last executing test programs: 27m40.282887515s ago: executing program 32 (id=476): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x7) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x500000000, 0x40000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00'}, 0x18) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000001c0)={{0x0, 0x9, 0x2, 0x1, 0x80000000, 0xd, 0x5, 0x1, 0x5ad, 0xffff, 0x4, 0x81, 0x496, 0x5, 0x4}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000280)={0x0, r3, "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", "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"}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000000c0)={0xde, ""/222}) 25m1.36638107s ago: executing program 33 (id=1002): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x24, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x3, 0xf}, {0x8, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004051}, 0x4000000) r0 = socket(0x5, 0x803, 0xffffffff) sendto(r0, &(0x7f0000000740), 0x0, 0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000b, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r3, &(0x7f0000000040)=0x4, 0x6) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fsopen(&(0x7f00000000c0)='affs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='so\x06\x00\x00\x00\xda\x13`\xe9\x0e\x1a\xe9\xd8\xa2F\xc5', &(0x7f0000000240)='//\xf2/\x06\b//\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15m.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8\t\x00\x00\x00\x00\x00\x00\x00\xc5n\xeb\xab\xf70\x99\xef\x8br1}) sched_setscheduler(r2, 0x3, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x2) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unlink(&(0x7f0000000440)='./cgroup\x00') userfaultfd(0x801) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000840)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x9, 0x0, 0x5c, 0x7, 0x800, 0x93d7, 0x8, 0x0, 0x3}) 24m55.66281299s ago: executing program 5 (id=1017): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x20000400) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) process_vm_writev(0x0, &(0x7f0000000a40)=[{0xfffffffffffffffc}, {0x0}], 0x2, 0x0, 0x0, 0x0) epoll_create1(0x80000) pselect6(0x40, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 24m54.508493694s ago: executing program 5 (id=1019): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000240)}) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00ff00", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 24m53.66521299s ago: executing program 5 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000000)=0x31) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x6bf1c2d5adba8c12}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)) r6 = socket$packet(0x11, 0x2, 0x300) r7 = fcntl$dupfd(r5, 0x406, r6) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "bdf87fd7b2c7dd"}, 0x12) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf252800000008000300", @ANYRES32=r3, @ANYBLOB="0c00b900700000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x44040) 24m52.394891373s ago: executing program 2 (id=1022): socket$inet6_sctp(0xa, 0x1, 0x84) landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x2}, 0x18, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') syz_open_dev$usbmon(&(0x7f0000000080), 0x2d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="911069000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000020a010200000000000000000200d0580900010073797a300000000014000000110001000000000a0000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01", @ANYBLOB="ebab23807f"], 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x4, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0xfffd, 0xf, 0xb, 0x3}]}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x708, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_SSID={0x23, 0x34, @random="b1e64a3315bc2397883d3643394041f2d29f91af62f2ac29b1feeb08046885"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x2, 0x1, 0x0, {0xd10e, 0x5, 0x0, 0x9d, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x3, 0x4b}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x800) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0) 24m47.478398025s ago: executing program 5 (id=1024): socket(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1201000000000040c50f80b000000000000109022c0001000000000904000023f49d4f00092100000001220300090581030000000000"], 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "c04e5508a95b0aeb"}, 0x10}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4004081) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async, rerun: 32) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) (async) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/99, 0x63}], 0x1}, 0xd6}], 0x2, 0x10020, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async, rerun: 64) ptrace(0x10, 0x1) (async, rerun: 64) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xff, 'xfrm0\x00', 'tunl0\x00', {}, {}, 0x2e, 0x0, 0x20}, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc7, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x18c40, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000640)={0x0}) (async, rerun: 64) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xe4010000, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 24m47.477831935s ago: executing program 2 (id=1025): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x808a}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5000000008d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6d49cba517b0563c14fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) 24m36.409534127s ago: executing program 34 (id=1020): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'caif0\x00', {0x1}, 0x8000}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000500)={{0x6, 0x7ff, 0x8001, 0x7}, 'syz1\x00', 0x39}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff7) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x30, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x2, 0xe1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x3, 0xfe}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x1, 0xc0, 0x2, 0xcf, 0x8}, 0x1e, &(0x7f00000000c0)={0x5, 0xf, 0x1e, 0x3, [@generic={0x8, 0x10, 0x1, "420b345b8e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x9, 0x5, 0x2}, @ext_cap={0x4, 0x10, 0x2, 0x1c, 0x5, 0x6, 0x8}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x542e}}, {0x19, &(0x7f0000000140)=@string={0x19, 0x3, "06c4775277983b93ab8983d9e44ec7f299642b44b58bb5"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40f}}, {0xdc, &(0x7f0000000200)=@string={0xdc, 0x3, "53fa0387b00c6715450ad6fcdcece8f431a6ac472017be344ce373ee420435eadb13c956a9d8e98a5df34251a46f40c9d37de2920a251bdb88d130e0af3f8d5b2ff6b3df5ca578f9f7a9ecca7e13b101b465a4f87b6806f9e39414ccb09628c49caf4f03cbcd1da2f0ec902d8a8fa3959e152529431793eab28ecf06b75c519c4b657fc4da01dd3c923cc78e806078f192ef8b5bd24597236ff626c50f5501af376179a41346d058b42434b3e4b91d7e4f63d0e2496540691b3663c23273e9fd867b8346b639e355fdcf67cdc5f3e54ff255c17d88e178625a6d"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2009}}, {0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="05452428f8321670de227dfd31b026883e72b7241fde35136db6823bfa975ec4a4b7978f6e358674b7a8c5de07146dd823fa053457411f8b57322067b0f465ba43a872e3345f10e5c0fa59f58e6a196db8ddbca5711a25"]}, {0xca, &(0x7f0000000380)=@string={0xca, 0x3, "cc654a2008d2ce72c7d5bdc93b38f3b7f38999a4b7a73650828d80710da546306bdb749014fea1c4e22fcd7cf30bef5f94252b0c0b269982073a5a1305ba872c1c49db3669c4241c41c6acba7b44cd40cb6168be9cdee3bfceec3fb2d72b62572ad6c8aff684fbea7f37575d547e884fb319a8162adeef6e2c1ab225f2d6b742c2519137bc419b54638587469ef05e45f1dc4143eb6b0e3c50abed1eac70b5058d0e33009005b9e542a9c7ef1ae9ce120363e44ff6cab65a7a178b51a40b2991df8ede9e60660de2"}}]}) 24m36.159332005s ago: executing program 5 (id=1027): memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x449, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x5, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x201, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0x6, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0xf, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xefff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x20007, 0x3, 0x9, 0x48c93690, 0x6, 0xff], [0x7, 0x80, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x202, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3a, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0xfffffffd, 0xa4, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x757, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x9, 0x6, 0x9, 0x2, 0x4], [0x9, 0xbb31, 0x3, 0xfffffffa, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x0, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0xffffffff, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x40003, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x705, 0x200, 0xfff, 0xfff]}, 0x45c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x4b, "7ebca1673b8f460472ea92e3560a530dad896cf12c04bcb64be357e2489d341f025ada147fa75fff81b105c30cc7805c4e08afe8534bff87787d6ae085410984f666b49f4224891c18afee"}, &(0x7f0000000880)=0x53) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x100, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x62, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x3f0}, {0x0, 0xa00, 0x407ffffffffffc, 0x800000000000002}, 0x0, 0x0, 0x1}, [@offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xc4}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r4 = dup2(r3, r3) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000008c0)={r1}, &(0x7f0000000900)=0x8) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000000c0)={0xfffffffffffffe7d, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000b34d636137"], 0x0}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000300)={0xc, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r7, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$IOMMU_VFIO_SET_IOMMU(r6, 0x3b66, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="090000000906010200334c050055d66c0d69092c73be6302b9ae391637fca4f47432f114eabc3e7bbfc13a6b40b0e1e3cecc3d912e5b64b3701449f3465d43a149cd56d7194c2f5333b86b4fd4d44a51a5"], 0x1c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffff00], [0xff, 0xffffffff, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 24m35.501604009s ago: executing program 35 (id=1023): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000001, 0x0, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x7, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7, 0x6, 0xc7, 0x5, 0xfffffffffffeffff, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, r4}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setsig(r6, 0xa, 0x2d) fcntl$getflags(r6, 0xb) fcntl$lock(r1, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x800002, r5}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x430215b7, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x100010, 0xffffffffffffffff, 0xd1ac6000) mbind(&(0x7f00009cd000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x3, 0x2) madvise(&(0x7f000068a000/0x2000)=nil, 0x2000, 0x15) eventfd(0x401) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620e216b8108ede01020301"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) 24m34.974013838s ago: executing program 2 (id=1029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)={0x3c, 0xd, 0xa, 0x801, 0x0, 0xff00, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x3c}}, 0x8000) 24m33.983319151s ago: executing program 2 (id=1030): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x200, 0x0) socket(0x1e, 0x1, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000040)={0xa4, 0x4000000000000000, 0x1, 0x3fc, 0x300, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000, 0x2}, 0x0, 0x0, 0x0) 24m33.15054208s ago: executing program 2 (id=1031): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001fc0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x9, 0x800, 0x6, 0x9, 0x7, r1}) sched_setscheduler(r2, 0x3, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x2) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unlink(&(0x7f0000000440)='./cgroup\x00') userfaultfd(0x801) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000840)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x9, 0x0, 0x5c, 0x7, 0x800, 0x93d7, 0x8, 0x0, 0x3}) 24m32.02024734s ago: executing program 5 (id=1032): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000040900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000280)=ANY=[@ANYRES64=r3], 0x8e79f035216f6e94) request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigaction(0x1, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) 24m10.224694424s ago: executing program 36 (id=1031): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001fc0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x9, 0x800, 0x6, 0x9, 0x7, r1}) sched_setscheduler(r2, 0x3, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x2) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unlink(&(0x7f0000000440)='./cgroup\x00') userfaultfd(0x801) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000840)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x9, 0x0, 0x5c, 0x7, 0x800, 0x93d7, 0x8, 0x0, 0x3}) 24m9.299082299s ago: executing program 37 (id=1032): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000040900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000280)=ANY=[@ANYRES64=r3], 0x8e79f035216f6e94) request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigaction(0x1, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) 20m56.07943895s ago: executing program 4 (id=1506): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x80}, [@RTA_PREF={0x5, 0x14, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 6) 20m55.046456953s ago: executing program 4 (id=1511): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x20000004) sched_setattr(0x0, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000300)=0x8) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) sendmsg$can_j1939(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)="f4e78d4837b4c64b7bce30d85066e820619c9624346344714b2b454ea8f4eef1584fbfa34491c5c24c7b75198d6f0f7b69933483ee784106987e85d5f2a77f21d1c0cb9eb183e1a76d856e5ebd44bf761e52cefa49f6232ab391b4625ed815a87d9eed921d95eaf0cfb3eb3a921c34394f5fe05b9effc5", 0x77}, 0x1, 0x0, 0x0, 0x20048000}, 0x810) socket(0x400000000010, 0x3, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000200), 0x51, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x80ffffd, 0x0, 0x1, 0xa, 0x7f, 0x7}, 0x20) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x4, 0x0, &(0x7f0000000880)="61df7159", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x50) 20m51.328385531s ago: executing program 4 (id=1517): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) socket(0x18, 0x80000, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r3 = creat(0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) write$dsp(r4, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0x0, 0x20, 0xfffffffe, 0xa00001b5, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f000000a180)=""/4102, 0x1006}], 0x0, 0x1000000000000075}, 0x20) r6 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) socket$inet6(0xa, 0x3, 0x8000000003c) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 20m47.83704548s ago: executing program 4 (id=1523): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d59809050902200002000509050412"], 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4001, 0x20) add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)={0x3, 0x0, @auto=[0x10, 0x20, 0x24, 0x12, 0x1c]}, 0xd, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0x3}) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 20m44.16188766s ago: executing program 4 (id=1532): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, '\x00\x00\x00 \x00'}]}]}, 0x3c}}, 0x40000) (fail_nth: 6) 20m43.181977014s ago: executing program 4 (id=1535): set_mempolicy(0x2, 0x0, 0xf5) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000019200)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000191c0)={&(0x7f0000019180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf258700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x90) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x980) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000045, 0xffffffff, 0x0, 0x0, 0xffffffff, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000190c0), 0x442, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100)) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r4, &(0x7f0000000000)=[{0x0}], 0x1) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x39) syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000300), {0x15}, &(0x7f0000000340)=""/88, 0x58, &(0x7f00000003c0)=""/172, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x1c}, @private0, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r10}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 20m42.082175126s ago: executing program 38 (id=1535): set_mempolicy(0x2, 0x0, 0xf5) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000019200)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000191c0)={&(0x7f0000019180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf258700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x90) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x980) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000045, 0xffffffff, 0x0, 0x0, 0xffffffff, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000190c0), 0x442, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100)) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r4, &(0x7f0000000000)=[{0x0}], 0x1) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x39) syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000300), {0x15}, &(0x7f0000000340)=""/88, 0x58, &(0x7f00000003c0)=""/172, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x1c}, @private0, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r10}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 17m3.710041575s ago: executing program 6 (id=2087): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (fail_nth: 3) 17m3.400062129s ago: executing program 6 (id=2088): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000040)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4008000) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = userfaultfd(0x80801) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 17m0.150876104s ago: executing program 6 (id=2094): syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) r2 = syz_pidfd_open(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040)) pidfd_send_signal(r2, 0x21, 0x0, 0x4) 16m57.602987156s ago: executing program 6 (id=2100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0xfffffffffffffffe}]}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r5, 0x0, &(0x7f0000000240)='LL', 0x2, 0x1f}) syz_open_dev$evdev(&(0x7f0000000300), 0x4, 0x2400) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x8001, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x0, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16m55.834007778s ago: executing program 6 (id=2104): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd(0x80000001) madvise(&(0x7f00002e0000/0x4000)=nil, 0x4000, 0x65) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) 16m55.126451157s ago: executing program 6 (id=2105): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000040)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4008000) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = userfaultfd(0x80801) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 16m53.976288687s ago: executing program 39 (id=2105): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000040)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4008000) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = userfaultfd(0x80801) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 15m32.118135086s ago: executing program 8 (id=2330): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) close_range(r0, r2, 0x200000000000000) 15m30.988465913s ago: executing program 8 (id=2335): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0xa6ffffff, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 15m30.229092343s ago: executing program 8 (id=2339): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue1\x00'}) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x4d800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000002c0)={0x4, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee", 0xffffffffffffffff}) r8 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) dup3(r7, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1, {0x0, r11}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r12, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x2, 0x1}}) r13 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r13, 0x0, 0x0) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r14, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r14, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x1, 0x3]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r14, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r15 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r15, 0x40605346, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xa0}}, 0x0) 15m29.124690775s ago: executing program 8 (id=2341): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) syz_usb_connect(0x0, 0x4fa, &(0x7f0000000540)=ANY=[@ANYBLOB="120100022502aa10120a105daae9010203010902e8040406000000090498fd061704400309050b"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x1060c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCGUSAGES(r3, 0x4030582a, &(0x7f0000008340)={{0x1, 0x3, 0x7f, 0x7, 0x1000, 0x40}, 0x2bf, [0xb704, 0x3ff, 0x6, 0x2, 0xfba9, 0x80000001, 0x1c, 0x8, 0x2, 0x80000000, 0x8, 0x8001, 0xffff, 0x1, 0x248b56bb, 0xf734, 0x46a93a47, 0x51e1, 0x6, 0x6, 0xff, 0xffffffff, 0x8, 0x4, 0x1000004, 0x6, 0xeb09, 0x101, 0x5, 0x6, 0x8, 0x4, 0x3, 0x88, 0x0, 0x0, 0x1000, 0xfb81, 0x8, 0x40, 0x7, 0xf, 0x3ff, 0x401, 0x5, 0x10, 0xfffffffd, 0x1, 0xc6f8, 0x2, 0x80, 0x2, 0x7, 0xa1a, 0x9, 0x6, 0x1, 0x2, 0x0, 0xa, 0x5, 0x8000, 0x6, 0x2, 0x5819, 0x7, 0x6, 0x4f4, 0x3, 0x80000, 0x1000, 0x2, 0xb, 0x4, 0x7, 0x5, 0x1, 0x2, 0x80000000, 0x0, 0x5, 0x2, 0x8, 0x1, 0x0, 0x6, 0xd985, 0x51, 0x1, 0x5, 0x9, 0x6, 0xfffffffe, 0x79, 0x2, 0x8, 0xffe00, 0xfffffffb, 0x71172ab, 0x3, 0x6, 0x6, 0x1, 0xe96, 0x4, 0xa09, 0x2, 0x4, 0x3, 0xa80c, 0x80000001, 0x9, 0xe7, 0x3e, 0x3, 0x0, 0x4, 0x2cdf, 0x3000, 0x3, 0x5, 0xff, 0x2, 0x4, 0x101, 0xff, 0x1400000, 0xfffffff7, 0x8, 0x8, 0x4, 0x100, 0x2, 0x9, 0xffe, 0xfd93, 0x0, 0x5, 