last executing test programs: 7m32.277460866s ago: executing program 32 (id=219): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) (async) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r5, 0xc004ae0a, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r6, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7m6.038414427s ago: executing program 33 (id=416): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000480)=""/235, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r4 = syz_open_dev$vim2m(0x0, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, 0x0) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r5, r5, 0x0, 0x200000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000002000010014003500776c616e300000001bd8d66f6c982a9f9c1ee2af1bf4000090dbba00"], 0x40}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$autofs(0xffffff9c, &(0x7f0000000100), 0x80040, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xe16}}, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001500070000000c001680080001", @ANYRES64=r7], 0x38}}, 0x10) 5m43.102895786s ago: executing program 3 (id=984): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 5m42.975857119s ago: executing program 3 (id=986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x5}, {0x6, 0xfd}]}) write$ppp(r1, &(0x7f00000000c0)="43f153e783b968", 0x7) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8947, &(0x7f0000000180)={'veth0_to_batadv\x00', @ifru_names='macsec0\x00'}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x10008092}, 0x20000080) r3 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES8=r2, @ANYRES32=r0], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000e00)={0x0, 0x7, 0x1, "e8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 5m42.333690002s ago: executing program 3 (id=993): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109b00000000000600"], 0x0, 0x8000005}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000002100", 0x39}], 0x1) 5m42.269727146s ago: executing program 3 (id=994): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 5m42.207873005s ago: executing program 3 (id=995): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x1a, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000318110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000000090000001864000003000000000000001000000018140000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0xfffffff9, 0xb, &(0x7f0000000500)=""/11, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0xf, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0x1, 0x1, 0xffffffffffffffff, r0], &(0x7f0000000700)=[{0x2, 0x3, 0xb, 0x5}, {0x4, 0x6, 0x5}, {0x3, 0x3, 0x4, 0x7}, {0x2, 0x1, 0x4, 0x9}, {0x5, 0x3, 0xd, 0x8}, {0x3, 0x3, 0x10, 0x5}, {0x1, 0x5, 0x8, 0x1}], 0x10, 0xfffffffd}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="03000000000004000000000000001655fa122d55574d7055acd72401e7f119ee4dbaea63caec69f0d692f089db7270e8d9b3c63bca28cc60046b8b033b9372c00c801a55ed63425e47ba65f4a1c6226c77841f5fe9c565a49f97de2f6b8d7ed51fa7b6f54ebf4ee5995f358900f766a585a6dfaba8f56b8656469aeddaf522000000000000001dea0050ed0c59ef133103847bdc26ddfe9d425fe69587efbe1075f8eebaffca6fcba6d4c33e45ce21af3299d09b13707895c89f21099298af1bebdc51e9fb85ee5a669966002950d9a78a9678b57ecfa1ebeeb9826fca97e93e4382850c8a5712522d00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000200"/28], 0x50) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r5, 0x0, 0x1007fff, 0x0, 0x0, 0x4}) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) fcntl$lock(r9, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r9, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x2b, 0x9}) fcntl$lock(r9, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x90}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) r13 = dup(r12) read$FUSE(r13, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$TCSETSF(r13, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x1b, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000ffffff18110000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000e303e0fff8ffffff726a180000000000827bfeff1000000095000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000020000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x80, 0x9f, &(0x7f0000000280)=""/159, 0x41000, 0xb7c5911a85e92a6d, '\x00', 0x0, @fallback=0x31, r0, 0x8, &(0x7f0000000340)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xa, 0x140, 0x6}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f00000007c0)=[r3, r5, r7, r8, r9, r11], 0x0, 0x10, 0x5, @value=r13}, 0x94) 5m41.950520555s ago: executing program 3 (id=998): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x48}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x2000, 0x1000, 0x5, 0x6}, 0x20) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x1411, 0xc09, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r11, 0x5608) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000140)={"d0e84683", 0x3, 0x4, 0x0, 0x0, 0xf, "8527f29025975f0593fa7daecd5693", "c403c7b4", "61bbaa8a", "2c071295", ["ad0d8fed4b0a70f992abb025", "726309fed3610c9c8fd3cc14", "482c84f6fca14d5b89302d36", "7ff50e69e8c55d9d3e89847c"]}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r12, 0x0, 0xe, 0x0, &(0x7f00000002c0)="5c71f91b05c413550230b4c817a6", 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000240)='b', 0x0}, 0x50) r13 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f3, 0x0, 0x10000000001780}]}) 5m41.572370626s ago: executing program 34 (id=998): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x48}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x2000, 0x1000, 0x5, 0x6}, 0x20) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x1411, 0xc09, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r11, 0x5608) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000140)={"d0e84683", 0x3, 0x4, 0x0, 0x0, 0xf, "8527f29025975f0593fa7daecd5693", "c403c7b4", "61bbaa8a", "2c071295", ["ad0d8fed4b0a70f992abb025", "726309fed3610c9c8fd3cc14", "482c84f6fca14d5b89302d36", "7ff50e69e8c55d9d3e89847c"]}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r12, 0x0, 0xe, 0x0, &(0x7f00000002c0)="5c71f91b05c413550230b4c817a6", 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000240)='b', 0x0}, 0x50) r13 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f3, 0x0, 0x10000000001780}]}) 4m57.17365872s ago: executing program 5 (id=1338): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x9) socket(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv2(0xffffffffffffffff, &(0x7f00000034c0)=[{&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000003200)=""/60, 0x3c}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/253, 0xfd}, {&(0x7f0000003440)=""/30, 0x1e}, {&(0x7f0000003480)=""/2, 0x2}], 0x7, 0x40000000, 0x1, 0x13) write$UHID_INPUT(r3, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xc}}}}}}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x70, &(0x7f0000000100)}, 0x1c) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r10, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008081}, 0x24040812) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'dvmrp0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 4m56.92933569s ago: executing program 5 (id=1342): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb202dfcdcdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a544304cfb2d22415e11068881e50f68530c2b21a100ef00000000ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171111d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b30855a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x40000009fc, 0x1}) fsopen(0x0, 0x0) socket(0x11, 0x6, 0xc) gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000180)="445113bae4ae8a79cd23cbea4dab6d5011a1aab908baf484ba0f4c05b0f6b8c0f3e8b3e1cfc4edca37daf538d303a97107b489f0258d1880993f86e0823f3ecb2df073f31ab22c9be600225912759cb5b712c5d6caecff93bf08023924444e42d3654181d28bea06229eb0f81a4b8932185613cf017a153c09e1984655e5fd9e0254624b612d0fb526efa6aa721076e6cd6d3e31e811dc4877b3b3", &(0x7f00000002c0)="406a48845aee6a26ae1c97031245e3d16c041bd7a7dfc19174e7b5ec98ad"}}, &(0x7f0000bbdffc)=0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r6, 0x1, 0x0, 0x80000004, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(r5, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mkdirat(0xffffffffffffff9c, 0x0, 0xe) 4m55.930267424s ago: executing program 5 (id=1352): syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x0) 4m52.870286503s ago: executing program 5 (id=1380): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (fail_nth: 2) 4m52.592911609s ago: executing program 5 (id=1382): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xb}, {0x1b, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x40040) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e0009002709700000000022040000000800"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4m52.582774557s ago: executing program 5 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0xbc, 0xd}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000001300)="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", 0xb0b}], 0x2}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r1, &(0x7f0000003240)={0x2020}, 0x2020) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x28) poll(&(0x7f0000000080)=[{r3, 0x101}, {r3, 0x100}], 0x2, 0x400) shutdown(r3, 0x0) copy_file_range(r0, &(0x7f0000000000), r0, &(0x7f0000000040)=0xb, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5d}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m52.4827712s ago: executing program 35 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0xbc, 0xd}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000001300)="a3e4e740072236f6a2a8267cbe4533a3d5cf01b5f031635201dcbe2a5963cab50a0b693382dfec222ae215fe2dc8d0e038b4dfa48c6143f64329efe20b9bcd32a3b4134d9984f241461fdc20b9bf28317bd037fd5b630f959744406764fb35eb87a98ee2c26196c500f41478c221cd0c494357ed98831acd15189453d1e4735e0f580b6a4443be7882045d5f5b909014d65c399a9abb9147468395511d699d8abb5a920a020bd5c764a0e857fc76825ecf739ad8d4b096728877c8feae4c58b319cba4840af33c639eb7e4ac117ac71e497b929a893602ee7a327a6f48328bc5efe5c8aea301ee78079c0d78f2bb157000e0f26e7b830228f2999d20891d401ca63f3e9e6b2092e17c0fdd5dccd38002fce353625d980a1ececfe381d692744a6f142518fff758119381695f882f1cac572f42a2efd993b1bc8931b942db7aa41115133238059e9e102af50b8f0c451c4b166b99b0110b3617699dcb2c3834d2a73f228cebc3ed4632a8cd6a1c2fb72daf4143fd250988ba4e6f111602ebcb7ef51e0a9b85cc223b1e385cd9660365ecd06df248ba57ede6adc77027de76a50df049af22278b4223a19b1c0cf4626692cd06065a193d017173a94bbf7c5c77f72ee9688b35a2c7987b48a84c98377853931f01d63837a644919c4eb05268fa33c26c895b441d74757a3d4a60617e217ad64c8042c5bf7b8471d76816b3d90db5602de0495ff5a5a3cceeb8668bf57670869dd31ac8eb3c7a9ce01ce45112f9083c5f0512e0dd50598e620a04299450f7a9500cb555133a25372ec38149d831dd5f3dfbd7e0548ea0a0c4336dac7ba3346204f5f77d407c5d132ebfd1905341e900335772bbe608aedf3de65b1060dc0aa1a8f412bd4f16ee23f0d226cde7e5c2381875c6dd112cb29c646e3fded2cc0333d5c297fdc9c265640d1a6875343508a1e3bb8ccdad98340689e82ae606a721dd28470a853621d967e20280072a4dee3c5be9c9bbb002026588220ee14a69c13a86d6000f4f70ddb1109b79310b9588ac9e8a4519f6b02948eefcaa41e27cd18ffc062316d565bbf8108f67caff09ddd46857834e9b86df25592e658d3538dc28fa05b5faf6682e1b95ed66b3e4a9903c2a22dd0d04a35583708c2d5f19314284cff98f49e2cbca8b09d25236b45940dd72ffb0b7438b42c144a6b63d5f4831bd51ac775ae27c81393de4bc8aed984a74a0a360171022f96df18b8ca411563dcc5495b50ac604d67dc2bfbcee85aa4b1fc6c1f3091660a9708c505b56e9933cf17abb64a070c3e83bcd1db11a5876dd194608fa9d9c68d2905a19a974bb51811f0c7c6c9dd8e3af9ea35415631ad84e6000b433ce737d5381344c1fb0bf57fd3080590ed2436a5072779e24faacc95edf45225ccc328a8e150de9027c96f766f69fe7449d07dd5df0b916da20e7f06d1b3e1e2eaf58f80756141c84ca3192d6e4dbc271c0500cfa897019abc1042c66c691863b57c28ee377c3e1859d2c383caf3d015b15b44835f1d120df955a4df3af0d2a3eacbd584608d66a34d0582e2f8d5eb5c46f32c8fc192a5b59904b14a95e9d9a0b6cff864970f2a370b2015d1ee747ba6ba0cedbaed989d6dd9f9d19929cd26775925a1f933988c7e8513f7c549c2b7c1706443b98d7340e993388c6f27aec519bb92e1163ac6e3bc92dbe8dd9e20f3e863b19f97b00502baafdb5a451b4767e3852a586c2ed84fe65763f2579f754127183e462a044545b190695819015a5463720fef606b4e1b67cf7c6b0fc34a1dd20268f98ef9c2f755e37b29f9849b12bb4f1353ce3e6d9e4fce1c708cd966349a464d0325fe9589524ae1720cf32cda47e21c2527282ab7ffaf62ac567ec9d92968ac89f3ff4123c129033b4e5db39831a52c5dd9124ee7b61c1122cdcefb631411312785156973d3434d9360398e5e10360f512ed56488fe88fc8273da464529501d42ea1de5d5857545b919a490a25c87043235e1e65b636f6d0e09d629661b1585e25ab9c0cdafd9daa805ac69bdc335b9286fcdd7eea4cf97cb984442663ac7e36b04ba0912bc6b6c5080179856f56965d13666d8cdccfbb53f371a64a2b88ff577c0485ac41edea218b4440b8481c88e48ed22d94afb1039ad2720bd10ae6a8e3e732d4d292d1d56ea3ca433c9c7abc8e61284ab6d9ea1a8834bfa5c61dc88cd4e5da863bef4817b91668cd4a971717e223b394357845e30614504f8bdc77c28b13c4e920d079a6bf89a5ad0ffa5ec81557b44ddd15b9a98899ab84c27e21222f23ce4b3ac99c48b180471b0de4e09a0c1acf65721b0866c7b01adf5b57a2536def9b5e6ff450edbb2eeece2a9faa5790b8a564c0e2f6838d9741d84a663b7cb97915303e454c9143c38fab8dd40e6eb1a42d810740ab56ccda0eb87c604b65238e9f2738d87b970d251822df32d0ab047f203d4401ddc714e4f04833f11024720cecf0436a7b6dd5e690430dbfbde31febb68c4c95922c67752870bccf4e60c37c66073c2ee33aca8d4c5f5d6dc315b94694a10f9cc08f624785d981c3d894b50a62787560d69fbfdae93523ff706d1397d25f85a165873c330dbde0bc1afb79836708f04f7edb64962af695c3fd75b891c7a59f9dc73f56bbbd478a2f20ee6005f4e4c23c4c6b4921e35caf766f565e1309a73037aa63517f16aa64b149b0cc6c0327fb96ca1f8696e2e884d97864a5df7147dd6aea7bb3231b8b60c12a73f6d0acb8a1d3732a3872737b5c65b8015a4a9d03aca0075fbd20b346dccee820e702fac4bf3b74858ccf72f4997fc1407811e5e8b6216743bf4bc97d757434a5d9a65e7e969b553959ae2dfa6efb625447d02a52a67a614b4d734826a5be181b08ca88c2674a323dadc13cc44cf02be0e7c05ae4f289275ff34ed173c309ebfac605e725ccd552869763c00b49d75936a71c78ef54451c2a9330803361acfec8ea181c7ea0738b87138074c605fd44ff894cb1fcb7a25219add7a1fc007b6be05deb659a38707235e221fffae305ebaf4f894faabdad56d49f08c6aa7a7703443c399a4597784e647ab94d61417cc92cd4800139a04179d034d7e56ec5fb9c03776ac992185610aa0458d02a85bf8940caab1d8acd5a7dfbc3e3f635f97d88e7242896d8cc48e9b9df043cc02abd68f53ab6686ce0c8a23c35a6afce4b3cd32e30146f55dd070f2372ad19f41d20cbc45e7f0a1f618d1fe3d19b867861a9781bcd5c016997f30ba50edd1ed5fbb32dc9c0364c8f0312a1fe17bb7ab82597554e6f86e792bd6d2035850c71b0a694b5f079e6432b27aa9d676a87acf3fd59fbcc42940cbb59d0b2f11023748e031e901db3a0a4691333a0f2fc3cf03196545e087cef53ed2a9bdc1ca6fa37fe69c4912527f18c7536f9ffd57d68fa80bdbc99a1b9b201c50b944d15ae883eeaa9ebe516db0e9820e6fd008b9788772e1e5c7742af3c88f1881f1cde665fcd7b31c27155953f10682fdf956766c19f5a59a5adea45be90e0c61ac5c61ca640a5ab69d3e7fb2ed0c60f76ac3a38f6afa172746d35613ede6303aae828d2188f33a7c3a0780ea25b4dbfc782c2468e397ab64793c2950b37acf2d4b757554416e2de19abd2666b5fad099e52c8c5c124faa4e4d415cbbafb0ccb78982dce8ab01438e6d8ce5f556f9eb424b1e0804f8ae624db3a8e96d865dac77ce4f71698821aef5fad439d6ce6b336ba1b0064594a194d0b3a99e83b630cb446704db439003d21c13545c8d6d4457751fad06b786efb0855be572b0f17594b897f97383d74435817f241bd31a1560a27bee0462fbb9f96a8b3d02ff88d38937284130c0c4e7d2b625b008f61383f93da38cab6085bcdf79da3ce40fbd949d9a115788865bc835f4555fd7395694e8d1def65cfe250ba1dafad10209573673e5edb26f48658f01d3ba042b562777fa47d7a1cffb886542e44c718e3d73473a3cf72861b16b9be3a40875e6eb39505066f", 0xb0b}], 0x2}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r1, &(0x7f0000003240)={0x2020}, 0x2020) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x28) poll(&(0x7f0000000080)=[{r3, 0x101}, {r3, 0x100}], 0x2, 0x400) shutdown(r3, 0x0) copy_file_range(r0, &(0x7f0000000000), r0, &(0x7f0000000040)=0xb, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5d}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m50.178170837s ago: executing program 8 (id=1384): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2008}) 4m50.101253521s ago: executing program 8 (id=1391): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8640, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xd8702, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) io_submit(r0, 0x2, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r3, &(0x7f0000000000)="ab", 0x1, 0x6ed}, &(0x7f00000000c0)={0x0, 0x0, 0x1f, 0x2, 0x6, r1, 0x0}]) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r6, 0x4b46, &(0x7f00000000c0)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000a40)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r8 = accept4$alg(r7, 0x0, 0x0, 0x80800) sendmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000100)=']', 0x1}], 0x1}}], 0x1, 0x4004840) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 4m49.949607676s ago: executing program 8 (id=1394): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000680)="fa61", 0x2}], 0x1}}], 0x1, 0x20040804) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x900) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc044}, 0x4000) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1b4, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x930}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf5bd}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x800}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xcf01}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_REG_RULES={0xfc, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5c06}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x412}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffe00}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4ec}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe3b2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x401}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40820) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4045014}, 0x8040) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r7, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x4c, r7, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084802}, 0x8000) sendmsg$key(r2, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x18}, 0x19}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x3b9, 0x20880) r9 = dup(0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000300)={0x100, 0xffffffffffffffff, 0x2}) ioctl$I2C_SLAVE_FORCE(r9, 0x706, 0xe8) 4m48.469074956s ago: executing program 8 (id=1409): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_open_dev$vim2m(0x0, 0x5, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000005c0)=[{0x17, '\x00', @buffer={"204fb071383bd6ffe11ae4f228d8bd86a4b540eb314d88f9a1042c866bfe8c58", 0x20}, 0x4}, {0x4, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x20}, {0x2b, '\x00', @buffer={"70485cf53a3167753d9ec1ba3604e9f2835f0e0922d6733d1933703db243863f", 0x20}, 0xe6}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) mprotect(&(0x7f00003fa000/0x4000)=nil, 0x4000, 0x0) syz_clone3(&(0x7f0000000080)={0x105824100, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x200009, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 4m48.414632739s ago: executing program 36 (id=1409): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_open_dev$vim2m(0x0, 0x5, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000005c0)=[{0x17, '\x00', @buffer={"204fb071383bd6ffe11ae4f228d8bd86a4b540eb314d88f9a1042c866bfe8c58", 0x20}, 0x4}, {0x4, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x20}, {0x2b, '\x00', @buffer={"70485cf53a3167753d9ec1ba3604e9f2835f0e0922d6733d1933703db243863f", 0x20}, 0xe6}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) mprotect(&(0x7f00003fa000/0x4000)=nil, 0x4000, 0x0) syz_clone3(&(0x7f0000000080)={0x105824100, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x200009, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 3m41.249317567s ago: executing program 9 (id=1882): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x0, 0xfffffffe) 3m41.241776621s ago: executing program 9 (id=1883): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xf6272000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000464000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000075000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00005d2000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x163101, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x10, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x78) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r5, 0x1f, &(0x7f0000000080)={0x7, 0x7, 0x5}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES8=r0, @ANYRES64=r1], 0xfdef) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000600)={0x0, 0x0, {0x1, 0x2, 0x3, 0x1, 0x100000}, 0x6}) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0xe) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="838250", 0x3}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r8, &(0x7f0000000300), 0x1c, 0x3b00, 0x0, 0xfffffffffffffdfd) 3m41.025020922s ago: executing program 9 (id=1885): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x2004}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) bind$tipc(r3, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4801}, 0x4080) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0xfffffff8, 0x7ff, 0x0, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x6], [0x2, 0x20000, 0x0, 0x1004, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x40, 0x5, 0xe, 0x0, 0x2, 0x0, 0x40, 0x8, 0x400000, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x5, 0x55], [0x0, 0x4, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0x4, 0x0, 0xfffffffd, 0xff, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x10000000, 0x800000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xcc61, 0x6, 0xfffffffc, 0x1, 0x1d, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0xfffffffe, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x80000000, 0x4, 0x91a, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x0, 0xae, 0x0, 0xc, 0x400000, 0x2, 0x0, 0x10200000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1]}, 0x45c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "02570f8e7d54b913", "b6e707532411b9296d7099f96a7191b7", "1d0106e8", "44583cbe11e06160"}, 0x28) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x42042, 0x0) sendfile(r6, r6, 0x0, 0x100000000) cachestat(r6, &(0x7f0000000080)={0x200004, 0xffffffffffffffff}, &(0x7f0000000040), 0x0) write(r4, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r9 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000940)={0x3, 0x2, 0x2, {0x1, @meta={0x53314b52, 0x68a458c8, 0x6e3a, 0xf247, 0x43a1ab95}}, 0x7fff}) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='ip\x00\x03cr\x80e\x83', &(0x7f0000000240)=',\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000200)={0x0, 'macvlan1\x00', {}, 0x1ff}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800150000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m37.663724812s ago: executing program 9 (id=1899): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (fail_nth: 6) 3m37.423913213s ago: executing program 9 (id=1900): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3b0, 0xffffffff, 0xc8, 0x0, 0x318, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'batadv_slave_0\x00', 'nr0\x00', {}, {}, 0x21, 0x3}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}, {0x4}}]}, @REJECT={0x28}}, {{@uncond, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xfffd}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x6, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 3m37.156664953s ago: executing program 9 (id=1904): io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc880, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {0xf}, {0xfff3, 0xffff}}}, 0x24}}, 0x24044880) io_uring_enter(r4, 0x2219, 0x7721, 0x77, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) getpgrp(0xffffffffffffffff) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) socket$unix(0x1, 0x2, 0x0) 3m37.034879641s ago: executing program 37 (id=1904): io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc880, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {0xf}, {0xfff3, 0xffff}}}, 0x24}}, 0x24044880) io_uring_enter(r4, 0x2219, 0x7721, 0x77, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) getpgrp(0xffffffffffffffff) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) socket$unix(0x1, 0x2, 0x0) 3m10.204547501s ago: executing program 2 (id=2129): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0x260, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='team0\x00', 0x19d, 0xad, 0xff}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e0916010002cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="001602ff0700f610"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000280)={0x0, 0x15, 0x1, "8a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) close(0x4) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) 3m7.085756984s ago: executing program 2 (id=2156): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) fsopen(&(0x7f0000000180)='cgroup\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008200240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 3m6.90518252s ago: executing program 2 (id=2157): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0xf, 0x4]}, {0x1, 0xffff, 0xb, 0x180000000}}, 0xff, &(0x7f0000000080), &(0x7f00000000c0)=0x80000000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) io_uring_enter(r0, 0x25d3, 0x1e7f, 0x18, &(0x7f0000000140)={[0x1]}, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r0, r1, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x801, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001300)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x1, 0x27}, @flat=@weak_binder={0x77622a85, 0x1101, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x1000, 0x0, &(0x7f0000000300)="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"}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001340)={{0x1dee, 0x6, 0x7, 0x3d6}, 'syz1\x00', 0x53}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000013c0), 0x2000, 0x0) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000001400)=0x2) r4 = syz_open_dev$loop(&(0x7f0000001440), 0x9, 0x40) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000001480)) connect$inet6(r0, &(0x7f00000014c0)={0xa, 0x4e23, 0x0, @private1, 0xc3b7}, 0x1c) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000302, 0xee01, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000001500)={0x21, 0x3}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x88000, 0x0) connect$inet6(r0, &(0x7f0000001580)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0, 0x0}, &(0x7f0000001600)=0xc) quotactl_fd$Q_GETFMT(r5, 0x0, r6, &(0x7f0000001640)) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000001680), &(0x7f0000001700)=0x68) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001780)={r5, 0x0, 0x5, 0x401}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001800), r0) sendmsg$L2TP_CMD_NOOP(r9, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x38, r10, 0x800, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x7fffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8001) r11 = openat$cgroup_int(r8, &(0x7f0000001900)='memory.swap.max\x00', 0x2, 0x0) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001940), 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r11, 0x5000943f, &(0x7f0000001a00)={{r12}, 0x0, 0x8, @inherit={0x70, &(0x7f0000001980)={0x1, 0x5, 0xfff, 0x96, {0x0, 0x9, 0x9, 0x6, 0x3acb15ac}, [0x80000001, 0x8000, 0x6, 0x8, 0x8]}}, @subvolid=0x6}) mount$fuse(0x0, &(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40), 0x8000, &(0x7f0000002a80)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x5}}], [{@fsmagic={'fsmagic', 0x3d, 0x4}}, {@appraise_type}, {@measure}]}}) 3m6.883608114s ago: executing program 2 (id=2158): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x0, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010", 0x40}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) io_uring_setup(0x1e64, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0xd, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6, 0x4, 0xfffffffffffffffd, 0xb, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x56d92c88, 0x0, 0xfffffffffffffffc, 0x10000}, 0x0, 0x0) ioctl$FE_SET_FRONTEND(r8, 0x40246f4c, &(0x7f00000001c0)={0x30a32c0, 0x1, @ofdm={0x6, 0x1b, 0x12, 0xa, 0x8, 0x8}}) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 3m6.250624227s ago: executing program 2 (id=2160): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000300)="aefdf79d24", 0x5}], 0x1) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 3m6.019205086s ago: executing program 2 (id=2165): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe"], 0x98}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000160007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}}, 0x0) 3m5.831325865s ago: executing program 38 (id=2165): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe"], 0x98}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000160007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}}, 0x0) 6.696665599s ago: executing program 6 (id=3587): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x7) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000df0505000000000000000000000000044316bcf81128b2b8a4000900020073797a320000000005000400010000000500010006000000140007800800064000000400080013400000f9ff040005000a000000100003006861"], 0x5c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'netpci0\x00', {0x2, 0x4e22, @multicast1}}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 5.46453113s ago: executing program 7 (id=3596): r0 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xf342, 0x40, 0x7fc, 0x3e2}) r1 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) write$binfmt_elf32(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4601ff1f020301ec090000000003000600ffffff7f9f01000038000000c502000000040000090020"], 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) close(r3) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000001000)=0x6f50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x78}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_control_io(r1, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000540)=""/99, 0x63) close_range(r0, 0xffffffffffffffff, 0x0) 4.825047952s ago: executing program 7 (id=3601): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="02032000190000000000000000000000040003000000000000000080ffffffffffffff00000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc01000000000000000000000000000000000000000000000200", @ANYRESDEC], 0xc8}}, 0x0) 4.745103069s ago: executing program 7 (id=3602): socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) syz_clone3(&(0x7f0000001540)={0x2808000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0xa}, &(0x7f0000000180)=""/109, 0x6d, &(0x7f0000001480)=""/127, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) sched_setattr(r3, &(0x7f0000000000)={0x38, 0x3, 0x10000009, 0x6, 0x4000, 0xb4d, 0x5, 0x8, 0x2, 0x3}, 0x0) shmdt(0x0) shmdt(0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) lchown(0x0, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r6, 0x0, 0x0) unshare(0x24000200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r7 = add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r7) request_key(&(0x7f0000000740)='dns_resolver\x00', 0x0, 0x0, 0xffffffffffffffff) 3.62127485s ago: executing program 6 (id=3609): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/16, 0x10}], 0x3}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8c0}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/231, 0xe7}, {&(0x7f0000000800)=""/226, 0xe2}, {&(0x7f0000000900)=""/119, 0x77}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a00003f0c0002006e6c3830323131"], 0x20}}, 0x0) 3.580383272s ago: executing program 6 (id=3611): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') preadv2(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/98, 0x62}], 0x1, 0x9, 0x401, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x2, r1, 0x2}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40044010) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x5, 'syz1\x00', 0x8000}) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000200000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8810}, 0x4008004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000100000000070000000900010073790a010400000000000000080700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021540000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3c3d6727ce349171aba4888030000000002800038024000080080003400000000218000b8014000180090001006c61737400000000040002801400000010000100"/216], 0xd8}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a0, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb833}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1aec}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2f1}, @CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x80000000]}, @CTA_NAT_SRC={0xb4, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e2b}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0x2040) 3.101631405s ago: executing program 0 (id=3621): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) r6 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @mcast1}}, 0x5c) r8 = socket$inet6(0xa, 0x400000000001, 0x100) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffff18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffff36) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="46060b0010000000240012800b0001006970766c616ec300f15f14e402800600ff0002ffff000600020004000000de8fbe09d3ae3457cf62abdc0ce8a7d2b621d7b79c190a9fcda96717c469e822d039bcb7509f531489f6328dd798c3a67504def1695d8a13b26fbea373d387ddf2199f2954e370ef97b47ffcb3da58c370143ea35cc24aa05e3bfe9df1c9c5fd622db6e9953aba19eb5e81b3adb6795a3f2386fa66e6fc6384f4dd7b650150326215f32cfb28b1b54627591218f809254ede000000", @ANYBLOB="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", @ANYRES8, @ANYRES8=0x0, @ANYRES64=r6], 0x44}, 0x1, 0x0, 0x0, 0x4004690}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) set_mempolicy(0x2, &(0x7f0000000040)=0xb, 0x46) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000101030000000000000000000a000003440001802c00018014000300fc010000000000000000000000000001140004002001000000000000000000000000000206000340000000000c000280050001"], 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x10) 2.13111514s ago: executing program 0 (id=3627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000ffffffffffffff99000000080001006e00000008000300", @ANYRES32, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}, 0x1, 0x0, 0x3000000000000}, 0x0) 2.004491038s ago: executing program 0 (id=3630): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x87a2f, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, r1, 0x0, '\x00', 0x1ffffffffffffd64, 0x3f}) 1.693232242s ago: executing program 7 (id=3634): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x1, {0xfffffffd, 0x4fca, 0xb, 0x8001}}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) syz_emit_ethernet(0x4e, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000c02020000"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000a4b21dbd3c85073802a03f6cc56045fa5d765b98d4264754c9163", @ANYRESHEX=r4], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x24040801) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000700)={&(0x7f0000006000)={[{0x0}, {&(0x7f0000000280)="ccd5ee80db4890b98c599735bb812ea37cfcc67345e0d5eb0d59a5a0cf47bf0c", 0x20, 0x3}, {&(0x7f0000004300)="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", 0xfde, 0x2}, {&(0x7f0000000440)="300af27344a50195227146b8db1c7007628b1a676b869597658cebe124ceca282f2f0b61eb5fd4f118c294aaf8f932a7e0ea6030f9849a86a5aec097eba6013c21acd5ba18adf45482a3b7d4218c5422c80dcae805ecc3409a7e7b0d3b1013193ecddfc9e7c9ed6d36571cf11233ba5155aca3de98dd7fd18c742ec7a99af0129be917fbfc1f4af5460a0de577ccbd6fe7a6ca8581eeda02752b103a9f1bfb06e142eeb6040db577911d2e7a21b90c8e3197483c65e8b593906db93c42569cc61e166ad7ac740ca3c51e8bfc2695", 0xce, 0x2}, {&(0x7f0000000540)="8f646dcdf59a6c8f7cda182f03b6192af841432c66758f89e9305d8c743f4b58ab39cab8a7bbd61db9b3708df3c56ce3ca31e29ed8e4010215a78c9484209b6cd9d3bd97f9d64e378fc9c2cf406edf24cfb245ddc1289cf4640ede33ed05b5f028fdd6669dc4d9796489b6097f4e034586ee9bce3c92e9270adfd03e4d2600367f23beecd163b345269f86bbbdfc5778e8157d55a6cd0327d64071d74fce9fc8ba9a13ffd47055ab531c", 0xaa, 0x3}, {&(0x7f0000000640)="4d851546972f53e3086953b1f234292d31361a1a685ace8c95ebb435af78d45ff8383d2ad8433878de3030ef60e5d6a0cfdfa15119c94634e0505adff1249a4071d0e7ae8a137c8c3d9caf7b6c53cca792a698a8000cadbacd5f6ed5a221febc5183291d4042a79df5f94ef13a84cbf3c2473d7ecde349fdcde98aa9626a41fd2b781d63c3f8ee9c7b1a16504a96b75815d1", 0x92, 0x3}]}, 0x6}, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x124}}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f00000000c0)={0x1, 0x0, 0x8000200, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x0, 0x400000002c, 0x80000005, 0x2}) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$SNDRV_PCM_IOCTL_RESET(r9, 0x4141, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ptrace(0x10, 0x0) ptrace$setopts(0x4200, 0x0, 0x3, 0x0) 1.622445127s ago: executing program 0 (id=3635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000000)=0x2, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000006c0)={'\x00', 0x8e, 0xb286, 0x40, 0x10c, 0x8001}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000008400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffed2) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90ade5c4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f000000c400)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000300)="8f67a500781be773f6a215d7b4ec5598f78fd9040784fbb56b95fdfb7472f7c6f0422803bdfa7f15efaf7cf2390b27f35a96c4486d17a9cf6296a7055b5eb4e2304f00311a057e55e7e1154bb47bffc7ff785194b004ddf9aaa293a19ac607a9ea1ba6097b6f87c9769790ab25b82cf9d7d5cb877509a0a2bb1d28", 0x7b}, {&(0x7f0000000380)="439b7c5a07ae54ce22953c53d742d2c95fda2779ec9f258c708cf4cf447ab127af8e855212d4dca32a3a065324950971ec3e9b69fdc7054a6344d55ba12df577d149ae7b4071bc53586f6515e66f9959", 0x50}, {&(0x7f0000000400)="e74beebac808d5d6a758fa7da33ded97a588470a55f1b54cc118c83a62202cac110da82d16863ea7d09d0fe4ef1f428286bca1498b13b81cd1212d7dd7d871c8ba4a95a94e07bce38ef5d5bdcf166dbd881b62f6bc7f394f0163c57dd933d8b54610350dacf083c2fea9dd8c22d73529f74656fda6", 0x75}, {&(0x7f00000004c0)="513a5d95b86550b5969fb4d12663f9fa898ef95303f5f09219540a9d969337cade6651ec16916bb5bdddc24eea4fbe572f2270f6c1a6f714f0e581b42912153cd412f2b98b9b1a7121a9158cf557a08e5aa717c382e43e651bd66cd5e4522b1e16eee271dc567fed967b91b8f46c7717119664b91cecddea5e9de7f8b5910026f26305041a7f0ddd23bde84945723627d84fdf0673ba43596b8475254b3bd927c3a30864c7995bf2431bef170708b2edcbf7edf137e0303bbb5baf15236072b1b11528bf5d785e819ce0ea", 0xcb}], 0x4, &(0x7f0000003b40)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01, r6}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @rights={{0x2c, 0x1, 0x1, [r1, r2, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r0, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150, 0x40001}}], 0x1, 0x48c0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) r10 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r10, 0xc0585611, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000005c0)=[{0x4, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x20}, {0x2b, '\x00', @buffer={"70485cf53a3167753d9ec1ba3604e9f2835f0e0922d6733d1933703db243863f", 0x20}, 0xe6}]}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r12 = socket$key(0xf, 0x3, 0x2) recvmmsg(r12, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) 1.505049366s ago: executing program 1 (id=3636): socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) (async) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100460088476188393800442f0020010000000000000000000000000002ff0200000000000000000000000000010c21880b0000000201000800040086dd080088be0000000013043608010000000000006b1869dc2ec7b880080022eb00575430d9a64186e000000000000055040182140800655800000004"], 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002e0067ea25bd7000fcdbdf250b"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x4000040) r5 = openat$cgroup_int(r3, &(0x7f0000000340)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) (async) r6 = socket(0x10, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async) sendmsg$nl_route(r6, 0x0, 0xc080) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r7, 0x0, 0x0, 0x4004084, &(0x7f0000000000)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) (async) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x9, 0x6, 0x1) (async) r8 = socket$kcm(0x10, 0x2, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x1c}}, 0x40) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) (async) open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) 1.246587921s ago: executing program 1 (id=3637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0xf, 0x4, 0x3, 0xe5, 0x40, 0x2d, 0x0, 0x30, 0x19}, {0x25000, 0x4, 0xb, 0x0, 0x40, 0x5, 0x7e, 0x9, 0x58, 0x3, 0x26, 0x1}, {0xdddd1000, 0xe000, 0x10, 0x7f, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x30000, 0x2000, 0x3, 0x5c, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7f, 0xe}, {0x0, 0x9000, 0xf, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0xb, 0xa0, 0xb1, 0xf4, 0x1, 0xd, 0x88, 0x13, 0x1, 0x53}, {0x54000, 0x2, 0x4, 0x6, 0x25, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x10000, 0xe, 0x5, 0xf, 0x7, 0xff, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x0, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) (fail_nth: 33) 1.187624728s ago: executing program 1 (id=3638): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_vif\x00') preadv(r0, &(0x7f0000000100), 0x0, 0x4006, 0x7) 1.113258994s ago: executing program 1 (id=3639): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xff82}, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r4, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x29, 0x48, 0x0, &(0x7f00000015c0)) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.11188609s ago: executing program 1 (id=3640): socket(0x1e, 0x4, 0x0) unshare(0x22020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x24) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0xd) syz_clone(0x21820111, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='numa_maps\x00') lseek(r2, 0x2000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x40, 0x9, 0x0, 0x7, 0x4, 0x5, 0xef, 0x1, 0x2, 0x9, 0x72, 0x0, 0x200, 0x9, 0x0, 0x5, 0x0, 0x8, '\x00', 0x3, 0x5}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x3) 1.06891938s ago: executing program 1 (id=3641): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x6) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x401, 0xfffffffffffffff6}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r1, 0x7, &(0x7f0000000200)={0x0, 0x2, 0x8, 0x7}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\r\x00\x00\x00\x00'], 0x0, 0x0}) r3 = syz_ublk_setup_io_uring(0x488, &(0x7f0000000100)={0x0, 0x30c, 0x4000, 0x3, 0x7a}, &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000580)={0x4, 0x0, [{0x25000, 0x22, &(0x7f0000000340)=""/34}, {0x7000, 0xf, &(0x7f0000000380)=""/15}, {0x2, 0xa3, &(0x7f00000003c0)=""/163}, {0x1, 0x2b, &(0x7f0000000480)=""/43}]}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) 952.511328ms ago: executing program 4 (id=3644): unshare(0x6a040000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20000, 0x1, &(0x7f0000006680)) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x200) 718.089399ms ago: executing program 4 (id=3645): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002000010027bd7000000000000a006004200000061300000014000200fc0200000000"], 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 687.180538ms ago: executing program 4 (id=3646): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="756e12e7554e4344e7a444834bb43d0f2348eedc0000000000000000"], 0xa) 615.358766ms ago: executing program 4 (id=3647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r0, 0xf5338000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x29}]}, 0x1c}}, 0x48000) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)='\'(]\x00', 0x50041, &(0x7f0000000140)={@align=0xc1, {0x5, 0x4, 0x1, 0xc}}, 0x7fff, &(0x7f0000000180), &(0x7f00000001c0)=0xd39}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000002c0)={0x628, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x7c, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, "8387195ef40507ea28efe95818ac9b56740690d8b0744b9d16f7240c5e4a077b44841876e314b7ae18c4e9381718c1cea05527ef495e93d64642c2ea4972f33845b0a7429a390d56b419b0f7b0faebcd514acc65f26ed67e8e692eefae67293e605f386df39f673ceb306b1eb2a9cca5b86427b5"}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x3e0, 0x84, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x91c9}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x204b}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffff9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x65c}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x55}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a92bc9b09d18"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x24}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="bb8404ef3432"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffffff}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="c602267ee880b11da87b735ed8e6683988f2024694bb7a25ef04af"}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x3ff}, @NL80211_BAND_LC={0x8, 0x5, 0x80}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0xd2}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x368a}, @NL80211_BAND_LC={0x8, 0x5, 0xff}, @NL80211_BAND_LC={0x8, 0x5, 0x85b}, @NL80211_BAND_LC={0x8, 0x5, 0xc}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0xd8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x40}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80000001}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xda}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1b}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfb}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x101}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="fd049729f986"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x837d}, @NL80211_BAND_LC={0x8, 0x5, 0x3ff}]}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x7, 0x1, @random="86cade"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xb3}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x26}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffd}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xa7d}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000001}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x38}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x10}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x10001}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x100}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6000000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xc311}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="7ed86d6ca876"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8f1e}]}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x120, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x63, 0x2, "f312684db47368c17b3fb1277fe36f0ce031b295639f3102a1e054e942c51aff36f78b696ab9a483f002d4d804deba2a14d0f8d189ba3adc6e83fb0ed9548dfc160fbee1b4246c5129116803ba1d1acdf0be524c26a1b9616cea0b78f7bd83"}, @NL80211_BAND_2GHZ={0xb5, 0x0, "dc063a9c9a6e3e1b1b92962f5c51d5e7e9a80c78d09ac78695b1900387ad6594d34fb27768d7eb06194e75d4b91f8b6c24e4399096bbb0f583271c7a760548a7209e1be7c9e3fc70868823a3fe0d587ac6a643e9752fd6c2ec52d19132bc6d105b1e48295a49711a594029ed651649d80c4042a559a9973b0d7de21d40d589c18fccb6529115c99fee5e26732f31aae207cca27cb81502864d60d603ef4fef1a76808005d28c5e5f730d628a7d7c41ae96"}]}, @NL80211_ATTR_SCAN_SSIDS={0x98, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xf, 