, @ANYRES32=r4, @ANYRES8=r6], 0x18}}, 0x0) getsockopt(r7, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0xffffffffffffffc7, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in={0x2, 0x4e23, @broadcast}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8fa50f638facd57de499163"}, 0x8000000000000001, 0xfffffffffffffffe, 0x3}}}, 0x118) 10.023706815s ago: executing program 9 (id=7373): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000001c0)={r4, 0x1, 0x0, 0x8000}) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r5, 0x32d7, 0x0, 0x46, 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x6, 0xdd, 0x8, 0x1d, 0xfffff86a, 0x3b9, 0x7, 0x80000000, 0xa, 0x3, 0x8001, 0x7, 0x23569d87, 0x816f, 0x81, 0x1000000, 0x9, 0x2, 0x400, 0x6, 0xa, 0xfffffffa, 0x6, 0x3, 0x8, 0x4, 0x6, 0x80000000, 0x180, 0x613a862d, 0x3ff, 0x5]}) 8.393014538s ago: executing program 4 (id=7377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x88, {0x0, 0x1}, {0x75, 0x2}, @const={0x2, {0x2, 0x3400}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x8, 0x6, 0x5f3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r7 = socket(0x80000000000000a, 0x80000, 0x20000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000020000801000000180000000200b900861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/48, 0x30}], 0x1}}], 0x48}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000001280)={0x0, [[0x101, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f3], [0x2, 0x9, 0x0, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xc3d3, 0x0, 0x10000, 0x20001]], '\x00', [{0x0, 0x3}, {0x1000000}, {0x3, 0x4}, {0x0, 0x803}, {0x1000}, {0x0, 0x1000}, {0x200000, 0x3}, {0xffffffff}, {0x0, 0x4}, {0x5, 0xffffffff}, {0x19, 0x400000}, {0x10000}], '\x00', 0x401, 0x0, 0x0, 0x2}) recvmmsg(r8, &(0x7f0000000d80), 0x0, 0x10162, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, 0x0, 0x0) 8.275806163s ago: executing program 5 (id=7379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r6, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 8.086897831s ago: executing program 9 (id=7380): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r4, 0x1, r0, 0x4}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000580)={0x2, 0x2, 0x1, 0x0, 0x3, 0x0, [{0x5, 0x558, 0x9, '\x00', 0x4}, {0x9, 0x8, 0x7fffffffffffffff, '\x00', 0x804}, {0x8, 0xb, 0x2, '\x00', 0xa0a}]}) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0x1, 0x80000, r1}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'pimreg1\x00', &(0x7f0000000500)=@ethtool_stats={0x1d, 0x6, [0x7, 0xffffffff00000000, 0xffff, 0x5dd5, 0x1, 0x80000001]}}) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'pimreg1\x00', &(0x7f0000000500)=@ethtool_stats={0x1d, 0x6, [0x7, 0xffffffff00000000, 0xffff, 0x5dd5, 0x1, 0x80000001]}}) pidfd_send_signal(r9, 0xe, &(0x7f0000000440)={0x1f, 0x2, 0x9}, 0x0) prctl$PR_SET_THP_DISABLE(0x51, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r9, 0xc0385868, &(0x7f0000000400)={r1, &(0x7f0000000100)='\x00', 0x0, &(0x7f00000001c0)={@_ha_fsid={[0x417, 0x5]}, {0x37, 0xfff9, 0x0, 0x6e}}, 0x9, &(0x7f0000000380), &(0x7f00000003c0)=0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) (async) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) 8.00507551s ago: executing program 7 (id=7381): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r3 = syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10, 0x4, 0x1a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x3517, 0x9141, 0x52, 0x0, 0xa) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@delnexthop={0x38, 0x69, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000014) unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x4e20, 0xfffe, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff}, {0x0, 0x5, 0x204}, 0x0, 0x6e6bc0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000006800010002000ebe16c8e9ec000055690ef9b588dcdf179e1118fcffff7f00000000000000000c0002000100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="a25d8e1d84ed59bc59ee2d60f803cb0faadbd73b1ed823546b5e60a2a12e790731669a408256e75d854646fa60f3fa8ce51722cc3ecfc523943873fc4a20768d23463f73febfc8f9557a8bcd1f351358f39cac27a5ce8a05a28e3c9e1e599ba7b70a9838c4d523f80575b0228b5cb5041a98ae5c443d20736f6fffa0dc915ad0f133ffa4deccb72de602d94fa970e07411d3fdb94080bf3e16ae4611b2b43eeac16467d0fcb28b917d79b709c9990c539ad946de04e4e9008242c5e142c4830dc66597054716484ee756b1529e3313ac6293fbdf00fa1c27b2aada3f0c9b5000f53db9023c4da62ae280fa2b83085b", 0xef, 0x0, &(0x7f0000000100)={0xa, 0x4e22, 0x10, @mcast2, 0xffffffff}, 0x1c) 7.516523226s ago: executing program 9 (id=7382): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, 0x0, 0x40) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000240)={0x1, 'macvtap0\x00', {}, 0x7d}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3.54121271s ago: executing program 9 (id=7384): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x8, 0x3, 0x0, 0xffda}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x202, 0x1c, 0x1000}, 0x10) sendto$inet6(r0, &(0x7f0000000280)="ff", 0xffe0, 0x4000080, &(0x7f0000000300)={0xa, 0x4e21, 0xbe4, @loopback, 0x800000c0}, 0x1c) 3.476749943s ago: executing program 5 (id=7385): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000004c0)={0x0, 0x200, 0x84, 0x20203843, 0x2, [0x2], [0x7fc, 0x0, 0x0, 0x45], [0x4], [0x3]}) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r7, 0xe) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) connect$unix(r8, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_MODESET_CTL(r6, 0x40086408, &(0x7f0000000040)={0x3}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x85, 0x80}) io_uring_enter(r2, 0x3516, 0x2000, 0x0, 0x0, 0xfffffdcf) 3.472963138s ago: executing program 8 (id=7386): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x101080) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x80) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r3, 0xfffffe01, {0x0, 0x0, 0x0, 0x3, 0x6b6a3e8d, 0x0, 0x12, 0x6, 0x14, "1b7c158839ae9878a32c1e8701073a6cb214d3092285c6347e468a5f64820b404a62343091d774ad8aafe45e34fd9254f3f0f4a2482aba53dd0d95e08bf41c1e", "73188ffd4b5450e35ae21cdc1d77c1e5bfecebdebe888dbb542d8242ab8318fb349cb44bf398d67ceafd3e28226f1a707dbe1830eda5effc98c640d0d333ad86", "2f5e29bf09e16a7f8305ba6b441821a07b97049a07509ee1b01e4ceefd36efbf", [0x8, 0x5]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e21, 0x2, @empty, 0xc}, 0x1c) r5 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0xf958, 0x10100}, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000640)={0x2000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setpriority(0x1, 0x0, 0x7ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x8) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYBLOB="248f895f1bdf90"], 0x1000f) 3.325835662s ago: executing program 4 (id=7387): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.163663649s ago: executing program 7 (id=7388): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000000080)="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"/340, 0x154}], 0x1}}], 0x1, 0x5dc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @private2, @private2, 0xb5, 0x0, 0x0, 0x100, 0xc00000, 0x800a0002}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000007c0)={'pim6reg1\x00'}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r5}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r3, 0x8, r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r9], 0x20}}, 0x0) fcntl$setlease(r3, 0x400, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @broadcast}, &(0x7f0000000200)=0xc) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r11, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r11, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r13, r14, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@local, 0x4e24, 0x3, 0x4e24, 0x7fff, 0xa, 0x20, 0x20, 0x33, r10, r13}, {0x3ff, 0xfffffffffffffff8, 0x4, 0x4, 0xb2cf45d, 0x4, 0x4, 0x5}, {0x9, 0x1, 0x1, 0x400}, 0x80000000, 0x6e6bb4, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in6=@local, 0x3500, 0x1, 0x3, 0x0, 0x4, 0x2}}, 0xe8) 3.115838494s ago: executing program 4 (id=7389): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d", 0x84}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641", 0xb0}, {&(0x7f0000000d00)="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", 0x12e}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd9", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="7542473782798be019c27ed30b", 0xd}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a5506acb719304ebc71b2a3756cb0832d928d432d1506d368e2b001a8b392dad3dc2916", 0x6f}], 0x2}}], 0x3, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.027389759s ago: executing program 4 (id=7390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x9, 0x3b9, 0x2, 0x4, 0x7, 0x5547, 0x9, 0x5}, &(0x7f0000000240)=0x20) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x3, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="d035744442723da11446d9ce15f0c917b3288e7f3273843d86137fad735383512cc2c072d3580436cd1991bd9b16", 0x2e}, {0x0}], 0x2}, 0x4048081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000e3c30000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000001d0a0101"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 2.700247793s ago: executing program 4 (id=7391): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) syz_usb_disconnect(r0) preadv2(r1, &(0x7f0000000640)=[{0x0}, {0x0}], 0x2, 0x1, 0x3, 0x0) 2.641558067s ago: executing program 5 (id=7392): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, r3}, 0x50) getpgid(0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0xa3, 0x8080) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x102, 0x0, {0x5, 0xff, 0x0, 0xe}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r7}, 0x38) 2.569856263s ago: executing program 9 (id=7393): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xa00, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x8000000}}}}}, 0x0) 2.468452709s ago: executing program 8 (id=7394): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000240)={0x1, 'macvtap0\x00', {}, 0x7d}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.451166736s ago: executing program 9 (id=7395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r6, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 2.255060859s ago: executing program 8 (id=7396): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='lp', 0x2) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x600) 2.155732746s ago: executing program 7 (id=7397): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x50001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0xfd}]}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) unshare(0x8000280) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) r3 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e7", @ANYRESDEC], 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000e80)={0xa0, 0x7, 0x2, 'x4'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000000c0)={0x0, 0x16, 0x6, '\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000880)={0x1c, &(0x7f00000007c0)={0x0, 0xe, 0x2, "ace1"}, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) r4 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff08) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xb8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x22, 0x3, "3318000058a8056dd9a87f963d140de6993ac869f3a8609133b07523679a"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 1.365913603s ago: executing program 8 (id=7398): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) (fail_nth: 15) 1.363620833s ago: executing program 5 (id=7399): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d", 0x84}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641", 0xb0}, {&(0x7f0000000d00)="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", 0x12e}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd9", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)}, {&(0x7f0000000040)="7542473782798be019c27ed30b", 0xd}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a5506acb719304ebc71b2a3756cb0832d928d432d1506d368e2b001a8b392dad3dc2916", 0x6f}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.236592742s ago: executing program 8 (id=7400): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18a78420f9d8fbe5dd8c5cc9cfb8d377", @ANYRES16=0x0, @ANYBLOB="00042bbd70003c000000790000000400f400"], 0x18}}, 0x5) r6 = socket$kcm(0x10, 0x7, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="100015"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x12}}, 0x0) 984.295855ms ago: executing program 4 (id=7401): socket$can_raw(0x1d, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0xfffffffffffffff8) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x0, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x52) 434.46736ms ago: executing program 5 (id=7402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x44095) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWSET={0xe4, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFTA_SET_EXPRESSIONS={0x88, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x68, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x800}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz0\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_PREFIX={0xc, 0x2, 0x1, 0x0, ')#\\+\xb2\x9c[\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14}}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 118.807562ms ago: executing program 8 (id=7403): socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x11, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x34f081) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, 0x0) 0s ago: executing program 5 (id=7404): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xd03, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x22186, 0x28000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}, @IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035570970880) kernel console output (not intermixed with test programs): [ 1663.783106][T31375] fuse: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿ01777777777777777777777\}P±c]›ZǬµ†¸âÆ‘Ùéø—âõ¦-ûäoBk˜Õè—&ðÛ®Œ%$F©uYÙ [ 1663.783106][T31375] Ú:Õ×Òþ(1eÁ €ç' [ 1663.809749][ T5894] usb 10-1: USB disconnect, device number 17 [ 1663.851426][T31377] __nla_validate_parse: 2 callbacks suppressed [ 1663.851444][T31377] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6931'. [ 1663.854044][T31375] fuse: Unknown parameter 'romtmode20000C0000000000001000000000000000000000000' [ 1666.117275][T31416] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6944'. [ 1666.367056][T31422] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6945'. [ 1666.383397][T31423] FAULT_INJECTION: forcing a failure. [ 1666.383397][T31423] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.509904][T31423] CPU: 1 UID: 0 PID: 31423 Comm: syz.8.6946 Tainted: G L syzkaller #0 PREEMPT(full) [ 1666.509932][T31423] Tainted: [L]=SOFTLOCKUP [ 1666.509939][T31423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1666.509948][T31423] Call Trace: [ 1666.509956][T31423] [ 1666.509964][T31423] dump_stack_lvl+0xe8/0x150 [ 1666.509991][T31423] should_fail_ex+0x412/0x560 [ 1666.510018][T31423] should_failslab+0xa8/0x100 [ 1666.510041][T31423] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1666.510060][T31423] ? __alloc_skb+0x186/0x7d0 [ 1666.510076][T31423] ? __alloc_skb+0x1d0/0x7d0 [ 1666.510089][T31423] ? __local_bh_enable_ip+0xd0/0x130 [ 1666.510114][T31423] __alloc_skb+0x1d0/0x7d0 [ 1666.510134][T31423] pfkey_sendmsg+0x212/0x1120 [ 1666.510294][T31423] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1666.510318][T31423] ? aa_sk_perm+0x6d5/0x900 [ 1666.510345][T31423] ? __pfx_aa_sk_perm+0x10/0x10 [ 1666.510364][T31423] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1666.510394][T31423] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1666.510415][T31423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1666.510435][T31423] ____sys_sendmsg+0x972/0x9f0 [ 1666.510461][T31423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1666.510486][T31423] ? import_iovec+0x73/0xa0 [ 1666.510507][T31423] ___sys_sendmsg+0x2a5/0x360 [ 1666.510530][T31423] ? __pfx____sys_sendmsg+0x10/0x10 [ 1666.510577][T31423] ? __fget_files+0x2a/0x420 [ 1666.510598][T31423] ? __fget_files+0x3a0/0x420 [ 1666.510628][T31423] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1666.510649][T31423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1666.510675][T31423] ? __pfx_ksys_write+0x10/0x10 [ 1666.510701][T31423] do_syscall_64+0x14d/0xf80 [ 1666.510715][T31423] ? trace_irq_disable+0x3b/0x150 [ 1666.510733][T31423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.510746][T31423] ? clear_bhb_loop+0x40/0x90 [ 1666.510763][T31423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.510779][T31423] RIP: 0033:0x7f7c4659c799 [ 1666.510795][T31423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1666.510809][T31423] RSP: 002b:00007f7c47519028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1666.510828][T31423] RAX: ffffffffffffffda RBX: 00007f7c46815fa0 RCX: 00007f7c4659c799 [ 1666.510840][T31423] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1666.510850][T31423] RBP: 00007f7c47519090 R08: 0000000000000000 R09: 0000000000000000 [ 1666.510861][T31423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1666.510870][T31423] R13: 00007f7c46816038 R14: 00007f7c46815fa0 R15: 00007f7c4693fa48 [ 1666.510896][T31423] [ 1667.352556][T31443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.360277][T31443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.392420][T31441] netlink: 'syz.5.6953': attribute type 12 has an invalid length. [ 1667.460688][T31441] netlink: 'syz.5.6953': attribute type 42 has an invalid length. [ 1667.725970][T31455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6957'. [ 1667.736722][T31455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6957'. [ 1668.281998][T13906] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1668.471631][T13906] usb 9-1: Using ep0 maxpacket: 32 [ 1668.610348][T13906] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1668.736917][T13906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.766638][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.775312][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.192836][T13906] usb 