0x21, 0x4, 0x80000001, 0x2, 0x5, 0xfffffffb, 0x48cd, 0x1, 0x7fff, 0x8000, 0xfffffffe, 0x9, 0x1, 0x6, 0x6, 0xf8, 0xfffffffd, 0xa, 0x6, 0x2, 0xfb2, 0x100, 0x10001, 0x1, 0x40, 0x7, 0x8, 0x3e3, 0x0, 0x6, 0x0, 0x9, 0x0, 0x49, 0x3ff, 0x5, 0x1ff, 0x3, 0xbd, 0xfffffff8, 0x5, 0x1, 0x2, 0x6, 0x0, 0x9, 0x38, 0xd, 0x6, 0xfffffffa, 0x6, 0xf, 0x25, 0x2, 0x0, 0x4, 0x9, 0x2896, 0x4, 0x3, 0x3, 0x7, 0x0, 0xb, 0x9, 0xa9, 0x400, 0x8001, 0x8, 0x2, 0xc6ab, 0x18, 0x8000, 0x2, 0x0, 0x7, 0x1, 0x6, 0x5, 0x400, 0x3, 0x3, 0x4, 0x1, 0x2, 0x2, 0x7, 0x8, 0x0, 0x7, 0x7, 0x0, 0xffffff64, 0x5, 0x2, 0x6, 0x3, 0x5, 0xc7, 0x7, 0x212, 0x7, 0x5, 0xe19b, 0x7, 0x9, 0x67, 0xa, 0xf60b, 0x1, 0x1, 0x4, 0x98a, 0x6, 0x10, 0x2eb, 0x2f7e, 0x0, 0x4, 0x1d21, 0x9, 0x80, 0xb, 0x1ff, 0xfffffff6, 0x0, 0xffffffff, 0x4, 0x6, 0x3, 0x6, 0x20000000, 0x8, 0xa, 0x400, 0xffffffff, 0x7, 0x68b32c17, 0x339, 0x2, 0xc, 0x5, 0x40, 0x2d, 0x1ff, 0x91, 0x7f, 0x4, 0x7, 0x1, 0x2, 0x3b1, 0x800003, 0x2, 0x3, 0x8001, 0x7, 0xfffffffc, 0x8, 0x0, 0x401c, 0x7, 0x200, 0x8, 0x5, 0xab83, 0x73, 0x14000, 0x1, 0x2, 0x8, 0x7, 0x3, 0x4, 0x8, 0x1, 0x74e, 0x88, 0x2, 0x20, 0x2, 0x328, 0xe5, 0x7, 0x9, 0x86a, 0x2, 0x1, 0x2b, 0xfffffffb, 0x6, 0xa, 0xd2e, 0x80000000, 0x7, 0xfffffff8, 0x0, 0x8, 0x569, 0xa, 0x100, 0xac3, 0x5, 0x6, 0xff, 0xe, 0x81, 0xca, 0xfffffffe, 0x7, 0x8, 0x0, 0x7, 0x5, 0x5, 0x4, 0xe, 0x5, 0x9, 0x7fffffff, 0xfffffffe, 0x1, 0x3de, 0x2, 0x1, 0xfb, 0x2, 0xfffffff8, 0x3ff, 0x8, 0x3, 0x8, 0x31eb, 0x7, 0x5, 0x8, 0x4a0000, 0x0, 0x2, 0xb0, 0x4, 0x8000, 0x80, 0xd05, 0x9, 0x5, 0x8, 0x80, 0x2, 0x5, 0xfffffe00, 0x7, 0x4000000, 0x5, 0x6af, 0x4, 0x8, 0x3, 0x580, 0x7, 0x9, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7ff, 0x4, 0xfffffff8, 0x9, 0x2, 0x3, 0x77ae, 0x4, 0x91c, 0x5, 0x6, 0x3, 0x0, 0x80000000, 0x21000000, 0xfffffffa, 0x3ff, 0xb3, 0x4f8c, 0x4, 0x127, 0x1, 0x2bfe1798, 0x10000, 0x1, 0x44c, 0x0, 0x3, 0x895, 0x8, 0xff9, 0xfffffff7, 0x3, 0x2c, 0x3ff, 0x6, 0x8, 0x7, 0x1, 0x1000, 0xc530, 0x5, 0x8f, 0x0, 0x6, 0x8000, 0x400, 0x7, 0x6, 0x9, 0x1, 0x2005f66, 0x10001, 0x1, 0x9, 0x8000, 0x5, 0x80000001, 0x81, 0x6, 0x8, 0x75f, 0xab8, 0x4, 0x8, 0xe0b0, 0xffff, 0xf, 0x2, 0x4, 0x9, 0xffffd40a, 0x2, 0x9, 0x6, 0x2, 0xfffffa86, 0x8, 0x6, 0x101, 0x3, 0xa000000, 0x8, 0x7fffffff, 0x2, 0x6, 0x4, 0x101, 0x1, 0x200, 0x800, 0x9, 0x2, 0x3, 0xf5, 0xb30, 0x9, 0x2, 0x1, 0xd, 0x7fffffff, 0x7, 0x8, 0x0, 0x9, 0x4, 0x1, 0x462, 0x80000001, 0x5, 0x7, 0x3e2b, 0x4, 0x7ff, 0x2, 0x9, 0x3ff, 0x9, 0x8, 0x6, 0x2, 0x1, 0x100, 0xa, 0x5, 0x800, 0x80000000, 0x40, 0x1, 0x10000, 0xffffcd67, 0x5af, 0x3, 0x8, 0x7, 0x0, 0x227, 0x0, 0x8, 0x0, 0x1c18, 0x6, 0x7, 0x0, 0x9, 0xff, 0x6, 0x101, 0x7fff, 0x1, 0x101, 0xd7b, 0x2, 0x6, 0x81, 0x1, 0x10001, 0x3, 0x2, 0x2, 0xbfc8, 0x1, 0x101, 0x23b8, 0x7f, 0x8, 0xad9, 0x8, 0x4, 0xd31, 0x3a64ec4a, 0xffffffcf, 0x81, 0x9536, 0x0, 0x2, 0x3, 0x0, 0x9, 0x4af7e4bc, 0x7, 0x4, 0x2, 0x2f8, 0x4, 0x4, 0x1, 0x1ff, 0x1c7, 0x80000000, 0xd, 0x8, 0x0, 0x7, 0x1, 0x3, 0x6, 0x10000, 0x89e7, 0xa, 0x6d, 0x4, 0x9, 0x6, 0xf, 0x4, 0x706, 0x800, 0xfffffff2, 0x7, 0x7, 0x5, 0x6, 0x1, 0x91, 0x1f, 0x0, 0xb, 0x3, 0x8, 0x46, 0xd3, 0x0, 0x0, 0xfffffff4, 0x1, 0x3e, 0x7923, 0x7, 0x7, 0x101, 0x7, 0x9a0, 0x9, 0xbff, 0xf26, 0x800, 0xe00000, 0x7, 0x175, 0x5, 0x5, 0x4000023, 0x400, 0x5, 0x3, 0x5, 0x5, 0x0, 0x0, 0x5, 0x10, 0x6, 0x40007, 0x5, 0x4, 0x1, 0x2, 0x0, 0x3, 0x75, 0x3, 0x5, 0xdec3, 0x7, 0x4, 0xfffffff9, 0x3, 0x6, 0x74b, 0xb166, 0xffffffff, 0xbe25, 0x7, 0x9, 0x9a, 0x6, 0x0, 0x76f, 0x4, 0x2, 0x4, 0x1, 0x3, 0xfffffff5, 0x7, 0x6, 0xc, 0x1ff, 0x6a, 0xe3, 0x390e, 0x1, 0x8, 0x7fffffff, 0x47, 0x3, 0x24dc, 0x80000001, 0x3ff, 0xfc, 0x0, 0xfffffffa, 0x4, 0xba, 0x3, 0x3, 0x3ff, 0x3, 0x5, 0xf72, 0x5, 0x8, 0x1258dd22, 0x1, 0x4, 0x88, 0xb5e, 0x4, 0x0, 0x3, 0x9, 0x101, 0xff, 0x3, 0x4, 0x39aa, 0xfffffffd, 0x408, 0x9fb0, 0x400, 0x3, 0xfffffff9, 0x7, 0x8, 0x4, 0xafdb, 0x8001, 0x9, 0x0, 0x2a, 0x1d66, 0x2e77, 0x0, 0x8, 0x7, 0x6, 0x1, 0x81, 0x10, 0x40, 0x1, 0xef, 0x1, 0x9, 0xc, 0xdd5a, 0x0, 0xffff, 0x2, 0x1000, 0x3, 0x1100, 0x3, 0x4, 0x800, 0xfffffffa, 0x800, 0x7, 0x4, 0xfffffffe, 0xfffffff8, 0x81, 0x3ff, 0x7f, 0x4, 0x7, 0xffffffff, 0x0, 0x401, 0xa, 0x468, 0x1, 0xfffffff9, 0x5, 0x7, 0x8000, 0x0, 0x8, 0x0, 0x6, 0x5, 0x2, 0x2, 0x0, 0x1, 0xae9, 0xb07c, 0x13d2, 0x4, 0xfffffffe, 0xa1ef, 0x9c76, 0xf, 0x2, 0x6865e652, 0x10001, 0x0, 0xcb93, 0x1, 0x2df8, 0x2, 0x3, 0x8, 0x7f, 0x43c2, 0x9, 0x24, 0x2, 0x7, 0x3ff, 0x0, 0x5, 0xa000, 0x964, 0x1, 0x8001, 0x3, 0x7f, 0x6, 0x4, 0x0, 0x0, 0x8000, 0x1, 0x100, 0x800, 0x7, 0x2d0f, 0x6ea, 0x1, 0x34cd, 0x8, 0x8, 0x9, 0x10000, 0x7, 0x9, 0x5, 0xfffffffa, 0x9, 0x81, 0x11, 0x2, 0x10000, 0x8, 0xffffffff, 0x6, 0x200, 0x8000, 0xad, 0x9, 0x7fffffff, 0xa5, 0x101, 0x0, 0x7, 0x10, 0xa3, 0x7fffffff, 0x5, 0x2, 0x200, 0x8001, 0x0, 0x3, 0x4, 0xfffffffc, 0x4, 0x7, 0xfffffff8, 0x5, 0x0, 0x3, 0x0, 0x1, 0x100001, 0xa, 0x0, 0x0, 0x75, 0x101, 0x69cba428, 0xfff, 0x9, 0x9, 0xfffffc00, 0x1, 0x2, 0xf, 0x6, 0x208, 0x4, 0xc, 0x2, 0x37e, 0x14000, 0x3, 0x8000, 0x0, 0x0, 0x77ef, 0x800, 0x8, 0xffffffb2, 0x7ffffffe, 0x202, 0xc, 0x9, 0xfffff000, 0x7fffffff, 0xffffffff, 0x5, 0x1, 0x1000, 0x1000, 0x10, 0x9, 0x9, 0x1ff, 0x7, 0xfffffff9, 0x3, 0x80000000, 0x7, 0x40, 0x9, 0x1, 0x7, 0x0, 0x352, 0x0, 0xa, 0x3ff, 0x7, 0x2, 0x200001, 0x10001, 0xfffffff7, 0x0, 0x7, 0x8, 0x4, 0x9, 0x1, 0xe3, 0x5e48, 0x7, 0xffffffff, 0x8001, 0x805, 0xfffffff7, 0x9, 0x5, 0x3, 0x9c, 0x1, 0x2c, 0x3, 0x9, 0x7f, 0x35, 0x8d, 0x0, 0xffff, 0x6, 0x81, 0xdae, 0x8, 0x0, 0x8, 0x9, 0x0, 0x7, 0xed9a, 0x800, 0x8, 0x8, 0x8, 0xecc, 0x4622, 0xffffffc0, 0x1, 0x1, 0x1000, 0x101, 0x6, 0x6, 0xfff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x9, 0xf, 0x2, 0x5, 0x0, 0xc, 0x1cd30080, 0x9, 0xf, 0xf5b, 0x8, 0x54, 0xfffffffe, 0x3, 0xbc, 0xe]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = getpid() syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da05000000000001090224"], 0x0) kcmp$KCMP_EPOLL_TFD(r7, r6, 0x7, r5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) r8 = shmget$private(0x0, 0x4000, 0xa4, &(0x7f0000ff9000/0x4000)=nil) shmat(r8, &(0x7f0000ffe000/0x2000)=nil, 0x5000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xa, 0x7, 0x1, 0x0, "ed2e6eae3d21"}]}], {0x14}}, 0xd8}}, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003299b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045519, &(0x7f0000000480)=0x1) 15m25.31624471s ago: executing program 8 (id=2350): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x6, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_tables_names\x00') 15m23.341450214s ago: executing program 8 (id=2354): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) socket(0x18, 0x80000, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = creat(0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) write$dsp(r4, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d51396", 0x1e) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0x0, 0x20, 0xfffffffe, 0xa00001b5, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f000000a180)=""/4102, 0x1006}], 0x0, 0x1000000000000075}, 0x20) r6 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) socket$inet6(0xa, 0x3, 0x8000000003c) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 15m22.346900052s ago: executing program 40 (id=2354): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) socket(0x18, 0x80000, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = creat(0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) write$dsp(r4, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d51396", 0x1e) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0x0, 0x20, 0xfffffffe, 0xa00001b5, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f000000a180)=""/4102, 0x1006}], 0x0, 0x1000000000000075}, 0x20) r6 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) socket$inet6(0xa, 0x3, 0x8000000003c) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2m54.426536104s ago: executing program 7 (id=4450): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x12, &(0x7f0000000740)=ANY=[@ANYBLOB="184b000005000000000000000000000018120000ce66ee1d4a4e02005896bd27bc35024114c01f3bf88ae86a3556e45f64da16d1e55507aa035b8666a9852af07f8cbb7792b749cee7ec485c056fcbb5bb21f7ebdc20e68fd7b48bb6d92b4a8bd918938714a5f02d429c", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000006128fcff01000000180000001a0000000000000003000000183b0000010000000000000000000000d9cb40000400000018460000fbffffff0000000000000000185100"/120], &(0x7f0000000200)='syzkaller\x00', 0xfffffffb, 0x52, &(0x7f00000004c0)=""/82, 0x41100, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x3, 0x100, 0x4}, 0x10, 0x1fb67, 0xffffffffffffffff, 0x5, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000600)=[{0x5, 0x4, 0x3, 0xb}, {0x1, 0x2, 0x0, 0x2}, {0x3, 0x2, 0x5, 0xb}, {0x2, 0x1, 0xb, 0x3}, {0x0, 0x4, 0x4, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1a, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000080), 0x8, 0xc6, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe7a, &(0x7f00000003c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x801, 0x70bd2b, 0x1000, {0x0, 0x0, 0x0, r2}, [@IFLA_GSO_MAX_SEGS={0x0, 0x28, 0xb305}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x12, &(0x7f0000000740)=ANY=[@ANYBLOB="184b000005000000000000000000000018120000ce66ee1d4a4e02005896bd27bc35024114c01f3bf88ae86a3556e45f64da16d1e55507aa035b8666a9852af07f8cbb7792b749cee7ec485c056fcbb5bb21f7ebdc20e68fd7b48bb6d92b4a8bd918938714a5f02d429c", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000006128fcff01000000180000001a0000000000000003000000183b0000010000000000000000000000d9cb40000400000018460000fbffffff0000000000000000185100"/120], &(0x7f0000000200)='syzkaller\x00', 0xfffffffb, 0x52, &(0x7f00000004c0)=""/82, 0x41100, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x3, 0x100, 0x4}, 0x10, 0x1fb67, 0xffffffffffffffff, 0x5, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000600)=[{0x5, 0x4, 0x3, 0xb}, {0x1, 0x2, 0x0, 0x2}, {0x3, 0x2, 0x5, 0xb}, {0x2, 0x1, 0xb, 0x3}, {0x0, 0x4, 0x4, 0x4}], 0x10, 0x5}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1a, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000080), 0x8, 0xc6, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe7a, &(0x7f00000003c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x801, 0x70bd2b, 0x1000, {0x0, 0x0, 0x0, r2}, [@IFLA_GSO_MAX_SEGS={0x0, 0x28, 0xb305}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) (async) 2m53.977014185s ago: executing program 7 (id=4454): ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000000c0)={0x20, 0x2, &(0x7f0000000000)="7f3b90f2b0deaf54665c83f785f1fdf60f431a07305131be928fec8eb146d2451de31ca3d89e9c9cd051dcfe4f801f2fb2d8df2ab58795a2b9d26898f1a2a6dc80345b4869ff503442c3ae39ba0f4fa1fa9e0082c54917783eceb0efafc7868b2eafe9186efab484ba9dfdbb9ec73cb15bf81e9c1682affa8964f228d5dea526a0ac2ab09dae25a11c9b2db87951f8f03effb43441469d1d6e11f15af28486089a", 0x1ff, 0x1ff}) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x44e601, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f00000001c0)={0x8, r2}) write$sysctl(r1, &(0x7f0000000200)='6\x00', 0x2) r3 = epoll_create1(0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f0000000340)=[{0x2, 0x9000, 0xf4, &(0x7f0000000240)="4b2bfd62091250d3d86895e831fa5074f6929985ed93279dde2b4e68dcba0f32509b2659d8392476e8d458904e8aad28df245ae7706c625e2574e68469fa450c8dca4fd1a9080419da5ee50c93f736c125a802afbd98ba5c9116e0a980743c159cce3cf960da83175e3fcd85d22f10b8c9b376bfa7213ab9c7d6f8c7c0ef8bb7dec435e0c4b217e6b7b8511bb08967571a93af116968a80b28fd4c5c11ae40efa61d732a662326a5cf5fffbdf64e4d1d7b53915c383731c4553074ae9d7d9ad2833462a0ce888ada806f820c4306a56a990196856a3243b95bb79c0d4f82af46671b91bd3532a62880844627bd9323849be32fac"}], 0x1}) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000003c0)) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000440)='/dev/ttynull\x00', &(0x7f0000000480)='[]\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='#!