0x0, @random="0112ab6d8ab0764c46bcd5"}, {0xa, 0x0, @default_ap_ssid}, {0x22, 0x0, @random="9c4dd0ddfcf21581fb2306a766d07c3957d4945a846b4326b17022d8b8c8"}, {0x19, 0x0, @random="491527290d94958c983dd8fd3d39b8de036c792963"}, {0xa, 0x0, @default_ibss_ssid}, {0x12, 0x0, @random="acedb9973160f2f8be054fc58c19"}]}]}, 0x628}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000fc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000a00)={0x544, 0x0, 0x301, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x280, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0x30, 0x36, 0x9, 0x1b, 0xd7f9243bba6dcad, 0x6, 0x1, 0x6c, 0x5, 0x48, 0x0, 0xc, 0x18, 0x9, 0x4, 0x12, 0xb, 0x3, 0x1b, 0x24, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x7, 0x9}, {0x5, 0x7}, {0x1, 0x9}, {0x7, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x4}, {0x2, 0x9}, {0x5, 0x4}, {0x2, 0x5}, {0x6}, {0x2, 0x9}, {0x6, 0x5}, {0x1}, {0x1}, {0x7, 0x5}, {0x3, 0x4}, {0x4}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0xa}, {0x4, 0x1}, {0x2, 0x2}, {0x5, 0x8}, {0x1, 0x9}, {0x1, 0xa}, {0x3, 0x3}, {0x3}, {0x5, 0x1}, {0x5, 0x2}, {0x6, 0xa}, {0x5}, {0x4, 0x9}, {0x2, 0x2}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2, 0x9}, {0x0, 0x6}, {0x7, 0x9}, {0x3, 0x9}, {}, {0x1}, {0x3, 0x8}, {0x2, 0x4}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0xa}, {0x1, 0x7}, {0x6, 0x8}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x7}, {0x4, 0x5}, {0x5, 0x1}, {0x3, 0x3}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xfff, 0x8, 0x1, 0x1, 0x9, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x6}, {0x4, 0x5}, {0x0, 0xa}, {0x2, 0x7}, {0x2, 0x5}, {0x0, 0x4}, {0x6, 0x8}, {0x7}, {0x4, 0x7}, {0x5, 0x4}, {0x7}, {0x4}, {0x1, 0x7}, {0x5, 0x4}, {0x4, 0x2}, {0x0, 0x4}, {0x7, 0x1}, {0x3, 0x5}, {0x7, 0x4}, {0x3}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0xa}, {0x0, 0x7}, {0x3, 0x1}, {0x4, 0xa}, {0x4, 0xa}, {0x1}, {0x7, 0x8}, {0x4, 0x2}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x5, 0x7}, {0x6}, {0x3, 0x7}, {0x0, 0x3}, {0x2, 0x4}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x7}, {}, {0x3, 0xa}, {0x6, 0x6}, {}, {0x5, 0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7ff, 0x400, 0x200, 0xa6, 0x8001, 0x9]}}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0xfffd, 0x5, 0x5, 0x5, 0x9, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x6}, {0x6, 0x5}, {0x2, 0xa}, {0x0, 0x1}, {0x4, 0x9}, {0x3, 0x6}, {0x2, 0x5}, {0x4}, {0x2, 0xa}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x3, 0xe39, 0x2, 0x7, 0x8, 0x9, 0xc]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x8}, {0x0, 0x4}, {0x7, 0x8}, {0x6, 0x1}, {0x6, 0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x4, 0x4}, {0x5}, {0x6, 0x1}, {}, {0x6, 0x4}, {0x5, 0x6}, {0x3, 0x7}, {0x7}, {0x1, 0x2}, {0x1, 0x6}, {0x3, 0x1}, {0x6, 0x7}, {0x4, 0x2}, {0x3}, {0x5, 0x2}, {0x4, 0x8}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0x1}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x5}, {0x1, 0x7}, {0x3, 0x1}, {0x6, 0xa}, {0x3, 0x6}, {0x3, 0x3}, {0x4}, {0x1}, {0x1, 0x5}, {0x6, 0x5}, {0x5, 0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x3}, {0x7, 0x9}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x8, 0xd, 0x80, 0xc31, 0x8, 0x5]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6a, 0xfffd, 0xd6, 0x7ff, 0x0, 0x800, 0x800, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfffe, 0x5, 0xbacd, 0x101, 0x1ff, 0x3, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x3, 0x6, 0x0, 0x6, 0x5, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x0, 0x40, 0x9, 0xe000, 0x401, 0xfff, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x0, 0x1ff, 0x4, 0x6, 0x4, 0x81, 0x6a42]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x8}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x2}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x4, 0x8}, {0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x8}, {0x7}, {0x3, 0x6}, {}, {0x1}, {0x5, 0x4}, {0x4, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x2}, {0x5, 0x5}, {0x3, 0x8}, {0x2, 0xa}, {}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x5, 0x24, 0x12, 0x4e, 0xb, 0x1, 0x30, 0xc, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x36, 0x6, 0x6c, 0x1b, 0x60, 0xc, 0x16, 0x5, 0x6, 0x2e, 0x1, 0x50, 0xe, 0x24, 0xb, 0x3, 0x4, 0x1b, 0x18, 0x1b]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4}, {0x2, 0x3}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x2, 0x2}, {0x2, 0x8}, {0x2, 0x5}, {0x3}, {0x5, 0x7}, {0x4}, {0x7, 0x5}, {0x2}, {0x6, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x1}, {0x7, 0x7}, {0x4, 0x6}, {0x3, 0x1}, {0x6, 0x7}, {0x1, 0x7}, {0x5, 0x1}, {0x3, 0xa}, {0x4, 0x7}, {0x7, 0x8}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xba, 0xffff, 0x5, 0x0, 0xc, 0x7, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x9}, {0x4, 0x6}, {0x7, 0x9}, {0x5, 0x4}, {0x7, 0xa}, {0x1, 0xa}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x53, 0xf, 0x43, 0x6, 0x6, 0x1, 0x1, 0x2882]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x6, 0x1ff, 0x18, 0x3, 0x12, 0x4]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x3, 0x6, 0xd03f, 0x3ff, 0x100, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xff, 0x0, 0xb, 0xa, 0x7, 0x7, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0xa}, {0x6, 0x9}, {0x5, 0xa}, {0x4, 0x3}, {}, {0x7, 0x9}, {0x4, 0x1}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x9}, {0x7}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x6}, {0x6, 0x1}, {0x1, 0x6}, {0x1, 0x5}, {0x5, 0x4}, {0x5, 0xa}, {0x0, 0x1}]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa5cb, 0x8, 0x8, 0x2, 0xe09a, 0x4, 0x80, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xf7e0, 0x6aad, 0x5, 0xf74, 0x1ff, 0x8, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x3}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x2}, {0x5, 0x6}, {0x0, 0x8}, {0x4, 0x1}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x6}, {0x4, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x2, 0xa}, {0x0, 0x5}, {0x5, 0x3}, {0x6, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x2}, {0x2, 0x5}, {0x4, 0x5}, {0x6, 0x6}, {0x2, 0x6}, {0x1, 0x8}, {0x3, 0x6}, {0x3, 0x6}, {0x0, 0x7}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x4}, {0x2, 0x3}, {0x2, 0x9}, {0x3, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x4, 0x1}, {0x3, 0x4}, {0x1, 0x2}, {0x1, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x3, 0x2}, {0x4, 0x2}, {0x6, 0x8}, {0x2, 0x6}, {0x4, 0x2}, {0x3, 0x3}, {0x7, 0x7}, {0x7, 0x6}, {0x7, 0x5}, {0x3, 0x2}, {0x2, 0x2}, {0x4, 0x6}, {0x2, 0x8}, {0x2, 0xa}, {0x6, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0x7}, {0x2, 0x1}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x2}, {0x3, 0x2}, {0x2, 0x6}, {0x3, 0x5}, {0x3, 0x7}, {0x4, 0x1}, {0x1, 0x8}, {0x3, 0x2}, {0x1, 0xa}, {0x2, 0x4}, {0x2}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x9}, {0x6, 0xa}, {0x3, 0x9}, {0x5}, {0x3, 0x5}, {0x0, 0x6}, {0x7, 0x4}, {0x7, 0x4}, {0x5}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x9}, {}, {0x3, 0x1}, {0x7, 0x2}, {0x7, 0x9}, {0x6, 0x5}, {0x3, 0x5}, {0x6}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x3}, {0x2}, {0x7, 0x5}, {0x3}, {0x4, 0x8}, {0x4, 0x6}, {0x3, 0x1}, {0x2, 0x7}, {0x0, 0x4}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x2, 0x3}, {0x5, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x4}, {0x7, 0x4}, {0x4, 0x6}, {0x3}, {0x2, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x3, 0x1}, {0x2, 0x2}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x0, 0xb, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x7f, 0x7, 0x9, 0x6, 0x5, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x6, 0x6, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0xf, 0x6, 0x11, 0xa, 0x2, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x9, 0x1, 0x30, 0x9, 0xb, 0x36, 0x4, 0x9, 0xb, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x544}, 0x1, 0x0, 0x0, 0x40844}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) statx(r1, &(0x7f0000001040)='./file0\x00', 0x100, 0x2, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000001000)='./file0\x00', 0xffffffffffffffff, r5) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x44, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r6 = userfaultfd(0x80000) r7 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f00000012c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r7, &(0x7f0000001400)={0x14, &(0x7f0000001300)={0x0, 0x8, 0xaa, {0xaa, 0xb, "99a7b5b3615795c334895d86e33a3ec653013aca90fa68c5303866ac46036ab5af6b99f3b7c1c90f658c8d03d2ea6ccfa7f56968a461289644f18272873610dff1e9dd9a2f93b7354ba581bd40c3cba3db986e3afc4a4923a0a195195b2733efc63d99f7fec5ea2f9367742cea3c210b2ebfc2047b581dbff6b0e0a5b5e01957c71e22db6a24f672c0d0fabd45212a956a29de64e3950e799ffdbd642599d7dc4e523e86e673b196"}}, &(0x7f00000013c0)={0x0, 0x3, 0x26, @string={0x26, 0x3, "fe8e0349a3b6dd26fb948ce56dcc7552f1d029fe7eead5232c12301ff611c04d63cefd74"}}}, &(0x7f0000001580)={0x2c, &(0x7f0000001440)={0x20, 0xd, 0x11, "2650d4fe216356fa1e1f5b533be20740a2"}, &(0x7f0000001480)={0x0, 0xa, 0x1, 0x2e}, &(0x7f00000014c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001500)={0xc0, 0x5, 0x4, "8d6d3310"}, &(0x7f0000001540)={0x40, 0x5, 0x3, "f8418e"}}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000001600)={0x2, 0x10, [0x7, 0x9, 0x3, 0x1], &(0x7f00000015c0)=[0x0, 0x0]}) bind$inet6(r1, &(0x7f0000001640)={0xa, 0x4e21, 0x4, @empty, 0x9}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000001680)=@gcm_128={{0x303}, "a1e280278ff142fe", "e27ad3291f32b94bad7c8de81bc94442", "8f809080", "90333989ef36270f"}, 0x28) clock_gettime(0x0, &(0x7f0000005dc0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005c40)=[{{&(0x7f00000016c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001740)=""/114, 0x72}, {&(0x7f00000017c0)=""/155, 0x9b}, {&(0x7f0000001880)=""/14, 0xe}, {&(0x7f00000018c0)=""/116, 0x74}, {&(0x7f0000001940)=""/152, 0x98}, {&(0x7f0000001a00)=""/108, 0x6c}], 0x6, &(0x7f0000001b00)=""/19, 0x13}, 0x3}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001b40)=""/49, 0x31}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/177, 0xb1}, {&(0x7f0000002c40)=""/250, 0xfa}, {&(0x7f0000002d40)=""/85, 0x55}, {&(0x7f0000002dc0)=""/197, 0xc5}], 0x6, &(0x7f0000002f40)=""/177, 0xb1}, 0x10}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000003000)=""/30, 0x1e}], 0x1}, 0x7}, {{&(0x7f0000003080)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000003280)=[{&(0x7f0000003100)=""/125, 0x7d}, {&(0x7f0000003180)=""/128, 0x80}, {&(0x7f0000003200)=""/126, 0x7e}], 0x3, &(0x7f00000032c0)=""/102, 0x66}, 0x71}, {{&(0x7f0000003340)=@x25={0x9, @remote}, 0x80, &(0x7f0000003680)=[{&(0x7f00000033c0)=""/10, 0xa}, {&(0x7f0000003400)=""/161, 0xa1}, {&(0x7f00000034c0)=""/204, 0xcc}, {&(0x7f00000035c0)=""/144, 0x90}], 0x4, &(0x7f00000036c0)=""/3, 0x3}, 0x80000000}, {{&(0x7f0000003700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/175, 0xaf}, {&(0x7f0000004840)=""/222, 0xde}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/126, 0x7e}, {&(0x7f00000059c0)=""/161, 0xa1}, {&(0x7f0000005a80)=""/1, 0x1}], 0x7, &(0x7f0000005b40)=""/232, 0xe8}, 0x6}], 0x6, 0x10060, &(0x7f0000005e00)={r8, r9+10000000}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000005e40)=0x0) fcntl$lock(r0, 0x5, &(0x7f0000005e80)={0x1, 0x2, 0x4, 0x9, r10}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000005ec0)) listen(r0, 0x5) io_uring_enter(r1, 0xbfd, 0x25ca, 0x11, &(0x7f0000005f00)={[0x85]}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000005f40)={0x0, @in6={{0xa, 0x4e24, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, [0x6, 0x7, 0x558cc5f1, 0xffffffffffffffe8, 0x3, 0x5, 0x2, 0x3ce, 0xc, 0x3, 0x1, 0xfffffffffffffffb, 0x1ff, 0x0, 0x8]}, &(0x7f0000006040)=0x100) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000006080)={r11, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x84) sendmsg$NFT_BATCH(r1, &(0x7f00000062c0)={&(0x7f0000006140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006280)={&(0x7f0000006180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0xc4, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_USERDATA={0x7d, 0xd, 0x1, 0x0, "b1d5747a5edffee93b91c644d16a5428e94899d01a58693dbac35a30335c7248625b620d5fba1df631da1be9e93103b6e53efb3dc939351ee47e313f6b0a39366320be26de0587b19a21286428b79a6ee14a10294b24304d1b2fe39fd0ff0640083f1013f5a34181a2acbd162ee6a4f69f4343b957f9fdb60d"}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000000000000000}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xec}, 0x1, 0x0, 0x0, 0x50}, 0x14) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000006300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 574.041847ms ago: executing program 0 (id=3648): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x2002, 0x2, 0x3}, 0x18, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x161600, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c81, 0xffffffffffffffff) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xa) pivot_root(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='./cgroup\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffe43) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 498.914259ms ago: executing program 6 (id=3649): socket$inet6(0xa, 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) r1 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) (async, rerun: 32) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000040), 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x5}], 0x1c) sendto$inet6(r7, &(0x7f00000004c0)="b0", 0x1, 0x4044, &(0x7f0000000240)={0xa, 0x4e1f, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, 0x1c) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)="9e", 0x1}], 0x1}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4cb0}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r8, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000003c0)="660f38806c050f01c266b9bc0a000066b8de0bffff66baffffffff0f30f20f5942d46653baf80c66b838bcf38666efbafc0cb8e8dfeff30f1edbba420066edba4200edd317", 0x45}], 0x1, 0x10, &(0x7f0000000480)=[@dstype0={0x6, 0x4}], 0x1) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) (async) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) 425.321409ms ago: executing program 7 (id=3650): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x400000000010, 0x3, 0x0) bind$xdp(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, 0x0, &(0x7f00000000c0)) read$alg(0xffffffffffffffff, &(0x7f0000000100)=""/229, 0xe5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x4, 0x40, 0x0, 0x59, 0x4, 0x1, 0x9}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000840)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x32, @loopback, 0x4e23, 0x3, 'lc\x00', 0x20, 0x0, 0x58}, {@rand_addr=0x64010101, 0x4e24, 0x12000, 0x9, 0x1, 0xe6e}}, 0x44) 424.755635ms ago: executing program 0 (id=3651): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x4, 0x0, 0xb, 0x2, 0x1, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xa000, 0x60000, 0xd, 0x2, 0x2, 0x3, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0xc, 0x65, 0x1f, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x26000, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x2, 0x27, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x3, 0x4}, {0xdddd0000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x2000, 0x2, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x9000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x1000, 0x8, 0x4, 0x3d01, 0x70000, [0x8000000000000000, 0x5, 0x0, 0x9]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x4, 0x2004cb, 0x0, 0xa1d, 0x4068ff, 0x5, 0x0, 0x3, 0xa], 0xdddd0000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x9, 0x43f, 0x3, 0x2}}}, [""]}, 0x30}}, 0x4040010) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x0, 0x1, 0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512108040000102030109028a000301046008080b0001012430010904000000010120000a2401f5260005000000132403050004030306070000000400010004000924050679"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 424.137741ms ago: executing program 6 (id=3652): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000006c0)='\b', 0x1}], 0x1, 0x0, 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000800), 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="650f34440f20c03503000000440f22c066b842000f00d8b9a00000000f01c13e0f070fde460b0f01306763a5ed4ff2360f217a0bee44", 0x36}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 313.844891ms ago: executing program 7 (id=3653): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000740)=""/130, 0x82}, {&(0x7f00000009c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}, 0xfffffffe}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80000000000000007af791950000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 210.876835ms ago: executing program 6 (id=3655): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000040), 0x4) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="0000f50000000341e9", @ANYRES32=0x0, @ANYRES8, @ANYRES8], 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xe0, 0xec, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x7, 0x81}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x8, 0xaa, 0x69, 0x10, 0x5}, 0x55, &(0x7f0000000080)={0x5, 0xf, 0x55, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x3, 0x81, 0x8, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "1590446e03747227211e04c50e396f8d"}, @ssp_cap={0x10, 0x10, 0xa, 0xc0, 0x1, 0x2, 0x1e, 0x3, [0xff000f]}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x6, 0xf, 0xb8, [0xc00f, 0xff00c0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x4, 0x0, 0x8001}]}, 0x8, [{0xac, &(0x7f0000000100)=@string={0xac, 0x3, "ddef8bdf2f32a7322ba8e87e6f193775c1458c60fa7a6a5b9dcfafafcc761aed2d7e9aa5d6cb1126766c1f428a6ff5b84add63d4082620bd16f0a1f1d97396e25d15b2614ad234541c71040f834455899837816a9d3ff12b5a469bc986333fc48800d5e4b0d7dc824b478e441f4aebb49fefb63be0dd296e6873d1a008b7f9c670c01302911ae8f555d1c8669bcee038d5e779f980f077661d4056fefcadd3ecaac38cac631a856f0b71"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x861}}, {0x26, &(0x7f0000000240)=@string={0x26, 0x3, "297bf5c32b23b904e3843813a85416897eeb12055453d68904405f8a0914ce5425a05ec0"}}, {0xd9, &(0x7f00000002c0)=@string={0xd9, 0x3, "f6243fc44528fa8ba7f81e5eae353c51af3bbd9c37077eb8f73fc301871d57da08aea301705fec433f2d4da5972214052ab6a341dc78147f936fa56d9862fb77ea09756775f13299f0ebed7885c552a2256666e31d74e1eeecdb13f991863154f6946fdb5d966f749d17371c9fe9ba4502036e4c0bf8c650229204e399c8702fc7c3f230bf14f002cf3022ad1491dc9d6ecd18240519557af7cf689e94ae04d321bea119e9a40ac334b0829a92db852eb5f55623480ccc46f312deb6b2ab2bbbf7e5b2e22f23f7448ad2d984ae2b1ed7bc0f0eb09c57c9"}}, {0x75, &(0x7f0000000440)=@string={0x75, 0x3, "2bde10ae8712aae1094314ac9ba317e230e9c83e5212cfd65ca86623c536154731e9356a3cf6d3d66e09d938f684188d67f760c6d18e2e2ef4316365853c1b550f9625b3d078e0ddee26cc8d32b9f83bd3443044f89aea79ea32e3fc87721b208f5bf537d756c845bd8ddb997e45532d474b13"}}, {0xa7, &(0x7f00000005c0)=@string={0xa7, 0x3, "2d80402465b0cae3d5fb0728834a564708acdb791704606db58ae7cc088780c0925ba9334d1623150b2ac8e977a93599f5f477366a5a07c62826286ba9321f8f006ec3bd79e91e4f2bae36b2687ff48e90245ce0e9ec88b37cf8820df9427bb8098a96e436cb92dfb0453dcf01ea4973954d1c508a489c76ed3316c8fbe9110d29cbec7d77ca9661848310ceaf98915af82b9be96cdbef9fefe219f08bb1801355dae31c64"}}, {0x83, &(0x7f0000000680)=@string={0x83, 0x3, "eb5a593b0725a7250f02f2a66fea2eaae2b55bb45cf017c407d6e6ca70c250f4a3c3e156fe3a9f096cc955e275ad6b278b4549213eb5ee26504882f6e51bf5d827b57d0b423f8f74b1cf0e8dc66ef618603596625fdc1312b37cf83ec82f6bbe47091410e66195280ce81c830e7819114cb66440e68d4e8665d2b8db06e88b0d64"}}]}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000003c0)={0x1fd, 0x1, 0x26000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000002840)=""/4101, 0x40f00}, 0x94) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000280)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.624787ms ago: executing program 4 (id=3656): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xb}, {0x1b, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x40040) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e41090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 0s ago: executing program 4 (id=3657): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x900}, 0x884) kernel console output (not intermixed with test programs): 495.925212][T16605] dvb_dvr_do_ioctl+0x12b/0x220 [ 495.925230][T16605] dvb_usercopy+0x199/0x2e0 [ 495.925251][T16605] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 495.925268][T16605] ? __pfx_dvb_usercopy+0x10/0x10 [ 495.925292][T16605] ? __fget_files+0x3a2/0x420 [ 495.925309][T16605] ? __fget_files+0x2a/0x420 [ 495.925327][T16605] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 495.925342][T16605] dvb_dvr_ioctl+0x29/0x40 [ 495.925356][T16605] __se_sys_ioctl+0xfc/0x170 [ 495.925378][T16605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.925395][T16605] do_syscall_64+0x174/0x580 [ 495.925411][T16605] ? trace_irq_disable+0x3b/0x140 [ 495.925434][T16605] ? clear_bhb_loop+0x40/0x90 [ 495.925453][T16605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.925476][T16605] RIP: 0033:0x7f89be99ce59 [ 495.925492][T16605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.925510][T16605] RSP: 002b:00007f89bcbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.925529][T16605] RAX: ffffffffffffffda RBX: 00007f89bec15fa0 RCX: 00007f89be99ce59 [ 495.925542][T16605] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 495.925554][T16605] RBP: 00007f89bea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 495.925565][T16605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.925576][T16605] R13: 00007f89bec16038 R14: 00007f89bec15fa0 R15: 00007f89bed3fa48 [ 495.925596][T16605] [ 495.925626][T16605] Mem-Info: [ 496.026631][T16610] batadv_slave_1: entered promiscuous mode [ 496.028540][T16605] active_anon:12911 inactive_anon:0 isolated_anon:0 [ 496.028540][T16605] active_file:21145 inactive_file:40180 isolated_file:0 [ 496.028540][T16605] unevictable:768 dirty:296 writeback:0 [ 496.028540][T16605] slab_reclaimable:8000 slab_unreclaimable:171776 [ 496.028540][T16605] mapped:33612 shmem:4212 pagetables:2170 [ 496.028540][T16605] sec_pagetables:0 bounce:0 [ 496.028540][T16605] kernel_misc_reclaimable:0 [ 496.028540][T16605] free:1209621 free_pcp:13930 free_cma:0 [ 496.255385][T16605] Node 0 active_anon:51544kB inactive_anon:0kB active_file:84580kB inactive_file:160520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134448kB dirty:1184kB writeback:0kB shmem:15312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16028kB pagetables:8664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 496.291033][T16605] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 496.326908][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.333577][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.342452][T16605] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 496.389153][T16605] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 496.397349][T16605] Node 0 DMA32 free:917884kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43544kB inactive_anon:0kB active_file:84580kB inactive_file:160520kB unevictable:1536kB writepending:1184kB zspages:0kB present:3129332kB managed:2553016kB mlocked:0kB bounce:0kB free_pcp:56060kB local_pcp:26040kB free_cma:0kB [ 496.431390][T16605] lowmem_reserve[]: 0 0 0 0 0 [ 496.438481][T16605] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:684kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 496.468759][T16605] lowmem_reserve[]: 0 0 0 0 0 [ 496.470591][T16615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.474448][T16605] Node 