9-1: config 0 descriptor?? [ 1669.401417][T13906] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1669.480978][T13906] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1669.578732][T13906] dib0700: firmware download failed at 7 with -22 [ 1671.022692][ T5935] usb 9-1: USB disconnect, device number 83 [ 1673.776256][T31517] FAULT_INJECTION: forcing a failure. [ 1673.776256][T31517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1673.814284][T31517] CPU: 1 UID: 0 PID: 31517 Comm: syz.4.6978 Tainted: G L syzkaller #0 PREEMPT(full) [ 1673.814312][T31517] Tainted: [L]=SOFTLOCKUP [ 1673.814319][T31517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1673.814329][T31517] Call Trace: [ 1673.814336][T31517] [ 1673.814344][T31517] dump_stack_lvl+0xe8/0x150 [ 1673.814372][T31517] should_fail_ex+0x412/0x560 [ 1673.814400][T31517] _copy_to_user+0x31/0xb0 [ 1673.814419][T31517] simple_read_from_buffer+0xe1/0x170 [ 1673.814446][T31517] proc_fail_nth_read+0x1bb/0x230 [ 1673.814471][T31517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1673.814494][T31517] ? rw_verify_area+0x2a6/0x4d0 [ 1673.814516][T31517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1673.814538][T31517] vfs_read+0x20c/0xa70 [ 1673.814555][T31517] ? fdget_pos+0x246/0x320 [ 1673.814581][T31517] ? __pfx___mutex_lock+0x10/0x10 [ 1673.814602][T31517] ? __pfx_vfs_read+0x10/0x10 [ 1673.814622][T31517] ? __fget_files+0x2a/0x420 [ 1673.814647][T31517] ? __fget_files+0x3a0/0x420 [ 1673.814689][T31517] ? __fget_files+0x2a/0x420 [ 1673.814716][T31517] ksys_read+0x150/0x270 [ 1673.814750][T31517] ? __pfx_ksys_read+0x10/0x10 [ 1673.814777][T31517] do_syscall_64+0x14d/0xf80 [ 1673.814794][T31517] ? trace_irq_disable+0x3b/0x150 [ 1673.814815][T31517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.814832][T31517] ? clear_bhb_loop+0x40/0x90 [ 1673.814851][T31517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.814867][T31517] RIP: 0033:0x7f7fbb75cfce [ 1673.814884][T31517] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1673.814905][T31517] RSP: 002b:00007f7fbc6b2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1673.814923][T31517] RAX: ffffffffffffffda RBX: 00007f7fbc6b36c0 RCX: 00007f7fbb75cfce [ 1673.814935][T31517] RDX: 000000000000000f RSI: 00007f7fbc6b30a0 RDI: 0000000000000005 [ 1673.814945][T31517] RBP: 00007f7fbc6b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.814955][T31517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1673.814964][T31517] R13: 00007f7fbba16128 R14: 00007f7fbba16090 R15: 00007f7fbbb3fa48 [ 1673.814989][T31517] [ 1673.852544][T31520] FAULT_INJECTION: forcing a failure. [ 1673.852544][T31520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1673.931658][ T5935] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1674.071804][T31520] CPU: 1 UID: 0 PID: 31520 Comm: syz.7.6979 Tainted: G L syzkaller #0 PREEMPT(full) [ 1674.071833][T31520] Tainted: [L]=SOFTLOCKUP [ 1674.071839][T31520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1674.071854][T31520] Call Trace: [ 1674.071861][T31520] [ 1674.071870][T31520] dump_stack_lvl+0xe8/0x150 [ 1674.071897][T31520] should_fail_ex+0x412/0x560 [ 1674.071923][T31520] _copy_from_iter+0x1d3/0x1670 [ 1674.071948][T31520] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1674.071971][T31520] ? __pfx_policy_nodemask+0x10/0x10 [ 1674.071993][T31520] ? __pfx__copy_from_iter+0x10/0x10 [ 1674.072029][T31520] ? set_page_refcounted+0xa0/0x1e0 [ 1674.072049][T31520] ? page_copy_sane+0x4e/0x270 [ 1674.072071][T31520] copy_page_from_iter+0xdd/0x170 [ 1674.072097][T31520] tun_get_user+0x1d4b/0x3dd0 [ 1674.072113][T31520] ? tun_get_user+0x6ff/0x3dd0 [ 1674.072143][T31520] ? aa_file_perm+0x50e/0x15e0 [ 1674.072166][T31520] ? __pfx_tun_get_user+0x10/0x10 [ 1674.072180][T31520] ? aa_file_perm+0x192/0x15e0 [ 1674.072217][T31520] ? ref_tracker_alloc+0x35c/0x4c0 [ 1674.072241][T31520] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1674.072267][T31520] ? tun_get+0x1c/0x2f0 [ 1674.072287][T31520] ? tun_get+0x1c/0x2f0 [ 1674.072301][T31520] ? tun_get+0x1c/0x2f0 [ 1674.072321][T31520] tun_chr_write_iter+0x113/0x200 [ 1674.072339][T31520] vfs_write+0x61d/0xb90 [ 1674.072364][T31520] ? __pfx_vfs_write+0x10/0x10 [ 1674.072389][T31520] ? __fget_files+0x2a/0x420 [ 1674.072417][T31520] ksys_write+0x150/0x270 [ 1674.072433][T31520] ? __pfx_ksys_write+0x10/0x10 [ 1674.072457][T31520] do_syscall_64+0x14d/0xf80 [ 1674.072476][T31520] ? trace_irq_disable+0x3b/0x150 [ 1674.072497][T31520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.072513][T31520] ? clear_bhb_loop+0x40/0x90 [ 1674.072533][T31520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.072549][T31520] RIP: 0033:0x7f0a4bd5cfce [ 1674.072565][T31520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1674.072578][T31520] RSP: 002b:00007f0a4cd36fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1674.072596][T31520] RAX: ffffffffffffffda RBX: 00007f0a4cd376c0 RCX: 00007f0a4bd5cfce [ 1674.072608][T31520] RDX: 0000000000000056 RSI: 0000200000000000 RDI: 00000000000000c8 [ 1674.072618][T31520] RBP: 00007f0a4cd37090 R08: 0000000000000000 R09: 0000000000000000 [ 1674.072628][T31520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1674.072638][T31520] R13: 00007f0a4c016038 R14: 00007f0a4c015fa0 R15: 00007f0a4c13fa48 [ 1674.072664][T31520] [ 1674.493542][ T5935] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.506440][ T5935] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1674.523743][ T5935] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1674.532878][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1674.540876][ T5935] usb 6-1: SerialNumber: syz [ 1674.759274][ T5935] usb 6-1: cannot find UAC_HEADER [ 1674.848897][ T5935] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1674.868877][ T5935] usb 6-1: USB disconnect, device number 127 [ 1674.912981][T22086] udevd[22086]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1675.148041][T31552] FAULT_INJECTION: forcing a failure. [ 1675.148041][T31552] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.162525][T31552] CPU: 1 UID: 0 PID: 31552 Comm: syz.7.6990 Tainted: G L syzkaller #0 PREEMPT(full) [ 1675.162553][T31552] Tainted: [L]=SOFTLOCKUP [ 1675.162559][T31552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1675.162569][T31552] Call Trace: [ 1675.162577][T31552] [ 1675.162585][T31552] dump_stack_lvl+0xe8/0x150 [ 1675.162613][T31552] should_fail_ex+0x412/0x560 [ 1675.162635][T31552] ? sock_alloc_inode+0x28/0xc0 [ 1675.162658][T31552] should_failslab+0xa8/0x100 [ 1675.162679][T31552] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1675.162702][T31552] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1675.162719][T31552] sock_alloc_inode+0x28/0xc0 [ 1675.162737][T31552] alloc_inode+0x6a/0x1b0 [ 1675.162758][T31552] __sock_create+0x12d/0x9d0 [ 1675.162797][T31552] udp_sock_create6+0xd6/0x6b0 [ 1675.162822][T31552] ? __pfx_udp_sock_create6+0x10/0x10 [ 1675.162850][T31552] ? rxrpc_lookup_local+0xc88/0x1500 [ 1675.162962][T31552] rxrpc_lookup_local+0xd02/0x1500 [ 1675.162988][T31552] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1675.163019][T31552] ? rxrpc_sendmsg+0x136/0x710 [ 1675.163091][T31552] ? __local_bh_enable_ip+0xd0/0x130 [ 1675.163116][T31552] rxrpc_sendmsg+0x399/0x710 [ 1675.163142][T31552] ____sys_sendmsg+0x972/0x9f0 [ 1675.163164][T31552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1675.163188][T31552] ? import_iovec+0x73/0xa0 [ 1675.163207][T31552] ___sys_sendmsg+0x2a5/0x360 [ 1675.163229][T31552] ? __pfx____sys_sendmsg+0x10/0x10 [ 1675.163270][T31552] ? __fget_files+0x2a/0x420 [ 1675.163290][T31552] ? __fget_files+0x3a0/0x420 [ 1675.163317][T31552] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1675.163336][T31552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1675.163362][T31552] ? __pfx_ksys_write+0x10/0x10 [ 1675.163391][T31552] do_syscall_64+0x14d/0xf80 [ 1675.163410][T31552] ? trace_irq_disable+0x3b/0x150 [ 1675.163431][T31552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.163449][T31552] ? clear_bhb_loop+0x40/0x90 [ 1675.163469][T31552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.163485][T31552] RIP: 0033:0x7f0a4bd9c799 [ 1675.163503][T31552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.163518][T31552] RSP: 002b:00007f0a4cd37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1675.163536][T31552] RAX: ffffffffffffffda RBX: 00007f0a4c015fa0 RCX: 00007f0a4bd9c799 [ 1675.163548][T31552] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1675.163558][T31552] RBP: 00007f0a4cd37090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.163568][T31552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.163577][T31552] R13: 00007f0a4c016038 R14: 00007f0a4c015fa0 R15: 00007f0a4c13fa48 [ 1675.163600][T31552] [ 1675.163811][T31552] socket: no more sockets [ 1675.201872][ T5894] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1675.221954][ T5935] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1675.594560][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 1675.722754][ T5894] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1675.777748][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.788050][ T5894] usb 5-1: config 0 descriptor?? [ 1675.861734][ T5935] usb 10-1: device descriptor read/64, error -71 [ 1675.951158][ T30] audit: type=1800 audit(1773721128.145:4101): pid=31553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6989" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 1676.004341][ T5894] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1676.016419][ T5894] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1676.052020][T31562] fuse: Bad value for 'fd' [ 1676.141272][ T5894] dib0700: firmware download failed at 7 with -22 [ 1676.147873][ T5935] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1676.282417][ T5935] usb 10-1: device descriptor read/64, error -71 [ 1676.392070][ T5935] usb usb10-port1: attempt power cycle [ 1676.823451][ T5935] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1676.892264][ T5935] usb 10-1: device descriptor read/8, error -71 [ 1676.898826][T31570] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6997'. [ 1677.131708][ T5935] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1677.152443][ T5935] usb 10-1: device descriptor read/8, error -71 [ 1677.248938][T31579] syzkaller0: entered promiscuous mode [ 1677.262393][ T5935] usb usb10-port1: unable to enumerate USB device [ 1677.277547][T31579] syzkaller0: entered allmulticast mode [ 1678.082741][ T5935] usb 5-1: USB disconnect, device number 70 [ 1678.103721][T31593] loop9: detected capacity change from 0 to 7 [ 1678.136589][T31593] Dev loop9: unable to read RDB block 7 [ 1678.233542][T31593] loop9: AHDI p1 p2 [ 1678.240330][T31599] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7008'. [ 1678.260004][T31593] loop9: partition table partially beyond EOD, truncated [ 1678.293672][T31593] loop9: p1 size 150995456 extends beyond EOD, truncated [ 1678.614006][T22086] udevd[22086]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1679.164759][ T30] audit: type=1800 audit(1773721131.375:4102): pid=31604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7009" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 1679.337495][T31614] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1679.443235][T31614] bond2 (unregistering): Released all slaves [ 1679.860013][T31635] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7019'. [ 1679.982302][ T5935] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1680.088869][T31642] FAULT_INJECTION: forcing a failure. [ 1680.088869][T31642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1680.118103][T31642] CPU: 0 UID: 0 PID: 31642 Comm: syz.9.7023 Tainted: G L syzkaller #0 PREEMPT(full) [ 1680.118132][T31642] Tainted: [L]=SOFTLOCKUP [ 1680.118138][T31642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1680.118148][T31642] Call Trace: [ 1680.118156][T31642] [ 1680.118163][T31642] dump_stack_lvl+0xe8/0x150 [ 1680.118191][T31642] should_fail_ex+0x412/0x560 [ 1680.118218][T31642] _copy_from_user+0x2d/0xb0 [ 1680.118237][T31642] kstrtouint_from_user+0xd6/0x180 [ 1680.118262][T31642] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1680.118298][T31642] proc_fail_nth_write+0x8e/0x210 [ 1680.118321][T31642] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1680.118347][T31642] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1680.118425][T31642] vfs_write+0x29a/0xb90 [ 1680.118456][T31642] ? __pfx_vfs_write+0x10/0x10 [ 1680.118475][T31642] ? __fget_files+0x2a/0x420 [ 1680.118499][T31642] ? __fget_files+0x3a0/0x420 [ 1680.118518][T31642] ? __fget_files+0x2a/0x420 [ 1680.118548][T31642] ksys_write+0x150/0x270 [ 1680.118569][T31642] ? __pfx_ksys_write+0x10/0x10 [ 1680.118597][T31642] do_syscall_64+0x14d/0xf80 [ 1680.118614][T31642] ? trace_irq_disable+0x3b/0x150 [ 1680.118635][T31642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.118651][T31642] ? clear_bhb_loop+0x40/0x90 [ 1680.118667][T31642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.118682][T31642] RIP: 0033:0x7f863e55cfce [ 1680.118699][T31642] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1680.118711][T31642] RSP: 002b:00007f863f40cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1680.118729][T31642] RAX: ffffffffffffffda RBX: 00007f863f40d6c0 RCX: 00007f863e55cfce [ 1680.118741][T31642] RDX: 0000000000000001 RSI: 00007f863f40d0a0 RDI: 0000000000000004 [ 1680.118751][T31642] RBP: 00007f863f40d090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.118760][T31642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1680.118769][T31642] R13: 00007f863e816038 R14: 00007f863e815fa0 R15: 00007f863e93fa48 [ 1680.118796][T31642] [ 1680.341813][ T5935] usb 6-1: Using ep0 maxpacket: 8 [ 1680.350085][ T5935] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1680.358323][ T5935] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1680.369506][ T5935] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1680.391560][ T5935] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1680.421616][ T5935] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1680.466490][T31647] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1680.485529][T31647] netlink: 84 bytes leftover after parsing attributes in process `syz.8.7024'. [ 1680.515808][ T5935] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1680.586301][ T5935] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1680.613266][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.724504][T31662] kernel read not supported for file / œ7³ÇüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀÕ²DvcŽ“ØÖ Å6Òxãc: (pid: 31662 comm: syz.8.7028) [ 1680.873945][ T5935] usb 6-1: usb_control_msg returned -32 [ 1680.907649][ T5935] usbtmc 6-1:16.0: can't read capabilities [ 1680.936699][ T30] audit: type=1800 audit(1773721133.145:4103): pid=31662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7028" name=20019C1437B3C7FCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0D5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=147780 res=0 errno=0 [ 1681.038386][T31664] netlink: 'syz.8.7028': attribute type 3 has an invalid length. [ 1681.425510][T31673] loop8: detected capacity change from 0 to 8 [ 1681.431388][T22086] Dev loop8: unable to read RDB block 8 [ 1681.431419][T22086] loop8: unable to read partition table [ 1681.431674][T22086] loop8: partition table beyond EOD, truncated [ 1681.440519][T31673] Dev loop8: unable to read RDB block 8 [ 1681.440562][T31673] loop8: unable to read partition table [ 1681.440900][T31673] loop8: partition table beyond EOD, truncated [ 1681.440930][T31673] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1681.470090][ T30] audit: type=1800 audit(1773721133.675:4104): pid=31663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.7029" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 1682.013856][T31679] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7032'. [ 1682.292590][ T5196] Dev loop8: unable to read RDB block 8 [ 1682.310944][ T5196] loop8: unable to read partition table [ 1682.333688][ T5196] loop8: partition table beyond EOD, truncated [ 1682.515505][T31687] FAULT_INJECTION: forcing a failure. [ 1682.515505][T31687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1682.555701][T31687] CPU: 1 UID: 0 PID: 31687 Comm: syz.8.7035 Tainted: G L syzkaller #0 PREEMPT(full) [ 1682.555738][T31687] Tainted: [L]=SOFTLOCKUP [ 1682.555744][T31687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1682.555752][T31687] Call Trace: [ 1682.555759][T31687] [ 1682.555766][T31687] dump_stack_lvl+0xe8/0x150 [ 1682.555792][T31687] should_fail_ex+0x412/0x560 [ 1682.555820][T31687] _copy_from_iter+0x1d3/0x1670 [ 1682.555845][T31687] ? rcu_is_watching+0x15/0xb0 [ 1682.555872][T31687] ? __pfx__copy_from_iter+0x10/0x10 [ 1682.555900][T31687] ? netlink_sendmsg+0x650/0xb40 [ 1682.555920][T31687] ? skb_put+0x11b/0x210 [ 1682.555940][T31687] netlink_sendmsg+0x6c0/0xb40 [ 1682.555970][T31687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1682.555993][T31687] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1682.556016][T31687] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1682.556036][T31687] ____sys_sendmsg+0x972/0x9f0 [ 1682.556061][T31687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1682.556085][T31687] ? import_iovec+0x73/0xa0 [ 1682.556105][T31687] ___sys_sendmsg+0x2a5/0x360 [ 1682.556128][T31687] ? __pfx____sys_sendmsg+0x10/0x10 [ 1682.556176][T31687] ? __fget_files+0x2a/0x420 [ 1682.556196][T31687] ? __fget_files+0x3a0/0x420 [ 1682.556223][T31687] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1682.556244][T31687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1682.556288][T31687] ? __pfx_ksys_write+0x10/0x10 [ 1682.556316][T31687] do_syscall_64+0x14d/0xf80 [ 1682.556333][T31687] ? trace_irq_disable+0x3b/0x150 [ 1682.556354][T31687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.556371][T31687] ? clear_bhb_loop+0x40/0x90 [ 1682.556390][T31687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.556406][T31687] RIP: 0033:0x7f7c4659c799 [ 