\x00']}, &(0x7f0000000780)={[&(0x7f0000000580)='6\x00', &(0x7f00000005c0)='}y]$!!]\x00', &(0x7f0000000600)='/dev/ttynull\x00', &(0x7f0000000640)='6\x00', &(0x7f0000000680)=']$!\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='*-&\x00', &(0x7f0000000740)='^:}+\x00']}) (async) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000440)='/dev/ttynull\x00', &(0x7f0000000480)='[]\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='#!\x00']}, &(0x7f0000000780)={[&(0x7f0000000580)='6\x00', &(0x7f00000005c0)='}y]$!!]\x00', &(0x7f0000000600)='/dev/ttynull\x00', &(0x7f0000000640)='6\x00', &(0x7f0000000680)=']$!\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='*-&\x00', &(0x7f0000000740)='^:}+\x00']}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000880)={0x1ef3, 0xf47, {0xffffffffffffffff}, {}, 0x2, 0x40000000000000}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000880)={0x1ef3, 0xf47, {0xffffffffffffffff}, {0x0}, 0x2, 0x40000000000000}) lchown(&(0x7f0000000840)='./file0\x00', r5, 0x0) r6 = openat$incfs(r1, &(0x7f00000008c0)='.pending_reads\x00', 0x80202, 0x100) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1) sendmsg$NL80211_CMD_SET_WDS_PEER(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, r7, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="aa7a6b447bf4"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d02c1dc51f5a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x80) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000a80)={0xfffffffa, 0x7, 0x9a6, 0x4, 0x15, "d31795cf457f1f2c94a51301fb723460c06c64"}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000ac0), 0xa3fe, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000ac0), 0xa3fe, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r6) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x130, r9, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x18}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_open_dev$vim2m(&(0x7f0000000d40), 0x6, 0x2) close_range(r4, r3, 0x2) (async) close_range(r4, r3, 0x2) ioctl$TCXONC(r6, 0x540a, 0x1) syz_usb_connect$uac1(0x0, 0xd6, &(0x7f0000000d80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0xd, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x3}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x2, 0x3, [0x5, 0x6, 0x2], 0x42}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7f, 0x5, 0x8b, {0x7, 0x25, 0x1, 0x83, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x7, 0x3, 0x1, 0x2, "4713d5d3ba8fa87728"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0xe2c2, 0x3, "096c304e97fe"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x3, 0x77, 0x82, "12c7", "4e4a9f"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xaf, 0x3, 0x7, 0x4, "cbb266", "ea"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8067, 0x6, 0x7f, "263fd281131db2"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x3, 0x96, 0x4, "13c0f0483f9ad4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x2, 0x71, {0x7, 0x25, 0x1, 0x82, 0x44, 0x8}}}}}}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x200, 0x65, 0xc, 0xf5, 0x20, 0x2}, 0x10, &(0x7f0000000ec0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0xe0, 0x2, 0x0, 0x9f30, 0x6}]}, 0x8, [{0x7b, &(0x7f0000000f00)=@string={0x7b, 0x3, "e4b727329df55343bbd45deeb2204326a32db0592a571f0a006076741f19e60b8b557ee8d5f82821cf77f88ccacef788859af26f1429905340707aba7f92d3179fb57b9d72b210d8ebafa620d5cd1318b53d02a2ef6a53a332a20043e39946cc7e3e5197ac122bb57bce62499fedd5fe17b8fa23d8c692b5fb"}}, {0xfe, &(0x7f0000000f80)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x430}}, {0x101, &(0x7f00000010c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x41a}}]}) (async) r10 = syz_usb_connect$uac1(0x0, 0xd6, &(0x7f0000000d80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0xd, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x3}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x2, 0x3, [0x5, 0x6, 0x2], 0x42}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7f, 0x5, 0x8b, {0x7, 0x25, 0x1, 0x83, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x7, 0x3, 0x1, 0x2, "4713d5d3ba8fa87728"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0xe2c2, 0x3, "096c304e97fe"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x3, 0x77, 0x82, "12c7", "4e4a9f"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xaf, 0x3, 0x7, 0x4, "cbb266", "ea"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8067, 0x6, 0x7f, "263fd281131db2"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x3, 0x96, 0x4, "13c0f0483f9ad4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x2, 0x71, {0x7, 0x25, 0x1, 0x82, 0x44, 0x8}}}}}}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x200, 0x65, 0xc, 0xf5, 0x20, 0x2}, 0x10, &(0x7f0000000ec0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0xe0, 0x2, 0x0, 0x9f30, 0x6}]}, 0x8, [{0x7b, &(0x7f0000000f00)=@string={0x7b, 0x3, "e4b727329df55343bbd45deeb2204326a32db0592a571f0a006076741f19e60b8b557ee8d5f82821cf77f88ccacef788859af26f1429905340707aba7f92d3179fb57b9d72b210d8ebafa620d5cd1318b53d02a2ef6a53a332a20043e39946cc7e3e5197ac122bb57bce62499fedd5fe17b8fa23d8c692b5fb"}}, {0xfe, &(0x7f0000000f80)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x430}}, {0x101, &(0x7f00000010c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io$uac1(r10, &(0x7f0000001480)={0x14, &(0x7f0000001380)={0x40, 0x23, 0x7b, {0x7b, 0x3, "0ac4f2309b27dc484983a8cd4e00c174b0a051bed2e371733c576fab13db6ef1746521e0d9dadee06739c12d8232e638ae711d1a90431e879d8820fc69007d8527a789a0301703e1dda684473981cb570d5aff6d7b5353e7aa3c62b0dc8b353bcaf06bfd2b540661d93d49ca67307687fbccc42ca9d1de3e22"}}, &(0x7f0000001440)={0x0, 0x3, 0x19, @string={0x19, 0x3, "26acef0452ac3fd858f0d50d2c1afbfb03ac76e377e7b7"}}}, &(0x7f0000001740)={0x44, &(0x7f00000014c0)={0x40, 0xd, 0xaf, "7d991135f0e7b014ecfff63f84ef0e91ea3cd346e207c6dcb6dbcbecd247eab3d16e6c57df80275ae6fcfa39ca2bb1adb5b278e4b7812ce4d332446bc7d95164de080bff636909fbad1ffa84fcfc61fe58bab4b9094f851acc91bd4e857de3366dcd990ca96ada3cc127857ff52d9ecf57a5bec2e59a220f55dfe9faea81f28c92fc71e13111bfecea8470389bb8abb5bbc0fb61d60d3aad5626ef02b4fbdcb4c845ce19aca6d59f744752eac476f8"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x44}, &(0x7f0000001600)={0x20, 0x81, 0x1, '('}, &(0x7f0000001640)={0x20, 0x82, 0x1, 'l'}, &(0x7f0000001680)={0x20, 0x83, 0x2, "49f3"}, &(0x7f00000016c0)={0x20, 0x84, 0x3, "a542d5"}, &(0x7f0000001700)={0x20, 0x85, 0x3, "885266"}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000017c0), 0x480001, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000017c0), 0x480001, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000001840)={0xe, {0x8, 0x5, 0x7, 0x71, "e5d09e58653f11616d620a03b8109181d4fb691787d04731ed22c05a62eff9b55c49f132a462570e3bd6017663b13160a0bf54f448bead7a5be58f57ce727c32952f50a01666b35acd7e96f022764d10962b538bfcefcb38f9c7891c055e9a1a15a93bc01bce42862a662daee9684123e3"}}, 0x7d) (async) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000001840)={0xe, {0x8, 0x5, 0x7, 0x71, "e5d09e58653f11616d620a03b8109181d4fb691787d04731ed22c05a62eff9b55c49f132a462570e3bd6017663b13160a0bf54f448bead7a5be58f57ce727c32952f50a01666b35acd7e96f022764d10962b538bfcefcb38f9c7891c055e9a1a15a93bc01bce42862a662daee9684123e3"}}, 0x7d) 2m50.73098988s ago: executing program 7 (id=4463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x6, 0x7a, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getflags(0xffffffffffffffff, 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_wakeup_irq', 0x149282, 0x10) write$cgroup_int(r4, &(0x7f0000000040)=0x902, 0x12) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ef}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r8 = dup(0xffffffffffffffff) connect$netlink(r8, 0x0, 0x0) syz_io_uring_setup(0x6387, &(0x7f0000000280)={0x0, 0x2566, 0x200, 0x3, 0x25d}, &(0x7f0000000300), &(0x7f0000000340)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010000180080001"], 0x44}}, 0x0) 2m48.094172771s ago: executing program 1 (id=4472): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e000100000003000000000007000000", @ANYRES32, @ANYBLOB="000000000a0002000000000000000000080009"], 0x30}}, 0x0) 2m47.397520966s ago: executing program 0 (id=4473): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x0, 0x5, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$cdc_ncm(0x0, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x5, 0x30, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "ba41b1"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x21e, 0x5a, 0x3ff, 0xc0}, {0x6, 0x24, 0x1a, 0xa, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0x4, 0x9e, 0x24, 0x4, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x7b, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x75, 0x6, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x8, 0x6}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x210, 0xf, 0xf, 0xa, 0xff, 0x40}, 0xd9, &(0x7f0000000100)={0x5, 0xf, 0xd9, 0x4, [@generic={0xb5, 0x10, 0x4, "7aff6d104bd6698d17cefb62c3be198263e64a2eb78dc1ea7766db25dc354567a2c413c2f2540447079fb794705f0493d5b2d75dab792be599c5dcc805162afd93515662300ac2c088bb7d490427ed2cde6700c93bf9c9cf8e56ce63f83adaa89e6b424ebd7db5061e10008c0077a82ab061be05b066fbf32902ce1db245d8e68ef35a5f9284efb48ae150131eaea986984895ca4443218ee850b6aa81db764c7f7c27c59c7453e180e45d799d7a9e2a2ada"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x68, 0x1, 0x0, 0x400, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x7e, 0x5, 0x400}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x81, 0x4}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x407}}, {0xe0, &(0x7f00000002c0)=@string={0xe0, 0x3, "909c8ddc15d02319c602ac30404412b5373408a3a49f8e00031d798607b280274456b7083f28e03b9627eb5d9dbd65604defa7f5e20be9747a7b8c70f883ada42788605afc05915293ffda6eb5bc38f6d2872b942fd83e13d955ebbfb059956abd3831ebc6ae6bb375f49f5baf16f67a5432684a0ca62174272cdcd8f308255af37d64cad53fe8b269d060c8fe48ae14cb69502800749227f5e279067406da447e5ce4e937d4ef97444930581875f539d621e9d746a84aa5848f0d230cd3c116aaa8409cfc62b25737501fdde7d015c131546ec499262d742adca34b3d42"}}, {0x53, &(0x7f00000003c0)=@string={0x53, 0x3, "a4d1cfc82fb1ec6178186295ec88281f051e055b9e365d47b0d9c7a3bfa4f23ff8dfa50f38470f857652c1ed8d479b3be36c9c01e5c5add5cdba53d2efb5c8e6aa5e4601c646efe2ef92ff2d1e98f9d1fc"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42d}}, {0xfa, &(0x7f0000000440)=@string={0xfa, 0x3, "d79c2a76ac2359350db0064b3838940ed3decddb5bb44a4ad263e1b72fc945421179cffae8268b739bcf90d284395a7e956330f315366317858c8a34b98b1f9dee016c59aa5ef529d2c8236a784f1909b65a09ee96ed4633592c0d4baba3ab08676a8afdd2481f574610751e286c8ba4b7d6c4dff5e457d71339a30c4a892117e60cd054cb5b119d6228f95ec4323993bc55688b5bedcace854c185dd912c76c5c63f8db5da6a750457d83a612a47bce751756f48ad24a85bc1093ed3a1e54457d83c07946e3627a098169aa0b75403697f5174195a667c5b7c8d1cf56e29290cf8866eb9b3c0334ab9d159fcc03b8e0a1223063424cff3c"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xdb328fc5726301eb}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3042}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000007c0)={0x14, &(0x7f0000000700)={0x20, 