1 Normal free:3912388kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 496.492774][T16615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.514020][T16613] tipc: Enabling of bearer rejected, already enabled [ 496.577339][T16605] lowmem_reserve[]: 0 0 0 0 0 [ 496.586289][T16623] tipc: New replicast peer: 172.20.20.187 [ 496.592099][T16605] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 496.621137][T16605] Node 0 DMA32: 5015*4kB (UME) 3442*8kB (UME) 1585*16kB (UME) 544*32kB (UME) 317*64kB (UME) 157*128kB (UME) 105*256kB (UME) 68*512kB (UME) 18*1024kB (UME) 7*2048kB (UME) 169*4096kB (UM) = 917436kB [ 496.649140][T16597] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.658878][T16597] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.666301][T16605] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 496.679173][T16597] bridge_slave_0: entered allmulticast mode [ 496.686071][T16597] bridge_slave_0: entered promiscuous mode [ 496.691948][T16605] Node 1 Normal: 7*4kB (UM) 9*8kB (UM) 8*16kB (UM) 9*32kB (UM) 7*64kB (UM) 6*128kB (UM) 4*256kB (UM) 2*512kB (UM) 1*1024kB (M) 4*2048kB (UM) 952*4096kB (M) = 3912388kB [ 496.710607][T16597] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.723423][T16597] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.733951][T16633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.741529][T16605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.749617][T16633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.752349][T16597] bridge_slave_1: entered allmulticast mode [ 496.770866][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3215'. [ 496.781179][T16605] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 496.791572][T16597] bridge_slave_1: entered promiscuous mode [ 496.803259][T16605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.831510][T16605] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 496.845773][T16630] veth5: entered allmulticast mode [ 496.854201][T16605] 63173 total pagecache pages [ 496.863396][T16605] 0 pages in swap cache [ 496.873270][T16605] Free swap = 124996kB [ 496.882445][T16605] Total swap = 124996kB [ 496.892635][T16605] 2097051 pages RAM [ 496.901009][T16605] 0 pages HighMem/MovableOnly [ 496.906916][T16633] tipc: Disabling bearer [ 496.920221][T16605] 427011 pages reserved [ 496.932265][T16605] 0 pages cma reserved [ 496.955997][T16597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.974048][T16604] batadv_slave_1: left promiscuous mode [ 496.994965][T16597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.029040][T16597] team0: Port device team_slave_0 added [ 497.046589][T16597] team0: Port device team_slave_1 added [ 497.071623][T16597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.093320][T16597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.143197][T16597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.174563][T16597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.181644][T16597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.210204][T16597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.249006][T16597] hsr_slave_0: entered promiscuous mode [ 497.255517][T16597] hsr_slave_1: entered promiscuous mode [ 497.262250][T16597] debugfs: 'hsr0' already exists in 'hsr' [ 497.268852][T16597] Cannot create hsr debugfs directory [ 497.313219][ T5625] Bluetooth: hci0: command tx timeout [ 497.585226][T16597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 497.597494][T16644] FAULT_INJECTION: forcing a failure. [ 497.597494][T16644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.597865][T16597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.619984][T16644] CPU: 0 UID: 0 PID: 16644 Comm: syz.1.3218 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.620008][T16644] Tainted: [L]=SOFTLOCKUP [ 497.620013][T16644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 497.620022][T16644] Call Trace: [ 497.620028][T16644] [ 497.620034][T16644] dump_stack_lvl+0xe8/0x150 [ 497.620054][T16644] should_fail_ex+0x40c/0x560 [ 497.620078][T16644] _copy_from_user+0x2d/0xb0 [ 497.620097][T16644] ____sys_sendmsg+0x33d/0xa20 [ 497.620116][T16644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.620135][T16644] ? import_iovec+0x73/0xa0 [ 497.620153][T16644] ___sys_sendmsg+0x2a5/0x360 [ 497.620167][T16644] ? rcu_is_watching+0x15/0xb0 [ 497.620182][T16644] ? get_pid_task+0x20/0x1f0 [ 497.620196][T16644] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.620212][T16644] ? rcu_is_watching+0x15/0xb0 [ 497.620233][T16644] ? __fget_files+0x2a/0x420 [ 497.620250][T16644] ? __fget_files+0x3a2/0x420 [ 497.620269][T16644] __x64_sys_sendmsg+0x1b1/0x290 [ 497.620284][T16644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.620304][T16644] ? rcu_is_watching+0x15/0xb0 [ 497.620319][T16644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.620335][T16644] do_syscall_64+0x174/0x580 [ 497.620351][T16644] ? trace_irq_disable+0x3b/0x140 [ 497.620370][T16644] ? clear_bhb_loop+0x40/0x90 [ 497.620387][T16644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.620402][T16644] RIP: 0033:0x7f89be99ce59 [ 497.620427][T16644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.620440][T16644] RSP: 002b:00007f89bcbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.620457][T16644] RAX: ffffffffffffffda RBX: 00007f89bec15fa0 RCX: 00007f89be99ce59 [ 497.620469][T16644] RDX: 000000000400c804 RSI: 00002000000001c0 RDI: 0000000000000004 [ 497.620479][T16644] RBP: 00007f89bcbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 497.620490][T16644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.620499][T16644] R13: 00007f89bec16038 R14: 00007f89bec15fa0 R15: 00007f89bed3fa48 [ 497.620517][T16644] [ 497.631468][T16597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 497.856168][T16597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.865914][T16597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 497.892859][T16597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.917055][T16597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 497.951138][T16597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.023586][ T856] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 498.092464][T16597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.112276][T16597] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.126446][T15468] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.133526][T15468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.156405][T15468] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.163500][T15468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.184359][ T856] usb 2-1: Using ep0 maxpacket: 32 [ 498.196749][ T856] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 498.218062][ T856] usb 2-1: config 0 has no interface number 0 [ 498.236050][ T856] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 498.247087][T16597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.262896][ T856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.280853][ T856] usb 2-1: Product: syz [ 498.290374][ T856] usb 2-1: Manufacturer: syz [ 498.296311][ T856] usb 2-1: SerialNumber: syz [ 498.306646][ T856] usb 2-1: config 0 descriptor?? [ 498.317735][ T856] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 498.359035][T16597] veth0_vlan: entered promiscuous mode [ 498.372514][T16597] veth1_vlan: entered promiscuous mode [ 498.425658][T16597] veth0_macvtap: entered promiscuous mode [ 498.439960][T16597] veth1_macvtap: entered promiscuous mode [ 498.472043][T16597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.497803][T16597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.520557][ T856] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 498.538522][T15468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.548611][ T856] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 498.561271][T15468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.583812][T15468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.603715][T15468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.718996][ T7907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.728049][ T7907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.789495][ T7644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.813720][ T7644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.106083][T16683] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.113518][T16683] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.157462][T16683] bond_slave_0: left promiscuous mode [ 499.173376][T16683] bond_slave_1: left promiscuous mode [ 499.239556][T16683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.265911][T16683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.359069][T16683] bond0: left allmulticast mode [ 499.364380][T16683] bond_slave_0: left allmulticast mode [ 499.369961][T16683] bond_slave_1: left allmulticast mode [ 499.393414][ T5625] Bluetooth: hci0: command tx timeout [ 499.404953][T16691] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3232'. [ 499.438242][T16691] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3232'. [ 499.451106][T15468] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.480849][T15468] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 499.503019][T15468] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.516251][T15468] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 499.525413][T15468] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.535836][T15468] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 499.546052][T15468] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.555807][T16696] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3234'. [ 499.555914][T15468] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 499.656786][T16702] netlink: 136 bytes leftover after parsing attributes in process `syz.7.3236'. [ 499.666543][T16702] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 499.737637][T16704] fuse: Unknown parameter 'fsname' [ 499.755442][T16693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.819927][T16711] netlink: 'syz.6.3241': attribute type 11 has an invalid length. [ 499.851804][T16713] syz_tun: entered allmulticast mode [ 499.869682][T16712] syz_tun: left allmulticast mode [ 499.900046][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3242'. [ 500.243289][ T9245] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 500.394102][T16729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3247'. [ 500.403711][T16729] FAULT_INJECTION: forcing a failure. [ 500.403711][T16729] name failslab, interval 1, probability 0, space 0, times 0 [ 500.416824][ T9245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.427889][T16729] CPU: 0 UID: 0 PID: 16729 Comm: syz.4.3247 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.427907][T16729] Tainted: [L]=SOFTLOCKUP [ 500.427911][T16729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.427917][T16729] Call Trace: [ 500.427921][T16729] [ 500.427926][T16729] dump_stack_lvl+0xe8/0x150 [ 500.427941][T16729] should_fail_ex+0x40c/0x560 [ 500.427957][T16729] should_failslab+0xa8/0x100 [ 500.427971][T16729] __kvmalloc_node_noprof+0x16e/0x890 [ 500.427985][T16729] ? __rhashtable_init_noprof+0x545/0xaf0 [ 500.427996][T16729] ? __rhashtable_init_noprof+0x129/0xaf0 [ 500.428006][T16729] __rhashtable_init_noprof+0x545/0xaf0 [ 500.428017][T16729] __rhltable_init_noprof+0x26/0x70 [ 500.428027][T16729] sta_info_init+0x2f/0x130 [ 500.428041][T16729] ieee80211_alloc_hw_nm+0x808/0x1ec0 [ 500.428052][T16729] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 500.428063][T16729] mac80211_hwsim_new_radio+0x1ea/0x5390 [ 500.428078][T16729] ? trace_irq_enable+0x3b/0x140 [ 500.428091][T16729] ? trace_irq_disable+0x3b/0x140 [ 500.428105][T16729] ? do_trace_netlink_extack+0x3b/0x1d0 [ 500.428118][T16729] ? do_trace_netlink_extack+0x53/0x1d0 [ 500.428130][T16729] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 500.428145][T16729] ? do_trace_netlink_extack+0x80/0x1d0 [ 500.428158][T16729] hwsim_new_radio_nl+0xf63/0x1c00 [ 500.428174][T16729] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 500.428188][T16729] ? rcu_is_watching+0x15/0xb0 [ 500.428198][T16729] ? trace_kmalloc+0x2a/0xf0 [ 500.428211][T16729] ? __nla_parse+0x40/0x60 [ 500.428221][T16729] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 500.428234][T16729] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 500.428246][T16729] genl_family_rcv_msg_doit+0x233/0x340 [ 500.428259][T16729] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 500.428280][T16729] ? bpf_lsm_capable+0x9/0x20 [ 500.428294][T16729] ? security_capable+0x7e/0x2c0 [ 500.428317][T16729] genl_rcv_msg+0x614/0x7a0 [ 500.428337][T16729] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.428349][T16729] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 500.428362][T16729] ? __netlink_lookup+0xc6/0x8b0 [ 500.428370][T16729] ? rcu_is_watching+0x15/0xb0 [ 500.428381][T16729] netlink_rcv_skb+0x226/0x4a0 [ 500.428395][T16729] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.428405][T16729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.428421][T16729] ? down_read+0x2be/0x330 [ 500.428432][T16729] genl_rcv+0x28/0x40 [ 500.428442][T16729] netlink_unicast+0x7bb/0x940 [ 500.428456][T16729] netlink_sendmsg+0x813/0xb40 [ 500.428467][T16729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.428483][T16729] ? aa_sock_msg_perm+0xf1/0x1b0 [ 500.428504][T16729] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 500.428523][T16729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.428538][T16729] ____sys_sendmsg+0x9b9/0xa20 [ 500.428557][T16729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.428576][T16729] ? import_iovec+0x73/0xa0 [ 500.428589][T16729] ___sys_sendmsg+0x2a5/0x360 [ 500.428598][T16729] ? rcu_is_watching+0x15/0xb0 [ 500.428607][T16729] ? get_pid_task+0x20/0x1f0 [ 500.428616][T16729] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.428626][T16729] ? rcu_is_watching+0x15/0xb0 [ 500.428646][T16729] ? __fget_files+0x2a/0x420 [ 500.428656][T16729] ? __fget_files+0x3a2/0x420 [ 500.428668][T16729] __x64_sys_sendmsg+0x1b1/0x290 [ 500.428677][T16729] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 500.428689][T16729] ? rcu_is_watching+0x15/0xb0 [ 500.428698][T16729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.428707][T16729] do_syscall_64+0x174/0x580 [ 500.428717][T16729] ? clear_bhb_loop+0x40/0x90 [ 500.428726][T16729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.428735][T16729] RIP: 0033:0x7f0b5c99ce59 [ 500.428745][T16729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.428753][T16729] RSP: 002b:00007f0b5d7b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.428764][T16729] RAX: ffffffffffffffda RBX: 00007f0b5cc15fa0 RCX: 00007f0b5c99ce59 [ 500.428771][T16729] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 500.428777][T16729] RBP: 00007f0b5d7b1090 R08: 0000000000000000 R09: 0000000000000000 [ 500.428783][T16729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.428789][T16729] R13: 00007f0b5cc16038 R14: 00007f0b5cc15fa0 R15: 00007f0b5cd3fa48 [ 500.428798][T16729] [ 500.429913][ T9245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.499127][ T9245] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 500.767042][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 500.768026][ T9218] usb 2-1: USB disconnect, device number 97 [ 500.776245][ T9245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.812148][ T9218] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 500.920806][ T9218] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 500.936181][ T9245] usb 1-1: config 0 descriptor?? [ 500.946749][T16736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3249'. [ 500.976685][ T9218] quatech2 2-1:0.51: device disconnected [ 501.052807][T16743] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3252'. [ 501.065079][T16736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3249'. [ 501.095062][T16745] netlink: 'syz.4.3253': attribute type 11 has an invalid length. [ 501.168333][T16750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.194455][T16750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.229712][ T9245] usbhid 1-1:0.0: can't add hid device: -71 [ 501.235854][ T9245] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 501.274646][ T9245] usb 1-1: USB disconnect, device number 18 [ 501.402626][T16763] netlink: 'syz.4.3257': attribute type 4 has an invalid length. [ 501.417353][ T7644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.430803][ T7644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.473860][ T5625] Bluetooth: hci0: command tx timeout [ 501.486446][ T7644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.497143][ T7644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.547052][ T7644] bond0: (slave netdevsim1): Releasing backup interface [ 501.556959][ T7644] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 501.567089][ T7644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.577810][ T7644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.596356][T16764] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 501.602869][T16764] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 501.611412][T16764] vhci_hcd vhci_hcd.0: Device attached [ 501.613252][ T9245] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 501.654556][T15468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.670365][T15468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.680442][ T7644] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.704747][ T7644] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.784469][ T9245] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.809551][ T9245] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 501.851143][ T9245] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 501.874055][ T7644] bridge_slave_1: left allmulticast mode [ 501.891350][ T7644] bridge_slave_1: left promiscuous mode [ 501.899295][ T9245] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 501.913339][ T9218] usb 48-1: SetAddress Request (2) to port 0 [ 501.920039][ T9245] usb 1-1: Manufacturer: syz [ 501.931879][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.940784][ T9245] usb 1-1: config 0 descriptor?? [ 501.947330][ T9218] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 501.984011][ T7644] bridge_slave_0: left allmulticast mode [ 502.027938][ T7644] bridge_slave_0: left promiscuous mode [ 502.073005][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.225592][ T5687] usb 1-1: USB disconnect, device number 19 [ 502.275061][T16765] vhci_hcd: connection reset by peer [ 502.300560][T15475] vhci_hcd vhci_hcd.7: stop threads [ 502.314231][T15475] vhci_hcd vhci_hcd.7: release socket [ 502.328139][T15475] vhci_hcd vhci_hcd.7: disconnect device [ 502.449719][ T7644] bond0 (unregistering): left allmulticast mode [ 502.469016][ T7644] bond_slave_0: left allmulticast mode [ 502.485122][ T7644] bond_slave_1: left allmulticast mode [ 502.497205][ T7644] bond0 (unregistering): left promiscuous mode [ 502.520009][ T7644] bond_slave_0: left promiscuous mode [ 502.539188][ T7644] bond_slave_1: left promiscuous mode [ 502.556054][ T7644] macvlan2 (unregistering): left promiscuous mode [ 502.570514][ T7644] team0: Port device macvlan2 removed [ 502.588651][ T7644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.598625][ T7644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.609216][ T7644] bond0 (unregistering): Released all slaves [ 502.622935][ T5284] 8021q: adding VLAN 0 to HW filter on device eth17 [ 502.649698][T16782] xt_CT: No such helper "syz0" [ 502.658332][ T7644] tipc: Disabling bearer [ 502.669965][ T7644] tipc: Left network mode [ 502.691966][T16792] xt_SECMARK: invalid mode: 9 [ 502.823938][T16797] dummy0: entered allmulticast mode [ 502.839389][T16796] dummy0: left allmulticast mode [ 502.868225][ T7644] hsr_slave_0: left promiscuous mode [ 502.884876][ T7644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.913065][ T7644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.927304][T16800] program syz.4.3263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.938914][ T7644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.946928][ T7644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.966078][ T7644] veth1_macvtap: left promiscuous mode [ 502.976576][ T7644] veth0_macvtap: left promiscuous mode [ 502.983216][ T5709] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 502.983616][ T7644] veth1_vlan: left promiscuous mode [ 503.006036][ T7644] veth0_vlan: left promiscuous mode [ 503.149218][T16809] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 503.193796][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 503.206165][ T5709] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 503.224380][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.248014][ T5709] usb 1-1: Product: syz [ 503.258431][ T5709] usb 1-1: Manufacturer: syz [ 503.263305][ T5709] usb 1-1: SerialNumber: syz [ 503.266182][ T7644] team_slave_1 (unregistering): left promiscuous mode [ 503.276807][ T5709] usb 1-1: config 0 descriptor?? [ 503.287994][T16820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.298680][ T7644] team0 (unregistering): Port device team_slave_1 removed [ 503.310180][ T5709] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 503.330858][ T5709] dvb-usb: bulk message failed: -22 (4/0) [ 503.340073][T16820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.344848][ T7644] team_slave_0 (unregistering): left promiscuous mode [ 503.355913][ T5709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 503.367496][ T7644] team0 (unregistering): Port device team_slave_0 removed [ 503.370860][ T5709] dvb-usb: bulk message failed: -22 (5/0) [ 503.385828][ T5709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 503.415759][ T5709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 503.436139][ T5709] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 503.452516][ T5709] usb 1-1: media controller created [ 503.465994][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 503.525896][ T5709] usb 1-1: selecting invalid altsetting 3 [ 503.545814][ T5709] ttusb2: set interface to alts=3 failed [ 503.554254][T16827] FAULT_INJECTION: forcing a failure. [ 503.554254][T16827] name failslab, interval 1, probability 0, space 0, times 0 [ 503.554756][ T5625] Bluetooth: hci0: command tx timeout [ 503.584712][T16827] CPU: 1 UID: 0 PID: 16827 Comm: syz.4.3268 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.584737][T16827] Tainted: [L]=SOFTLOCKUP [ 503.584744][T16827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 503.584754][T16827] Call Trace: [ 503.584760][T16827] [ 503.584767][T16827] dump_stack_lvl+0xe8/0x150 [ 503.584790][T16827] should_fail_ex+0x40c/0x560 [ 503.584815][T16827] should_failslab+0xa8/0x100 [ 503.584837][T16827] ? dst_alloc+0x105/0x170 [ 503.584856][T16827] kmem_cache_alloc_noprof+0x87/0x650 [ 503.584876][T16827] ? tomoyo_write_log2+0x24f/0x910 [ 503.584894][T16827] dst_alloc+0x105/0x170 [ 503.584919][T16827] ? ip_check_mc_rcu+0x400/0x670 [ 503.584943][T16827] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 503.584966][T16827] ? ip_route_output_key_hash+0xd8/0x2a0 [ 503.584984][T16827] ip_route_output_key_hash+0x18d/0x2a0 [ 503.585004][T16827] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 503.585021][T16827] ? snprintf+0xe8/0x140 [ 503.585042][T16827] ? raw_sendmsg+0x6b8/0x1a20 [ 503.585058][T16827] ? rcu_is_watching+0x15/0xb0 [ 503.585075][T16827] ? rcu_is_watching+0x15/0xb0 [ 503.585093][T16827] ip_route_output_flow+0x2a/0x150 [ 503.585109][T16827] ? security_sk_classify_flow+0x6d/0x150 [ 503.585129][T16827] raw_sendmsg+0x110d/0x1a20 [ 503.585151][T16827] ? __pfx_raw_sendmsg+0x10/0x10 [ 503.585169][T16827] ? rcu_is_watching+0x15/0xb0 [ 503.585188][T16827] ? aa_sk_perm+0x6d5/0x900 [ 503.585212][T16827] ? __pfx_aa_sk_perm+0x10/0x10 [ 503.585230][T16827] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 503.585247][T16827] ? sock_rps_record_flow+0x19/0x350 [ 503.585265][T16827] ? inet_sendmsg+0x298/0x320 [ 503.585281][T16827] ? __pfx_inet_sendmsg+0x10/0x10 [ 503.585298][T16827] ____sys_sendmsg+0x853/0xa20 [ 503.585316][T16827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.585336][T16827] ? import_iovec+0x73/0xa0 [ 503.585355][T16827] ___sys_sendmsg+0x2a5/0x360 [ 503.585370][T16827] ? rcu_is_watching+0x15/0xb0 [ 503.585385][T16827] ? get_pid_task+0x20/0x1f0 [ 503.585400][T16827] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.585417][T16827] ? rcu_is_watching+0x15/0xb0 [ 503.585440][T16827] ? __fget_files+0x2a/0x420 [ 503.585457][T16827] ? __fget_files+0x3a2/0x420 [ 503.585478][T16827] __x64_sys_sendmsg+0x1b1/0x290 [ 503.585496][T16827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.585517][T16827] ? rcu_is_watching+0x15/0xb0 [ 503.585533][T16827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.585550][T16827] do_syscall_64+0x174/0x580 [ 503.585566][T16827] ? trace_irq_disable+0x3b/0x140 [ 503.585586][T16827] ? clear_bhb_loop+0x40/0x90 [ 503.585604][T16827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.585620][T16827] RIP: 0033:0x7f0b5c99ce59 [ 503.585636][T16827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.585651][T16827] RSP: 002b:00007f0b5d7b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.585669][T16827] RAX: ffffffffffffffda RBX: 00007f0b5cc15fa0 RCX: 00007f0b5c99ce59 [ 503.585681][T16827] RDX: 000000000400c804 RSI: 00002000000001c0 RDI: 0000000000000004 [ 503.585693][T16827] RBP: 00007f0b5d7b1090 R08: 0000000000000000 R09: 0000000000000000 [ 503.585704][T16827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.585713][T16827] R13: 00007f0b5cc16038 R14: 00007f0b5cc15fa0 R15: 00007f0b5cd3fa48 [ 503.585730][T16827] [ 503.925768][ T5709] DVB: Unable to find symbol tda10086_attach() [ 503.933104][ T5709] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 503.948472][ T5709] dvb-usb: bulk message failed: -22 (4/0) [ 503.955280][ T5709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 503.965655][ T5709] dvb-usb: bulk message failed: -22 (5/0) [ 503.971377][ T5709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 503.981457][ T5709] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 503.993377][ T5284] 8021q: adding VLAN 0 to HW filter on device eth18 [ 504.068002][T16836] netlink: 'syz.1.3269': attribute type 4 has an invalid length. [ 504.463623][ T9245] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 504.518120][T16862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.530471][T16862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.618428][T16869] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3278'. [ 504.637741][ T9245] usb 2-1: Using ep0 maxpacket: 32 [ 504.657254][ T9245] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=52.85 [ 504.686446][ T9245] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 504.722442][ T9245] usb 2-1: Manufacturer: syz [ 504.747663][ T9245] usb 2-1: config 0 descriptor?? [ 504.782565][ T9245] usb_8dev 2-1:0.0 can0: sending command message failed [ 504.808383][ T9245] usb_8dev 2-1:0.0 can0: can't get firmware version [ 504.874016][ T9245] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 504.900210][ T5284] 8021q: adding VLAN 0 to HW filter on device eth19 [ 504.943250][T16882] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3281'. [ 505.001569][T16885] netlink: 'syz.7.3282': attribute type 4 has an invalid length. [ 505.032318][T16844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'. [ 505.290075][ T9243] usb 2-1: USB disconnect, device number 98 [ 505.355455][T16890] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 505.765690][ T5673] usb 1-1: USB disconnect, device number 20 [ 505.832444][ T5673] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 505.911234][ T5284] 8021q: adding VLAN 0 to HW filter on device eth20 [ 506.213230][ T9245] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 506.385113][ T9245] usb 2-1: unable to get BOS descriptor or descriptor too short [ 506.413025][ T9245] usb 2-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config [ 506.430037][ T9245] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 506.439307][ T9245] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.459022][ T9245] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.470485][ T9245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.480659][ T9245] usb 2-1: Product: syz [ 506.485537][ T9245] usb 2-1: Manufacturer: syz [ 506.490228][ T9245] usb 2-1: SerialNumber: syz [ 506.744773][T16919] bond1: option lp_interval: invalid value (18446744071562067969) [ 506.764855][T16919] bond1: option lp_interval: allowed values 1 - 2147483647 [ 506.788737][T16919] bond1 (unregistering): Released all slaves [ 507.025230][T16938] syzkaller0: entered promiscuous mode [ 507.044052][T16938] syzkaller0: entered allmulticast mode [ 507.073879][ T9218] usb 48-1: device descriptor read/8, error -110 [ 507.137673][T16943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.162214][T16943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.214549][ T9245] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 507.221486][T16947] netlink: 'syz.0.3295': attribute type 11 has an invalid length. [ 507.231560][ T9245] cdc_ncm 2-1:1.0: bind() failure [ 507.477414][ T9245] usb 2-1: USB disconnect, device number 99 [ 507.494753][ T9218] usb usb48-port1: attempt power cycle [ 507.753437][ T5687] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 507.783050][T16985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.797693][T16985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.903429][ T5687] usb 1-1: device descriptor read/64, error -71 [ 508.050501][T16993] FAULT_INJECTION: forcing a failure. [ 508.050501][T16993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.077912][T16993] CPU: 0 UID: 0 PID: 16993 Comm: syz.1.3314 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.077936][T16993] Tainted: [L]=SOFTLOCKUP [ 508.077942][T16993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 508.077951][T16993] Call Trace: [ 508.077958][T16993] [ 508.077964][T16993] dump_stack_lvl+0xe8/0x150 [ 508.077986][T16993] should_fail_ex+0x40c/0x560 [ 508.078011][T16993] _copy_from_user+0x2d/0xb0 [ 508.078031][T16993] memdup_user+0x5e/0xd0 [ 508.078047][T16993] uinput_write+0x234/0xfe0 [ 508.078066][T16993] ? __pfx_uinput_write+0x10/0x10 [ 508.078084][T16993] ? bpf_lsm_file_permission+0x9/0x20 [ 508.078106][T16993] ? security_file_permission+0x75/0x260 [ 508.078127][T16993] ? rw_verify_area+0x203/0x4c0 [ 508.078148][T16993] ? __pfx_uinput_write+0x10/0x10 [ 508.078166][T16993] vfs_write+0x296/0xba0 [ 508.078189][T16993] ? __pfx_vfs_write+0x10/0x10 [ 508.078208][T16993] ? lock_release+0x4b/0x3c0 [ 508.078231][T16993] ? __fget_files+0x2a/0x420 [ 508.078248][T16993] ? __fget_files+0x3a2/0x420 [ 508.078265][T16993] ? __fget_files+0x2a/0x420 [ 508.078285][T16993] ksys_write+0x150/0x270 [ 508.078306][T16993] ? __pfx_ksys_write+0x10/0x10 [ 508.078327][T16993] ? rcu_is_watching+0x15/0xb0 [ 508.078344][T16993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.078362][T16993] do_syscall_64+0x174/0x580 [ 508.078378][T16993] ? trace_irq_disable+0x3b/0x140 [ 508.078399][T16993] ? clear_bhb_loop+0x40/0x90 [ 508.078417][T16993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.078433][T16993] RIP: 0033:0x7f89be99ce59 [ 508.078448][T16993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.078462][T16993] RSP: 002b:00007f89bcbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 508.078484][T16993] RAX: ffffffffffffffda RBX: 00007f89bec15fa0 RCX: 00007f89be99ce59 [ 508.078496][T16993] RDX: 000000000000045c RSI: 0000200000000540 RDI: 0000000000000003 [ 508.078507][T16993] RBP: 00007f89bcbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 508.078517][T16993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.078528][T16993] R13: 00007f89bec16038 R14: 00007f89bec15fa0 R15: 00007f89bed3fa48 [ 508.078546][T16993] [ 508.079669][ T9218] usb usb48-port1: unable to enumerate USB device [ 508.143252][ T5687] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 508.489947][T17001] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3316'. [ 508.516292][T17001] binder: 17000:17001 ioctl 541c 200000000200 returned -22 [ 508.534274][T17001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.577785][T17001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.603312][ T5687] usb 1-1: device descriptor read/64, error -71 [ 508.713430][ T5687] usb usb1-port1: attempt power cycle [ 508.806399][T17017] openvswitch: netlink: Multiple metadata blocks provided [ 508.818841][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3325'. [ 508.863323][ T9245] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 508.904982][T17026] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3328'. [ 508.915522][T17026] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3328'. [ 508.968887][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3330'. [ 509.026661][ T9245] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 509.046249][ T9245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.054651][ T5687] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 509.065563][ T9245] usb 2-1: config 0 descriptor?? [ 509.074050][ T9245] cp210x 2-1:0.0: cp210x converter detected [ 509.084093][ T5687] usb 1-1: device descriptor read/8, error -71 [ 509.150443][T17040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.173493][T17040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.190678][T17040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.223246][T17040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.333288][ T5687] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 509.374357][ T5687] usb 1-1: device descriptor read/8, error -71 [ 509.393007][ T9245] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 509.415108][ T9245] cp210x 2-1:0.0: querying part number failed [ 509.438058][ T9245] usb 2-1: cp210x converter now attached to ttyUSB0 [ 509.513566][ T5687] usb usb1-port1: unable to enumerate USB device [ 509.759997][T17062] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 510.604741][T17084] netlink: 'syz.7.3348': attribute type 21 has an invalid length. [ 510.613221][T17084] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3348'. [ 510.627529][T17084] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3348'. [ 510.645751][T17084] mac80211_hwsim hwsim20 syzkaller0: left promiscuous mode [ 510.654481][T17084] mac80211_hwsim hwsim20 syzkaller0: left allmulticast mode [ 510.667405][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3349'. [ 510.677929][T17084] simple: basic_1 [ 510.728674][T17086] binder: 17085:17086 ioctl 4018620d 0 returned -22 [ 510.890382][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3354'. [ 511.113327][ T9245] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 511.263224][ T9245] usb 1-1: Using ep0 maxpacket: 32 [ 511.269710][ T9245] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 511.279749][ T9245] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 511.290285][ T9245] usb 1-1: config 0 interface 0 has no altsetting 0 [ 511.298848][ T9245] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 511.308044][ T9245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.316107][ T9245] usb 1-1: Product: syz [ 511.320321][ T9245] usb 1-1: Manufacturer: syz [ 511.325071][ T9245] usb 1-1: SerialNumber: syz [ 511.330627][ T9245] usb 1-1: config 0 descriptor?? [ 511.649501][T17105] syzkaller1: entered promiscuous mode [ 511.655553][T17105] syzkaller1: entered allmulticast mode [ 511.716728][ T9218] usb 2-1: USB disconnect, device number 100 [ 511.740561][ T9245] gs_usb 1-1:0.0: Configuring for 180 interfaces [ 511.742383][ T9218] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 511.760916][ T9218] cp210x 2-1:0.0: device disconnected [ 511.836891][T17115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.850340][T17115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.083258][ T9218] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 512.145753][T17096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3353'. [ 512.155244][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3353'. [ 512.233207][ T9218] usb 2-1: device descriptor read/64, error -71 [ 512.401720][ T9245] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 512.457932][ T9245] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 512.473681][ T9218] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 512.474407][ T9245] usb 1-1: USB disconnect, device number 25 [ 512.527580][T17135] netlink: 'syz.4.3367': attribute type 4 has an invalid length. [ 512.567093][T17137] FAULT_INJECTION: forcing a failure. [ 512.567093][T17137] name failslab, interval 1, probability 0, space 0, times 0 [ 512.579865][T17137] CPU: 1 UID: 0 PID: 17137 Comm: syz.4.3368 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.579890][T17137] Tainted: [L]=SOFTLOCKUP [ 512.579896][T17137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.579905][T17137] Call Trace: [ 512.579912][T17137] [ 512.579918][T17137] dump_stack_lvl+0xe8/0x150 [ 512.579941][T17137] should_fail_ex+0x40c/0x560 [ 512.579966][T17137] should_failslab+0xa8/0x100 [ 512.579989][T17137] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 512.580011][T17137] ? uinput_write+0x5ae/0xfe0 [ 512.580029][T17137] ? rcu_is_watching+0x15/0xb0 [ 512.580047][T17137] kstrndup+0x7e/0x160 [ 512.580063][T17137] uinput_write+0x5ae/0xfe0 [ 512.580083][T17137] ? __pfx_uinput_write+0x10/0x10 [ 512.580102][T17137] ? bpf_lsm_file_permission+0x9/0x20 [ 512.580122][T17137] ? security_file_permission+0x75/0x260 [ 512.580142][T17137] ? rw_verify_area+0x203/0x4c0 [ 512.580166][T17137] ? __pfx_uinput_write+0x10/0x10 [ 512.580183][T17137] vfs_write+0x296/0xba0 [ 512.580205][T17137] ? __pfx_vfs_write+0x10/0x10 [ 512.580224][T17137] ? lock_release+0x4b/0x3c0 [ 512.580247][T17137] ? __fget_files+0x2a/0x420 [ 512.580264][T17137] ? __fget_files+0x3a2/0x420 [ 512.580290][T17137] ? __fget_files+0x2a/0x420 [ 512.580310][T17137] ksys_write+0x150/0x270 [ 512.580330][T17137] ? __pfx_ksys_write+0x10/0x10 [ 512.580351][T17137] ? rcu_is_watching+0x15/0xb0 [ 512.580366][T17137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.580382][T17137] do_syscall_64+0x174/0x580 [ 512.580398][T17137] ? trace_irq_disable+0x3b/0x140 [ 512.580418][T17137] ? clear_bhb_loop+0x40/0x90 [ 512.580434][T17137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.580450][T17137] RIP: 0033:0x7f0b5c99ce59 [ 512.580466][T17137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.580479][T17137] RSP: 002b:00007f0b5d7b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 512.580497][T17137] RAX: ffffffffffffffda RBX: 00007f0b5cc15fa0 RCX: 00007f0b5c99ce59 [ 512.580509][T17137] RDX: 000000000000045c RSI: 0000200000000540 RDI: 0000000000000003 [ 512.580520][T17137] RBP: 00007f0b5d7b1090 R08: 0000000000000000 R09: 0000000000000000 [ 512.580530][T17137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.580540][T17137] R13: 00007f0b5cc16038 R14: 00007f0b5cc15fa0 R15: 00007f0b5cd3fa48 [ 512.580557][T17137] [ 512.822582][ T9218] usb 2-1: device descriptor read/64, error -71 [ 512.935767][ T9218] usb usb2-port1: attempt power cycle [ 513.122810][T17158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.142056][T17158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.273437][ T9218] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 513.314416][ T9218] usb 2-1: device descriptor read/8, error -71 [ 513.563861][ T9218] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 513.604913][ T9218] usb 2-1: device descriptor read/8, error -71 [ 513.753642][ T9218] usb usb2-port1: unable to enumerate USB device [ 513.945243][T17190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.966283][T17189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.966502][T17190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.011827][T17189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.641101][T17216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.653018][T17216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.789275][T17220] overlayfs: missing 'lowerdir' [ 515.203334][ T856] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 515.375573][ T856] usb 2-1: config 255 has an invalid interface number: 97 but max is 0 [ 515.400353][ T856] usb 2-1: config 255 has no interface number 0 [ 515.414087][ T856] usb 2-1: config 255 interface 97 has no altsetting 0 [ 515.426698][ T856] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 515.436148][ T856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.444489][ T856] usb 2-1: Product: syz [ 515.452902][ T856] usb 2-1: Manufacturer: syz [ 515.463022][ T856] usb 2-1: SerialNumber: syz [ 515.730463][ T856] rndis_host 2-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 515.782228][ T856] usb 2-1: USB disconnect, device number 105 [ 515.842641][T17239] team0: entered promiscuous mode [ 515.851773][T17239] team_slave_0: entered promiscuous mode [ 515.865925][T17239] team_slave_1: entered promiscuous mode [ 515.882281][T17239] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 515.895405][T17239] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3393'. [ 515.914400][T17239] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 515.953755][ T5673] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 516.088402][T17244] netlink: 'syz.7.3394': attribute type 1 has an invalid length. [ 516.116023][T17244] netlink: 157116 bytes leftover after parsing attributes in process `syz.7.3394'. [ 516.134785][ T5673] usb 1-1: unable to get BOS descriptor or descriptor too short [ 516.174058][ T5673] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 516.221753][ T5673] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.232573][ T5673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.274951][ T5673] usb 1-1: Product: syz [ 516.300823][ T5673] usb 1-1: Manufacturer: syz [ 516.324995][ T5673] usb 1-1: SerialNumber: syz [ 516.515060][T17258] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 516.547721][T17258] bond1 (unregistering): Released all slaves [ 516.593280][T17263] xt_SECMARK: invalid mode: 9 [ 516.718368][T17244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.728264][T17244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.571896][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3406'. [ 517.835599][T17304] fuse: Bad value for 'rootmode' [ 518.655252][ T5673] cdc_ether 1-1:1.0: Descriptor too short [ 518.686097][ T5673] usb 1-1: USB disconnect, device number 26 [ 518.738553][T17343] fuse: Bad value for 'fd' [ 518.816046][T17347] fuse: Bad value for 'fd' [ 518.863759][T17349] usb usb7: usbfs: process 17349 (syz.1.3416) did not claim interface 0 before use [ 519.439975][T17382] FAULT_INJECTION: forcing a failure. [ 519.439975][T17382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.453231][T17382] CPU: 1 UID: 0 PID: 17382 Comm: syz.1.3421 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.453256][T17382] Tainted: [L]=SOFTLOCKUP [ 519.453262][T17382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.453272][T17382] Call Trace: [ 519.453279][T17382] [ 519.453286][T17382] dump_stack_lvl+0xe8/0x150 [ 519.453308][T17382] should_fail_ex+0x40c/0x560 [ 519.453333][T17382] _copy_from_iter+0x3b0/0x1660 [ 519.453355][T17382] ? __pfx__copy_from_iter+0x10/0x10 [ 519.453375][T17382] ? skb_put+0x112/0x210 [ 519.453386][T17382] raw_send_hdrinc+0x8cc/0x1420 [ 519.453400][T17382] ? __pfx_raw_send_hdrinc+0x10/0x10 [ 519.453411][T17382] raw_sendmsg+0x136c/0x1a20 [ 519.453424][T17382] ? __pfx_raw_sendmsg+0x10/0x10 [ 519.453435][T17382] ? rcu_is_watching+0x15/0xb0 [ 519.453446][T17382] ? aa_sk_perm+0x6d5/0x900 [ 519.453460][T17382] ? __pfx_aa_sk_perm+0x10/0x10 [ 519.453472][T17382] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 519.453483][T17382] ? sock_rps_record_flow+0x19/0x350 [ 519.453494][T17382] ? inet_sendmsg+0x298/0x320 [ 519.453504][T17382] ? __pfx_inet_sendmsg+0x10/0x10 [ 519.453514][T17382] ____sys_sendmsg+0x853/0xa20 [ 519.453525][T17382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.453536][T17382] ? import_iovec+0x73/0xa0 [ 519.453547][T17382] ___sys_sendmsg+0x2a5/0x360 [ 519.453556][T17382] ? rcu_is_watching+0x15/0xb0 [ 519.453564][T17382] ? get_pid_task+0x20/0x1f0 [ 519.453573][T17382] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.453583][T17382] ? rcu_is_watching+0x15/0xb0 [ 519.453597][T17382] ? __fget_files+0x2a/0x420 [ 519.453607][T17382] ? __fget_files+0x3a2/0x420 [ 519.453619][T17382] __x64_sys_sendmsg+0x1b1/0x290 [ 519.453628][T17382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.453640][T17382] ? rcu_is_watching+0x15/0xb0 [ 519.453649][T17382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.453659][T17382] do_syscall_64+0x174/0x580 [ 519.453670][T17382] ? clear_bhb_loop+0x40/0x90 [ 519.453680][T17382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.453689][T17382] RIP: 0033:0x7f89be99ce59 [ 519.453698][T17382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.453706][T17382] RSP: 002b:00007f89bcbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.453717][T17382] RAX: ffffffffffffffda RBX: 00007f89bec15fa0 RCX: 00007f89be99ce59 [ 519.453724][T17382] RDX: 000000000400c804 RSI: 00002000000001c0 RDI: 0000000000000004 [ 519.453730][T17382] RBP: 00007f89bcbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 519.453736][T17382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.453742][T17382] R13: 00007f89bec16038 R14: 00007f89bec15fa0 R15: 00007f89bed3fa48 [ 519.453752][T17382] [ 519.583298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 519.953866][ T9233] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 520.126349][ T9233] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 520.126388][ T9233] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 520.126411][ T9233] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.126430][ T9233] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 520.126452][ T9233] usb 2-1: config 0 interface 0 has no altsetting 0 [ 520.126478][ T9233] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 520.126499][ T9233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.127786][ T9233] usb 2-1: config 0 descriptor?? [ 521.832040][T17412] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 521.838590][T17412] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 521.852166][T17412] vhci_hcd vhci_hcd.0: Device attached [ 521.860348][ T9233] usbhid 2-1:0.0: can't add hid device: -71 [ 521.866520][ T9233] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 521.877905][ T9233] usb 2-1: USB disconnect, device number 106 [ 521.892650][T17417] vhci_hcd: connection closed [ 521.894418][ T7907] vhci_hcd vhci_hcd.4: stop threads [ 521.905116][ T7907] vhci_hcd vhci_hcd.4: release socket [ 521.911229][ T7907] vhci_hcd vhci_hcd.4: disconnect device [ 522.007299][T17422] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3430'. [ 522.467893][T17441] IPv6: NLM_F_CREATE should be specified when creating new route [ 522.502154][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3434'. [ 522.613725][ T9218] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 522.783600][ T9218] usb 1-1: Using ep0 maxpacket: 32 [ 522.792478][ T9218] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 522.804766][ T9218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.815171][ T9218] usb 1-1: Product: syz [ 522.823899][ T9218] usb 1-1: Manufacturer: syz [ 522.829110][ T9218] usb 1-1: SerialNumber: syz [ 522.852860][ T9218] usb 1-1: config 0 descriptor?? [ 522.873078][ T9218] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 522.882588][ T9218] dvb-usb: bulk message failed: -22 (2/0) [ 522.890161][ T9218] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 522.902822][ T9218] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 522.912495][ T9218] usb 1-1: media controller created [ 522.936312][ T9218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.976111][ T9218] usb 1-1: selecting invalid altsetting 7 [ 522.987884][ T9218] cxusb: set interface failed [ 523.024268][ T9218] dvb-usb: bulk message failed: -22 (1/0) [ 523.105702][ T9218] DVB: Unable to find symbol lgdt330x_attach() [ 523.112612][ T9218] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 523.233254][ T9218] rc_core: IR keymap rc-dvico-portable not found [ 523.258951][ T9218] Registered IR keymap rc-empty [ 523.284771][ T9218] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 523.305881][ T9218] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input68 [ 523.331198][ T9218] dvb-usb: schedule remote query interval to 100 msecs. [ 523.347037][ T9218] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 523.440892][ T9218] usb 1-1: USB disconnect, device number 27 [ 523.521957][ T9218] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 523.673015][T17473] FAULT_INJECTION: forcing a failure. [ 523.673015][T17473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.731405][T17473] CPU: 1 UID: 0 PID: 17473 Comm: syz.1.3445 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.731422][T17473] Tainted: [L]=SOFTLOCKUP [ 523.731426][T17473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.731441][T17473] Call Trace: [ 523.731446][T17473] [ 523.731450][T17473] dump_stack_lvl+0xe8/0x150 [ 523.731466][T17473] should_fail_ex+0x40c/0x560 [ 523.731482][T17473] _copy_from_user+0x2d/0xb0 [ 523.731494][T17473] restore_altstack+0xae/0x4f0 [ 523.731504][T17473] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 523.731524][T17473] ? __pfx_restore_altstack+0x10/0x10 [ 523.731533][T17473] ? rcu_is_watching+0x15/0xb0 [ 523.731542][T17473] ? trace_irq_enable+0x3b/0x140 [ 523.731555][T17473] __ia32_sys_rt_sigreturn+0x2bd/0x8c0 [ 523.731571][T17473] ? trace_irq_enable+0x3b/0x140 [ 523.731586][T17473] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 523.731605][T17473] ? _raw_spin_unlock_irq+0x2e/0x50 [ 523.731623][T17473] ? signal_setup_done+0x22f/0x310 [ 523.731636][T17473] ? arch_do_signal_or_restart+0x4f4/0x860 [ 523.731649][T17473] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 523.731662][T17473] ? __task_pid_nr_ns+0x28/0x470 [ 523.731671][T17473] ? rcu_is_watching+0x15/0xb0 [ 523.731681][T17473] ? rcu_is_watching+0x15/0xb0 [ 523.731690][T17473] ? lock_release+0x4b/0x3c0 [ 523.731703][T17473] ? rcu_is_watching+0x15/0xb0 [ 523.731712][T17473] ? rcu_is_watching+0x15/0xb0 [ 523.731721][T17473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.731731][T17473] do_syscall_64+0x174/0x580 [ 523.731741][T17473] ? clear_bhb_loop+0x40/0x90 [ 523.731751][T17473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.731760][T17473] RIP: 0033:0x7f89be93e1d9 [ 523.731769][T17473] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 523.731777][T17473] RSP: 002b:00007f89bcbf5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 523.731789][T17473] RAX: ffffffffffffffda RBX: 00007f89bec15fa0 RCX: 00007f89be93e1d9 [ 523.731796][T17473] RDX: 00007f89bcbf5a80 RSI: 00007f89bcbf5bb0 RDI: 0000000000000021 [ 523.731802][T17473] RBP: 00007f89bcbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 523.731808][T17473] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 523.731814][T17473] R13: 00007f89bec16038 R14: 00007f89bec15fa0 R15: 00007f89bed3fa48 [ 523.731824][T17473] [ 524.094756][T17480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3447'. [ 524.412943][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3451'. [ 524.438866][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3451'. [ 524.515813][ T9233] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 524.693212][ T9233] usb 2-1: Using ep0 maxpacket: 32 [ 524.708124][ T9233] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 524.713222][T17309] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 524.726943][ T9233] usb 2-1: config 0 has no interface number 0 [ 524.740781][ T9233] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.766353][ T9233] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.788270][ T9233] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 524.813795][ T9233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.825214][T17502] vivid-000: ================= START STATUS ================= [ 524.837205][T17502] vivid-000: ================== END STATUS ================== [ 524.851858][ T9233] usb 2-1: config 0 descriptor?? [ 524.973218][T17309] usb 1-1: device descriptor read/64, error -71 [ 525.213257][T17309] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 525.343397][T17309] usb 1-1: device descriptor read/64, error -71 [ 525.463561][T17309] usb usb1-port1: attempt power cycle [ 525.843747][T17309] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 525.895094][T17309] usb 1-1: device descriptor read/8, error -71 [ 526.007651][T17509] FAULT_INJECTION: forcing a failure. [ 526.007651][T17509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.038631][T17509] CPU: 0 UID: 0 PID: 17509 Comm: syz.7.3455 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.038659][T17509] Tainted: [L]=SOFTLOCKUP [ 526.038665][T17509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 526.038675][T17509] Call Trace: [ 526.038682][T17509] [ 526.038689][T17509] dump_stack_lvl+0xe8/0x150 [ 526.038712][T17509] should_fail_ex+0x40c/0x560 [ 526.038737][T17509] _copy_to_user+0x31/0xb0 [ 526.038752][T17509] simple_read_from_buffer+0xe1/0x170 [ 526.038765][T17509] proc_fail_nth_read+0x1bb/0x230 [ 526.038780][T17509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 526.038799][T17509] ? rw_verify_area+0x24a/0x4c0 [ 526.038821][T17509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 526.038839][T17509] vfs_read+0x213/0xa80 [ 526.038860][T17509] ? __pfx___mutex_lock+0x10/0x10 [ 526.038873][T17509] ? __pfx_vfs_read+0x10/0x10 [ 526.038886][T17509] ? __fget_files+0x3a2/0x420 [ 526.038896][T17509] ? __fget_files+0x2a/0x420 [ 526.038907][T17509] ksys_read+0x150/0x270 [ 526.038919][T17509] ? __pfx_ksys_read+0x10/0x10 [ 526.038933][T17509] ? rcu_is_watching+0x15/0xb0 [ 526.038951][T17509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.038968][T17509] do_syscall_64+0x174/0x580 [ 526.038984][T17509] ? trace_irq_disable+0x3b/0x140 [ 526.039005][T17509] ? clear_bhb_loop+0x40/0x90 [ 526.039019][T17509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.039028][T17509] RIP: 0033:0x7f59a935d68e [ 526.039037][T17509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 526.039046][T17509] RSP: 002b:00007f59aa17cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 526.039057][T17509] RAX: ffffffffffffffda RBX: 00007f59aa17d6c0 RCX: 00007f59a935d68e [ 526.039064][T17509] RDX: 000000000000000f RSI: 00007f59aa17d0a0 RDI: 0000000000000004 [ 526.039072][T17509] RBP: 00007f59aa17d090 R08: 0000000000000000 R09: 0000000000000000 [ 526.039081][T17509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.039091][T17509] R13: 00007f59a9616038 R14: 00007f59a9615fa0 R15: 00007f59a973fa48 [ 526.039109][T17509] [ 526.313422][T17309] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 526.330876][T17514] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3454'. [ 526.340269][T17309] usb 1-1: device descriptor read/8, error -71 [ 526.349028][T17512] FAULT_INJECTION: forcing a failure. [ 526.349028][T17512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.363107][T17512] CPU: 0 UID: 0 PID: 17512 Comm: syz.7.3456 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.363133][T17512] Tainted: [L]=SOFTLOCKUP [ 526.363143][T17512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 526.363152][T17512] Call Trace: [ 526.363159][T17512] [ 526.363165][T17512] dump_stack_lvl+0xe8/0x150 [ 526.363187][T17512] should_fail_ex+0x40c/0x560 [ 526.363211][T17512] _copy_from_iter+0x3b0/0x1660 [ 526.363232][T17512] ? __pfx__copy_from_iter+0x10/0x10 [ 526.363249][T17512] ? ip_route_output_key_hash+0xd8/0x2a0 [ 526.363266][T17512] ? rcu_is_watching+0x15/0xb0 [ 526.363282][T17512] ? ip_route_output_key_hash+0xd8/0x2a0 [ 526.363299][T17512] ? skb_put+0x112/0x210 [ 526.363313][T17512] raw_send_hdrinc+0x8cc/0x1420 [ 526.363337][T17512] ? __pfx_raw_send_hdrinc+0x10/0x10 [ 526.363357][T17512] raw_sendmsg+0x136c/0x1a20 [ 526.363378][T17512] ? __pfx_raw_sendmsg+0x10/0x10 [ 526.363396][T17512] ? rcu_is_watching+0x15/0xb0 [ 526.363412][T17512] ? aa_sk_perm+0x6d5/0x900 [ 526.363435][T17512] ? __pfx_aa_sk_perm+0x10/0x10 [ 526.363455][T17512] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 526.363473][T17512] ? sock_rps_record_flow+0x19/0x350 [ 526.363492][T17512] ? inet_sendmsg+0x298/0x320 [ 526.363509][T17512] ? __pfx_inet_sendmsg+0x10/0x10 [ 526.363525][T17512] ____sys_sendmsg+0x853/0xa20 [ 526.363544][T17512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.363560][T17512] ? import_iovec+0x73/0xa0 [ 526.363580][T17512] ___sys_sendmsg+0x2a5/0x360 [ 526.363595][T17512] ? rcu_is_watching+0x15/0xb0 [ 526.363609][T17512] ? get_pid_task+0x20/0x1f0 [ 526.363624][T17512] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.363641][T17512] ? rcu_is_watching+0x15/0xb0 [ 526.363665][T17512] ? __fget_files+0x2a/0x420 [ 526.363682][T17512] ? __fget_files+0x3a2/0x420 [ 526.363701][T17512] __x64_sys_sendmsg+0x1b1/0x290 [ 526.363717][T17512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 526.363737][T17512] ? rcu_is_watching+0x15/0xb0 [ 526.363761][T17512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.363777][T17512] do_syscall_64+0x174/0x580 [ 526.363794][T17512] ? trace_irq_disable+0x3b/0x140 [ 526.363813][T17512] ? clear_bhb_loop+0x40/0x90 [ 526.363831][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.363846][T17512] RIP: 0033:0x7f59a939ce59 [ 526.363860][T17512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.363873][T17512] RSP: 002b:00007f59aa17d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.363890][T17512] RAX: ffffffffffffffda RBX: 00007f59a9615fa0 RCX: 00007f59a939ce59 [ 526.363902][T17512] RDX: 000000000400c804 RSI: 00002000000001c0 RDI: 0000000000000004 [ 526.363913][T17512] RBP: 00007f59aa17d090 R08: 0000000000000000 R09: 0000000000000000 [ 526.363922][T17512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.363931][T17512] R13: 00007f59a9616038 R14: 00007f59a9615fa0 R15: 00007f59a973fa48 [ 526.363945][T17512] [ 526.673468][T17309] usb usb1-port1: unable to enumerate USB device [ 526.801549][T17519] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3458'. [ 526.918186][T17523] macsec2: entered promiscuous mode [ 526.931026][T17523] macsec2: entered allmulticast mode [ 527.014733][T17526] FAULT_INJECTION: forcing a failure. [ 527.014733][T17526] name failslab, interval 1, probability 0, space 0, times 0 [ 527.017853][T17523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.036581][T17526] CPU: 0 UID: 0 PID: 17526 Comm: syz.6.3461 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.036605][T17526] Tainted: [L]=SOFTLOCKUP [ 527.036610][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.036620][T17526] Call Trace: [ 527.036626][T17526] [ 527.036633][T17526] dump_stack_lvl+0xe8/0x150 [ 527.036655][T17526] should_fail_ex+0x40c/0x560 [ 527.036681][T17526] should_failslab+0xa8/0x100 [ 527.036709][T17526] ? skb_clone+0x212/0x3a0 [ 527.036726][T17526] kmem_cache_alloc_noprof+0x87/0x650 [ 527.036748][T17526] skb_clone+0x212/0x3a0 [ 527.036765][T17526] __netlink_deliver_tap+0x413/0x860 [ 527.036783][T17526] ? netlink_deliver_tap+0x2e/0x1b0 [ 527.036798][T17526] netlink_deliver_tap+0x19c/0x1b0 [ 527.036813][T17526] netlink_unicast+0x77f/0x940 [ 527.036837][T17526] netlink_sendmsg+0x813/0xb40 [ 527.036855][T17526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.036872][T17526] ? aa_sock_msg_perm+0xf1/0x1b0 [ 527.036894][T17526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.036914][T17526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.036929][T17526] sock_sendmsg+0x3d9/0x430 [ 527.036950][T17526] ? __pfx_sock_sendmsg+0x10/0x10 [ 527.036972][T17526] ? __asan_memset+0x22/0x50 [ 527.036989][T17526] ? iov_iter_bvec+0xb8/0x180 [ 527.037007][T17526] splice_to_socket+0xb5e/0x12a0 [ 527.037034][T17526] ? __pfx_splice_to_socket+0x10/0x10 [ 527.037060][T17526] ? shmem_file_splice_read+0xa2b/0xb90 [ 527.037083][T17526] ? __raw_spin_lock_init+0x45/0x100 [ 527.037103][T17526] ? __pfx_splice_to_socket+0x10/0x10 [ 527.037121][T17526] direct_splice_actor+0x101/0x160 [ 527.037139][T17526] splice_direct_to_actor+0x57b/0xcb0 [ 527.037163][T17526] ? __pfx_direct_splice_actor+0x10/0x10 [ 527.037180][T17526] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 527.037202][T17526] do_splice_direct+0x195/0x290 [ 527.037221][T17526] ? __pfx_do_splice_direct+0x10/0x10 [ 527.037239][T17526] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 527.037259][T17526] ? bpf_lsm_file_permission+0x9/0x20 [ 527.037279][T17526] ? security_file_permission+0x75/0x260 [ 527.037299][T17526] ? rw_verify_area+0x203/0x4c0 [ 527.037319][T17526] do_sendfile+0x52e/0x7c0 [ 527.037337][T17526] ? __pfx_do_sendfile+0x10/0x10 [ 527.037353][T17526] ? __fget_files+0x3a2/0x420 [ 527.037373][T17526] __se_sys_sendfile64+0x144/0x1a0 [ 527.037389][T17526] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 527.037406][T17526] ? rcu_is_watching+0x15/0xb0 [ 527.037422][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.037436][T17526] do_syscall_64+0x174/0x580 [ 527.037450][T17526] ? trace_irq_disable+0x3b/0x140 [ 527.037468][T17526] ? clear_bhb_loop+0x40/0x90 [ 527.037484][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.037500][T17526] RIP: 0033:0x7f74b379ce59 [ 527.037513][T17526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.037526][T17526] RSP: 002b:00007f74b19f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 527.037543][T17526] RAX: ffffffffffffffda RBX: 00007f74b3a15fa0 RCX: 00007f74b379ce59 [ 527.037554][T17526] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000011 [ 527.037564][T17526] RBP: 00007f74b19f6090 R08: 0000000000000000 R09: 0000000000000000 [ 527.037575][T17526] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.037585][T17526] R13: 00007f74b3a16038 R14: 00007f74b3a15fa0 R15: 00007f74b3b3fa48 [ 527.037603][T17526] [ 527.041103][T17523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.406287][T17523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.417047][T17523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.426346][T17528] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3462'. [ 527.437098][ T9233] usbhid 2-1:0.1: can't add hid device: -71 [ 527.455141][ T9233] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 527.473061][ T9233] usb 2-1: USB disconnect, device number 107 [ 527.570921][T17536] FAULT_INJECTION: forcing a failure. [ 527.570921][T17536] name failslab, interval 1, probability 0, space 0, times 0 [ 527.583723][T17536] CPU: 1 UID: 0 PID: 17536 Comm: syz.1.3466 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.583748][T17536] Tainted: [L]=SOFTLOCKUP [ 527.583754][T17536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.583763][T17536] Call Trace: [ 527.583770][T17536] [ 527.583777][T17536] dump_stack_lvl+0xe8/0x150 [ 527.583799][T17536] should_fail_ex+0x40c/0x560 [ 527.583824][T17536] should_failslab+0xa8/0x100 [ 527.583847][T17536] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 527.583867][T17536] ? rcu_is_watching+0x15/0xb0 [ 527.583884][T17536] ? __alloc_skb+0x1d7/0x7a0 [ 527.583905][T17536] ? trace_irq_enable+0x3b/0x140 [ 527.583927][T17536] __alloc_skb+0x1d7/0x7a0 [ 527.583950][T17536] netlink_ack+0x136/0xb30 [ 527.583971][T17536] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 527.583992][T17536] ? ref_tracker_free+0x689/0x830 [ 527.584009][T17536] ? __pfx_ref_tracker_free+0x10/0x10 [ 527.584029][T17536] netlink_rcv_skb+0x2a4/0x4a0 [ 527.584050][T17536] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 527.584073][T17536] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 527.584096][T17536] ? netlink_deliver_tap+0x2e/0x1b0 [ 527.584112][T17536] netlink_unicast+0x7bb/0x940 [ 527.584136][T17536] netlink_sendmsg+0x813/0xb40 [ 527.584162][T17536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.584178][T17536] ? aa_sock_msg_perm+0xf1/0x1b0 [ 527.584200][T17536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.584218][T17536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.584232][T17536] ____sys_sendmsg+0x9b9/0xa20 [ 527.584250][T17536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.584266][T17536] ? lock_release+0x4b/0x3c0 [ 527.584288][T17536] ? import_iovec+0x73/0xa0 [ 527.584306][T17536] ___sys_sendmsg+0x2a5/0x360 [ 527.584321][T17536] ? rcu_is_watching+0x15/0xb0 [ 527.584335][T17536] ? get_pid_task+0x20/0x1f0 [ 527.584351][T17536] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.584367][T17536] ? rcu_is_watching+0x15/0xb0 [ 527.584389][T17536] ? __fget_files+0x2a/0x420 [ 527.584406][T17536] ? __fget_files+0x3a2/0x420 [ 527.584425][T17536] __x64_sys_sendmsg+0x1b1/0x290 [ 527.584442][T17536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.584463][T17536] ? rcu_is_watching+0x15/0xb0 [ 527.584478][T17536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.584495][T17536] do_syscall_64+0x174/0x580 [ 527.584512][T17536] ? trace_irq_disable+0x3b/0x140 [ 527.584532][T17536] ? clear_bhb_loop+0x40/0x90 [ 527.584550][T17536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.584566][T17536] RIP: 0033:0x7f89be99ce59 [ 527.584581][T17536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.584595][T17536] RSP: 002b:00007f89bcbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.584614][T17536] RAX: ffffffffffffffda RBX: 00007f89bec15fa0 RCX: 00007f89be99ce59 [ 527.584627][T17536] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 527.584637][T17536] RBP: 00007f89bcbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 527.584648][T17536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.584657][T17536] R13: 00007f89bec16038 R14: 00007f89bec15fa0 R15: 00007f89bed3fa48 [ 527.584680][T17536] [ 527.935483][T17540] loop8: detected capacity change from 0 to 7 [ 527.951476][T17540] Dev loop8: unable to read RDB block 7 [ 527.962412][T17540] loop8: unable to read partition table [ 527.977104][T17540] loop8: partition table beyond EOD, truncated [ 527.984075][T17540] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 528.049237][T17546] netlink: 'syz.6.3471': attribute type 4 has an invalid length. [ 528.103470][T17550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3473'. [ 528.116687][T17550] netlink: 'syz.1.3473': attribute type 1 has an invalid length. [ 528.133765][T17550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.147901][T17550] bond1: (slave geneve2): making interface the new active one [ 528.156232][T17550] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 529.275381][T17555] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 529.289218][T17558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3475'. [ 529.290471][T17559] input: syz1 as /devices/virtual/input/input71 [ 529.438077][T17569] binder: 17552:17569 ioctl c0207511 200000000140 returned -22 [ 529.462576][T17558] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3475'. [ 529.472725][T17562] netlink: 'syz.6.3478': attribute type 39 has an invalid length. [ 529.525633][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3478'. [ 529.572154][T17559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 529.833254][T17582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3484'. [ 530.571669][T17611] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3491'. [ 531.332420][T17623] bond2: (slave bond_slave_1): Device is not our slave [ 531.359378][T17623] bond2: option active_slave: invalid value (bond_slave_1) [ 531.401064][T17623] bond2 (unregistering): Released all slaves [ 531.850887][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3502'. [ 531.861240][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3502'. [ 531.870826][T17636] netlink: 'syz.0.3502': attribute type 12 has an invalid length. [ 531.878925][T17636] netlink: 'syz.0.3502': attribute type 14 has an invalid length. [ 531.887177][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3501'. [ 531.893221][ T9243] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 532.053233][ T9243] usb 2-1: Using ep0 maxpacket: 32 [ 532.086162][T17642] ÿ: renamed from dummy0 [ 532.113692][ T9243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.143283][T17309] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 532.163470][ T9243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.202883][ T9243] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 532.237908][ T9243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.259556][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 532.268903][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 532.278046][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 532.287587][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 532.296990][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 532.315730][ T9243] usb 2-1: config 0 descriptor?? [ 532.349551][T17309] usb 1-1: Using ep0 maxpacket: 8 [ 532.356255][ T9243] hub 2-1:0.0: USB hub found [ 532.365168][T17309] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.439561][T17309] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 532.452671][T17309] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 532.463328][T17309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.472867][T17309] usb 1-1: config 0 descriptor?? [ 532.556044][ T9243] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 532.589725][T17309] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 532.618038][T17309] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 532.760733][ T9233] usb 1-1: USB disconnect, device number 32 [ 532.810586][T17665] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[13143] was attempted by ""[17665] [ 532.811610][ T7907] netdevsim netdevsim6 netdevsim1 (unregistering): left promiscuous mode [ 532.865113][ T7907] team0: Port device netdevsim1 removed [ 532.889888][T17667] __nla_validate_parse: 1 callbacks suppressed [ 532.889905][T17667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3509'. [ 532.905701][T17649] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.918862][T17649] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.927069][T17658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.942990][T17649] bridge_slave_0: entered allmulticast mode [ 532.951974][T17658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.961657][T17649] bridge_slave_0: entered promiscuous mode [ 532.971107][T17670] syz_tun: entered allmulticast mode [ 532.978194][T17649] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.992803][ T9243] hid-generic 0003:046D:C31C.001D: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 533.009327][T17649] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.017559][T17649] bridge_slave_1: entered allmulticast mode [ 533.032879][T17649] bridge_slave_1: entered promiscuous mode [ 533.054037][T17669] syz_tun: left allmulticast mode [ 533.077447][T17649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.109367][T17649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.159586][T17678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.174411][T17649] team0: Port device team_slave_0 added [ 533.180291][T17678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.190467][T17649] team0: Port device team_slave_1 added [ 