1682.556423][T31687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.556438][T31687] RSP: 002b:00007f7c47519028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1682.556456][T31687] RAX: ffffffffffffffda RBX: 00007f7c46815fa0 RCX: 00007f7c4659c799 [ 1682.556468][T31687] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1682.556478][T31687] RBP: 00007f7c47519090 R08: 0000000000000000 R09: 0000000000000000 [ 1682.556488][T31687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1682.556497][T31687] R13: 00007f7c46816038 R14: 00007f7c46815fa0 R15: 00007f7c4693fa48 [ 1682.556524][T31687] [ 1682.894830][ T5894] usb 6-1: USB disconnect, device number 2 [ 1683.097817][T31691] bond3: option ad_select: invalid value (253) [ 1683.137872][T31691] bond3 (unregistering): Released all slaves [ 1683.193425][T13898] usb 9-1: new full-speed USB device number 84 using dummy_hcd [ 1683.338563][ T798] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1683.363510][T13898] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1683.371781][T13898] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.382385][T13898] usb 9-1: config 0 has no interface number 0 [ 1683.390253][T13898] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1683.421813][ T5894] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 1683.442482][T13898] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1683.460003][T13898] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1683.473286][T13898] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1683.481381][T13898] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1683.492331][T13898] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1683.502392][T13898] usb 9-1: Manufacturer: syz [ 1683.508538][ T798] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1683.521627][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.543110][T13898] usb 9-1: config 0 descriptor?? [ 1683.565156][ T798] usb 5-1: config 0 descriptor?? [ 1683.591889][ T5894] usb 6-1: device descriptor read/64, error -71 [ 1683.755228][T31690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.764258][T31690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.775563][T13898] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1683.780426][T31691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.785594][T13898] synaptics_usb 9-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1683.806608][T31691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.861985][ T5894] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 1683.984323][ T5935] usb 9-1: USB disconnect, device number 84 [ 1683.992327][ T5894] usb 6-1: device descriptor read/64, error -71 [ 1684.126566][ T5894] usb usb6-port1: attempt power cycle [ 1684.486664][ T5894] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 1684.544443][ T5894] usb 6-1: device descriptor read/8, error -71 [ 1684.811923][ T5894] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 1684.842681][ T5894] usb 6-1: device descriptor read/8, error -71 [ 1684.886108][ T30] audit: type=1800 audit(1773721137.095:4105): pid=31718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7044" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 1684.982614][ T5894] usb usb6-port1: unable to enumerate USB device [ 1685.224578][ T798] usb 5-1: Cannot set autoneg [ 1685.241936][ T798] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1685.287100][ T798] usb 5-1: USB disconnect, device number 71 [ 1685.738554][T31730] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7048'. [ 1686.120677][T31740] FAULT_INJECTION: forcing a failure. [ 1686.120677][T31740] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.150429][T31740] CPU: 0 UID: 0 PID: 31740 Comm: syz.5.7053 Tainted: G L syzkaller #0 PREEMPT(full) [ 1686.150456][T31740] Tainted: [L]=SOFTLOCKUP [ 1686.150462][T31740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1686.150472][T31740] Call Trace: [ 1686.150479][T31740] [ 1686.150487][T31740] dump_stack_lvl+0xe8/0x150 [ 1686.150513][T31740] should_fail_ex+0x412/0x560 [ 1686.150539][T31740] should_failslab+0xa8/0x100 [ 1686.150560][T31740] __kmalloc_noprof+0xe8/0x760 [ 1686.150577][T31740] ? sock_kmalloc+0xd6/0x160 [ 1686.150593][T31740] ? nlmsg_notify+0xf0/0x1a0 [ 1686.150612][T31740] ? nlmsg_notify+0x14a/0x1a0 [ 1686.150636][T31740] sock_kmalloc+0xd6/0x160 [ 1686.150655][T31740] ip_mc_source+0x756/0x1490 [ 1686.150747][T31740] ? ip_rt_multicast_event+0x69/0x80 [ 1686.150777][T31740] do_ip_setsockopt+0x217c/0x2ea0 [ 1686.150805][T31740] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1686.150824][T31740] ? aa_sk_perm+0x6d5/0x900 [ 1686.150852][T31740] ? __pfx_aa_sk_perm+0x10/0x10 [ 1686.150872][T31740] ? __fget_files+0x2a/0x420 [ 1686.150890][T31740] ? aa_sock_opt_perm+0xff/0x1a0 [ 1686.150912][T31740] ip_setsockopt+0x66/0x110 [ 1686.150928][T31740] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1686.150947][T31740] do_sock_setsockopt+0x17c/0x1b0 [ 1686.150968][T31740] __x64_sys_setsockopt+0x13d/0x1b0 [ 1686.150989][T31740] do_syscall_64+0x14d/0xf80 [ 1686.151003][T31740] ? trace_irq_disable+0x3b/0x150 [ 1686.151024][T31740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.151040][T31740] ? clear_bhb_loop+0x40/0x90 [ 1686.151060][T31740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.151076][T31740] RIP: 0033:0x7f4d0879c799 [ 1686.151092][T31740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1686.151106][T31740] RSP: 002b:00007f4d069f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1686.151124][T31740] RAX: ffffffffffffffda RBX: 00007f4d08a15fa0 RCX: 00007f4d0879c799 [ 1686.151138][T31740] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 1686.151148][T31740] RBP: 00007f4d069f6090 R08: 000000000000000c R09: 0000000000000000 [ 1686.151157][T31740] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1686.151167][T31740] R13: 00007f4d08a16038 R14: 00007f4d08a15fa0 R15: 00007f4d08b3fa48 [ 1686.151193][T31740] [ 1686.205691][T23314] Bluetooth: hci3: command 0x0406 tx timeout [ 1686.479595][T31744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7054'. [ 1687.015148][ T5935] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1687.368811][ T30] audit: type=1800 audit(1773721139.575:4106): pid=31763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7060" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 1687.388604][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 1687.407944][ T5935] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1687.438570][ T5935] usb 6-1: config 0 has no interface number 0 [ 1687.481139][ T5935] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1687.537673][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.561984][ T5935] usb 6-1: Product: syz [ 1687.566200][ T5935] usb 6-1: Manufacturer: syz [ 1687.570802][ T5935] usb 6-1: SerialNumber: syz [ 1687.598280][ T5935] usb 6-1: config 0 descriptor?? [ 1687.691441][T31773] program syz.9.7063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1687.743141][ T30] audit: type=1326 audit(1773721139.865:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.9.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1687.743195][ T30] audit: type=1326 audit(1773721139.875:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.9.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1687.743265][ T30] audit: type=1326 audit(1773721139.875:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.9.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1687.743302][ T30] audit: type=1326 audit(1773721139.875:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.9.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1687.743340][ T30] audit: type=1326 audit(1773721139.875:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.9.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1687.743379][ T30] audit: type=1326 audit(1773721139.875:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.9.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1687.743416][ T30] audit: type=1326 audit(1773721139.875:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.9.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1687.743456][ T30] audit: type=1326 audit(1773721139.875:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.9.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1687.743490][ T30] audit: type=1326 audit(1773721139.875:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.9.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1688.110076][ T5935] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1688.110108][ T5935] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1688.301695][ T5894] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1688.817317][ T5894] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1688.828264][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.836955][ T5894] usb 10-1: Product: syz [ 1688.841937][ T5894] usb 10-1: Manufacturer: syz [ 1688.846813][ T5894] usb 10-1: SerialNumber: syz [ 1690.121850][ T798] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 1690.148918][T31801] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1690.303335][ T798] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1690.321601][ T798] usb 5-1: config 0 has no interface number 0 [ 1690.338580][ T798] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1690.350335][ T798] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1690.359903][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.393519][ T798] usb 5-1: config 0 descriptor?? [ 1690.414742][ T798] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 1690.592375][ T5894] cdc_ncm 10-1:1.0: failed GET_NTB_PARAMETERS [ 1690.598529][ T5894] cdc_ncm 10-1:1.0: bind() failure [ 1690.632776][ T798] usb 5-1: USB disconnect, device number 72 [ 1690.654006][ T5894] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1690.661348][ T5894] cdc_ncm 10-1:1.1: bind() failure [ 1690.780858][ T5894] usb 10-1: USB disconnect, device number 22 [ 1691.087282][ T5935] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71 [ 1691.101839][ T5935] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1691.150311][T31813] FAULT_INJECTION: forcing a failure. [ 1691.150311][T31813] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.163264][ T5935] usb 6-1: USB disconnect, device number 7 [ 1691.196874][T31813] CPU: 0 UID: 0 PID: 31813 Comm: syz.7.7078 Tainted: G L syzkaller #0 PREEMPT(full) [ 1691.196902][T31813] Tainted: [L]=SOFTLOCKUP [ 1691.196908][T31813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1691.196917][T31813] Call Trace: [ 1691.196925][T31813] [ 1691.196932][T31813] dump_stack_lvl+0xe8/0x150 [ 1691.196953][T31813] should_fail_ex+0x412/0x560 [ 1691.196971][T31813] should_failslab+0xa8/0x100 [ 1691.196984][T31813] ? skb_clone+0x212/0x3a0 [ 1691.196997][T31813] kmem_cache_alloc_noprof+0x87/0x650 [ 1691.197007][T31813] ? __netlink_lookup+0xc6/0x8b0 [ 1691.197020][T31813] skb_clone+0x212/0x3a0 [ 1691.197033][T31813] __netlink_deliver_tap+0x404/0x850 [ 1691.197054][T31813] ? netlink_deliver_tap+0x2e/0x1b0 [ 1691.197068][T31813] netlink_deliver_tap+0x19c/0x1b0 [ 1691.197082][T31813] netlink_unicast+0x7e3/0x9b0 [ 1691.197099][T31813] ? __pfx_netlink_unicast+0x10/0x10 [ 1691.197113][T31813] ? netlink_sendmsg+0x650/0xb40 [ 1691.197126][T31813] ? skb_put+0x11b/0x210 [ 1691.197137][T31813] netlink_sendmsg+0x813/0xb40 [ 1691.197156][T31813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1691.197171][T31813] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1691.197186][T31813] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1691.197207][T31813] ____sys_sendmsg+0x972/0x9f0 [ 1691.197223][T31813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1691.197238][T31813] ? import_iovec+0x73/0xa0 [ 1691.197250][T31813] ___sys_sendmsg+0x2a5/0x360 [ 1691.197268][T31813] ? __pfx____sys_sendmsg+0x10/0x10 [ 1691.197295][T31813] ? __fget_files+0x2a/0x420 [ 1691.197309][T31813] ? __fget_files+0x3a0/0x420 [ 1691.197327][T31813] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1691.197339][T31813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1691.197354][T31813] ? __pfx_ksys_write+0x10/0x10 [ 1691.197370][T31813] do_syscall_64+0x14d/0xf80 [ 1691.197381][T31813] ? trace_irq_disable+0x3b/0x150 [ 1691.197396][T31813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.197405][T31813] ? clear_bhb_loop+0x40/0x90 [ 1691.197417][T31813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.197426][T31813] RIP: 0033:0x7f0a4bd9c799 [ 1691.197437][T31813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1691.197446][T31813] RSP: 002b:00007f0a4cd37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1691.197457][T31813] RAX: ffffffffffffffda RBX: 00007f0a4c015fa0 RCX: 00007f0a4bd9c799 [ 1691.197464][T31813] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1691.197470][T31813] RBP: 00007f0a4cd37090 R08: 0000000000000000 R09: 0000000000000000 [ 1691.197477][T31813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.197482][T31813] R13: 00007f0a4c016038 R14: 00007f0a4c015fa0 R15: 00007f0a4c13fa48 [ 1691.197497][T31813] [ 1692.251606][ T798] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1692.423719][ T798] usb 10-1: Using ep0 maxpacket: 32 [ 1692.434780][ T798] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1692.452052][ T798] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.563664][ T798] usb 10-1: config 0 descriptor?? [ 1692.715385][T31846] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.7090'. [ 1692.791371][ T798] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1692.802936][ T798] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1692.815237][ T798] dib0700: firmware download failed at 7 with -22 [ 1693.270126][T13906] usb 9-1: new low-speed USB device number 85 using dummy_hcd [ 1693.455066][T13906] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1693.463368][T13906] usb 9-1: config 0 has no interface number 0 [ 1693.469544][T13906] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1693.479619][T13906] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1693.505606][T13906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.516771][T13906] usb 9-1: config 0 descriptor?? [ 1693.524854][T13906] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 1693.731982][T26593] usb 9-1: USB disconnect, device number 85 [ 1694.361644][T26593] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1694.501868][T26593] usb 5-1: device descriptor read/64, error -71 [ 1694.634904][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1694.634922][ T30] audit: type=1326 audit(1773721146.845:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.7.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4bd9c799 code=0x7ffc0000 [ 1694.667398][ T30] audit: type=1326 audit(1773721146.845:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.7.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4bd9c799 code=0x7ffc0000 [ 1694.691090][ T30] audit: type=1326 audit(1773721146.845:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.7.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0a4bd9c799 code=0x7ffc0000 [ 1694.714473][ T30] audit: type=1326 audit(1773721146.845:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.7.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4bd9c799 code=0x7ffc0000 [ 1694.737907][ T30] audit: type=1326 audit(1773721146.845:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.7.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4bd9c799 code=0x7ffc0000 [ 1694.761206][ T30] audit: type=1326 audit(1773721146.845:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.7.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a4bd9c799 code=0x7ffc0000 [ 1694.784678][ T30] audit: type=1326 audit(1773721146.845:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.7.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4bd9c799 code=0x7ffc0000 [ 1694.808543][ T30] audit: type=1326 audit(1773721146.845:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.7.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4bd9c799 code=0x7ffc0000 [ 1694.831442][ T798] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1694.833450][T26593] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1694.871093][ T30] audit: type=1326 audit(1773721146.845:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.7.