0x6, 0x52, {0x52, 0x1, "94825e78e8915f1af57ca7b9dcfa8686242f072ff1ca2f132ad093f0fdc06130168a7449cd3fa33f65c8215ca4e8bc5a5462b9485254d834bc3c9de505bf118c64ff3076f6474339eb7fa14a861260c5"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000800)={0x20, 0xb, 0x5f, "3bfd4c40811726d01e857fed1901e9e5d12ddc87248734a51e43839c218aa10b2c9ce1af5c09c0b8a00e6dff822d3adbc5b40b78c345aecea8c5d7a578898cabefd44f5cd4506ebc815aaca8d7376b776dbb72bc979b30bba9225427ee3a19"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000900)={0x20, 0x80, 0x1c, {0xb08, 0xfffe, 0xffffff81, 0xe2, 0x4, 0x7, 0x5, 0x5, 0x101, 0x100, 0x200, 0x2}}, &(0x7f0000000940)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000980)={0x20, 0x83, 0x2}, &(0x7f00000009c0)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000a00)={0x20, 0x89, 0x2}}) 2m46.793449354s ago: executing program 7 (id=4475): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1, 0x0, 0x1f}}) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xa0}}, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfffffe02) 2m46.505905597s ago: executing program 3 (id=4477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) add_key$user(0x0, 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffe) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) fsopen(&(0x7f0000000040)='9p\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 2m46.421350867s ago: executing program 7 (id=4479): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) r2 = socket(0x10, 0x803, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000040)={0x80, 0x1, 0x7, 0xcb25, 0x0, 0x3}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0xffffffffffffffc8, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002d00010056271c48e28626bd7000f7dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) fsmount(0xffffffffffffffff, 0x1, 0x0) syz_emit_ethernet(0xa1, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x3, 0x11, 0x93, 0x64, 0x0, 0x6a, 0x73, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x20, 0xffffffffffffffff, [{0x1, 0x3, '!'}, {0x7, 0x2}, {0x0, 0x3, 'V'}, {0x2, 0xf, "d8dafb20acdca2a4de576e875e"}, {0x5, 0x3, '\f'}]}]}}, "fa0830f62f62df8547117220a0b0fef38b9d2fcfa83b4c9360e1c3b8809b4af3232d2876b2f39a127a434ff53470351b2f47f4a87e694d53467719daf5b7af67616e96525a67116cc0bc5372e7cafe3c7f752d5afd74db49bafacd7b56c619"}}}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m46.283269405s ago: executing program 1 (id=4480): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x700, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2m46.282139332s ago: executing program 3 (id=4481): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x802}) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000fed000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000100)={0x5, 0x802, 0x1}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x8000, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0xea, 0x3, @scatter={0x5, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/252, 0xfc}, {&(0x7f0000000140)=""/128, 0x80}, {&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000380)=""/119, 0x77}]}, &(0x7f0000000480)="669456bf5cf369f532f6b979d10374456a9ebde42492ca770be9627de86f2d5df87b4bf06c59a6fbed23a9b9beb47ff9e1e42404a038525809a9cea2c5d57f55d651e6957a36c9c799d3647dc32c7e43348d1dd17247e64db5f9acfa0ed41aae748185108eab376e7fce8c0dc6d978e19223fda1c71cad66077146fc1fe89cc984ccf9b3c8c893cd9404112048a65d9a62a5b7fa9f0f7371c02cdc0bfd63fd0ecebdab21d9885f4224901c48e25e0de33e5aa9925c42b478ced91e0b1b5d5a8e286ce6c2a5db560b0cd7c9d6780afc73e3e51b276813fc6da02fed3c7106b5d572", &(0x7f00000000c0)=""/12, 0x5, 0x10000, 0x0, &(0x7f0000000580)}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000640), 0x3a000, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r7, 0x541b, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'wg2\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000680)={0x6, 0x4, 0xb9da, 0x1}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x810, r2, 0xd7b5e000) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r4}) 2m45.500991793s ago: executing program 3 (id=4483): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000020b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc03e0000}, 0x0) 2m45.349522374s ago: executing program 3 (id=4484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = eventfd(0x5) poll(&(0x7f00000072c0)=[{r3, 0x1110}], 0x1, 0x9) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000007ffd, 0x0, 0xd4}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf0, 0x88, 0xf, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0x3, 0x1}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0xc, 0x7, 0xc, 0xff, 0x6}, 0x1b6, &(0x7f0000000880)={0x5, 0xf, 0x1b6, 0x6, [@generic={0x3e, 0x10, 0x3, "5f286e449a4e82d1311cf75fed3ed214cf33d58f40cf682f729632875b9735c1311152a13ad7b239771bc4784cc19a6a3f81d3696bde61cac915e1"}, @generic={0xd7, 0x10, 0xb, "5c6990d346576559ab906ef6e49463d947b3118cc5e22d8ccf3760ae469b6af493812bcaa91ade4c91844cc2dd277678c77e4a6a7e25af9c48f7f3e51f138e868732198cfcb643954549453eb39aa36d476043d8e591afdbf84452f459201431e1bac409d4a7da898d60704837bc82288f5da1f0510cb69a274b5777d86d066d102494005eb1025bd5eaf9913cf76b8d6d166249d643a07b3d3e55fa373fe81069c4135ec42379ac1bb3b078165ed6eca3105c93989432006ca7070bfc6fad50eb25a041059c4c7e6652a1cb25cf20d3324429c8"}, @generic={0x66, 0x10, 0xa, "9b1ff72e2b89d94f9d37b4a0ed04067609cb63c7368606fafa49ecea2f99c26d595b3e15c11332be5029322fe31a88ec4f36936c8ac7fcfe20d31c048d3f469c808f3bd7af50e14d053e3e74376cdb954b392a0358cafa5e791dce56bba442d4f6253a"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x6, 0xf, 0x4, [0x7f80cf, 0x603f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "e6bf7137f350214d2e5e891fa93c382e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x2, 0x7}]}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x444}}]}) syz_usb_ep_write(r4, 0x8, 0x4, &(0x7f00000005c0)="ff810df6") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fchown(r7, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) eventfd(0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000001f0000540000000e0001"], 0x34}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xf9ec32e8c5c393b5}}}, &(0x7f00000003c0)='GPL\x00', 0x400002}, 0x94) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r10, 0x0, 0x0, 0x80800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0xb, 0x0, 0x1, [@generic="e3"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m43.961967553s ago: executing program 0 (id=4486): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f60ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 2m43.34628124s ago: executing program 0 (id=4487): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x20000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x44}}, 0x20000010) fsopen(0x0, 0x0) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000003c40)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)="b9a04f71a7fa8d8e2e6161b4c74a0eeecdfacc35fa8c6a6e3dced06721a25aa77a2d10c90cdcbcb81e78fadd5ee4bf93cc376701eda5f6df44c6e4e6f0", 0x3d}], 0x1, 0x0, 0x0, 0x200000c4}}, {{&(0x7f00000004c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000540)="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", 0x1000}], 0x1, &(0x7f0000001640), 0x0, 0x90}}, {{&(0x7f0000001740)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000003b00)=[{&(0x7f00000017c0)="bec0a0ff9fbad920e1a998bafb3ce4fed31675d7e7abf4def76bee964ff0cff69f", 0x21}, {&(0x7f0000001540)="8a08285b9af9f8d1afc9b6476d1f2dfc2619eee6a146de7077fbf22d978f3f567cd58b8288119d5f32712449e441e81d19064281e791b4faf9c9ff5ce8ebc06d84cc5c2c12f94ed5b7190034bf0d1563f7ba96fb059560138df22d6499214155f70ac4b7fa2eb99fefd8e95ed5cb39a5b5057283ecc0972d6c8f43a03bfeeb37fe652e9cf8cf544a", 0x88}, {&(0x7f0000001940)="9060eead37c4b6aaf6fab96a09195c8e28cf2369ad7fb9d58115b485ebc2c7590f39cfce4f8c6a00f02dc37a4a1564fd6694eebc586f960b5431a4bd0ff894cdc6bc7816a9bf41ec555a", 0x4a}, {&(0x7f0000003a80)="13e46bdec9e8d69dc7b13a320c5913076fa8ec611850513d037d85428c3b052866a795bf19bb582e842b46a549ce95e3db52bcbb98c1bbed03a08a388bcff578ec710bed02aef02098ed99b30e20b67c53d5eddf15d63c2684cf454f8bc5649b115006a4869a425930f696ba3c", 0x6d}], 0x4, &(0x7f0000003b40)=[@rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r7, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [r8, r4, r7, r0, 0xffffffffffffffff]}}], 0xd8, 0x20000080}}], 0x3, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000480)={r12, 0x9}, 0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000001c0)={r12, 0x6, 0x20, 0x4, 0xffffffff00000001}, &(0x7f0000000200)=0x18) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r13, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) 2m42.785897963s ago: executing program 0 (id=4488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x59}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xb, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg(r5, 0x0, 0x40008c1) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x1208}, 0x1, 0x0, 0x0, 0x40000a0}, 0x40040c0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) openat2(r7, 0x0, &(0x7f00000002c0)={0x10100, 0x1, 0x20}, 0x18) shmctl$IPC_RMID(0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) 2m42.576270698s ago: executing program 1 (id=4489): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xe25, 0x140) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0505510, 0x0) unshare(0x2040400) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) 2m41.960507402s ago: executing program 1 (id=4490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a00010000000000000000050a000000000000000000000006001d000000000008001e80"], 0x2c}}, 0x0) r3 = socket(0x1e, 0x1, 0x0) bind$netlink(r3, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020901020000000000000000070000040800034000000007180002001400018008000100ac14141308000200ac1e01010900010073797a3100000000080006400900000000000000000000010900010073797a3000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x24040804}, 0x44) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010800000000000000000000000009000200735b7a310000000005000400010000000c000780050015000b00000005000573683a69702c706f72742c697000"/78], 0x58}}, 0x0) 2m41.457168124s ago: executing program 9 (id=4491): syz_open_dev$sndpcmp(&(0x7f0000000000), 0xa9ec, 0x200100) (async) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xa9ec, 0x200100) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="ac8b6d3314f896b769e22df7c2c0e907030849b0fe8be20cf5eafa7ac64a3661ffa6c0756645a6414334e233f5536aeb6e8d5b375ce9e02287e0b860ed07d8f0e499f8872595855ff74039bb8eaca52aea502b46c426e021c2071ba5c65c44f673b796296543111b1a729f3c5950c68a7a8a6b55b129ca972d736a10dd254de495a2c88089", 0x85}, {&(0x7f0000000100)="e658fc01837bf1b5bbb43d23785ca287d8e53460a5b8819c7bea6ec60551aea86bf9a371821d076a31fbc25c618d3544ae97c30834e0565b53ab94e62a7ab4e61dd3e74252e3cb5e97087a9d6b3768ba6ba6c3cf6fbf9dde48ffa0bd09cf614c4b17c44cd248334da2f459ef369562c290f89924b491c2c24e97e412d39d9ba577f867582b0cbf7df0c918904b28f72de5b46ad6fff3ad66e593a72f81e095e1168eee70eea80929273ece226abcdde9ea83f01336dcfd454e432292a1035921f6779fc511b5e63ade54f0929dc19c1c2488b28b0d454f94ab29887f2c43e7aac585b59f9fde0e45af8151", 