533.202781][T17678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.224746][T17678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.247906][T17649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.255708][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3511'. [ 533.265087][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.265387][ T9233] usb 2-1: USB disconnect, device number 108 [ 533.302465][T17649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.383568][T17649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.391398][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.420267][T17649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.461175][T17688] netlink: 'syz.0.3514': attribute type 4 has an invalid length. [ 533.573543][T17649] hsr_slave_0: entered promiscuous mode [ 533.596979][T17649] hsr_slave_1: entered promiscuous mode [ 533.609422][T17649] debugfs: 'hsr0' already exists in 'hsr' [ 533.616034][T17649] Cannot create hsr debugfs directory [ 533.628268][ T7907] bridge_slave_1: left allmulticast mode [ 533.636256][ T7907] bridge_slave_1: left promiscuous mode [ 533.651138][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.660410][ T7907] bridge_slave_0: left allmulticast mode [ 533.670713][ T7907] bridge_slave_0: left promiscuous mode [ 533.677161][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.926236][ T7907] tipc: Disabling bearer [ 533.940225][T17696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3516'. [ 533.978646][T17696] FAULT_INJECTION: forcing a failure. [ 533.978646][T17696] name failslab, interval 1, probability 0, space 0, times 0 [ 534.051078][T17696] CPU: 1 UID: 0 PID: 17696 Comm: syz.4.3516 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.051107][T17696] Tainted: [L]=SOFTLOCKUP [ 534.051113][T17696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 534.051123][T17696] Call Trace: [ 534.051130][T17696] [ 534.051135][T17696] dump_stack_lvl+0xe8/0x150 [ 534.051150][T17696] should_fail_ex+0x40c/0x560 [ 534.051169][T17696] should_failslab+0xa8/0x100 [ 534.051185][T17696] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 534.051201][T17696] ? kobject_set_name_vargs+0x61/0x110 [ 534.051214][T17696] kvasprintf+0xeb/0x1a0 [ 534.051227][T17696] ? __pfx_kvasprintf+0x10/0x10 [ 534.051238][T17696] ? __raw_spin_lock_init+0x45/0x100 [ 534.051251][T17696] ? kvasprintf_const+0xe1/0x240 [ 534.051263][T17696] kobject_set_name_vargs+0x61/0x110 [ 534.051274][T17696] device_create+0x23d/0x300 [ 534.051286][T17696] ? timer_init_key+0x161/0x2c0 [ 534.051299][T17696] ? __pfx_device_create+0x10/0x10 [ 534.051308][T17696] ? ieee80211_roc_setup+0x119/0x1d0 [ 534.051323][T17696] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 534.051334][T17696] mac80211_hwsim_new_radio+0x401/0x5390 [ 534.051351][T17696] ? _printk+0xdd/0x130 [ 534.051363][T17696] ? __pfx__printk+0x10/0x10 [ 534.051375][T17696] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 534.051388][T17696] ? do_trace_netlink_extack+0x80/0x1d0 [ 534.051402][T17696] hwsim_new_radio_nl+0xf63/0x1c00 [ 534.051419][T17696] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 534.051433][T17696] ? rcu_is_watching+0x15/0xb0 [ 534.051443][T17696] ? trace_kmalloc+0x2a/0xf0 [ 534.051455][T17696] ? __nla_parse+0x40/0x60 [ 534.051466][T17696] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 534.051477][T17696] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 534.051490][T17696] genl_family_rcv_msg_doit+0x233/0x340 [ 534.051502][T17696] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 534.051516][T17696] ? bpf_lsm_capable+0x9/0x20 [ 534.051524][T17696] ? security_capable+0x7e/0x2c0 [ 534.051539][T17696] genl_rcv_msg+0x614/0x7a0 [ 534.051550][T17696] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.051560][T17696] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 534.051573][T17696] ? __netlink_lookup+0xc6/0x8b0 [ 534.051582][T17696] ? rcu_is_watching+0x15/0xb0 [ 534.051592][T17696] netlink_rcv_skb+0x226/0x4a0 [ 534.051606][T17696] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.051616][T17696] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.051632][T17696] ? down_read+0x2be/0x330 [ 534.051642][T17696] genl_rcv+0x28/0x40 [ 534.051652][T17696] netlink_unicast+0x7bb/0x940 [ 534.051668][T17696] netlink_sendmsg+0x813/0xb40 [ 534.051692][T17696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.051708][T17696] ? aa_sock_msg_perm+0xf1/0x1b0 [ 534.051732][T17696] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.051749][T17696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.051758][T17696] ____sys_sendmsg+0x9b9/0xa20 [ 534.051770][T17696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.051779][T17696] ? lock_release+0x4b/0x3c0 [ 534.051793][T17696] ? import_iovec+0x73/0xa0 [ 534.051805][T17696] ___sys_sendmsg+0x2a5/0x360 [ 534.051813][T17696] ? rcu_is_watching+0x15/0xb0 [ 534.051822][T17696] ? get_pid_task+0x20/0x1f0 [ 534.051831][T17696] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.051840][T17696] ? rcu_is_watching+0x15/0xb0 [ 534.051854][T17696] ? __fget_files+0x2a/0x420 [ 534.051864][T17696] ? __fget_files+0x3a2/0x420 [ 534.051875][T17696] __x64_sys_sendmsg+0x1b1/0x290 [ 534.051885][T17696] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.051896][T17696] ? rcu_is_watching+0x15/0xb0 [ 534.051905][T17696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.051914][T17696] do_syscall_64+0x174/0x580 [ 534.051923][T17696] ? trace_irq_disable+0x3b/0x140 [ 534.051935][T17696] ? clear_bhb_loop+0x40/0x90 [ 534.051946][T17696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.051955][T17696] RIP: 0033:0x7f0b5c99ce59 [ 534.051964][T17696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.051972][T17696] RSP: 002b:00007f0b5d7b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.051983][T17696] RAX: ffffffffffffffda RBX: 00007f0b5cc15fa0 RCX: 00007f0b5c99ce59 [ 534.051990][T17696] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 534.051997][T17696] RBP: 00007f0b5d7b1090 R08: 0000000000000000 R09: 0000000000000000 [ 534.052003][T17696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 534.052009][T17696] R13: 00007f0b5cc16038 R14: 00007f0b5cc15fa0 R15: 00007f0b5cd3fa48 [ 534.052018][T17696] [ 534.604436][ T5625] Bluetooth: hci4: command tx timeout [ 534.713077][ T7907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.725957][ T7907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.762336][ T7907] bond0 (unregistering): (slave team0): Releasing backup interface [ 534.813547][ T7907] bond0 (unregistering): Released all slaves [ 534.828338][ T7907] bond1 (unregistering): Released all slaves [ 534.855718][T17714] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3523'. [ 534.874216][T17714] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3523'. [ 534.903272][T17714] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 534.920545][ T7907] tipc: Disabling bearer [ 534.931314][ T7907] tipc: Left network mode [ 534.943806][T17716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.997038][T17716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.015836][ T9218] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 535.190466][ T9218] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 535.212561][T17726] netlink: 'syz.4.3526': attribute type 1 has an invalid length. [ 535.217746][ T9218] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 535.245916][ T9218] usb 2-1: Product: syz [ 535.258284][ T9218] usb 2-1: SerialNumber: syz [ 535.266146][ T9218] usb 2-1: config 0 descriptor?? [ 535.472574][T17745] netlink: 'syz.4.3529': attribute type 1 has an invalid length. [ 535.487215][ T9218] hso 2-1:0.0: Failed to find BULK eps [ 535.509921][ T9218] usb 2-1: USB disconnect, device number 109 [ 535.516982][T17745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.549811][T17745] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 535.562880][T17745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.584088][T17745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.592502][T17746] netlink: 'syz.4.3529': attribute type 10 has an invalid length. [ 535.600488][T17747] netlink: 'syz.4.3529': attribute type 10 has an invalid length. [ 535.609335][T17746] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3529'. [ 535.620265][T17747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3529'. [ 535.674505][T17746] ÿ: entered promiscuous mode [ 535.698573][T17649] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 535.732246][T17649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 535.754326][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3531'. [ 535.771913][T17761] FAULT_INJECTION: forcing a failure. [ 535.771913][T17761] name failslab, interval 1, probability 0, space 0, times 0 [ 535.785503][T17761] CPU: 0 UID: 0 PID: 17761 Comm: syz.7.3531 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.785525][T17761] Tainted: [L]=SOFTLOCKUP [ 535.785531][T17761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.785540][T17761] Call Trace: [ 535.785546][T17761] [ 535.785552][T17761] dump_stack_lvl+0xe8/0x150 [ 535.785581][T17761] should_fail_ex+0x40c/0x560 [ 535.785606][T17761] should_failslab+0xa8/0x100 [ 535.785628][T17761] __kvmalloc_node_noprof+0x16e/0x890 [ 535.785649][T17761] ? __rhashtable_init_noprof+0x545/0xaf0 [ 535.785667][T17761] ? __rhashtable_init_noprof+0x129/0xaf0 [ 535.785684][T17761] __rhashtable_init_noprof+0x545/0xaf0 [ 535.785699][T17761] __rhltable_init_noprof+0x26/0x70 [ 535.785714][T17761] sta_info_init+0x62/0x130 [ 535.785734][T17761] ieee80211_alloc_hw_nm+0x808/0x1ec0 [ 535.785749][T17761] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 535.785772][T17761] mac80211_hwsim_new_radio+0x1ea/0x5390 [ 535.785796][T17761] ? _printk+0xdd/0x130 [ 535.785817][T17761] ? __pfx__printk+0x10/0x10 [ 535.785844][T17761] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 535.785866][T17761] ? do_trace_netlink_extack+0x80/0x1d0 [ 535.785888][T17761] hwsim_new_radio_nl+0xf63/0x1c00 [ 535.785916][T17761] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 535.785940][T17761] ? rcu_is_watching+0x15/0xb0 [ 535.785956][T17761] ? trace_kmalloc+0x2a/0xf0 [ 535.785976][T17761] ? __nla_parse+0x40/0x60 [ 535.785993][T17761] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 535.786013][T17761] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 535.786035][T17761] genl_family_rcv_msg_doit+0x233/0x340 [ 535.786055][T17761] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 535.786077][T17761] ? bpf_lsm_capable+0x9/0x20 [ 535.786089][T17761] ? security_capable+0x7e/0x2c0 [ 535.786109][T17761] genl_rcv_msg+0x614/0x7a0 [ 535.786128][T17761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.786145][T17761] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 535.786166][T17761] ? __netlink_lookup+0xc6/0x8b0 [ 535.786180][T17761] ? rcu_is_watching+0x15/0xb0 [ 535.786198][T17761] netlink_rcv_skb+0x226/0x4a0 [ 535.786218][T17761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.786235][T17761] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.786260][T17761] ? down_read+0x2be/0x330 [ 535.786274][T17761] genl_rcv+0x28/0x40 [ 535.786286][T17761] netlink_unicast+0x7bb/0x940 [ 535.786304][T17761] netlink_sendmsg+0x813/0xb40 [ 535.786319][T17761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.786334][T17761] ? aa_sock_msg_perm+0xf1/0x1b0 [ 535.786355][T17761] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 535.786374][T17761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.786389][T17761] ____sys_sendmsg+0x9b9/0xa20 [ 535.786409][T17761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.786425][T17761] ? lock_release+0x4b/0x3c0 [ 535.786448][T17761] ? import_iovec+0x73/0xa0 [ 535.786467][T17761] ___sys_sendmsg+0x2a5/0x360 [ 535.786482][T17761] ? rcu_is_watching+0x15/0xb0 [ 535.786497][T17761] ? get_pid_task+0x20/0x1f0 [ 535.786513][T17761] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.786530][T17761] ? rcu_is_watching+0x15/0xb0 [ 535.786555][T17761] ? __fget_files+0x2a/0x420 [ 535.786579][T17761] ? __fget_files+0x3a2/0x420 [ 535.786600][T17761] __x64_sys_sendmsg+0x1b1/0x290 [ 535.786616][T17761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.786636][T17761] ? rcu_is_watching+0x15/0xb0 [ 535.786653][T17761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.786670][T17761] do_syscall_64+0x174/0x580 [ 535.786685][T17761] ? trace_irq_disable+0x3b/0x140 [ 535.786705][T17761] ? clear_bhb_loop+0x40/0x90 [ 535.786722][T17761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.786738][T17761] RIP: 0033:0x7f59a939ce59 [ 535.786753][T17761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.786767][T17761] RSP: 002b:00007f59aa17d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.786785][T17761] RAX: ffffffffffffffda RBX: 00007f59a9615fa0 RCX: 00007f59a939ce59 [ 535.786796][T17761] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 535.786807][T17761] RBP: 00007f59aa17d090 R08: 0000000000000000 R09: 0000000000000000 [ 535.786817][T17761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.786828][T17761] R13: 00007f59a9616038 R14: 00007f59a9615fa0 R15: 00007f59a973fa48 [ 535.786846][T17761] [ 536.236660][T17649] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 536.252384][T17649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 536.260048][T17649] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 536.268104][T17649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 536.275981][T17649] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 536.287373][T17649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 536.301885][ T7907] hsr_slave_0: left promiscuous mode [ 536.307708][ T7907] hsr_slave_1: left promiscuous mode [ 536.313519][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.320992][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.331586][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.340213][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.463051][ T7907] team_slave_1 (unregistering): left promiscuous mode [ 536.471831][ T7907] team0 (unregistering): Port device team_slave_1 removed [ 536.486868][ T7907] team_slave_0 (unregistering): left promiscuous mode [ 536.496710][ T7907] team0 (unregistering): Port device team_slave_0 removed [ 536.558152][T17774] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 536.586852][T17765] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 536.627370][T17765] bond1 (unregistering): Released all slaves [ 536.673227][ T5625] Bluetooth: hci4: command tx timeout [ 536.686776][T17779] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3534'. [ 536.743762][T17779] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 536.893087][T17649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.903134][T17649] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.918331][T15475] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.925495][T15475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.936148][T15475] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.936210][T15475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.064100][T17649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.171452][T17649] veth0_vlan: entered promiscuous mode [ 537.207841][T17649] veth1_vlan: entered promiscuous mode [ 537.278663][T17649] veth0_macvtap: entered promiscuous mode [ 537.316866][T17649] veth1_macvtap: entered promiscuous mode [ 537.368694][T17649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.414742][T17804] loop8: detected capacity change from 0 to 8 [ 537.416833][T17649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.422728][T17802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.452245][T17804] Dev loop8: unable to read RDB block 8 [ 537.462928][T17804] loop8: unable to read partition table [ 537.469047][T17802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.480359][T17804] loop8: partition table beyond EOD, truncated [ 537.491138][ T7907] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.495376][T17804] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 537.550197][ T7907] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.558886][T17809] netlink: 'syz.0.3541': attribute type 11 has an invalid length. [ 537.604885][ T7907] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.652336][ T7907] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.672516][T17811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.705291][T17811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.766655][T17813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3543'. [ 537.776129][ T7907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.818740][ T7907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.957118][T15477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.982520][T15477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.098059][T17832] FAULT_INJECTION: forcing a failure. [ 538.098059][T17832] name failslab, interval 1, probability 0, space 0, times 0 [ 538.112200][T17832] CPU: 1 UID: 0 PID: 17832 Comm: syz.6.3503 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.112225][T17832] Tainted: [L]=SOFTLOCKUP [ 538.112231][T17832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 538.112240][T17832] Call Trace: [ 538.112247][T17832] [ 538.112254][T17832] dump_stack_lvl+0xe8/0x150 [ 538.112274][T17832] should_fail_ex+0x40c/0x560 [ 538.112298][T17832] should_failslab+0xa8/0x100 [ 538.112321][T17832] __kmalloc_cache_noprof+0x88/0x660 [ 538.112341][T17832] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 538.112361][T17832] ? genl_start+0x1c9/0x6d0 [ 538.112377][T17832] genl_start+0x1c9/0x6d0 [ 538.112403][T17832] __netlink_dump_start+0x442/0x7b0 [ 538.112426][T17832] genl_family_rcv_msg_dumpit+0x213/0x310 [ 538.112446][T17832] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 538.112468][T17832] ? __pfx_genl_start+0x10/0x10 [ 538.112484][T17832] ? __pfx_genl_dumpit+0x10/0x10 [ 538.112500][T17832] ? __pfx_genl_done+0x10/0x10 [ 538.112517][T17832] ? bpf_lsm_capable+0x9/0x20 [ 538.112531][T17832] ? security_capable+0x7e/0x2c0 [ 538.112553][T17832] genl_rcv_msg+0x5e1/0x7a0 [ 538.112571][T17832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.112588][T17832] ? ref_tracker_free+0x689/0x830 [ 538.112603][T17832] ? __pfx_batadv_mcast_flags_dump+0x10/0x10 [ 538.112624][T17832] ? __pfx_ref_tracker_free+0x10/0x10 [ 538.112643][T17832] netlink_rcv_skb+0x226/0x4a0 [ 538.112665][T17832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.112683][T17832] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 538.112710][T17832] ? down_read+0x2be/0x330 [ 538.112728][T17832] genl_rcv+0x28/0x40 [ 538.112744][T17832] netlink_unicast+0x7bb/0x940 [ 538.112768][T17832] netlink_sendmsg+0x813/0xb40 [ 538.112786][T17832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.112803][T17832] ? aa_sock_msg_perm+0xf1/0x1b0 [ 538.112825][T17832] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 538.112844][T17832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.112859][T17832] sock_sendmsg+0x3d9/0x430 [ 538.112880][T17832] ? __pfx_sock_sendmsg+0x10/0x10 [ 538.112901][T17832] ? __asan_memset+0x22/0x50 [ 538.112917][T17832] ? iov_iter_bvec+0xb8/0x180 [ 538.112936][T17832] splice_to_socket+0xb5e/0x12a0 [ 538.112963][T17832] ? __pfx_splice_to_socket+0x10/0x10 [ 538.112995][T17832] ? __raw_spin_lock_init+0x45/0x100 [ 538.113015][T17832] ? __pfx_splice_to_socket+0x10/0x10 [ 538.113033][T17832] direct_splice_actor+0x101/0x160 [ 538.113053][T17832] splice_direct_to_actor+0x57b/0xcb0 [ 538.113079][T17832] ? __pfx_direct_splice_actor+0x10/0x10 [ 538.113097][T17832] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 538.113115][T17832] ? __mutex_trylock_common+0x15f/0x270 [ 538.113140][T17832] do_splice_direct+0x195/0x290 [ 538.113158][T17832] ? __pfx_do_splice_direct+0x10/0x10 [ 538.113175][T17832] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 538.113195][T17832] ? bpf_lsm_file_permission+0x9/0x20 [ 538.113215][T17832] ? security_file_permission+0x75/0x260 [ 538.113235][T17832] ? rw_verify_area+0x203/0x4c0 [ 538.113256][T17832] do_sendfile+0x52e/0x7c0 [ 538.113274][T17832] ? __pfx_do_sendfile+0x10/0x10 [ 538.113290][T17832] ? __fget_files+0x3a2/0x420 [ 538.113310][T17832] __se_sys_sendfile64+0x144/0x1a0 [ 538.113326][T17832] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 538.113341][T17832] ? rcu_is_watching+0x15/0xb0 [ 538.113358][T17832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.113374][T17832] do_syscall_64+0x174/0x580 [ 538.113396][T17832] ? trace_irq_disable+0x3b/0x140 [ 538.113416][T17832] ? clear_bhb_loop+0x40/0x90 [ 538.113434][T17832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.113450][T17832] RIP: 0033:0x7fe39039ce59 [ 538.113465][T17832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.113479][T17832] RSP: 002b:00007fe391340028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 538.113498][T17832] RAX: ffffffffffffffda RBX: 00007fe390615fa0 RCX: 00007fe39039ce59 [ 538.113510][T17832] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000011 [ 538.113520][T17832] RBP: 00007fe391340090 R08: 0000000000000000 R09: 0000000000000000 [ 538.113530][T17832] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.113541][T17832] R13: 00007fe390616038 R14: 00007fe390615fa0 R15: 00007fe39073fa48 [ 538.113559][T17832] [ 538.610320][T17840] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3553'. [ 538.612425][T17841] macvlan3: entered allmulticast mode [ 538.628155][T17841] bond0: entered allmulticast mode [ 538.635715][T17841] bond_slave_0: entered allmulticast mode [ 538.641535][T17841] bond_slave_1: entered allmulticast mode [ 538.647409][T17841] dummy0: entered allmulticast mode [ 538.654791][T17841] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 538.663315][T17841] team0: Port device macvlan3 added [ 538.739642][T17845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3555'. [ 538.760151][ T5625] Bluetooth: hci4: command tx timeout [ 538.870896][ T856] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 538.926779][T17860] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.935347][T17860] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3560'. [ 538.945210][T17860] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 539.018772][T17865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.035143][ T856] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.047008][ T29] kauditd_printk_skb: 1456 callbacks suppressed [ 539.047022][ T29] audit: type=1326 audit(1781608619.607:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17866 comm="syz.1.3564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89be99ce59 code=0x7ffc0000 [ 539.077969][T17865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.091951][ T856] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 539.105025][ T856] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 539.115106][ T856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.123412][ T29] audit: type=1326 audit(1781608619.607:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17866 comm="syz.1.3564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89be99ce59 code=0x7ffc0000 [ 539.150205][ T856] usb 1-1: config 0 descriptor?? [ 539.156502][ T29] audit: type=1326 audit(1781608619.607:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17866 comm="syz.1.3564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f89be99ce59 code=0x7ffc0000 [ 539.181538][ T29] audit: type=1326 audit(1781608619.627:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17866 comm="syz.1.3564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89be99ce59 code=0x7ffc0000 [ 539.209639][ T856] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 539.219196][ T856] dvb-usb: bulk message failed: -22 (3/0) [ 539.226638][ T856] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 539.235289][ T29] audit: type=1326 