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0a4bd9c799 code=0x7ffc0000 [ 1694.920229][ T30] audit: type=1326 audit(1773721146.845:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31861 comm="syz.7.7096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4bd9c799 code=0x7ffc0000 [ 1694.982257][ T5894] usb 10-1: USB disconnect, device number 23 [ 1695.016233][T26593] usb 5-1: device descriptor read/64, error -71 [ 1695.027369][ T798] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1695.034099][ T798] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1695.043466][ T798] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.055247][ T798] usb 9-1: config 0 descriptor?? [ 1695.155267][T26593] usb usb5-port1: attempt power cycle [ 1695.522609][T26593] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1695.574012][T26593] usb 5-1: device descriptor read/8, error -71 [ 1695.594073][T31867] netlink: 'syz.8.7095': attribute type 10 has an invalid length. [ 1695.616348][ T798] (null): keene_cmd_main failed (-110) [ 1695.629743][ T798] video4linux radio48: keene_cmd_main failed (-32) [ 1695.649476][ T798] radio-keene 9-1:0.0: V4L2 device registered as radio48 [ 1695.821799][T26593] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1695.858521][T26593] usb 5-1: device descriptor read/8, error -71 [ 1695.975489][T26593] usb usb5-port1: unable to enumerate USB device [ 1696.696513][T31867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1696.709121][T31867] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1697.140735][T31884] syzkaller0: entered promiscuous mode [ 1697.210103][T31884] syzkaller0: entered allmulticast mode [ 1697.524861][T31892] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.7102'. [ 1697.797678][T31894] cgroup: fork rejected by pids controller in /syz4 [ 1698.036342][T32004] FAULT_INJECTION: forcing a failure. [ 1698.036342][T32004] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.050918][T32004] CPU: 1 UID: 0 PID: 32004 Comm: syz.5.7106 Tainted: G L syzkaller #0 PREEMPT(full) [ 1698.050942][T32004] Tainted: [L]=SOFTLOCKUP [ 1698.050948][T32004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1698.050957][T32004] Call Trace: [ 1698.050964][T32004] [ 1698.050972][T32004] dump_stack_lvl+0xe8/0x150 [ 1698.051009][T32004] should_fail_ex+0x412/0x560 [ 1698.051036][T32004] should_failslab+0xa8/0x100 [ 1698.051060][T32004] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1698.051080][T32004] ? __alloc_skb+0x1d0/0x7d0 [ 1698.051095][T32004] ? __local_bh_enable_ip+0xd0/0x130 [ 1698.051120][T32004] __alloc_skb+0x1d0/0x7d0 [ 1698.051135][T32004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.051156][T32004] __ip_append_data+0x2ca0/0x3f30 [ 1698.051191][T32004] ? __pfx_raw_getfrag+0x10/0x10 [ 1698.051223][T32004] ? __kasan_kmalloc+0x93/0xb0 [ 1698.051250][T32004] ? __pfx___ip_append_data+0x10/0x10 [ 1698.051269][T32004] ? __asan_memcpy+0x40/0x70 [ 1698.051286][T32004] ? ip_setup_cork+0x57e/0xa50 [ 1698.051305][T32004] ip_append_data+0x10d/0x190 [ 1698.051325][T32004] ? __pfx_raw_getfrag+0x10/0x10 [ 1698.051343][T32004] raw_sendmsg+0x14be/0x1a50 [ 1698.051375][T32004] ? __pfx_raw_sendmsg+0x10/0x10 [ 1698.051405][T32004] ? aa_sk_perm+0x6d5/0x900 [ 1698.051434][T32004] ? __pfx_aa_sk_perm+0x10/0x10 [ 1698.051453][T32004] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 1698.051480][T32004] ? sock_rps_record_flow+0x19/0x400 [ 1698.051503][T32004] ? inet_sendmsg+0x2f4/0x370 [ 1698.051517][T32004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1698.051536][T32004] ____sys_sendmsg+0x80a/0x9f0 [ 1698.051560][T32004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1698.051584][T32004] ? import_iovec+0x73/0xa0 [ 1698.051602][T32004] ___sys_sendmsg+0x2a5/0x360 [ 1698.051625][T32004] ? __pfx____sys_sendmsg+0x10/0x10 [ 1698.051647][T32004] ? kstrtouint+0x6e/0xe0 [ 1698.051689][T32004] ? __fget_files+0x2a/0x420 [ 1698.051711][T32004] ? __fget_files+0x3a0/0x420 [ 1698.051742][T32004] __sys_sendmmsg+0x27c/0x4e0 [ 1698.051765][T32004] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1698.051781][T32004] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1698.051822][T32004] ? ksys_write+0x242/0x270 [ 1698.051843][T32004] ? __pfx_ksys_write+0x10/0x10 [ 1698.051867][T32004] __x64_sys_sendmmsg+0xa0/0xc0 [ 1698.051887][T32004] do_syscall_64+0x14d/0xf80 [ 1698.051904][T32004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.051920][T32004] ? clear_bhb_loop+0x40/0x90 [ 1698.051940][T32004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.051956][T32004] RIP: 0033:0x7f4d0879c799 [ 1698.051973][T32004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.051993][T32004] RSP: 002b:00007f4d069b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1698.052011][T32004] RAX: ffffffffffffffda RBX: 00007f4d08a16180 RCX: 00007f4d0879c799 [ 1698.052022][T32004] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 0000000000000005 [ 1698.052033][T32004] RBP: 00007f4d069b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.052043][T32004] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.052053][T32004] R13: 00007f4d08a16218 R14: 00007f4d08a16180 R15: 00007f4d08b3fa48 [ 1698.052080][T32004] [ 1698.369923][T13906] usb 9-1: USB disconnect, device number 86 [ 1699.147651][T17849] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.426553][T23314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1699.514608][T23314] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1699.526606][T23314] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1699.537878][T23314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1699.545771][T23314] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1699.676377][T32031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1700.150688][T17849] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.648288][T13126] Bluetooth: hci0: command tx timeout [ 1703.580725][T17849] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.650640][T32048] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7119'. [ 1703.751895][T13126] Bluetooth: hci0: command tx timeout [ 1703.948197][T32063] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7119'. [ 1704.043714][T32048] bridge_slave_1: left allmulticast mode [ 1704.052446][T32048] bridge_slave_1: left promiscuous mode [ 1704.145278][T32048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.164103][T32048] bridge_slave_0: left allmulticast mode [ 1704.172716][T32048] bridge_slave_0: left promiscuous mode [ 1704.186076][T32048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.432508][T17849] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.318190][T32075] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7126'. [ 1705.741667][T13904] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 1705.789496][T32085] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7126'. [ 1705.802818][T13126] Bluetooth: hci0: command tx timeout [ 1706.013633][T13904] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1706.022033][T13904] usb 6-1: config 0 has no interface number 0 [ 1706.030688][T13904] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1706.043392][T13904] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1706.085170][T13904] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1706.094786][T13904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.160768][T13904] usb 6-1: config 0 descriptor?? [ 1706.186439][T13904] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1706.422714][T32080] iowarrior 6-1:0.1: Error -90 while submitting URB [ 1706.433859][T13904] usb 6-1: USB disconnect, device number 8 [ 1707.881709][T13126] Bluetooth: hci0: command tx timeout [ 1710.108427][T32075] ip6gre1: entered promiscuous mode [ 1710.114643][T32075] ip6gre1: entered allmulticast mode [ 1710.539272][T32124] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7133'. [ 1710.757624][T26593] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 1710.953293][T26593] usb 9-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 1710.966236][T26593] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1710.979292][T26593] usb 9-1: config 1 has no interface number 0 [ 1710.985650][T26593] usb 9-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1711.007916][T26593] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1711.021644][T26593] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.039970][T26593] usb 9-1: Product: syz [ 1711.058043][T26593] usb 9-1: Manufacturer: syz [ 1711.063053][T26593] usb 9-1: SerialNumber: syz [ 1711.097366][T26593] cdc_ncm 9-1:1.1: skipping garbage [ 1711.106603][T26593] usb 9-1: selecting invalid altsetting 1 [ 1711.697204][T32112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.706082][T32112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.716760][T26593] cdc_ncm 9-1:1.1: SET_CRC_MODE failed [ 1711.732830][T26593] cdc_ncm 9-1:1.1: SET_NTB_FORMAT failed [ 1711.760935][T26593] usb 9-1: selecting invalid altsetting 1 [ 1711.772855][T26593] cdc_ncm 9-1:1.1: bind() failure [ 1711.786752][T26593] usb 9-1: USB disconnect, device number 87 [ 1714.340386][T32139] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7137'. [ 1714.651845][T13904] usb 9-1: new low-speed USB device number 88 using dummy_hcd [ 1714.821699][T13904] usb 9-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 1714.834960][T13904] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1714.847529][T13904] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1714.856775][T13904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.079452][T13904] usb 9-1: string descriptor 0 read error: -71 [ 1715.110473][T13904] hub 9-1:32.0: bad descriptor, ignoring hub [ 1715.117319][T13904] hub 9-1:32.0: probe with driver hub failed with error -5 [ 1715.203170][T13904] usb 9-1: USB disconnect, device number 88 [ 1715.453168][T32150] FAULT_INJECTION: forcing a failure. [ 1715.453168][T32150] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.466772][T32150] CPU: 1 UID: 0 PID: 32150 Comm: syz.5.7141 Tainted: G L syzkaller #0 PREEMPT(full) [ 1715.466809][T32150] Tainted: [L]=SOFTLOCKUP [ 1715.466815][T32150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1715.466825][T32150] Call Trace: [ 1715.466832][T32150] [ 1715.466840][T32150] dump_stack_lvl+0xe8/0x150 [ 1715.466860][T32150] should_fail_ex+0x412/0x560 [ 1715.466878][T32150] should_failslab+0xa8/0x100 [ 1715.466891][T32150] ? skb_clone+0x212/0x3a0 [ 1715.466903][T32150] kmem_cache_alloc_noprof+0x87/0x650 [ 1715.466918][T32150] skb_clone+0x212/0x3a0 [ 1715.466931][T32150] pfkey_sendmsg+0x4a3/0x1120 [ 1715.466952][T32150] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1715.466976][T32150] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1715.466992][T32150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1715.467006][T32150] ____sys_sendmsg+0x972/0x9f0 [ 1715.467022][T32150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1715.467037][T32150] ? import_iovec+0x73/0xa0 [ 1715.467049][T32150] ___sys_sendmsg+0x2a5/0x360 [ 1715.467063][T32150] ? __pfx____sys_sendmsg+0x10/0x10 [ 1715.467089][T32150] ? __fget_files+0x2a/0x420 [ 1715.467103][T32150] ? __fget_files+0x3a0/0x420 [ 1715.467121][T32150] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1715.467134][T32150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1715.467149][T32150] ? __pfx_ksys_write+0x10/0x10 [ 1715.467165][T32150] do_syscall_64+0x14d/0xf80 [ 1715.467177][T32150] ? trace_irq_disable+0x3b/0x150 [ 1715.467191][T32150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.467201][T32150] ? clear_bhb_loop+0x40/0x90 [ 1715.467213][T32150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.467224][T32150] RIP: 0033:0x7f4d0879c799 [ 1715.467234][T32150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1715.467243][T32150] RSP: 002b:00007f4d069f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1715.467254][T32150] RAX: ffffffffffffffda RBX: 00007f4d08a15fa0 RCX: 00007f4d0879c799 [ 1715.467261][T32150] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1715.467267][T32150] RBP: 00007f4d069f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1715.467274][T32150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1715.467279][T32150] R13: 00007f4d08a16038 R14: 00007f4d08a15fa0 R15: 00007f4d08b3fa48 [ 1715.467297][T32150] [ 1715.852081][T17849] bridge_slave_1: left allmulticast mode [ 1715.883892][T17849] bridge_slave_1: left promiscuous mode [ 1715.905758][T17849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.959876][T17849] bridge_slave_0: left allmulticast mode [ 1715.984628][T17849] bridge_slave_0: left promiscuous mode [ 1716.011864][T17849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.769123][T17849] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1717.223868][T17849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1717.248179][T17849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1717.272677][T17849] bond0 (unregistering): Released all slaves [ 1717.363868][T17849] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1717.415703][T17849] veth3: left promiscuous mode [ 1717.460814][T17849] bond1 (unregistering): Released all slaves [ 1717.693369][T17849] bond2 (unregistering): Released all slaves [ 1717.904226][T32173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.336306][T32028] chnl_net:caif_netlink_parms(): no params data found [ 1719.098325][T32217] IPv6: addrconf: prefix option has invalid lifetime [ 1721.165898][ T24] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1721.343540][ T24] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1721.353085][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.375524][ T24] usb 9-1: config 0 descriptor?? [ 1721.605854][T32258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1721.616177][T32258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.811084][T32256] bond2: option ad_select: invalid value (253) [ 1723.855510][T32256] bond2 (unregistering): Released all slaves [ 1723.978937][ T24] usb 9-1: Cannot set autoneg [ 1724.007072][ T24] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1724.204026][ T24] usb 9-1: USB disconnect, device number 89 [ 1724.410210][T32028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.439012][T32028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.451758][T32028] bridge_slave_0: entered allmulticast mode [ 1724.469276][T32028] bridge_slave_0: entered promiscuous mode [ 1724.828419][T32028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.851942][T32028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.879004][T32028] bridge_slave_1: entered allmulticast mode [ 1724.914681][T32028] bridge_slave_1: entered promiscuous mode [ 1725.069523][T17849] hsr_slave_0: left promiscuous mode [ 1725.091039][T17849] hsr_slave_1: left promiscuous mode [ 1725.150389][T17849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1725.179481][T17849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1725.220710][T17849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1725.246911][T17849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1725.328116][T17849] veth1_macvtap: left promiscuous mode [ 1725.339679][T17849] veth0_macvtap: left promiscuous mode [ 1725.361983][T17849] veth1_vlan: left promiscuous mode [ 1725.394421][T17849] veth0_vlan: left promiscuous mode [ 1725.599958][T32299] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7167'. [ 1725.675576][T32302] FAULT_INJECTION: forcing a failure. [ 1725.675576][T32302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.690426][T32304] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7167'. [ 1725.707468][T32302] CPU: 0 UID: 0 PID: 32302 Comm: syz.9.7168 Tainted: G L syzkaller #0 PREEMPT(full) [ 1725.707498][T32302] Tainted: [L]=SOFTLOCKUP [ 1725.707504][T32302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1725.707514][T32302] Call Trace: [ 1725.707523][T32302] [ 1725.707531][T32302] dump_stack_lvl+0xe8/0x150 [ 1725.707559][T32302] should_fail_ex+0x412/0x560 [ 1725.707588][T32302] _copy_from_user+0x2d/0xb0 [ 1725.707607][T32302] ___sys_recvmsg+0x175/0x590 [ 1725.707626][T32302] ? __lock_acquire+0x6b5/0x2cf0 [ 1725.707650][T32302] ? __pfx____sys_recvmsg+0x10/0x10 [ 1725.707690][T32302] do_recvmmsg+0x334/0x800 [ 1725.707711][T32302] ? __pfx_do_recvmmsg+0x10/0x10 [ 1725.707733][T32302] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1725.707766][T32302] __x64_sys_recvmmsg+0x198/0x250 [ 1725.707789][T32302] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1725.707817][T32302] do_syscall_64+0x14d/0xf80 [ 1725.707834][T32302] ? trace_irq_disable+0x3b/0x150 [ 1725.707855][T32302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.707872][T32302] ? clear_bhb_loop+0x40/0x90 [ 1725.707891][T32302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.707907][T32302] RIP: 0033:0x7f863e59c799 [ 1725.707924][T32302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.707939][T32302] RSP: 002b:00007f863f40d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1725.707956][T32302] RAX: ffffffffffffffda RBX: 00007f863e815fa0 RCX: 00007f863e59c799 [ 1725.707968][T32302] RDX: 0000000000000002 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 1725.707978][T32302] RBP: 00007f863f40d090 R08: 0000000000000000 R09: 0000000000000000 [ 1725.707989][T32302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.707998][T32302] R13: 00007f863e816038 R14: 00007f863e815fa0 R15: 00007f863e93fa48 [ 1725.708031][T32302] [ 1725.915108][T32306] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7167'. [ 1726.028030][T32309] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7169'. [ 1726.338034][T17849] team0 (unregistering): Port device team_slave_1 removed [ 1726.376948][T17849] team0 (unregistering): Port device team_slave_0 removed [ 1726.623725][T32319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1726.649634][T32319] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7170'. [ 1726.723882][T32028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1726.745289][T32028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.924360][T32028] team0: Port device team_slave_0 added [ 1726.953224][T32028] team0: Port device team_slave_1 added [ 1727.141831][T32028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1727.181845][T32028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.316313][T32028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1727.361663][ T798] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1727.381304][T32028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1727.415443][T32028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.540115][T32028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1727.555063][ T798] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.567341][ T798] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1727.593787][ T798] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1727.703705][ T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.732293][ T798] usb 6-1: Product: syz [ 1727.851768][ T798] usb 6-1: Manufacturer: syz [ 1727.868139][ T798] usb 6-1: SerialNumber: syz [ 1727.952969][T32028] hsr_slave_0: entered promiscuous mode [ 1727.976306][T32028] hsr_slave_1: entered promiscuous mode [ 1728.023700][T32028] debugfs: 'hsr0' already exists in 'hsr' [ 1728.030863][T32028] Cannot create hsr debugfs directory [ 1728.284666][ T798] usb 6-1: 0:2 : does not exist [ 1728.703160][ T24] usb 6-1: USB disconnect, device number 9 [ 1728.711688][T13904] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1728.879483][T13904] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1729.025471][T13904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1729.062464][T13904] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1729.076524][T13904] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1729.101415][T13904] usb 10-1: Manufacturer: syz [ 1729.109998][T13904] usb 10-1: config 0 descriptor?? [ 1729.215032][T13904] rc_core: IR keymap rc-hauppauge not found [ 1729.227114][T13904] Registered IR keymap rc-empty [ 