0xeb}, {&(0x7f0000000200)="6628e012069ad3baf7e1577a6dc4a00794cb2302901e9b2b9ccf9f163147685f773637abe0842885942e8d943b128ace5d0578fa3207dc20711471e1afd1c15331a2775388706ce9f8082010819e436b2904eb0298226428bb80f040572e521e0f69a4d10e3ae8fd3c1b936447b6c6c7c2ac4c0cbe64b2b98fcf", 0x7a}], 0x3) (async) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="ac8b6d3314f896b769e22df7c2c0e907030849b0fe8be20cf5eafa7ac64a3661ffa6c0756645a6414334e233f5536aeb6e8d5b375ce9e02287e0b860ed07d8f0e499f8872595855ff74039bb8eaca52aea502b46c426e021c2071ba5c65c44f673b796296543111b1a729f3c5950c68a7a8a6b55b129ca972d736a10dd254de495a2c88089", 0x85}, {&(0x7f0000000100)="e658fc01837bf1b5bbb43d23785ca287d8e53460a5b8819c7bea6ec60551aea86bf9a371821d076a31fbc25c618d3544ae97c30834e0565b53ab94e62a7ab4e61dd3e74252e3cb5e97087a9d6b3768ba6ba6c3cf6fbf9dde48ffa0bd09cf614c4b17c44cd248334da2f459ef369562c290f89924b491c2c24e97e412d39d9ba577f867582b0cbf7df0c918904b28f72de5b46ad6fff3ad66e593a72f81e095e1168eee70eea80929273ece226abcdde9ea83f01336dcfd454e432292a1035921f6779fc511b5e63ade54f0929dc19c1c2488b28b0d454f94ab29887f2c43e7aac585b59f9fde0e45af8151", 0xeb}, {&(0x7f0000000200)="6628e012069ad3baf7e1577a6dc4a00794cb2302901e9b2b9ccf9f163147685f773637abe0842885942e8d943b128ace5d0578fa3207dc20711471e1afd1c15331a2775388706ce9f8082010819e436b2904eb0298226428bb80f040572e521e0f69a4d10e3ae8fd3c1b936447b6c6c7c2ac4c0cbe64b2b98fcf", 0x7a}], 0x3) r1 = signalfd4(r0, &(0x7f00000002c0)={[0x4]}, 0x8, 0x80000) r2 = syz_io_uring_setup(0x3cbf, &(0x7f00000004c0)={0x0, 0xb70, 0x2, 0x0, 0x63, 0x0, r1}, &(0x7f0000000540), &(0x7f0000000580)) r3 = fsopen(&(0x7f00000005c0)='cpuset\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000700)=0xe8) r5 = fspick(r1, &(0x7f00000008c0)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000900)={0x0, 0x0}) geteuid() (async) r7 = geteuid() getresgid(&(0x7f0000000980), &(0x7f00000009c0)=0x0, &(0x7f0000000a00)) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a40), 0x40000, 0x0) read$FUSE(r1, &(0x7f0000000a80)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = getgid() openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002ac0), 0x44440, 0x0) (async) r12 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002ac0), 0x44440, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002b00)) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002b00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002b40)={{{@in, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000002c40)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0), 0x100) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r16 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000004240)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004280), &(0x7f00000042c0)=0xc) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004280)={0x0, 0x0}, &(0x7f00000042c0)=0xc) r19 = getgid() r20 = gettid() getresuid(&(0x7f0000004300), &(0x7f0000004340), &(0x7f0000004380)=0x0) stat(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000004480)) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000004480)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000044c0)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000045c0)=0xe8) getgroups(0x5, &(0x7f0000004600)=[0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xffffffffffffffff]) sendmmsg$unix(r1, &(0x7f0000004700)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="f871b269c7ccd054477658d008846d9ddcd94a6fb00a08064d2a1d8ca2417ac377f28e2dc3a34685e08e4433c23d488e46467ea0f9d5898f4510c44c3a92c64c87048b347806ff527f754bf64c529df5d9860b0f50dc94c0ff7bead5400eec6ff7b76de2bcaa5cc346fced3ea6666fb2b2c9ad80291babdb63", 0x79}, {&(0x7f0000000400)="1c8168979d57dcedbe6f7770666e30cdb07f7fb8dbff396bef1f0c93a0f9632116e5cc080b1415d36e4b15178fe2c1337473928c6632c70e03567756137548b10c5123b8c1e0b3880af6c1a0d292b6dab2f7cfd188bf12694f9b92806d631c34560bba4160d0d5de813a939d42c11d37b0e68ec6", 0x74}], 0x2, &(0x7f0000000740)=[@rights={{0x20, 0x1, 0x1, [r0, r2, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, r3, r1, r0, r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4}}}], 0x88, 0x4000}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880), 0x0, &(0x7f0000002d40)=[@rights={{0x1c, 0x1, 0x1, [r5, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, r11}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r12, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x30, 0x1, 0x1, [r16, r0, r1, r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x138}}, {{&(0x7f0000002e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004200)=[{&(0x7f0000002f00)="83efd7c3f4c7dc2bb0d85b66c16c9f75475d5db670917e0a35779f486a00d2fe51818e421693fca975a53e1d14188052355dd49e2a4b275712a4189ea1421f847ea0c9fd8764778502bc859b23bd66e94405acdc17fe9a36b2081055c8c8c987f8670b1d7e7e907b5a36bdec6b9a7215d0f87d29f4925396101dfed0e11f89d25c5d422c29c65ceefa4292fbe55fee145d997f989352c6ab3b8b8b62b57a0b976f450ca5477a075af0ad95150bc7d07fc24b1f686841b2d8540e21e9ba160d72a49883fd63dc31614ceabbc3", 0xcc}, {&(0x7f0000003000)="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", 0xfb}, {&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000004100)="730ab3c2bbd228da886296de9fa74b6a2009fe0983f5382af5db480df97409c7a862fbee74a13e9b71416c810f622e44ad365f6d6342912ffb3697cbdc0568a33d584b95c2b107dbc5d11ea56564efc9a2bfb4c6a20fb168ccf689c344ae548be9ab80259a513cf53fb4075a730b56880ef20ba117ad9d9816aa642b0db2f753ca420e9b7015478bc20619f3b31ea5c9bfe93e3246b405667581e7c6860dd65508a90724305d3cc51b784f2f36c13a21481369878eded3a5e457b5886dd4cf88408e5e32da", 0xc5}], 0x4, &(0x7f0000004640)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, r1, r0, r1, r1, r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}], 0xc0}}], 0x3, 0x2000c0c5) (async) sendmmsg$unix(r1, &(0x7f0000004700)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="f871b269c7ccd054477658d008846d9ddcd94a6fb00a08064d2a1d8ca2417ac377f28e2dc3a34685e08e4433c23d488e46467ea0f9d5898f4510c44c3a92c64c87048b347806ff527f754bf64c529df5d9860b0f50dc94c0ff7bead5400eec6ff7b76de2bcaa5cc346fced3ea6666fb2b2c9ad80291babdb63", 0x79}, {&(0x7f0000000400)="1c8168979d57dcedbe6f7770666e30cdb07f7fb8dbff396bef1f0c93a0f9632116e5cc080b1415d36e4b15178fe2c1337473928c6632c70e03567756137548b10c5123b8c1e0b3880af6c1a0d292b6dab2f7cfd188bf12694f9b92806d631c34560bba4160d0d5de813a939d42c11d37b0e68ec6", 0x74}], 0x2, &(0x7f0000000740)=[@rights={{0x20, 0x1, 0x1, [r0, r2, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, r3, r1, r0, r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4}}}], 0x88, 0x4000}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880), 0x0, &(0x7f0000002d40)=[@rights={{0x1c, 0x1, 0x1, [r5, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, r11}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r12, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x30, 0x1, 0x1, [r16, r0, r1, r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x138}}, {{&(0x7f0000002e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004200)=[{&(0x7f0000002f00)="83efd7c3f4c7dc2bb0d85b66c16c9f75475d5db670917e0a35779f486a00d2fe51818e421693fca975a53e1d14188052355dd49e2a4b275712a4189ea1421f847ea0c9fd8764778502bc859b23bd66e94405acdc17fe9a36b2081055c8c8c987f8670b1d7e7e907b5a36bdec6b9a7215d0f87d29f4925396101dfed0e11f89d25c5d422c29c65ceefa4292fbe55fee145d997f989352c6ab3b8b8b62b57a0b976f450ca5477a075af0ad95150bc7d07fc24b1f686841b2d8540e21e9ba160d72a49883fd63dc31614ceabbc3", 0xcc}, {&(0x7f0000003000)="eace9bfe32ee20961c411311bd7726348607bbb8f9aa5f28c2c6d7b91676fec302d829a8c61c8713ccc4c0d81f9e540c6b4cdf713511808b8af2d5a3fa21a6acfef82409bbdd3938aa1c994a78ea8b97fb5424308a39d2ef39735df70841c832b84376dcf4e207f9672ca69362121481cd0dc8bf48e9f6f254a4e921f18a2437c915c3f4960429850bd0a331b7a8d2b83c416f41c55522e19260ae7dc4d62a24728f2f6f4e3d9333353d8d75965ed160d93201400ca6efe1b1b2c1819b89f6eb78d2ac647d8802ecb6f66ff133e1660b56695dc3bfc35394674d6087a3acbeba97a254589b15b5419e1e79f719a3548fbde9d66d426fe93a40f463", 0xfb}, {&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000004100)="730ab3c2bbd228da886296de9fa74b6a2009fe0983f5382af5db480df97409c7a862fbee74a13e9b71416c810f622e44ad365f6d6342912ffb3697cbdc0568a33d584b95c2b107dbc5d11ea56564efc9a2bfb4c6a20fb168ccf689c344ae548be9ab80259a513cf53fb4075a730b56880ef20ba117ad9d9816aa642b0db2f753ca420e9b7015478bc20619f3b31ea5c9bfe93e3246b405667581e7c6860dd65508a90724305d3cc51b784f2f36c13a21481369878eded3a5e457b5886dd4cf88408e5e32da", 0xc5}], 0x4, &(0x7f0000004640)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, r1, r0, r1, r1, r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}], 0xc0}}], 0x3, 0x2000c0c5) ioctl$RTC_WIE_ON(r1, 0x700f) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000047c0)={0x0, 'pimreg0\x00', 0x2}, 0x18) 2m41.257876173s ago: executing program 1 (id=4492): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f00000005c0)=0x84) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) pselect6(0x40, &(0x7f0000000080)={0x8, 0x100000000, 0x8001, 0x9, 0x0, 0x1, 0x1c0000000, 0x3ff}, 0x0, 0x0, &(0x7f0000000200), 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r2, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 2m41.028019118s ago: executing program 9 (id=4493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000002000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 2m40.832337378s ago: executing program 9 (id=4494): unshare(0x400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000140), 0x4) r1 = socket(0x1e, 0x1, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdc01, 0x1000000}, 0xc) 2m40.629959206s ago: executing program 9 (id=4495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r1, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0xd19c, 0x7f4, 0x2}) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0xd, 0xe8c, 0x7fffffffffffffff, 0x7, 0x80, 0x4]}, &(0x7f0000000080)=0x78) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xd, 0x1], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x80000000}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xffff0000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$inet6(0xa, 0x2, 0x0) 2m40.458678805s ago: executing program 9 (id=4496): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x19, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40da7, 0x79269}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1005}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb40, 0x870, 0x1, 0x2800, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000028c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r4 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x2, &(0x7f0000000040)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000018c0)={{r2}, r3, 0xe, @inherit={0x70, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0xd02e, {0x28, 0x1, 0x3, 0x7, 0x1}, [0x58, 0xb, 0x10, 0x5, 0x1f4588fe]}}, @subvolid=0x10001}) read$snapshot(r0, &(0x7f00000008c0)=""/4096, 0x1000) 2m40.405650114s ago: executing program 1 (id=4497): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r2, 0x0, &(0x7f0000000040)=""/111, 0x6f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) r3 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) (async) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f00000003c0)={0x1, "16809f2e04865e4f0eb0f0a01415a98efac4e085ab9eeec24bf1362d808125d2", 