audit(1781608619.627:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.1.3564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f89be95d68e code=0x7ffc0000 [ 539.260712][ T856] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 539.268220][ T856] usb 1-1: media controller created [ 539.275232][ T856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.286441][ T856] dvb-usb: bulk message failed: -22 (6/0) [ 539.289187][T17872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.292302][ T856] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 539.308951][ T29] audit: type=1326 audit(1781608619.627:5528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17866 comm="syz.1.3564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89be99ce59 code=0x7ffc0000 [ 539.312588][T17872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.341106][ T29] audit: type=1326 audit(1781608619.667:5529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17866 comm="syz.1.3564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f89be99ce59 code=0x7ffc0000 [ 539.367716][ T29] audit: type=1326 audit(1781608619.667:5530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17866 comm="syz.1.3564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89be99ce59 code=0x7ffc0000 [ 539.368997][ T856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input72 [ 539.405397][ T29] audit: type=1326 audit(1781608619.667:5531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17866 comm="syz.1.3564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89be99ce59 code=0x7ffc0000 [ 539.433829][ T856] dvb-usb: schedule remote query interval to 150 msecs. [ 539.441268][ T29] audit: type=1326 audit(1781608619.667:5532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17866 comm="syz.1.3564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f89be99ce59 code=0x7ffc0000 [ 539.466690][ T856] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 539.478264][ T856] usb 1-1: USB disconnect, device number 33 [ 539.490716][ T856] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 539.672878][T17874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.681678][T17874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.771333][T17876] netlink: 'syz.6.3567': attribute type 1 has an invalid length. [ 539.779182][T17876] netlink: 'syz.6.3567': attribute type 2 has an invalid length. [ 539.787197][T17876] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3567'. [ 539.798039][T17876] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.806902][T17877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.819293][T17877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.973125][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3572'. [ 540.018039][T17895] loop5: detected capacity change from 0 to 7 [ 540.027509][T17895] loop5: [ 540.039115][T17895] loop5: partition table partially beyond EOD, truncated [ 540.245102][ T9245] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 540.259465][T17908] syz_tun: entered allmulticast mode [ 540.265851][T17907] syz_tun: left allmulticast mode [ 540.327647][T17910] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3581'. [ 540.405376][ T9245] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.432582][ T9245] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 540.456173][ T9245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.494223][ T9245] usb 1-1: config 0 descriptor?? [ 540.521757][ T9245] pwc: Askey VC010 type 2 USB webcam detected. [ 540.648027][T17926] trusted_key: encrypted_key: insufficient parameters specified [ 540.833474][ T5625] Bluetooth: hci4: command tx timeout [ 540.839298][T17926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.864252][T17926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.003927][ T9245] pwc: recv_control_msg error -71 req 02 val 2b00 [ 541.018489][ T9245] pwc: recv_control_msg error -71 req 02 val 2700 [ 541.032317][ T9245] pwc: recv_control_msg error -71 req 02 val 2c00 [ 541.039517][ T9245] pwc: recv_control_msg error -71 req 04 val 1000 [ 541.046861][ T9245] pwc: recv_control_msg error -71 req 04 val 1300 [ 541.055469][ T9245] pwc: recv_control_msg error -71 req 04 val 1400 [ 541.062261][ T9245] pwc: recv_control_msg error -71 req 02 val 2000 [ 541.070471][ T9245] pwc: recv_control_msg error -71 req 02 val 2100 [ 541.078370][ T9245] pwc: recv_control_msg error -71 req 04 val 1500 [ 541.085838][ T9245] pwc: recv_control_msg error -71 req 02 val 2500 [ 541.094064][ T9245] pwc: recv_control_msg error -71 req 02 val 2400 [ 541.100992][ T9245] pwc: recv_control_msg error -71 req 02 val 2600 [ 541.108203][ T9245] pwc: recv_control_msg error -71 req 02 val 2900 [ 541.115491][ T9245] pwc: recv_control_msg error -71 req 02 val 2800 [ 541.140223][ T9245] pwc: recv_control_msg error -71 req 04 val 1100 [ 541.147309][ T9245] pwc: recv_control_msg error -71 req 04 val 1200 [ 541.160920][ T9245] pwc: Registered as video103. [ 541.174428][ T9245] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input73 [ 541.188119][ T9245] usb 1-1: USB disconnect, device number 34 [ 541.623028][T17940] team0: entered promiscuous mode [ 541.630339][T17940] team_slave_0: entered promiscuous mode [ 541.637897][T17940] team_slave_1: entered promiscuous mode [ 541.645802][T17940] macvlan2: entered promiscuous mode [ 541.651945][T17940] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.659506][T17940] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3594'. [ 541.675273][T17940] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 541.809743][T17945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.821735][T17945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.207004][T17951] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3598'. [ 542.216612][T17951] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3598'. [ 542.265460][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3599'. [ 542.515853][T17961] netlink: 'syz.0.3603': attribute type 1 has an invalid length. [ 542.525333][T17961] netlink: 'syz.0.3603': attribute type 2 has an invalid length. [ 542.533451][T17961] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.573375][ T94] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 542.708684][T17970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.733900][T17970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.746747][ T94] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 542.763551][T17970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.773083][ T94] usb 2-1: config 0 has no interface number 0 [ 542.787234][ T94] usb 2-1: too many endpoints for config 0 interface 98 altsetting 228: 127, using maximum allowed: 30 [ 542.800398][T17970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.826157][T17970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.834886][ T94] usb 2-1: config 0 interface 98 altsetting 228 has 0 endpoint descriptors, different from the interface descriptor's value: 127 [ 542.853386][ T94] usb 2-1: config 0 interface 98 has no altsetting 0 [ 542.857073][T17970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.879841][ T94] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 542.889938][ T94] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.903210][ T94] usb 2-1: config 0 descriptor?? [ 542.924475][ T9233] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 543.103233][ T9233] usb 1-1: Using ep0 maxpacket: 8 [ 543.109973][ T9233] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 543.119512][ T94] usb 2-1: string descriptor 0 read error: -71 [ 543.126779][ T9233] usb 1-1: config 0 has no interface number 0 [ 543.133875][ T9233] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 543.145596][ T94] usb 2-1: Cannot read MAC address [ 543.150996][ T94] MOSCHIP usb-ethernet driver 2-1:0.98: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 543.163301][ T9233] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 543.175488][ T94] usb 2-1: USB disconnect, device number 110 [ 543.181495][ T9233] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 543.195442][ T9233] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 543.206956][ T9233] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 543.218542][ T9233] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.234629][ T9233] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 543.244225][ T9233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.252243][ T9233] usb 1-1: Product: syz [ 543.258015][ T9233] usb 1-1: Manufacturer: syz [ 543.262624][ T9233] usb 1-1: SerialNumber: syz [ 543.268538][ T9233] usb 1-1: config 0 descriptor?? [ 543.434216][T17973] netlink: 'syz.4.3607': attribute type 4 has an invalid length. [ 543.481053][T17975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.489731][T17975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.548554][ T9233] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 543.562905][ T9233] usb 1-1: USB disconnect, device number 35 [ 543.693033][T17983] bridge1: entered promiscuous mode [ 543.698663][T17983] bridge1: entered allmulticast mode [ 543.990824][T17997] __nla_validate_parse: 1 callbacks suppressed [ 543.990840][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 544.009451][T17997] loop2: detected capacity change from 0 to 7 [ 544.016785][T17997] Dev loop2: unable to read RDB block 7 [ 544.022354][T17997] loop2: AHDI p1 p2 p3 [ 544.027805][T17997] loop2: partition table partially beyond EOD, truncated [ 544.037822][T17997] loop2: p1 start 1601398130 is beyond EOD, truncated [ 544.044730][T17997] loop2: p2 start 1702059890 is beyond EOD, truncated [ 544.268271][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3623'. [ 544.281576][T18010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.310374][T18009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3623'. [ 544.343825][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3623'. [ 544.425531][ T7642] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.425599][T18009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3623'. [ 544.451131][ T7642] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.490474][ T7642] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.511215][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3623'. [ 544.536262][ T7642] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.581241][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3621'. [ 544.989920][T18019] netlink: 'syz.1.3625': attribute type 4 has an invalid length. [ 545.269952][T18027] bond2: (slave bond_slave_1): Device is not our slave [ 545.285083][T18027] bond2: option active_slave: invalid value (bond_slave_1) [ 545.302446][T18027] bond2 (unregistering): Released all slaves [ 545.571697][T18043] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 545.595796][T18038] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 545.597846][T18043] bond2 (unregistering): Released all slaves [ 546.443235][ T9233] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 546.596434][ T9233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.611449][ T9233] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 546.623601][ T9233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.633962][ T9233] usb 2-1: config 0 descriptor?? [ 546.640931][T18089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.641930][ T9233] pwc: Askey VC010 type 2 USB webcam detected. [ 546.654597][T18089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.687405][T18091] deleting an unspecified loop device is not supported. [ 547.041890][ T856] usb 8-1: USB disconnect, device number 63 [ 547.096337][ T9243] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 547.120203][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 547.132237][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 547.141685][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 547.149697][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 547.159145][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 547.255596][ T9243] usb 1-1: unable to get BOS descriptor or descriptor too short [ 547.279794][ T9233] pwc: recv_control_msg error -71 req 02 val 2700 [ 547.288364][ T9233] pwc: recv_control_msg error -71 req 02 val 2c00 [ 547.295532][ T9233] pwc: recv_control_msg error -71 req 04 val 1000 [ 547.295667][ T9243] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.302356][ T9233] pwc: recv_control_msg error -71 req 04 val 1300 [ 547.320122][ T9233] pwc: recv_control_msg error -71 req 04 val 1400 [ 547.325203][T18118] macvlan0: entered allmulticast mode [ 547.327884][ T9233] pwc: recv_control_msg error -71 req 02 val 2000 [ 547.339674][ T9233] pwc: recv_control_msg error -71 req 02 val 2100 [ 547.340170][T18118] bond0: entered allmulticast mode [ 547.346491][ T9233] pwc: recv_control_msg error -71 req 04 val 1500 [ 547.351736][ T9243] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 547.358121][ T9233] pwc: recv_control_msg error -71 req 02 val 2500 [ 547.369612][T18118] bond_slave_0: entered allmulticast mode [ 547.373735][ T9233] pwc: recv_control_msg error -71 req 02 val 2400 [ 547.381587][T18118] bond_slave_1: entered allmulticast mode [ 547.385837][ T9233] pwc: recv_control_msg error -71 req 02 val 2600 [ 547.398172][ T9233] pwc: recv_control_msg error -71 req 02 val 2900 [ 547.402758][ T9243] usb 1-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 547.404949][ T9233] pwc: recv_control_msg error -71 req 02 val 2800 [ 547.416241][T18118] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 547.420768][ T9233] pwc: recv_control_msg error -71 req 04 val 1100 [ 547.434455][ T9233] pwc: recv_control_msg error -71 req 04 val 1200 [ 547.436876][ T9243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.443095][ T9233] pwc: Registered as video103. [ 547.457251][T18118] macvlan0: entered promiscuous mode [ 547.458042][ T9233] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input75 [ 547.473645][ T30] INFO: task kworker/0:14:9242 blocked for more than 143 seconds. [ 547.481583][ T30] Tainted: G L syzkaller #0 [ 547.481652][ T9233] usb 2-1: USB disconnect, device number 111 [ 547.488309][ T9243] usb 1-1: Product: syz SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 547.505004][T18118] bond0: entered promiscuous mode [ 547.517146][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.526092][T18118] bond_slave_0: entered promiscuous mode [ 547.532400][ T9243] usb 1-1: Manufacturer: syz [ 547.537916][T18118] bond_slave_1: entered promiscuous mode [ 547.543857][ T30] task:kworker/0:14 state:D stack:22952 pid:9242 tgid:9242 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 547.556149][ T9243] usb 1-1: SerialNumber: syz [ 547.562064][T18118] team0: Port device macvlan0 added [ 547.570575][ T30] Workqueue: usb_hub_wq hub_event [ 547.590599][ T30] Call Trace: [ 547.602024][ T30] [ 547.609583][ T30] __schedule+0x17d9/0x56c0 [ 547.644674][ T30] ? __device_attach+0x2c4/0x450 [ 547.675028][ T30] ? __device_attach_driver+0x270/0x410 [ 547.686418][ T30] ? bus_for_each_drv+0x258/0x2f0 [ 547.701824][ T30] ? __device_attach+0x2c4/0x450 [ 547.708495][ T30] ? process_scheduled_works+0xa8e/0x14e0 [ 547.717462][ T30] ? __pfx___schedule+0x10/0x10 [ 547.722380][ T30] ? schedule+0x90/0x360 [ 547.727134][ T30] ? rcu_is_watching+0x15/0xb0 [ 547.731945][ T30] ? lock_release+0x4b/0x3c0 [ 547.736652][ T30] ? schedule+0x90/0x360 [ 547.741051][ T30] ? wq_worker_sleeping+0x66/0x250 [ 547.747075][ T30] schedule+0x164/0x360 [ 547.766429][ T30] schedule_timeout+0xc0/0x2c0 [ 547.771428][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 547.828033][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 547.851179][ T30] ? rcu_is_watching+0x15/0xb0 [ 547.856507][ T30] ? rcu_is_watching+0x15/0xb0 [ 547.862004][ T30] ? trace_irq_enable+0x3b/0x140 [ 547.867481][ T30] ? wait_for_completion+0x272/0x5e0 [ 547.872831][ T30] wait_for_completion+0x2ca/0x5e0 [ 547.887604][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 547.893554][ T30] ? kobject_put+0x50f/0x550 [ 547.898195][ T30] i2c_del_adapter+0x281/0x430 [ 547.905135][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 547.910482][ T30] ? dvb_usbv2_exit+0x94d/0xb80 [ 547.924701][ T30] dvb_usbv2_probe+0x4bb/0x3950 [ 547.929631][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 547.935293][ T30] ? __pm_runtime_set_status+0x994/0xc80 [ 547.940977][ T30] usb_probe_interface+0x653/0xc60 [ 547.946521][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 547.963878][ T30] really_probe+0x254/0xae0 [ 547.968448][ T30] __driver_probe_device+0x1e8/0x360 [ 547.974072][ T30] driver_probe_device+0x4f/0x240 [ 547.979142][ T30] __device_attach_driver+0x270/0x410 [ 547.984987][ T30] bus_for_each_drv+0x258/0x2f0 [ 547.989890][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 547.996030][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 548.001679][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 548.007834][ T30] __device_attach+0x2c4/0x450 [ 548.012635][ T30] ? __pfx___device_attach+0x10/0x10 [ 548.020494][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 548.027259][ T30] ? _raw_spin_unlock+0x28/0x50 [ 548.032325][ T30] device_initial_probe+0xa1/0xd0 [ 548.038528][ T30] bus_probe_device+0x12a/0x220 [ 548.050071][ T30] device_add+0x7d7/0xb80 [ 548.054575][ T30] usb_set_configuration+0x1ad8/0x2180 [ 548.064051][ T30] usb_generic_driver_probe+0x8d/0x150 [ 548.069535][ T30] usb_probe_device+0x1c3/0x3b0 [ 548.083288][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 548.088676][ T30] really_probe+0x254/0xae0 [ 548.093416][ T30] __driver_probe_device+0x1e8/0x360 [ 548.098716][ T30] driver_probe_device+0x4f/0x240 [ 548.103980][ T30] __device_attach_driver+0x270/0x410 [ 548.109363][ T30] bus_for_each_drv+0x258/0x2f0 [ 548.116041][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 548.123596][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 548.129049][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 548.135295][ T30] __device_attach+0x2c4/0x450 [ 548.140099][ T30] ? rcu_is_watching+0x15/0xb0 [ 548.145339][ T30] ? __pfx___device_attach+0x10/0x10 [ 548.150660][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 548.157826][ T30] ? _raw_spin_unlock+0x28/0x50 [ 548.162728][ T30] device_initial_probe+0xa1/0xd0 [ 548.173594][ T30] bus_probe_device+0x12a/0x220 [ 548.178483][ T30] device_add+0x7d7/0xb80 [ 548.182815][ T30] usb_new_device+0x99d/0x1620 [ 548.191870][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 548.201289][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 548.206882][ T30] ? rcu_is_watching+0x15/0xb0 [ 548.211660][ T30] ? trace_irq_enable+0x3b/0x140 [ 548.216662][ T30] hub_event+0x28e8/0x4d30 [ 548.221116][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 548.226535][ T30] ? __pfx_hub_event+0x10/0x10 [ 548.231328][ T30] ? rcu_is_watching+0x15/0xb0 [ 548.236174][ T30] ? lock_acquire+0x5f/0x350 [ 548.240791][ T30] ? rcu_is_watching+0x15/0xb0 [ 548.245698][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 548.251446][ T30] process_scheduled_works+0xa8e/0x14e0 [ 548.257722][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 548.263864][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 548.268932][ T30] ? assign_work+0x3cf/0x5d0 [ 548.273956][ T30] worker_thread+0xa47/0xfb0 [ 548.278577][ T30] ? __kthread_parkme+0x71/0x1f0 [ 548.283767][ T30] kthread+0x388/0x470 [ 548.287854][ T30] ? __pfx_worker_thread+0x10/0x10 [ 548.292961][ T30] ? __pfx_kthread+0x10/0x10 [ 548.297592][ T30] ret_from_fork+0x514/0xb70 [ 548.302196][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 548.307429][ T30] ? __switch_to+0xc89/0x1420 [ 548.312132][ T30] ? __pfx_kthread+0x10/0x10 [ 548.316814][ T30] ret_from_fork_asm+0x1a/0x30 [ 548.321630][ T30] [ 548.324929][ T30] INFO: lockdep is turned off. [ 548.329716][ T30] NMI backtrace for cpu 0 [ 548.329731][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 548.329753][ T30] Tainted: [L]=SOFTLOCKUP [ 548.329759][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.329767][ T30] Call Trace: [ 548.329773][ T30] [ 548.329779][ T30] dump_stack_lvl+0xe8/0x150 [ 548.329798][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 548.329820][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 548.329845][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 548.329865][ T30] sys_info+0x135/0x170 [ 548.329882][ T30] watchdog+0xfd7/0x1030 [ 548.329903][ T30] ? watchdog+0x1c7/0x1030 [ 548.329923][ T30] kthread+0x388/0x470 [ 548.329937][ T30] ? __pfx_watchdog+0x10/0x10 [ 548.329955][ T30] ? __pfx_kthread+0x10/0x10 [ 548.329969][ T30] ret_from_fork+0x514/0xb70 [ 548.329986][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 548.330001][ T30] ? __switch_to+0xc89/0x1420 [ 548.330022][ T30] ? __pfx_kthread+0x10/0x10 [ 548.330037][ T30] ret_from_fork_asm+0x1a/0x30 [ 548.330060][ T30] [ 548.330089][ T30] Sending NMI from CPU 0 to CPUs 1: [ 548.445863][ C1] NMI backtrace for cpu 1 [ 548.445882][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.445905][ C1] Tainted: [L]=SOFTLOCKUP [ 548.445911][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.445921][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 548.445942][ C1] Code: fc 81 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 07 25 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 548.445957][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 548.445972][ C1] RAX: ffff8881253a4000 RBX: ffffffff819a6170 RCX: 0000000080000001 [ 548.445985][ C1] RDX: 0000000000000001 RSI: ffffffff8c28e100 RDI: ffffffff819a6170 [ 548.445996][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 548.446008][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 548.446020][ C1] R13: 1ffff11003b5e000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 548.446032][ C1] FS: 0000000000000000(0000) GS:ffff8881253a4000(0000) knlGS:0000000000000000 [ 548.446046][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.446057][ C1] CR2: 00007f504b327000 CR3: 000000007e5dc000 CR4: 00000000003526f0 [ 548.446072][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009951 [ 548.446082][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 548.446093][ C1] Call Trace: [ 548.446100][ C1] [ 548.446105][ C1] default_idle+0x9/0x20 [ 548.446123][ C1] default_idle_call+0x72/0xb0 [ 548.446141][ C1] do_idle+0x2e0/0x540 [ 548.446165][ C1] ? __pfx_do_idle+0x10/0x10 [ 548.446197][ C1] cpu_startup_entry+0x43/0x60 [ 548.446219][ C1] start_secondary+0x101/0x110 [ 548.446235][ C1] common_startup_64+0x13e/0x157 [ 548.446261][ C1] [ 548.788026][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 548.794916][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 548.805594][ T30] Tainted: [L]=SOFTLOCKUP [ 548.809917][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.819972][ T30] Call Trace: [ 548.823254][ T30] [ 548.826190][ T30] vpanic+0x56c/0xa60 [ 548.830183][ T30] ? __pfx___schedule+0x10/0x10 [ 548.835047][ T30] ? __pfx_vpanic+0x10/0x10 [ 548.839555][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 548.845720][ T30] panic+0xc5/0xd0 [ 548.849446][ T30] ? __pfx_panic+0x10/0x10 [ 548.853866][ T30] ? preempt_schedule_common+0x82/0xd0 [ 548.859332][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 548.864710][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 548.870875][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 548.877037][ T30] watchdog+0x1030/0x1030 [ 548.881379][ T30] ? watchdog+0x1c7/0x1030 [ 548.885802][ T30] kthread+0x388/0x470 [ 548.889874][ T30] ? __pfx_watchdog+0x10/0x10 [ 548.894554][ T30] ? __pfx_kthread+0x10/0x10 [ 548.899146][ T30] ret_from_fork+0x514/0xb70 [ 548.903744][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 548.908858][ T30] ? __switch_to+0xc89/0x1420 [ 548.913544][ T30] ? __pfx_kthread+0x10/0x10 [ 548.918140][ T30] ret_from_fork_asm+0x1a/0x30 [ 548.922917][ T30] [ 548.926187][ T30] Kernel Offset: disabled [ 548.930498][ T30] Rebooting in 86400 seconds..