1729.240836][T13904] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1729.265541][T13904] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input109 [ 1729.974817][ T798] usb 10-1: USB disconnect, device number 24 [ 1730.211279][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.217931][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.453236][ T798] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1730.641628][ T798] usb 10-1: Using ep0 maxpacket: 8 [ 1730.648058][ T798] usb 10-1: too many configurations: 37, using maximum allowed: 8 [ 1730.677184][ T798] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1730.685231][ T798] usb 10-1: can't read configurations, error -61 [ 1730.776563][T32384] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7181'. [ 1730.841645][ T798] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1730.850102][T32385] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7181'. [ 1730.906796][T32386] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7181'. [ 1731.041621][ T798] usb 10-1: Using ep0 maxpacket: 8 [ 1731.048303][ T798] usb 10-1: too many configurations: 37, using maximum allowed: 8 [ 1731.063197][ T798] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1731.071048][ T798] usb 10-1: can't read configurations, error -61 [ 1731.078095][ T798] usb usb10-port1: attempt power cycle [ 1731.452573][ T798] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1731.474437][ T798] usb 10-1: Using ep0 maxpacket: 8 [ 1731.481084][ T798] usb 10-1: too many configurations: 37, using maximum allowed: 8 [ 1731.491643][ T798] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1731.499633][ T798] usb 10-1: can't read configurations, error -61 [ 1731.653019][ T798] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1731.692277][ T798] usb 10-1: Using ep0 maxpacket: 8 [ 1731.698568][ T798] usb 10-1: too many configurations: 37, using maximum allowed: 8 [ 1731.713104][ T798] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1731.721192][ T798] usb 10-1: can't read configurations, error -61 [ 1731.731625][ T798] usb usb10-port1: unable to enumerate USB device [ 1734.299915][T32412] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7185'. [ 1734.679336][T32417] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1735.074869][T32412] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1736.226539][T32028] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1736.298735][T32028] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1736.349487][T32028] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1736.400962][T32028] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1737.208190][T32028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1737.863180][T32028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1738.132801][ T5894] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1738.309173][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 1738.323927][ T5894] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1738.359717][ T5894] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.397232][ T5894] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1738.429588][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.177094][T10021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.184378][T10021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1743.227579][T10021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.234791][T10021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1743.573685][ T5894] usb 6-1: string descriptor 0 read error: -32 [ 1743.605306][ T5894] hub 6-1:32.0: bad descriptor, ignoring hub [ 1743.666144][ T5894] hub 6-1:32.0: probe with driver hub failed with error -5 [ 1743.733309][T32028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1743.808601][T32526] syzkaller0: entered promiscuous mode [ 1743.837267][T32526] syzkaller0: entered allmulticast mode [ 1743.853133][ T5894] usb 6-1: USB disconnect, device number 10 [ 1744.041346][T32028] veth0_vlan: entered promiscuous mode [ 1744.102849][T32028] veth1_vlan: entered promiscuous mode [ 1744.376386][T32551] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7209'. [ 1744.504006][T32555] bond2: option ad_select: invalid value (253) [ 1744.545545][T32555] bond2 (unregistering): Released all slaves [ 1745.041717][ T5935] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1745.089012][T32028] veth0_macvtap: entered promiscuous mode [ 1745.120244][T32028] veth1_macvtap: entered promiscuous mode [ 1745.166318][T32028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1745.226258][T32028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1745.250221][T10011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.260333][ T5935] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1745.271679][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.292982][ T5935] usb 9-1: config 0 descriptor?? [ 1745.317044][T10011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.381949][T26593] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1745.395071][T10011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.446822][T10011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.511273][T32555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.539109][T32555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.581841][T26593] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1745.611547][T26593] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1745.649288][T26593] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 1745.681702][T26593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.716799][T26593] usb 6-1: config 0 descriptor?? [ 1745.809343][T28972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1745.842591][T28972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1745.908050][T17849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1745.916109][T17849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1746.486293][T32589] syzkaller0: entered promiscuous mode [ 1746.499795][T32589] syzkaller0: entered allmulticast mode [ 1747.147926][ T5935] usb 9-1: Cannot set autoneg [ 1747.231312][ T5935] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1747.349531][ T5935] usb 9-1: USB disconnect, device number 90 [ 1750.778628][T26593] usbhid 6-1:0.0: can't add hid device: -32 [ 1750.851715][T26593] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1753.275240][T24199] usb 6-1: USB disconnect, device number 11 [ 1753.722362][T26593] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1753.740582][T23314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1753.755696][T23314] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1753.767883][T23314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1753.778428][T23314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1753.791788][T23314] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1753.863134][ T5935] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1753.901908][T26593] usb 9-1: Using ep0 maxpacket: 8 [ 1753.911369][T26593] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1753.924227][T26593] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.992918][T26593] usb 9-1: Product: syz [ 1754.033138][T26593] usb 9-1: Manufacturer: syz [ 1754.047676][ T5935] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1754.059504][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.068370][T26593] usb 9-1: SerialNumber: syz [ 1754.167630][ T5935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1754.178131][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.192240][ T5935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1754.202896][T26593] usb 9-1: config 0 descriptor?? [ 1754.207677][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.218291][ T5935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1754.229220][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.240298][ T5935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1754.279805][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.290603][ T5935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1754.301137][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.311937][ T5935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1754.437989][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.473760][T26593] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1754.496354][ T5935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1755.117184][T26593] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1755.135739][T26593] usb 9-1: USB disconnect, device number 91 [ 1755.224872][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.258391][ T5935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1755.270002][ T5935] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1755.282854][ T5935] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1755.291815][ T5935] usb 6-1: Product: syz [ 1755.307490][ T5935] usb 6-1: Manufacturer: syz [ 1755.313732][ T5935] usb 6-1: SerialNumber: syz [ 1755.344825][ T5935] usb 6-1: config 0 descriptor?? [ 1755.352835][ T5935] yurex 6-1:0.0: Could not find endpoints [ 1755.375535][T17833] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.442977][T32675] chnl_net:caif_netlink_parms(): no params data found [ 1755.553468][T17833] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.611279][T32668] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1755.714689][T32668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7234'. [ 1755.800029][T17833] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.882048][T13126] Bluetooth: hci4: command tx timeout [ 1755.994863][T32675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.003584][T32675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.011021][T32675] bridge_slave_0: entered allmulticast mode [ 1756.022548][T32675] bridge_slave_0: entered promiscuous mode [ 1756.084031][T17833] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.097618][ T5894] usb 6-1: USB disconnect, device number 12 [ 1756.196083][T32675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.222338][T32675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.230172][T32675] bridge_slave_1: entered allmulticast mode [ 1756.237377][T32675] bridge_slave_1: entered promiscuous mode [ 1756.449282][T32675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1756.487079][T32675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1756.627727][T32675] team0: Port device team_slave_0 added [ 1756.637891][T32675] team0: Port device team_slave_1 added [ 1756.664940][T32675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1756.672532][T32675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1756.698885][T32675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1756.796667][T32721] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7243'. [ 1756.910714][T32675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1756.933513][T32675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.042043][T32675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1757.576437][T32731] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1757.968364][T13126] Bluetooth: hci4: command tx timeout [ 1760.041819][T13126] Bluetooth: hci4: command tx timeout [ 1761.113085][T32728] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1761.140410][T32728] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1761.223085][T32749] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7248'. [ 1761.491610][ T5935] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1761.520160][T17833] bridge_slave_0: left allmulticast mode [ 1761.529800][T17833] bridge_slave_0: left promiscuous mode [ 1761.539409][T17833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.666299][ T5935] usb 9-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1761.676136][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.736608][ T5935] usb 9-1: Product: syz [ 1761.762189][ T5935] usb 9-1: Manufacturer: syz [ 1761.778578][ T5935] usb 9-1: SerialNumber: syz [ 1761.810905][ T5935] usb 9-1: config 0 descriptor?? [ 1762.087092][T32749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.135603][T32749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.146692][T13126] Bluetooth: hci4: command tx timeout [ 1762.320857][T32749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.340217][T32749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.611312][ T5935] mos7840 9-1:0.0: required endpoints missing [ 1763.027864][T17833] team0: Port device bridge1 removed [ 1763.059356][T17833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1763.072262][T17833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1763.082281][T17833] bond0 (unregistering): Released all slaves [ 1763.092699][T17833] bond1 (unregistering): Released all slaves [ 1763.105218][T17833] bond2 (unregistering): Released all slaves [ 1763.117818][T17833] bond3 (unregistering): Released all slaves [ 1763.135272][T32675] hsr_slave_0: entered promiscuous mode [ 1763.146333][T32675] hsr_slave_1: entered promiscuous mode [ 1763.160351][T32675] debugfs: 'hsr0' already exists in 'hsr' [ 1763.170154][T32675] Cannot create hsr debugfs directory [ 1763.206700][T24199] usb 9-1: USB disconnect, device number 92 [ 1763.340140][T17833] !: left promiscuous mode [ 1763.472695][T17833] tipc: Left network mode [ 1763.543887][ T321] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 1763.622643][ T325] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7254'. [ 1763.763149][ T328] binder: 322:328 ioctl c0306201 0 returned -14 [ 1763.878993][ T333] netlink: 'syz.8.7256': attribute type 27 has an invalid length. [ 1763.896146][ T333] netlink: 'syz.8.7256': attribute type 3 has an invalid length. [ 1763.904667][ T333] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7256'. [ 1764.083912][ T340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7258'. [ 1764.184202][ T328] syz.9.7255 (328): drop_caches: 2 [ 1764.219910][ T340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7258'. [ 1764.826813][ T354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7260'. [ 1765.321914][T26593] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 1765.508315][T26593] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1765.519239][T26593] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.535846][T26593] usb 9-1: config 0 descriptor?? [ 1765.766989][ T358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.788084][ T358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.502379][ T356] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1768.517951][T26593] usb 9-1: Cannot set autoneg [ 1768.534112][T26593] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1768.582410][T26593] usb 9-1: USB disconnect, device number 93 [ 1768.703222][ T375] FAULT_INJECTION: forcing a failure. [ 1768.703222][ T375] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.729472][ T375] CPU: 1 UID: 0 PID: 375 Comm: syz.9.7264 Tainted: G L syzkaller #0 PREEMPT(full) [ 1768.729500][ T375] Tainted: [L]=SOFTLOCKUP [ 1768.729507][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1768.729517][ T375] Call Trace: [ 1768.729524][ T375] [ 1768.729531][ T375] dump_stack_lvl+0xe8/0x150 [ 1768.729562][ T375] should_fail_ex+0x412/0x560 [ 1768.729592][ T375] should_failslab+0xa8/0x100 [ 1768.729615][ T375] ? skb_clone+0x212/0x3a0 [ 1768.729635][ T375] kmem_cache_alloc_noprof+0x87/0x650 [ 1768.729660][ T375] skb_clone+0x212/0x3a0 [ 1768.729681][ T375] __netlink_deliver_tap+0x404/0x850 [ 1768.729717][ T375] ? netlink_deliver_tap+0x2e/0x1b0 [ 1768.729740][ T375] netlink_deliver_tap+0x19c/0x1b0 [ 1768.729763][ T375] __netlink_sendskb+0x47/0x90 [ 1768.729785][ T375] netlink_dump+0xa6f/0xe80 [ 1768.729817][ T375] ? __pfx_netlink_dump+0x10/0x10 [ 1768.729837][ T375] ? __netlink_lookup+0x7e4/0x8b0 [ 1768.729867][ T375] ? netlink_lookup+0x30/0x200 [ 1768.729888][ T375] ? netlink_lookup+0x30/0x200 [ 1768.729906][ T375] ? netlink_lookup+0x30/0x200 [ 1768.729932][ T375] __netlink_dump_start+0x5cb/0x7e0 [ 1768.729961][ T375] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 1768.729986][ T375] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 1768.730081][ T375] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1768.730103][ T375] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1768.730124][ T375] ? ref_tracker_free+0x693/0x840 [ 1768.730145][ T375] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1768.730166][ T375] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 1768.730194][ T375] netlink_rcv_skb+0x232/0x4b0 [ 1768.730217][ T375] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1768.730241][ T375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1768.730281][ T375] ? netlink_deliver_tap+0x2e/0x1b0 [ 1768.730310][ T375] netlink_unicast+0x80f/0x9b0 [ 1768.730339][ T375] ? __pfx_netlink_unicast+0x10/0x10 [ 1768.730360][ T375] ? netlink_sendmsg+0x650/0xb40 [ 1768.730381][ T375] ? skb_put+0x11b/0x210 [ 1768.730401][ T375] netlink_sendmsg+0x813/0xb40 [ 1768.730432][ T375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1768.730457][ T375] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1768.730483][ T375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1768.730506][ T375] ____sys_sendmsg+0x972/0x9f0 [ 1768.730533][ T375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1768.730560][ T375] ? import_iovec+0x73/0xa0 [ 1768.730581][ T375] ___sys_sendmsg+0x2a5/0x360 [ 1768.730605][ T375] ? __pfx____sys_sendmsg+0x10/0x10 [ 1768.730654][ T375] ? __fget_files+0x2a/0x420 [ 1768.730675][ T375] ? __fget_files+0x3a0/0x420 [ 1768.730704][ T375] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1768.730723][ T375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1768.730750][ T375] ? __pfx_ksys_write+0x10/0x10 [ 1768.730779][ T375] do_syscall_64+0x14d/0xf80 [ 1768.730797][ T375] ? trace_irq_disable+0x3b/0x150 [ 1768.730819][ T375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.730837][ T375] ? clear_bhb_loop+0x40/0x90 [ 1768.730856][ T375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.730872][ T375] RIP: 0033:0x7f863e59c799 [ 1768.730889][ T375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1768.730903][ T375] RSP: 002b:00007f863f3cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1768.730922][ T375] RAX: ffffffffffffffda RBX: 00007f863e816180 RCX: 00007f863e59c799 [ 1768.730934][ T375] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004 [ 1768.730944][ T375] RBP: 00007f863f3cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.730954][ T375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.730964][ T375] R13: 00007f863e816218 R14: 00007f863e816180 R15: 00007f863e93fa48 [ 1768.730990][ T375] [ 1769.123781][ T387] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7267'. [ 1769.174285][T17833] hsr_slave_0: left promiscuous mode [ 1769.182430][ T390] netlink: 192 bytes leftover after parsing attributes in process `syz.5.7269'. [ 1769.209560][T17833] hsr_slave_1: left promiscuous mode [ 1769.218237][T17833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1769.227264][T17833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1769.238857][T17833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1769.251795][T17833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1769.286480][T17833] veth1_macvtap: left promiscuous mode [ 1769.292448][T17833] veth0_macvtap: left promiscuous mode [ 1769.298790][T17833] veth1_vlan: left promiscuous mode [ 1769.304938][T17833] veth0_vlan: left promiscuous mode [ 1769.521229][T17833] team0 (unregistering): Port device team_slave_1 removed [ 1769.536224][T17833] team0 (unregistering): Port device team_slave_0 removed [ 1769.876852][ T402] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.7273'. [ 1770.345999][ T428] trusted_key: encrypted_key: insufficient parameters specified [ 1770.563997][ T431] loop9: detected capacity change from 0 to 7 [ 1770.605178][ T431] Dev loop9: unable to read RDB block 7 [ 1770.621320][ T431] loop9: AHDI p1 p2 [ 1770.641673][ T431] loop9: partition table partially beyond EOD, truncated [ 1770.655612][ T431] loop9: p1 size 150995456 extends beyond EOD, truncated [ 1770.723980][ T435] FAULT_INJECTION: forcing a failure. [ 1770.723980][ T435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1770.766454][ T435] CPU: 0 UID: 0 PID: 435 Comm: syz.8.7281 Tainted: G L syzkaller #0 PREEMPT(full) [ 1770.766481][ T435] Tainted: [L]=SOFTLOCKUP [ 1770.766487][ T435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1770.766495][ T435] Call Trace: [ 1770.766501][ T435] [ 1770.766510][ T435] dump_stack_lvl+0xe8/0x150 [ 1770.766537][ T435] should_fail_ex+0x412/0x560 [ 1770.766564][ T435] _copy_from_iter+0x1d3/0x1670 [ 1770.766596][ T435] ? rcu_is_watching+0x15/0xb0 [ 1770.766619][ T435] ? __pfx__copy_from_iter+0x10/0x10 [ 1770.766647][ T435] ? netlink_sendmsg+0x650/0xb40 [ 1770.766668][ T435] ? skb_put+0x11b/0x210 [ 1770.766687][ T435] netlink_sendmsg+0x6c0/0xb40 [ 1770.766714][ T435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1770.766737][ T435] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1770.766760][ T435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1770.766779][ T435] ____sys_sendmsg+0x972/0x9f0 [ 1770.766803][ T435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1770.766828][ T435] ? import_iovec+0x73/0xa0 [ 1770.766848][ T435] ___sys_sendmsg+0x2a5/0x360 [ 1770.766870][ T435] ? __pfx____sys_sendmsg+0x10/0x10 [ 1770.766914][ T435] ? __fget_files+0x2a/0x420 [ 1770.766936][ T435] ? __fget_files+0x3a0/0x420 [ 1770.766964][ T435] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1770.766982][ T435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1770.767008][ T435] ? __pfx_ksys_write+0x10/0x10 [ 1770.767034][ T435] do_syscall_64+0x14d/0xf80 [ 1770.767052][ T435] ? trace_irq_disable+0x3b/0x150 [ 1770.767072][ T435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.767088][ T435] ? clear_bhb_loop+0x40/0x90 [ 1770.767106][ T435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.767122][ T435] RIP: 0033:0x7f7c4659c799 [ 1770.767147][ T435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.767160][ T435] RSP: 002b:00007f7c47519028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1770.767177][ T435] RAX: ffffffffffffffda RBX: 00007f7c46815fa0 RCX: 00007f7c4659c799 [ 1770.767188][ T435] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1770.767198][ T435] RBP: 00007f7c47519090 R08: 0000000000000000 R09: 0000000000000000 [ 1770.767208][ T435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1770.767217][ T435] R13: 00007f7c46816038 R14: 00007f7c46815fa0 R15: 00007f7c4693fa48 [ 1770.767243][ T435] [ 1771.249680][T32675] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1771.534783][T32744] udevd[32744]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1771.633366][T32675] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1772.068865][ T454] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7284'. [ 1772.571751][T13906] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1772.765531][T13906] usb 9-1: Using ep0 maxpacket: 32 [ 1772.784450][T13906] usb 9-1: config 0 has an invalid interface number: 239 but max is 0 [ 1772.829922][T13906] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1772.858465][T13906] usb 9-1: config 0 has no interface number 0 [ 1772.885719][T13906] usb 9-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1772.906625][T13906] usb 9-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1772.918225][T13906] usb 9-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1772.930471][T13906] usb 9-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1772.951626][T13906] usb 9-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1772.982537][T13906] usb 9-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1773.010814][T13906] usb 9-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1773.041130][T13906] usb 9-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1773.067166][T13906] usb 9-1: config 0 interface 239 has no altsetting 0 [ 1773.097103][T13906] usb 9-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1773.108761][T13906] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.123716][T13906] usb 9-1: Product: syz [ 1773.127926][T13906] usb 9-1: Manufacturer: syz [ 1773.132723][T13906] usb 9-1: SerialNumber: syz [ 1773.153382][T13906] usb 9-1: config 0 descriptor?? [ 1773.163783][ T463] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1773.171330][ T463] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1773.218461][T13126] Bluetooth: hci5: urb ffff88807dbaf100 submission failed (90) [ 1773.471701][T26593] usb 9-1: USB disconnect, device number 94 [ 1776.005457][T32675] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1776.020741][T17833] IPVS: stop unused estimator thread 0... [ 1776.041256][T32675] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1776.089493][ T493] netlink: 'syz.8.7288': attribute type 18 has an invalid length. [ 1776.116353][ T493] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7288'. [ 1776.144393][ T493] netlink: 'syz.8.7288': attribute type 18 has an invalid length. [ 1776.145987][T10007] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1776.182130][ T493] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7288'. [ 1776.198379][T10007] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1776.222129][ T502] FAULT_INJECTION: forcing a failure. [ 1776.222129][ T502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1776.243688][ T502] CPU: 0 UID: 0 PID: 502 Comm: syz.4.7290 Tainted: G L syzkaller #0 PREEMPT(full) [ 1776.243714][ T502] Tainted: [L]=SOFTLOCKUP [ 1776.243721][ T502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1776.243731][ T502] Call Trace: [ 1776.243738][ T502] [ 1776.243746][ T502] dump_stack_lvl+0xe8/0x150 [ 1776.243771][ T502] should_fail_ex+0x412/0x560 [ 1776.243797][ T502] _copy_from_user+0x2d/0xb0 [ 1776.243815][ T502] ___sys_sendmsg+0x1c6/0x360 [ 1776.243838][ T502] ? __pfx____sys_sendmsg+0x10/0x10 [ 1776.243882][ T502] ? __fget_files+0x2a/0x420 [ 1776.243902][ T502] ? __fget_files+0x3a0/0x420 [ 1776.243931][ T502] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1776.243963][ T502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1776.243987][ T502] ? __pfx_ksys_write+0x10/0x10 [ 1776.244014][ T502] do_syscall_64+0x14d/0xf80 [ 1776.244031][ T502] ? trace_irq_disable+0x3b/0x150 [ 1776.244053][ T502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.244077][ T502] ? clear_bhb_loop+0x40/0x90 [ 1776.244100][ T502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.244127][ T502] RIP: 0033:0x7ff514d9c799 [ 1776.244144][ T502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1776.244157][ T502] RSP: 002b:00007ff515c7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1776.244175][ T502] RAX: ffffffffffffffda RBX: 00007ff515015fa0 RCX: 00007ff514d9c799 [ 1776.244187][ T502] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1776.244197][ T502] RBP: 00007ff515c7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.244207][ T502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1776.244217][ T502] R13: 00007ff515016038 R14: 00007ff515015fa0 R15: 00007ff51513fa48 [ 1776.244260][ T502] [ 1776.251669][T17849] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1776.500000][T17833] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1776.544517][ T503] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.7289'. [ 1776.560075][ T513] loop5: detected capacity change from 0 to 7 [ 1776.568214][ T513] Dev loop5: unable to read RDB block 7 [ 1776.591660][ T513] loop5: unable to read partition table [ 1776.641964][ T513] loop5: partition table beyond EOD, truncated [ 1776.661614][ T513] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1776.717275][T32675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.725233][ T5196] Dev loop5: unable to read RDB block 7 [ 1776.742086][ T5196] loop5: unable to read partition table [ 1776.774270][T32675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1776.793068][ T5196] loop5: partition table beyond EOD, truncated [ 1776.851866][T17833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.859061][T17833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.967309][T17833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.974483][T17833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.030740][T32675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1777.088338][T32675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1777.177736][T32675] veth0_vlan: entered promiscuous mode [ 1777.207428][T32675] veth1_vlan: entered promiscuous mode [ 1777.286920][T32675] veth0_macvtap: entered promiscuous mode [ 1777.358884][T32675] veth1_macvtap: entered promiscuous mode [ 1777.501888][ T798] hid-generic 009C:0008:0003.0070: unknown main item tag 0x0 [ 1777.513352][ T798] hid-generic 009C:0008:0003.0070: unknown main item tag 0x0 [ 1777.546061][ T798] hid-generic 009C:0008:0003.0070: unknown main item tag 0x0 [ 1777.566741][T32675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1777.591676][ T798] hid-generic 009C:0008:0003.0070: unknown main item tag 0x0 [ 1777.606893][T32675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1777.614827][ T798] hid-generic 009C:0008:0003.0070: unknown main item tag 0x0 [ 1777.647218][ T798] hid-generic 009C:0008:0003.0070: unknown main item tag 0x0 [ 1777.661997][ T798] hid-generic 009C:0008:0003.0070: unknown main item tag 0x0 [ 1777.682358][T13906] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1777.690052][ T798] hid-generic 009C:0008:0003.0070: unknown main item tag 0x0 [ 1777.712572][T17840] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.727237][T10007] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.746542][ T798] hid-generic 009C:0008:0003.0070: unknown main item tag 0x0 [ 1777.758914][T10007] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.771058][ T798] hid-generic 009C:0008:0003.0070: unknown main item tag 0x0 [ 1777.782501][ T798] hid-generic 009C:0008:0003.0070: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1777.799220][T10007] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.886844][T13906] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.909198][T13906] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1777.951733][T13906] usb 9-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 1777.973745][T13906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1777.999680][T13906] usb 9-1: SerialNumber: syz [ 1778.223575][T13906] usb 9-1: 0:2 : does not exist [ 1778.232989][T17840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.241056][T17840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.569744][T13906] usb 9-1: USB disconnect, device number 95 [ 1778.653157][T17849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.665622][T17849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.705043][T32744] udevd[32744]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1779.307071][ T555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1779.525993][ T558] FAULT_INJECTION: forcing a failure. [ 1779.525993][ T558] name failslab, interval 1, probability 0, space 0, times 0 [ 1779.575413][ T558] CPU: 0 UID: 0 PID: 558 Comm: syz.5.7304 Tainted: G L syzkaller #0 PREEMPT(full) [ 1779.575432][ T558] Tainted: [L]=SOFTLOCKUP [ 1779.575439][ T558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1779.575445][ T558] Call Trace: [ 1779.575450][ T558] [ 1779.575456][ T558] dump_stack_lvl+0xe8/0x150 [ 1779.575477][ T558] should_fail_ex+0x412/0x560 [ 1779.575503][ T558] should_failslab+0xa8/0x100 [ 1779.575525][ T558] __kmalloc_cache_noprof+0x88/0x660 [ 1779.575543][ T558] ? sctp_stream_init_ext+0x57/0x180 [ 1779.575649][ T558] sctp_stream_init_ext+0x57/0x180 [ 1779.575663][ T558] sctp_sendmsg_to_asoc+0x8e4/0x1900 [ 1779.575676][ T558] ? __asan_memcpy+0x40/0x70 [ 1779.575698][ T558] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 1779.575758][ T558] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 1779.575802][ T558] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1779.575820][ T558] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1779.575838][ T558] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1779.575856][ T558] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1779.575872][ T558] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1779.575890][ T558] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1779.575910][ T558] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1779.575934][ T558] sctp_sendmsg+0x1b3d/0x2c10 [ 1779.575965][ T558] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1779.575986][ T558] ? aa_sk_perm+0x6d5/0x900 [ 1779.576011][ T558] ? __pfx_aa_sk_perm+0x10/0x10 [ 1779.576033][ T558] ? sock_rps_record_flow+0x19/0x400 [ 1779.576052][ T558] ? __pfx_inet_sendmsg+0x10/0x10 [ 1779.576070][ T558] ? inet_sendmsg+0x2f4/0x370 [ 1779.576086][ T558] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1779.576104][ T558] ? __pfx_inet_sendmsg+0x10/0x10 [ 1779.576123][ T558] __sys_sendto+0x5de/0x710 [ 1779.576144][ T558] ? __pfx___sys_sendto+0x10/0x10 [ 1779.576158][ T558] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1779.576188][ T558] ? __fget_files+0x3a0/0x420 [ 1779.576220][ T558] ? ksys_write+0x242/0x270 [ 1779.576241][ T558] ? __pfx_ksys_write+0x10/0x10 [ 1779.576263][ T558] __x64_sys_sendto+0xde/0x100 [ 1779.576284][ T558] do_syscall_64+0x14d/0xf80 [ 1779.576301][ T558] ? trace_irq_disable+0x3b/0x150 [ 1779.576323][ T558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.576339][ T558] ? clear_bhb_loop+0x40/0x90 [ 1779.576358][ T558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.576374][ T558] RIP: 0033:0x7f4d0879c799 [ 1779.576390][ T558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.576404][ T558] RSP: 002b:00007f4d069f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1779.576422][ T558] RAX: ffffffffffffffda RBX: 00007f4d08a15fa0 RCX: 00007f4d0879c799 [ 1779.576435][ T558] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 1779.576466][ T558] RBP: 00007f4d069f6090 R08: 0000200000000300 R09: 000000000000001c [ 1779.576479][ T558] R10: 0000000004000080 R11: 0000000000000246 R12: 0000000000000001 [ 1779.576490][ T558] R13: 00007f4d08a16038 R14: 00007f4d08a15fa0 R15: 00007f4d08b3fa48 [ 1779.576517][ T558] [ 1780.190108][ T561] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1780.246827][ T564] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7303'. [ 1780.988559][ T5894] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1781.173177][ T5894] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1781.184942][ T5894] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1781.195744][ T5894] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1781.205502][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1781.214609][ T5894] usb 6-1: Product: syz [ 1781.219031][ T5894] usb 6-1: Manufacturer: syz [ 1781.224401][ T5894] usb 6-1: SerialNumber: syz [ 1781.232880][ T5894] usb 6-1: config 0 descriptor?? [ 1781.242660][ T5894] usb 6-1: selecting invalid altsetting 0 [ 1781.448516][ T572] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 1781.463516][ T579] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 1781.473936][T26593] usb 6-1: USB disconnect, device number 13 [ 1784.249953][ T602] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7314'. [ 1786.058013][ T602] ip6gre1: entered promiscuous mode [ 1786.071641][ T602] ip6gre1: entered allmulticast mode [ 1786.249850][ T608] loop9: detected capacity change from 0 to 7 [ 1786.261164][T32744] Dev loop9: unable to read RDB block 7 [ 1786.267774][T32744] loop9: AHDI p2 p3 [ 1786.276054][T32744] loop9: partition table partially beyond EOD, truncated [ 1786.284432][T32744] loop9: p2 size 157513074 extends beyond EOD, truncated [ 1786.313154][ T613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1786.350928][ T608] Dev loop9: unable to read RDB block 7 [ 1786.397413][ T608] loop9: AHDI p2 p3 [ 1786.437628][ T608] loop9: partition table partially beyond EOD, truncated [ 1786.509730][ T608] loop9: p2 size 157513074 extends beyond EOD, truncated [ 1786.666372][T32744] udevd[32744]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1786.781758][T32744] udevd[32744]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1787.338684][ T641] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7325'. [ 1787.488014][ T641] ip6gre1: entered promiscuous mode [ 1787.521693][ T641] ip6gre1: entered allmulticast mode [ 1787.826965][ T653] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.7328'. [ 1788.525710][ T664] FAULT_INJECTION: forcing a failure. [ 1788.525710][ T664] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.539228][ T664] CPU: 0 UID: 0 PID: 664 Comm: syz.8.7331 Tainted: G L syzkaller #0 PREEMPT(full) [ 1788.539248][ T664] Tainted: [L]=SOFTLOCKUP [ 1788.539252][ T664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1788.539258][ T664] Call Trace: [ 1788.539263][ T664] [ 1788.539268][ T664] dump_stack_lvl+0xe8/0x150 [ 1788.539287][ T664] should_fail_ex+0x412/0x560 [ 1788.539305][ T664] should_failslab+0xa8/0x100 [ 1788.539317][ T664] ? sctp_chunkify+0x5a/0x260 [ 1788.539407][ T664] kmem_cache_alloc_noprof+0x87/0x650 [ 1788.539421][ T664] sctp_chunkify+0x5a/0x260 [ 1788.539441][ T664] _sctp_make_chunk+0x122/0x290 [ 1788.539456][ T664] sctp_make_init+0x5e3/0xe00 [ 1788.539468][ T664] ? is_bpf_text_address+0x292/0x2b0 [ 1788.539484][ T664] ? __pfx_sctp_make_init+0x10/0x10 [ 1788.539503][ T664] ? stack_trace_save+0xa9/0x100 [ 1788.539514][ T664] ? __pfx_stack_trace_save+0x10/0x10 [ 1788.539523][ T664] ? __asan_memset+0x22/0x50 [ 1788.539534][ T664] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 1788.539573][ T664] sctp_do_sm+0x238/0x5cf0 [ 1788.539584][ T664] ? __pfx_sctp_pname+0x10/0x10 [ 1788.539596][ T664] ? kasan_save_track+0x4f/0x80 [ 1788.539605][ T664] ? kasan_save_track+0x3e/0x80 [ 1788.539614][ T664] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1788.539625][ T664] ? sctp_sendmsg+0x1b3d/0x2c10 [ 1788.539634][ T664] ? ___sys_sendmsg+0x2a5/0x360 [ 1788.539645][ T664] ? __sys_sendmmsg+0x27c/0x4e0 [ 1788.539654][ T664] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1788.539664][ T664] ? do_syscall_64+0x14d/0xf80 [ 1788.539674][ T664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.539687][ T664] ? __pfx_sctp_do_sm+0x10/0x10 [ 1788.539715][ T664] ? __sk_mem_raise_allocated+0x290/0x12c0 [ 1788.539727][ T664] ? __genradix_ptr+0x1e1/0x220 [ 1788.539749][ T664] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 1788.539762][ T664] sctp_sendmsg_to_asoc+0x143d/0x1900 [ 1788.539777][ T664] ? __asan_memcpy+0x40/0x70 [ 1788.539789][ T664] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 1788.539806][ T664] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1788.539816][ T664] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1788.539827][ T664] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1788.539842][ T664] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1788.539851][ T664] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1788.539861][ T664] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1788.539874][ T664] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1788.539888][ T664] sctp_sendmsg+0x1b3d/0x2c10 [ 1788.539905][ T664] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1788.539916][ T664] ? aa_sk_perm+0x6d5/0x900 [ 1788.539934][ T664] ? __pfx_aa_sk_perm+0x10/0x10 [ 1788.539948][ T664] ? sock_rps_record_flow+0x19/0x400 [ 1788.539961][ T664] ? inet_sendmsg+0x2f4/0x370 [ 1788.539971][ T664] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1788.539984][ T664] ____sys_sendmsg+0x80a/0x9f0 [ 1788.539999][ T664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1788.540014][ T664] ? import_iovec+0x73/0xa0 [ 1788.540026][ T664] ___sys_sendmsg+0x2a5/0x360 [ 1788.540039][ T664] ? __pfx____sys_sendmsg+0x10/0x10 [ 1788.540052][ T664] ? kstrtouint+0x6e/0xe0 [ 1788.540077][ T664] ? __fget_files+0x2a/0x420 [ 1788.540090][ T664] ? __fget_files+0x3a0/0x420 [ 1788.540108][ T664] __sys_sendmmsg+0x27c/0x4e0 [ 1788.540122][ T664] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1788.540131][ T664] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1788.540154][ T664] ? ksys_write+0x242/0x270 [ 1788.540165][ T664] ? __pfx_ksys_write+0x10/0x10 [ 1788.540179][ T664] __x64_sys_sendmmsg+0xa0/0xc0 [ 1788.540190][ T664] do_syscall_64+0x14d/0xf80 [ 1788.540200][ T664] ? trace_irq_disable+0x3b/0x150 [ 1788.540218][ T664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.540227][ T664] ? clear_bhb_loop+0x40/0x90 [ 1788.540242][ T664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.540251][ T664] RIP: 0033:0x7f7c4659c799 [ 1788.540263][ T664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1788.540271][ T664] RSP: 002b:00007f7c47519028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1788.540282][ T664] RAX: ffffffffffffffda RBX: 00007f7c46815fa0 RCX: 00007f7c4659c799 [ 1788.540290][ T664] RDX: 0000000000000001 RSI: 0000200000001d80 RDI: 0000000000000003 [ 1788.540296][ T664] RBP: 00007f7c47519090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.540302][ T664] R10: 00000000000005dc R11: 0000000000000246 R12: 0000000000000002 [ 1788.540308][ T664] R13: 00007f7c46816038 R14: 00007f7c46815fa0 R15: 00007f7c4693fa48 [ 1788.540322][ T664] [ 1789.302483][ T668] FAULT_INJECTION: forcing a failure. [ 1789.302483][ T668] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.387828][ T668] CPU: 1 UID: 0 PID: 668 Comm: syz.4.7333 Tainted: G L syzkaller #0 PREEMPT(full) [ 1789.387847][ T668] Tainted: [L]=SOFTLOCKUP [ 1789.387850][ T668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1789.387857][ T668] Call Trace: [ 1789.387862][ T668] [ 1789.387867][ T668] dump_stack_lvl+0xe8/0x150 [ 1789.387887][ T668] should_fail_ex+0x412/0x560 [ 1789.387905][ T668] should_failslab+0xa8/0x100 [ 1789.387918][ T668] ? dst_alloc+0x105/0x170 [ 1789.387930][ T668] kmem_cache_alloc_noprof+0x87/0x650 [ 1789.387942][ T668] ? __local_bh_enable_ip+0xd0/0x130 [ 1789.387958][ T668] dst_alloc+0x105/0x170 [ 1789.387968][ T668] ? ip_check_mc_rcu+0x632/0x680 [ 1789.387985][ T668] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1789.388002][ T668] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1789.388012][ T668] ip_route_output_key_hash+0x18d/0x2a0 [ 1789.388024][ T668] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1789.388042][ T668] ip_route_output_flow+0x2a/0x150 [ 1789.388056][ T668] ? security_sk_classify_flow+0x6d/0x150 [ 1789.388069][ T668] udp_sendmsg+0x154a/0x22f0 [ 1789.388081][ T668] ? count_memcg_event_mm+0x21/0x260 [ 1789.388102][ T668] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1789.388115][ T668] ? __pfx_udp_sendmsg+0x10/0x10 [ 1789.388140][ T668] ? __pfx_aa_sk_perm+0x10/0x10 [ 1789.388152][ T668] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1789.388171][ T668] ? sock_rps_record_flow+0x19/0x400 [ 1789.388183][ T668] ? inet_sendmsg+0x29c/0x370 [ 1789.388193][ T668] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1789.388206][ T668] ____sys_sendmsg+0x80a/0x9f0 [ 1789.388217][ T668] ? irqentry_exit+0x59e/0x620 [ 1789.388228][ T668] ? trace_irq_disable+0x3b/0x150 [ 1789.388246][ T668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1789.388261][ T668] ? import_iovec+0x73/0xa0 [ 1789.388273][ T668] ___sys_sendmsg+0x2a5/0x360 [ 1789.388286][ T668] ? __pfx____sys_sendmsg+0x10/0x10 [ 1789.388306][ T668] ? lockdep_hardirqs_on+0x7a/0x110 [ 1789.388328][ T668] __sys_sendmmsg+0x27c/0x4e0 [ 1789.388341][ T668] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1789.388351][ T668] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1789.388374][ T668] ? ksys_write+0x242/0x270 [ 1789.388386][ T668] ? __pfx_ksys_write+0x10/0x10 [ 1789.388399][ T668] __x64_sys_sendmmsg+0xa0/0xc0 [ 1789.388411][ T668] do_syscall_64+0x14d/0xf80 [ 1789.388421][ T668] ? trace_irq_disable+0x3b/0x150 [ 1789.388434][ T668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.388444][ T668] ? clear_bhb_loop+0x40/0x90 [ 1789.388455][ T668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.388464][ T668] RIP: 0033:0x7ff514d9c799 [ 1789.388474][ T668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1789.388482][ T668] RSP: 002b:00007ff515c7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1789.388494][ T668] RAX: ffffffffffffffda RBX: 00007ff515015fa0 RCX: 00007ff514d9c799 [ 1789.388501][ T668] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 1789.388507][ T668] RBP: 00007ff515c7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.388513][ T668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1789.388519][ T668] R13: 00007ff515016038 R14: 00007ff515015fa0 R15: 00007ff51513fa48 [ 1789.388533][ T668] [ 1791.591243][ T704] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.7341'. [ 1791.669948][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.676451][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.171694][T24199] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1792.361587][T24199] usb 9-1: Using ep0 maxpacket: 32 [ 1792.368588][T24199] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1792.377664][T24199] usb 9-1: config 0 has no interface number 0 [ 1792.387577][T24199] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1792.562290][T24199] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1792.573830][T24199] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.588249][T24199] usb 9-1: Product: syz [ 1792.592527][T24199] usb 9-1: Manufacturer: syz [ 1792.597224][T24199] usb 9-1: SerialNumber: syz [ 1792.608278][T24199] usb 9-1: config 0 descriptor?? [ 1792.619342][T24199] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1792.634566][T24199] em28xx 9-1:0.132: Video interface 132 found: [ 1793.020408][T24199] em28xx 9-1:0.132: chip ID is em2874 [ 1793.839215][T24199] em28xx 9-1:0.132: failed to read eeprom (err=-110) [ 1793.847934][T24199] em28xx 9-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1794.092085][T24199] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1794.110670][T24199] em28xx 9-1:0.132: analog set to bulk mode. [ 1794.122803][T13906] em28xx 9-1:0.132: Registering V4L2 extension [ 1794.137163][T24199] usb 9-1: USB disconnect, device number 96 [ 1794.145198][T24199] em28xx 9-1:0.132: Disconnecting em28xx [ 1794.252930][T13906] usb 9-1: Decoder not found [ 1794.267975][T13906] em28xx 9-1:0.132: failed to create media graph [ 1794.274757][T13906] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 1794.302742][T13906] em28xx 9-1:0.132: Remote control support is not available for this card. [ 1794.312676][T24199] em28xx 9-1:0.132: Closing input extension [ 1794.326245][T24199] em28xx 9-1:0.132: Freeing device [ 1795.716494][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1795.716513][ T30] audit: type=1326 audit(1773721247.925:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=729 comm="syz.9.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1795.861535][ T30] audit: type=1326 audit(1773721247.925:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=729 comm="syz.9.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1795.892062][ T30] audit: type=1326 audit(1773721247.925:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=729 comm="syz.9.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1795.977869][ T30] audit: type=1326 audit(1773721247.925:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=729 comm="syz.9.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1796.061782][ T30] audit: type=1326 audit(1773721247.925:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=729 comm="syz.9.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1796.084615][ T30] audit: type=1326 audit(1773721247.925:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=729 comm="syz.9.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1796.107899][ T30] audit: type=1326 audit(1773721247.925:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=729 comm="syz.9.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e59c799 code=0x7ffc0000 [ 1796.111642][T24199] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1796.155766][ T742] syzkaller0: entered promiscuous mode [ 1796.161270][ T742] syzkaller0: entered allmulticast mode [ 1796.173573][ T742] FAULT_INJECTION: forcing a failure. [ 1796.173573][ T742] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.216916][ T742] CPU: 0 UID: 0 PID: 742 Comm: syz.8.7352 Tainted: G L syzkaller #0 PREEMPT(full) [ 1796.216946][ T742] Tainted: [L]=SOFTLOCKUP [ 1796.216953][ T742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1796.216964][ T742] Call Trace: [ 1796.216971][ T742] [ 1796.216979][ T742] dump_stack_lvl+0xe8/0x150 [ 1796.217008][ T742] should_fail_ex+0x412/0x560 [ 1796.217036][ T742] should_failslab+0xa8/0x100 [ 1796.217058][ T742] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1796.217076][ T742] ? __alloc_skb+0x186/0x7d0 [ 1796.217093][ T742] ? __alloc_skb+0x1d0/0x7d0 [ 1796.217107][ T742] ? __local_bh_enable_ip+0xd0/0x130 [ 1796.217131][ T742] __alloc_skb+0x1d0/0x7d0 [ 1796.217151][ T742] alloc_skb_with_frags+0xca/0x890 [ 1796.217169][ T742] ? __lock_acquire+0x6b5/0x2cf0 [ 1796.217191][ T742] ? __lock_acquire+0x6b5/0x2cf0 [ 1796.217224][ T742] sock_alloc_send_pskb+0x878/0x990 [ 1796.217249][ T742] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1796.217279][ T742] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1796.217302][ T742] ? dev_get_by_index+0x22/0x2e0 [ 1796.217320][ T742] ? dev_get_by_index+0x22/0x2e0 [ 1796.217344][ T742] packet_sendmsg+0x33e5/0x50f0 [ 1796.217367][ T742] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1796.217391][ T742] ? __lock_acquire+0x6b5/0x2cf0 [ 1796.217419][ T742] ? __lock_acquire+0x6b5/0x2cf0 [ 1796.217454][ T742] ? aa_sk_perm+0x6d5/0x900 [ 1796.217479][ T742] ? __pfx_packet_sendmsg+0x10/0x10 [ 1796.217501][ T742] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1796.217531][ T742] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1796.217572][ T742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1796.217595][ T742] ? __pfx_packet_sendmsg+0x10/0x10 [ 1796.217612][ T742] __sys_sendto+0x672/0x710 [ 1796.217630][ T742] ? __pfx___sys_sendto+0x10/0x10 [ 1796.217645][ T742] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1796.217674][ T742] ? __fget_files+0x3a0/0x420 [ 1796.217706][ T742] ? ksys_write+0x242/0x270 [ 1796.217725][ T742] ? __pfx_ksys_write+0x10/0x10 [ 1796.217747][ T742] __x64_sys_sendto+0xde/0x100 [ 1796.217778][ T742] do_syscall_64+0x14d/0xf80 [ 1796.217795][ T742] ? trace_irq_disable+0x3b/0x150 [ 1796.217816][ T742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.217833][ T742] ? clear_bhb_loop+0x40/0x90 [ 1796.217852][ T742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.217869][ T742] RIP: 0033:0x7f7c4659c799 [ 1796.217885][ T742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1796.217899][ T742] RSP: 002b:00007f7c47519028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1796.217917][ T742] RAX: ffffffffffffffda RBX: 00007f7c46815fa0 RCX: 00007f7c4659c799 [ 1796.217929][ T742] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000007 [ 1796.217940][ T742] RBP: 00007f7c47519090 R08: 00002000000001c0 R09: 0000000000000014 [ 1796.217950][ T742] R10: 00000000200000c1 R11: 0000000000000246 R12: 0000000000000001 [ 1796.217961][ T742] R13: 00007f7c46816038 R14: 00007f7c46815fa0 R15: 00007f7c4693fa48 [ 1796.217986][ T742] [ 1796.218380][ T30] audit: type=1326 audit(1773721247.955:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=729 comm="syz.9.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f863e59c42b code=0x7ffc0000 [ 1796.415858][T24199] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1796.585194][T24199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.103273][ T30] audit: type=1326 audit(1773721247.955:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=729 comm="syz.9.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f863e59c42b code=0x7ffc0000 [ 1797.149722][T24199] usb 6-1: config 0 descriptor?? [ 1797.167201][T24199] cp210x 6-1:0.0: cp210x converter detected [ 1797.181263][ T30] audit: type=1326 audit(1773721247.955:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=729 comm="syz.9.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f863e59c42b code=0x7ffc0000 [ 1797.219543][ T758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.227452][ T758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.567598][T24199] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1797.580992][T24199] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1798.067635][T24199] usb 6-1: USB disconnect, device number 14 [ 1798.082965][T24199] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1798.113060][T24199] cp210x 6-1:0.0: device disconnected [ 1798.806119][ T781] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7362'. [ 1799.218907][ T801] input: syz0 as /devices/virtual/input/input110 [ 1802.878542][ T808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7368'. [ 1802.897208][ T808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7368'. [ 1804.219408][ T835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7374'. [ 1804.243756][ T835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7374'. [ 1805.354320][ T847] syzkaller0: entered promiscuous mode [ 1805.383210][ T847] syzkaller0: entered allmulticast mode [ 1805.753555][ T863] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7381'. [ 1806.071851][ T870] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7382'. [ 1806.139005][ T870] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7382'. [ 1810.462526][ T895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7390'. [ 1810.516023][ T899] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7390'. [ 1810.974037][ T24] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 1810.998151][ T910] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7394'. [ 1811.015305][ T910] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7394'. [ 1811.118328][ T914] syzkaller0: entered promiscuous mode [ 1811.163005][ T914] syzkaller0: entered allmulticast mode [ 1811.169909][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1811.180241][ T24] usb 5-1: config 0 has no interface number 0 [ 1811.197168][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1811.238016][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1811.268967][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1811.293852][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.330889][ T24] usb 5-1: config 0 descriptor?? [ 1811.340467][ T901] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1811.358664][ T24] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1811.563650][ T5837] usb 5-1: USB disconnect, device number 77 [ 1811.569634][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1812.511579][ T948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7401'. [ 1813.350583][ T959] [ 1813.352950][ T959] ===================================================== [ 1813.359902][ T959] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1813.367413][ T959] syzkaller #0 Tainted: G L [ 1813.373374][ T959] ----------------------------------------------------- [ 1813.380284][ T959] syz.5.7404/959 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1813.387838][ T959] ffff88805540de88 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1813.396688][ T959] [ 1813.396688][ T959] and this task is already holding: [ 1813.404035][ T959] ffff888042a21028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1813.413941][ T959] which would create a new lock dependency: [ 1813.419873][ T959] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1813.427941][ T959] [ 1813.427941][ T959] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1813.437395][ T959] (&dev->event_lock#2){..-.}-{3:3} [ 1813.437419][ T959] [ 1813.437419][ T959] ... which became SOFTIRQ-irq-safe at: [ 1813.450377][ T959] lock_acquire+0xf0/0x2e0 [ 1813.454868][ T959] _raw_spin_lock_irqsave+0x40/0x60 [ 1813.460147][ T959] input_inject_event+0xa5/0x340 [ 1813.465236][ T959] led_trigger_event+0x138/0x210 [ 1813.470330][ T959] kbd_bh+0x1f3/0x300 [ 1813.474429][ T959] tasklet_action_common+0x2da/0x4b0 [ 1813.479789][ T959] handle_softirqs+0x22a/0x870 [ 1813.484634][ T959] __irq_exit_rcu+0x5f/0x150 [ 1813.489296][ T959] irq_exit_rcu+0x9/0x30 [ 1813.493625][ T959] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1813.499423][ T959] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1813.505480][ T959] _raw_spin_unlock_irq+0x29/0x50 [ 1813.510580][ T959] n_tty_ioctl_helper+0x38a/0x4d0 [ 1813.515746][ T959] tty_ioctl+0x9c5/0xde0 [ 1813.520064][ T959] __se_sys_ioctl+0xfc/0x170 [ 1813.524719][ T959] do_syscall_64+0x14d/0xf80 [ 1813.529381][ T959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.535342][ T959] [ 1813.535342][ T959] to a SOFTIRQ-irq-unsafe lock: [ 1813.542342][ T959] (tasklist_lock){.+.+}-{3:3} [ 1813.542361][ T959] [ 1813.542361][ T959] ... which became SOFTIRQ-irq-unsafe at: [ 1813.555045][ T959] ... [ 1813.555115][ T959] lock_acquire+0xf0/0x2e0 [ 1813.562228][ T959] _raw_read_lock+0x36/0x50 [ 1813.566897][ T959] __do_wait+0xde/0x740 [ 1813.571146][ T959] do_wait+0x1e7/0x540 [ 1813.575280][ T959] kernel_wait+0xd6/0x1c0 [ 1813.579773][ T959] call_usermodehelper_exec_work+0xbe/0x230 [ 1813.585867][ T959] process_scheduled_works+0xb6e/0x18c0 [ 1813.591544][ T959] worker_thread+0xa53/0xfc0 [ 1813.596251][ T959] kthread+0x388/0x470 [ 1813.600445][ T959] ret_from_fork+0x51e/0xb90 [ 1813.605107][ T959] ret_from_fork_asm+0x1a/0x30 [ 1813.610224][ T959] [ 1813.610224][ T959] other info that might help us debug this: [ 1813.610224][ T959] [ 1813.620453][ T959] Chain exists of: [ 1813.620453][ T959] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1813.620453][ T959] [ 1813.634003][ T959] Possible interrupt unsafe locking scenario: [ 1813.634003][ T959] [ 1813.642318][ T959] CPU0 CPU1 [ 1813.647674][ T959] ---- ---- [ 1813.653204][ T959] lock(tasklist_lock); [ 1813.657438][ T959] local_irq_disable(); [ 1813.664563][ T959] lock(&dev->event_lock#2); [ 1813.671848][ T959] lock(&client->buffer_lock); [ 1813.679291][ T959] [ 1813.682727][ T959] lock(&dev->event_lock#2); [ 1813.687620][ T959] [ 1813.687620][ T959] *** DEADLOCK *** [ 1813.687620][ T959] [ 1813.695749][ T959] 7 locks held by syz.5.7404/959: [ 1813.700748][ T959] #0: ffff88802b686118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1813.709957][ T959] #1: ffff88801efdf230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1813.720031][ T959] #2: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1813.729665][ T959] #3: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1813.739214][ T959] #4: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1813.748329][ T959] #5: ffff888042a21028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1813.758488][ T959] #6: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1813.767519][ T959] [ 1813.767519][ T959] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1813.777911][ T959] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1813.783557][ T959] IN-SOFTIRQ-W at: [ 1813.787681][ T959] lock_acquire+0xf0/0x2e0 [ 1813.793915][ T959] _raw_spin_lock_irqsave+0x40/0x60 [ 1813.801013][ T959] input_inject_event+0xa5/0x340 [ 1813.807783][ T959] led_trigger_event+0x138/0x210 [ 1813.814616][ T959] kbd_bh+0x1f3/0x300 [ 1813.820426][ T959] tasklet_action_common+0x2da/0x4b0 [ 1813.827544][ T959] handle_softirqs+0x22a/0x870 [ 1813.834146][ T959] __irq_exit_rcu+0x5f/0x150 [ 1813.840547][ T959] irq_exit_rcu+0x9/0x30 [ 1813.846596][ T959] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1813.854036][ T959] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1813.861834][ T959] _raw_spin_unlock_irq+0x29/0x50 [ 1813.868669][ T959] n_tty_ioctl_helper+0x38a/0x4d0 [ 1813.875504][ T959] tty_ioctl+0x9c5/0xde0 [ 1813.881553][ T959] __se_sys_ioctl+0xfc/0x170 [ 1813.888036][ T959] do_syscall_64+0x14d/0xf80 [ 1813.894432][ T959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.902134][ T959] INITIAL USE at: [ 1813.906094][ T959] lock_acquire+0xf0/0x2e0 [ 1813.912229][ T959] _raw_spin_lock_irqsave+0x40/0x60 [ 1813.919156][ T959] input_inject_event+0xa5/0x340 [ 1813.925815][ T959] kbd_led_trigger_activate+0xbc/0x100 [ 1813.933001][ T959] led_trigger_set+0x535/0x960 [ 1813.939498][ T959] led_trigger_set_default+0x260/0x2a0 [ 1813.946691][ T959] led_classdev_register_ext+0x787/0x9c0 [ 1813.954134][ T959] input_leds_connect+0x517/0x790 [ 1813.960921][ T959] input_register_device+0xd00/0x1160 [ 1813.968021][ T959] atkbd_connect+0x731/0xa50 [ 1813.974334][ T959] serio_driver_probe+0x82/0xd0 [ 1813.981065][ T959] really_probe+0x267/0xaf0 [ 1813.987394][ T959] __driver_probe_device+0x18c/0x320 [ 1813.994403][ T959] driver_probe_device+0x4f/0x240 [ 1814.001155][ T959] __driver_attach+0x349/0x640 [ 1814.007653][ T959] bus_for_each_dev+0x23b/0x2c0 [ 1814.014250][ T959] serio_handle_event+0x20a/0xdd0 [ 1814.020997][ T959] process_scheduled_works+0xb6e/0x18c0 [ 1814.028348][ T959] worker_thread+0xa53/0xfc0 [ 1814.034660][ T959] kthread+0x388/0x470 [ 1814.040531][ T959] ret_from_fork+0x51e/0xb90 [ 1814.046845][ T959] ret_from_fork_asm+0x1a/0x30 [ 1814.053338][ T959] } [ 1814.055991][ T959] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1814.065214][ T959] -> (&client->buffer_lock){....}-{3:3} { [ 1814.071028][ T959] INITIAL USE at: [ 1814.074907][ T959] lock_acquire+0xf0/0x2e0 [ 1814.080874][ T959] _raw_spin_lock_irq+0x3d/0x50 [ 1814.087280][ T959] evdev_read+0x37d/0xcb0 [ 1814.093159][ T959] vfs_readv+0x587/0x840 [ 1814.099036][ T959] do_readv+0x154/0x2e0 [ 1814.104738][ T959] do_syscall_64+0x14d/0xf80 [ 1814.110982][ T959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.118439][ T959] } [ 1814.120918][ T959] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1814.129076][ T959] ... acquired at: [ 1814.132860][ T959] _raw_spin_lock+0x2e/0x40 [ 1814.137598][ T959] evdev_pass_values+0xb9/0xbd0 [ 1814.142610][ T959] evdev_events+0x1e6/0x340 [ 1814.147309][ T959] input_pass_values+0x288/0x890 [ 1814.152408][ T959] input_event_dispose+0x330/0x6b0 [ 1814.157673][ T959] input_inject_event+0x1dd/0x340 [ 1814.162856][ T959] evdev_write+0x325/0x4c0 [ 1814.167448][ T959] vfs_write+0x29a/0xb90 [ 1814.171848][ T959] ksys_write+0x150/0x270 [ 1814.176330][ T959] do_syscall_64+0x14d/0xf80 [ 1814.181072][ T959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.187121][ T959] [ 1814.189429][ T959] [ 1814.189429][ T959] the dependencies between the lock to be acquired [ 1814.189435][ T959] and SOFTIRQ-irq-unsafe lock: [ 1814.203001][ T959] -> (tasklist_lock){.+.+}-{3:3} { [ 1814.208280][ T959] HARDIRQ-ON-R at: [ 1814.212522][ T959] lock_acquire+0xf0/0x2e0 [ 1814.218922][ T959] _raw_read_lock+0x36/0x50 [ 1814.225412][ T959] __do_wait+0xde/0x740 [ 1814.231562][ T959] do_wait+0x1e7/0x540 [ 1814.237615][ T959] kernel_wait+0xd6/0x1c0 [ 1814.243938][ T959] call_usermodehelper_exec_work+0xbe/0x230 [ 1814.251819][ T959] process_scheduled_works+0xb6e/0x18c0 [ 1814.259350][ T959] worker_thread+0xa53/0xfc0 [ 1814.265961][ T959] kthread+0x388/0x470 [ 1814.272014][ T959] ret_from_fork+0x51e/0xb90 [ 1814.278760][ T959] ret_from_fork_asm+0x1a/0x30 [ 1814.285527][ T959] SOFTIRQ-ON-R at: [ 1814.289668][ T959] lock_acquire+0xf0/0x2e0 [ 1814.296074][ T959] _raw_read_lock+0x36/0x50 [ 1814.302671][ T959] __do_wait+0xde/0x740 [ 1814.308817][ T959] do_wait+0x1e7/0x540 [ 1814.314876][ T959] kernel_wait+0xd6/0x1c0 [ 1814.321194][ T959] call_usermodehelper_exec_work+0xbe/0x230 [ 1814.329072][ T959] process_scheduled_works+0xb6e/0x18c0 [ 1814.336619][ T959] worker_thread+0xa53/0xfc0 [ 1814.343216][ T959] kthread+0x388/0x470 [ 1814.349271][ T959] ret_from_fork+0x51e/0xb90 [ 1814.355848][ T959] ret_from_fork_asm+0x1a/0x30 [ 1814.362604][ T959] INITIAL USE at: [ 1814.366664][ T959] lock_acquire+0xf0/0x2e0 [ 1814.372989][ T959] _raw_write_lock_irq+0x3d/0x50 [ 1814.379827][ T959] copy_process+0x247a/0x3cd0 [ 1814.386404][ T959] kernel_clone+0x248/0x8e0 [ 1814.392804][ T959] user_mode_thread+0x110/0x180 [ 1814.399564][ T959] rest_init+0x23/0x300 [ 1814.405971][ T959] start_kernel+0x385/0x3d0 [ 1814.412474][ T959] x86_64_start_reservations+0x24/0x30 [ 1814.419893][ T959] x86_64_start_kernel+0x143/0x1c0 [ 1814.426902][ T959] common_startup_64+0x13e/0x147 [ 1814.433771][ T959] INITIAL READ USE at: [ 1814.438253][ T959] lock_acquire+0xf0/0x2e0 [ 1814.445003][ T959] _raw_read_lock+0x36/0x50 [ 1814.451836][ T959] __do_wait+0xde/0x740 [ 1814.458351][ T959] do_wait+0x1e7/0x540 [ 1814.464757][ T959] kernel_wait+0xd6/0x1c0 [ 1814.471466][ T959] call_usermodehelper_exec_work+0xbe/0x230 [ 1814.479800][ T959] process_scheduled_works+0xb6e/0x18c0 [ 1814.487678][ T959] worker_thread+0xa53/0xfc0 [ 1814.494690][ T959] kthread+0x388/0x470 [ 1814.501103][ T959] ret_from_fork+0x51e/0xb90 [ 1814.508063][ T959] ret_from_fork_asm+0x1a/0x30 [ 1814.515180][ T959] } [ 1814.517846][ T959] ... key at: [] tasklist_lock+0x18/0x40 [ 1814.525842][ T959] ... acquired at: [ 1814.529802][ T959] _raw_read_lock+0x36/0x50 [ 1814.534470][ T959] send_sigio+0x101/0x370 [ 1814.538958][ T959] dnotify_handle_event+0x169/0x440 [ 1814.544358][ T959] fsnotify+0x1831/0x1ae0 [ 1814.548941][ T959] path_openat+0x15c2/0x3860 [ 1814.553695][ T959] do_file_open+0x23e/0x4a0 [ 1814.558390][ T959] do_sys_openat2+0x113/0x200 [ 1814.563259][ T959] __x64_sys_openat+0x138/0x170 [ 1814.568268][ T959] do_syscall_64+0x14d/0xf80 [ 1814.573019][ T959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.579084][ T959] [ 1814.581398][ T959] -> (&f_owner->lock){....}-{3:3} { [ 1814.586708][ T959] INITIAL USE at: [ 1814.590668][ T959] lock_acquire+0xf0/0x2e0 [ 1814.596813][ T959] _raw_write_lock_irq+0x3d/0x50 [ 1814.603479][ T959] __f_setown+0x67/0x370 [ 1814.609443][ T959] generic_setlease+0xacf/0xff0 [ 1814.616018][ T959] do_fcntl_add_lease+0x35e/0x470 [ 1814.622758][ T959] fcntl_setlease+0x123/0x180 [ 1814.629151][ T959] do_fcntl+0x8b3/0x1a20 [ 1814.635116][ T959] __se_sys_fcntl+0xc8/0x150 [ 1814.641436][ T959] do_syscall_64+0x14d/0xf80 [ 1814.647757][ T959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.655413][ T959] INITIAL READ USE at: [ 1814.659822][ T959] lock_acquire+0xf0/0x2e0 [ 1814.666536][ T959] _raw_read_lock_irqsave+0x48/0x60 [ 1814.673923][ T959] send_sigio+0x38/0x370 [ 1814.680347][ T959] kill_fasync+0x24d/0x4d0 [ 1814.686929][ T959] lease_break_callback+0x26/0x30 [ 1814.694201][ T959] __break_lease+0x81c/0x1e80 [ 1814.701053][ T959] do_dentry_open+0x1010/0x14e0 [ 1814.708088][ T959] vfs_open+0x3b/0x340 [ 1814.714316][ T959] path_openat+0x2e08/0x3860 [ 1814.721067][ T959] do_file_open+0x23e/0x4a0 [ 1814.727731][ T959] do_sys_openat2+0x113/0x200 [ 1814.734565][ T959] __x64_sys_openat+0x138/0x170 [ 1814.741592][ T959] do_syscall_64+0x14d/0xf80 [ 1814.748357][ T959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.756499][ T959] } [ 1814.759078][ T959] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1814.768091][ T959] ... acquired at: [ 1814.771970][ T959] _raw_read_lock_irqsave+0x48/0x60 [ 1814.777344][ T959] send_sigio+0x38/0x370 [ 1814.781760][ T959] kill_fasync+0x24d/0x4d0 [ 1814.786335][ T959] lease_break_callback+0x26/0x30 [ 1814.791516][ T959] __break_lease+0x81c/0x1e80 [ 1814.796398][ T959] do_dentry_open+0x1010/0x14e0 [ 1814.801425][ T959] vfs_open+0x3b/0x340 [ 1814.805752][ T959] path_openat+0x2e08/0x3860 [ 1814.810593][ T959] do_file_open+0x23e/0x4a0 [ 1814.815253][ T959] do_sys_openat2+0x113/0x200 [ 1814.820098][ T959] __x64_sys_openat+0x138/0x170 [ 1814.825194][ T959] do_syscall_64+0x14d/0xf80 [ 1814.829942][ T959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.836011][ T959] [ 1814.838317][ T959] -> (&new->fa_lock){....}-{3:3} { [ 1814.843462][ T959] INITIAL USE at: [ 1814.847352][ T959] lock_acquire+0xf0/0x2e0 [ 1814.853419][ T959] _raw_write_lock_irq+0x3d/0x50 [ 1814.859911][ T959] fasync_remove_entry+0xf1/0x1c0 [ 1814.866514][ T959] lease_modify+0x4f7/0x6c0 [ 1814.872569][ T959] locks_remove_file+0x5f0/0xf70 [ 1814.879063][ T959] __fput+0x3ae/0xa70 [ 1814.884614][ T959] task_work_run+0x1d9/0x270 [ 1814.890758][ T959] exit_to_user_mode_loop+0xed/0x480 [ 1814.897646][ T959] do_syscall_64+0x32d/0xf80 [ 1814.903790][ T959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.911239][ T959] INITIAL READ USE at: [ 1814.915640][ T959] lock_acquire+0xf0/0x2e0 [ 1814.922037][ T959] _raw_read_lock_irqsave+0x48/0x60 [ 1814.929320][ T959] kill_fasync+0x199/0x4d0 [ 1814.935720][ T959] lease_break_callback+0x26/0x30 [ 1814.942729][ T959] __break_lease+0x81c/0x1e80 [ 1814.949391][ T959] do_dentry_open+0x1010/0x14e0 [ 1814.956223][ T959] vfs_open+0x3b/0x340 [ 1814.962282][ T959] path_openat+0x2e08/0x3860 [ 1814.968858][ T959] do_file_open+0x23e/0x4a0 [ 1814.975344][ T959] do_sys_openat2+0x113/0x200 [ 1814.982101][ T959] __x64_sys_openat+0x138/0x170 [ 1814.988958][ T959] do_syscall_64+0x14d/0xf80 [ 1814.995882][ T959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.003760][ T959] } [ 1815.006240][ T959] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1815.014900][ T959] ... acquired at: [ 1815.018684][ T959] _raw_read_lock_irqsave+0x48/0x60 [ 1815.024036][ T959] kill_fasync+0x199/0x4d0 [ 1815.028607][ T959] evdev_pass_values+0x627/0xbd0 [ 1815.033723][ T959] evdev_events+0x1e6/0x340 [ 1815.038468][ T959] input_pass_values+0x288/0x890 [ 1815.043569][ T959] input_event_dispose+0x330/0x6b0 [ 1815.048841][ T959] input_inject_event+0x1dd/0x340 [ 1815.054023][ T959] evdev_write+0x325/0x4c0 [ 1815.058720][ T959] vfs_write+0x29a/0xb90 [ 1815.063136][ T959] ksys_write+0x150/0x270 [ 1815.067644][ T959] do_syscall_64+0x14d/0xf80 [ 1815.072402][ T959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.078459][ T959] [ 1815.080768][ T959] [ 1815.080768][ T959] stack backtrace: [ 1815.086647][ T959] CPU: 1 UID: 0 PID: 959 Comm: syz.5.7404 Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.086665][ T959] Tainted: [L]=SOFTLOCKUP [ 1815.086669][ T959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1815.086675][ T959] Call Trace: [ 1815.086679][ T959] [ 1815.086685][ T959] dump_stack_lvl+0xe8/0x150 [ 1815.086708][ T959] __lock_acquire+0x2a94/0x2cf0 [ 1815.086725][ T959] lock_acquire+0xf0/0x2e0 [ 1815.086736][ T959] ? kill_fasync+0x199/0x4d0 [ 1815.086749][ T959] _raw_read_lock_irqsave+0x48/0x60 [ 1815.086759][ T959] ? kill_fasync+0x199/0x4d0 [ 1815.086769][ T959] kill_fasync+0x199/0x4d0 [ 1815.086778][ T959] ? kill_fasync+0x53/0x4d0 [ 1815.086787][ T959] evdev_pass_values+0x627/0xbd0 [ 1815.086803][ T959] ? evdev_pass_values+0x611/0xbd0 [ 1815.086817][ T959] evdev_events+0x1e6/0x340 [ 1815.086830][ T959] ? evdev_events+0x79/0x340 [ 1815.086842][ T959] ? input_pass_values+0x8d/0x890 [ 1815.086855][ T959] input_pass_values+0x288/0x890 [ 1815.086868][ T959] ? input_handle_event+0x70c/0xf30 [ 1815.086879][ T959] input_event_dispose+0x330/0x6b0 [ 1815.086890][ T959] input_inject_event+0x1dd/0x340 [ 1815.086901][ T959] ? input_inject_event+0xb6/0x340 [ 1815.086911][ T959] evdev_write+0x325/0x4c0 [ 1815.086926][ T959] ? __pfx_evdev_write+0x10/0x10 [ 1815.086939][ T959] ? bpf_lsm_file_permission+0x9/0x20 [ 1815.086952][ T959] ? security_file_permission+0x75/0x260 [ 1815.086964][ T959] ? rw_verify_area+0x255/0x4d0 [ 1815.086973][ T959] ? __pfx_evdev_write+0x10/0x10 [ 1815.086986][ T959] vfs_write+0x29a/0xb90 [ 1815.086997][ T959] ? __pfx_vfs_write+0x10/0x10 [ 1815.087006][ T959] ? __fget_files+0x2a/0x420 [ 1815.087020][ T959] ? __fget_files+0x2a/0x420 [ 1815.087032][ T959] ? __fget_files+0x3a0/0x420 [ 1815.087045][ T959] ? __fget_files+0x2a/0x420 [ 1815.087059][ T959] ksys_write+0x150/0x270 [ 1815.087069][ T959] ? __pfx_ksys_write+0x10/0x10 [ 1815.087080][ T959] do_syscall_64+0x14d/0xf80 [ 1815.087090][ T959] ? trace_irq_disable+0x3b/0x150 [ 1815.087104][ T959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.087113][ T959] ? clear_bhb_loop+0x40/0x90 [ 1815.087123][ T959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.087132][ T959] RIP: 0033:0x7f4d0879c799 [ 1815.087142][ T959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.087150][ T959] RSP: 002b:00007f4d069d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1815.087162][ T959] RAX: ffffffffffffffda RBX: 00007f4d08a16090 RCX: 00007f4d0879c799 [ 1815.087169][ T959] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000004 [ 1815.087176][ T959] RBP: 00007f4d08832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1815.087182][ T959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1815.087187][ T959] R13: 00007f4d08a16128 R14: 00007f4d08a16090 R15: 00007f4d08b3fa48 [ 1815.087197][ T959] [ 1815.456678][ T961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1817.429374][ T921] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1817.432477][ T948] vlan2: entered promiscuous mode [ 1817.447232][ T948] bridge0: entered promiscuous mode