0x2, 0x1000, 0xfffffffe, 0x140000, 0x4, 0x3, 0x7fff, 0x5}) (async) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "3273f1b5c8524202904094bcf022e8c96536d50438ae0ad540951a10470a7840435c57edab7e248b6b39e59e092ec295429db752bb4b43e5ce6f9e725e721ea18bf90a5bf7856616739c3b6186a6308eceb1b85ed91233acec504eb978e38408476ebd40eb9ba2532fa51ae3d6259d2ed42da2b74b284d86b235085764385605f90d033ce840201db9324947e88691ff30f2d32d5cdecfe7acc3f724e0e540ad5b7ab65360cae67a94dc339214fc5ddc4d419600"/190}, 0xc9) (async) close_range(r3, 0xffffffffffffffff, 0x0) 2m40.213945458s ago: executing program 7 (id=4498): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000330000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/126, 0x7e, 0x0, &(0x7f00000002c0)=""/164, 0xa4}, &(0x7f0000000380)=0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) r8 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x4, 0xffff}}, 0x24, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r9 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) 2m40.169720999s ago: executing program 3 (id=4499): r0 = socket(0x28, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e6174002400028008000540000200030800024000000002080001400000000108000740000000140900010073797a30000000000900020073797a32"], 0xac}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m39.366070277s ago: executing program 9 (id=4500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) add_key$user(0x0, 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffe) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) fsopen(&(0x7f0000000040)='9p\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 2m39.365586758s ago: executing program 0 (id=4501): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xd00000}, 0x0) 2m39.22533743s ago: executing program 3 (id=4502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc00c4}, 0x14) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x444001, 0x0) r2 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x14, r5}) close_range(r2, 0xffffffffffffffff, 0x0) 2m23.303728268s ago: executing program 0 (id=4503): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000240)={r2, 0x0, r4, 0x4, 0x8, 0xfffffe01, 0x200, 0x8c4d, 0x4, 0xffff, 0x6}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) 0s ago: executing program 41 (id=4498): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000330000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/126, 0x7e, 0x0, &(0x7f00000002c0)=""/164, 0xa4}, &(0x7f0000000380)=0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) r8 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x4, 0xffff}}, 0x24, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r9 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) kernel console output (not intermixed with test programs): [ 1600.623548][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1600.673817][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.769072][ T43] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1600.854210][ T43] usb 2-1: USB disconnect, device number 122 [ 1600.864178][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1600.973148][ T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1601.022390][T25007] delete_channel: no stack [ 1601.107651][ T3483] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.166894][ T9] usb 4-1: USB disconnect, device number 38 [ 1601.199149][T20332] udevd[20332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1601.221308][ T3483] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1601.686467][T15742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1601.698140][T15742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1601.708695][T15742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1601.728287][T15742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1601.740385][T15742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1602.191969][ T3483] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.276663][ T3483] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1602.536845][T25017] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1602.808083][ T3483] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.849326][ T3483] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1603.012655][ T3483] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.027495][ T3483] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1603.196349][T14339] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1603.346593][T14339] usb 4-1: device descriptor read/64, error -71 [ 1603.429526][T25013] chnl_net:caif_netlink_parms(): no params data found [ 1603.491262][ T3483] macvlan2: left promiscuous mode [ 1603.498616][ T3483] bond0: left promiscuous mode [ 1603.507283][ T3483] bridge0: port 3(macvlan2) entered disabled state [ 1603.521983][ T3483] bridge_slave_1: left allmulticast mode [ 1603.530040][ T3483] bridge_slave_1: left promiscuous mode [ 1603.537899][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.549807][ T3483] : left allmulticast mode [ 1603.556811][ T3483] : left promiscuous mode [ 1603.561781][ T3483] bridge0: port 1() entered disabled state [ 1603.602296][ T3483] batman_adv: batadv0: Interface deactivated: gretap1 [ 1603.614266][ T3483] batadv0: mtu less than device minimum [ 1603.626413][T14339] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1603.642613][ T3483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.655442][ T3483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.667608][ T3483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.679738][ T3483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.691859][ T3483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.703536][ T3483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.715695][ T3483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.727787][ T3483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.739924][ T3483] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.761925][T25030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4165'. [ 1603.787596][T14339] usb 4-1: device descriptor read/64, error -71 [ 1603.816246][T15742] Bluetooth: hci0: command tx timeout [ 1603.829982][ T3483] bond_slave_0: left promiscuous mode [ 1603.852733][ T3483] bond_slave_1: left promiscuous mode [ 1603.907671][T14339] usb usb4-port1: attempt power cycle [ 1603.998022][ T3483] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 1604.208281][ T43] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1604.272859][ T3483] batman_adv: batadv0: Removing interface: gretap1 [ 1604.284032][T14339] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1604.332375][T14339] usb 4-1: device descriptor read/8, error -71 [ 1604.358241][ T3483] dvmrp1 (unregistering): left allmulticast mode [ 1604.387052][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.397991][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1604.409971][ T3483] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1604.410913][ T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1604.429149][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1604.439930][ T43] usb 2-1: SerialNumber: syz [ 1604.585928][T14339] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1604.629769][T14339] usb 4-1: device descriptor read/8, error -71 [ 1604.653143][T25035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4166'. [ 1604.758426][T14339] usb usb4-port1: unable to enumerate USB device [ 1604.971434][ T3483] bond0 (unregistering): left allmulticast mode [ 1604.979925][ T3483] bond_slave_0: left allmulticast mode [ 1604.986772][ T3483] bond_slave_1: left allmulticast mode [ 1605.022608][ T3483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1605.042060][ T3483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1605.054183][ T3483] bond0 (unregistering): Released all slaves [ 1605.366197][ T3483] bond1 (unregistering): Released all slaves [ 1605.553566][T25041] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4167'. [ 1605.840410][ T3483] bond2 (unregistering): Released all slaves [ 1605.873645][ T3483] bond3 (unregistering): Released all slaves [ 1605.899547][T15742] Bluetooth: hci0: command tx timeout [ 1605.963817][ T3483] bond4 (unregistering): Released all slaves [ 1606.276797][ T43] usb 2-1: 0:2 : does not exist [ 1606.302498][ T3483] tipc: Disabling bearer [ 1606.309833][ T3483] tipc: Left network mode [ 1606.414524][ T43] usb 2-1: USB disconnect, device number 123 [ 1606.563164][T18954] udevd[18954]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1606.617441][T25052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4168'. [ 1607.003527][T25051] bridge0: failed insert local address into bridge forwarding table [ 1607.442654][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.463664][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.628994][T25057] kvm: kvm [25053]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1607.656905][T25057] kvm: kvm [25053]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1607.667317][T25057] kvm: kvm [25053]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1607.682365][T25057] kvm_intel: kvm [25053]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 1607.998119][T21233] Bluetooth: hci0: command tx timeout [ 1608.171229][T25013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.257699][T25068] input: syz1 as /devices/virtual/input/input75 [ 1608.267623][T25068] FAULT_INJECTION: forcing a failure. [ 1608.267623][T25068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1608.315807][T25013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.337332][T25013] bridge_slave_0: entered allmulticast mode [ 1608.359691][T25068] CPU: 0 UID: 0 PID: 25068 Comm: syz.7.4172 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 1608.359727][T25068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1608.359738][T25068] Call Trace: [ 1608.359745][T25068] [ 1608.359753][T25068] dump_stack_lvl+0x189/0x250 [ 1608.359777][T25068] ? __pfx____ratelimit+0x10/0x10 [ 1608.359794][T25068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1608.359812][T25068] ? __pfx__printk+0x10/0x10 [ 1608.359833][T25068] ? __might_fault+0xb0/0x130 [ 1608.359863][T25068] should_fail_ex+0x414/0x560 [ 1608.359883][T25068] _copy_from_user+0x2d/0xb0 [ 1608.359906][T25068] input_event_from_user+0xb2/0x280 [ 1608.359923][T25068] ? __pfx_input_event_from_user+0x10/0x10 [ 1608.359944][T25068] ? input_event+0x8c/0xc0 [ 1608.359965][T25068] uinput_write+0x279/0xfc0 [ 1608.359991][T25068] ? __pfx_uinput_write+0x10/0x10 [ 1608.360009][T25068] ? bpf_lsm_file_permission+0x9/0x20 [ 1608.360027][T25068] ? security_file_permission+0x75/0x290 [ 1608.360051][T25068] ? rw_verify_area+0x258/0x650 [ 1608.360071][T25068] ? __pfx_uinput_write+0x10/0x10 [ 1608.360089][T25068] vfs_write+0x27b/0xa90 [ 1608.360116][T25068] ? __pfx_vfs_write+0x10/0x10 [ 1608.360137][T25068] ? __fget_files+0x2a/0x420 [ 1608.360153][T25068] ? __fget_files+0x2a/0x420 [ 1608.360165][T25068] ? __fget_files+0x3a0/0x420 [ 1608.360177][T25068] ? __fget_files+0x2a/0x420 [ 1608.360203][T25068] ksys_write+0x145/0x250 [ 1608.360225][T25068] ? __pfx_ksys_write+0x10/0x10 [ 1608.360251][T25068] ? rcu_is_watching+0x15/0xb0 [ 1608.360283][T25068] ? do_syscall_64+0xbe/0x3b0 [ 1608.360308][T25068] do_syscall_64+0xfa/0x3b0 [ 1608.360325][T25068] ? lockdep_hardirqs_on+0x9c/0x150 [ 1608.360341][T25068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.360356][T25068] ? clear_bhb_loop+0x60/0xb0 [ 1608.360374][T25068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.360389][T25068] RIP: 0033:0x7f5884f8e9a9 [ 1608.360403][T25068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1608.360416][T25068] RSP: 002b:00007f5882df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1608.360433][T25068] RAX: ffffffffffffffda RBX: 00007f58851b5fa0 RCX: 00007f5884f8e9a9 [ 1608.360444][T25068] RDX: 000000000000fe4f RSI: 0000200000000000 RDI: 0000000000000003 [ 1608.360454][T25068] RBP: 00007f5882df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1608.360463][T25068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1608.360472][T25068] R13: 0000000000000000 R14: 00007f58851b5fa0 R15: 00007f58852dfa28 [ 1608.360495][T25068] [ 1608.620022][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.967260][T25013] bridge_slave_0: entered promiscuous mode [ 1609.022614][T25069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4171'. [ 1609.061781][ T3483] mac80211_hwsim hwsim26 wlan0 (unregistering): left allmulticast mode [ 1609.496831][T21233] Bluetooth: hci5: command 0x0406 tx timeout [ 1609.614211][T25013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.626668][T25013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.634030][T25013] bridge_slave_1: entered allmulticast mode [ 1609.672269][T25013] bridge_slave_1: entered promiscuous mode [ 1609.683089][T25069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1609.949281][T25069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.056039][T15742] Bluetooth: hci0: command tx timeout [ 1610.600301][ T3483] hsr_slave_0: left promiscuous mode [ 1610.681447][ T3483] hsr_slave_1: left promiscuous mode [ 1610.731680][ T3483] batman_adv: batadv0: Interface deactivated: dummy0 [ 1610.785812][ T3483] batman_adv: batadv0: Removing interface: dummy0 [ 1610.811531][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1610.834257][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1610.869955][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1610.883796][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.963398][ T3483] veth1_vlan: left promiscuous mode [ 1610.989983][ T3483] veth0_vlan: left promiscuous mode [ 1611.018019][T25096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4176'. [ 1611.462080][ T3483] pimreg3 (unregistering): left allmulticast mode [ 1611.837819][T25102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4179'. [ 1612.145975][T10074] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1612.315975][T10074] usb 2-1: Using ep0 maxpacket: 16 [ 1612.336931][T10074] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 1612.374267][T10074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.406426][T10074] usb 2-1: Product: syz [ 1612.410671][T10074] usb 2-1: Manufacturer: syz [ 1612.461807][T10074] usb 2-1: SerialNumber: syz [ 1612.482266][T10074] usb 2-1: config 0 descriptor?? [ 1612.734439][T10015] usb 2-1: USB disconnect, device number 124 [ 1612.917959][T25074] delete_channel: no stack [ 1613.318216][T25107] kvm: kvm [25104]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1613.336385][T25107] kvm: kvm [25104]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1613.346794][T25107] kvm: kvm [25104]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1613.360600][T25107] kvm_intel: kvm [25104]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 1614.763730][T25013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1615.127828][T25013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1616.063963][T25013] team0: Port device team_slave_0 added [ 1616.350346][T25013] team0: Port device team_slave_1 added [ 1616.616133][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1616.763312][T25013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1616.789455][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.811538][T25013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1616.837569][ C0] vkms_vblank_simulate: vblank timer overrun [ 1616.875640][ T9] usb 1-1: config 0 has no interfaces? [ 1616.903790][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1617.001378][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.035894][T25013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1617.050253][ T9] usb 1-1: Product: syz [ 1617.091369][T25013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.108029][T25013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1617.160961][T25013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1617.220721][ T9] usb 1-1: Manufacturer: syz [ 1617.343426][ T9] usb 1-1: SerialNumber: syz [ 1617.414263][T25013] hsr_slave_0: entered promiscuous mode [ 1617.442318][T25013] hsr_slave_1: entered promiscuous mode [ 1617.462792][T25013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1617.509430][T25013] Cannot create hsr debugfs directory [ 1617.597037][ T9] usb 1-1: config 0 descriptor?? [ 1617.696507][ T3483] IPVS: stop unused estimator thread 0... [ 1617.832197][T10074] usb 1-1: USB disconnect, device number 29 [ 1619.058986][T25177] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 25177 comm: syz.0.4190) [ 1619.080895][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1619.080913][ T30] audit: type=1800 audit(1753538507.848:831): pid=25177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4190" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=110261 res=0 errno=0 [ 1619.643624][T25013] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1619.697709][T25013] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1619.797606][T25013] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1619.897698][T25013] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1620.481254][T25013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1620.603267][T25013] 8021q: adding VLAN 0 to HW filter on device team0 [ 1620.700677][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.707893][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1620.917967][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.925255][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1620.958453][T25220] FAULT_INJECTION: forcing a failure. [ 1620.958453][T25220] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.996371][T25220] CPU: 0 UID: 0 PID: 25220 Comm: syz.3.4198 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 1620.996403][T25220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1620.996416][T25220] Call Trace: [ 1620.996424][T25220] [ 1620.996433][T25220] dump_stack_lvl+0x189/0x250 [ 1620.996463][T25220] ? __pfx____ratelimit+0x10/0x10 [ 1620.996483][T25220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1620.996508][T25220] ? __pfx__printk+0x10/0x10 [ 1620.996542][T25220] ? __pfx___might_resched+0x10/0x10 [ 1620.996569][T25220] should_fail_ex+0x414/0x560 [ 1620.996594][T25220] should_failslab+0xa8/0x100 [ 1620.996626][T25220] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1620.996656][T25220] ? __alloc_skb+0x112/0x2d0 [ 1620.996698][T25220] __alloc_skb+0x112/0x2d0 [ 1620.996732][T25220] netlink_sendmsg+0x5c6/0xb30 [ 1620.996774][T25220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1620.996808][T25220] ? aa_sock_msg_perm+0x94/0x160 [ 1620.996833][T25220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1620.996855][T25220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1620.996887][T25220] __sock_sendmsg+0x21c/0x270 [ 1620.996916][T25220] ____sys_sendmsg+0x505/0x830 [ 1620.996943][T25220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1620.996973][T25220] ? import_iovec+0x74/0xa0 [ 1620.997006][T25220] ___sys_sendmsg+0x21f/0x2a0 [ 1620.997029][T25220] ? __pfx____sys_sendmsg+0x10/0x10 [ 1620.997088][T25220] ? __fget_files+0x2a/0x420 [ 1620.997105][T25220] ? __fget_files+0x3a0/0x420 [ 1620.997136][T25220] __x64_sys_sendmsg+0x19b/0x260 [ 1620.997159][T25220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1620.997190][T25220] ? __pfx_ksys_write+0x10/0x10 [ 1620.997223][T25220] ? do_syscall_64+0xbe/0x3b0 [ 1620.997252][T25220] do_syscall_64+0xfa/0x3b0 [ 1620.997274][T25220] ? lockdep_hardirqs_on+0x9c/0x150 [ 1620.997297][T25220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.997318][T25220] ? clear_bhb_loop+0x60/0xb0 [ 1620.997343][T25220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.997364][T25220] RIP: 0033:0x7f44c678e9a9 [ 1620.997384][T25220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1620.997402][T25220] RSP: 002b:00007f44c76a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1620.997424][T25220] RAX: ffffffffffffffda RBX: 00007f44c69b6160 RCX: 00007f44c678e9a9 [ 1620.997440][T25220] RDX: 0000000004000080 RSI: 0000200000001200 RDI: 0000000000000004 [ 1620.997455][T25220] RBP: 00007f44c76a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1620.997468][T25220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1620.997481][T25220] R13: 0000000000000001 R14: 00007f44c69b6160 R15: 00007f44c6adfa28 [ 1620.997510][T25220] [ 1621.267824][ C0] vkms_vblank_simulate: vblank timer overrun [ 1621.329101][T10074] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1621.380964][T25013] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1621.393211][T25013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1621.557760][T10074] usb 1-1: config 0 has no interfaces? [ 1621.563321][T10074] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1621.573631][T10074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.587770][T10074] usb 1-1: config 0 descriptor?? [ 1621.753328][T25013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1621.853207][T14339] usb 1-1: USB disconnect, device number 30 [ 1622.140883][T25013] veth0_vlan: entered promiscuous mode [ 1622.172758][T25013] veth1_vlan: entered promiscuous mode [ 1622.216858][T15678] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1622.281481][T25013] veth0_macvtap: entered promiscuous mode [ 1622.327139][T25013] veth1_macvtap: entered promiscuous mode [ 1622.375328][T15678] usb 4-1: device descriptor read/64, error -71 [ 1622.411251][T25013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1622.491977][T25013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1622.551034][T25013] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.595723][T25013] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.614099][T25228] netlink: 59 bytes leftover after parsing attributes in process `syz.7.4200'. [ 1622.625813][T15678] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1622.639326][T25013] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.660370][T25013] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.755827][T15678] usb 4-1: device descriptor read/64, error -71 [ 1622.875342][T15678] usb usb4-port1: attempt power cycle [ 1623.063972][ T8859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1623.123409][ T8859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1623.256687][T15678] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1623.303251][T15678] usb 4-1: device descriptor read/8, error -71 [ 1623.307677][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1623.350826][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1623.596756][T15678] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1623.676174][T15678] usb 4-1: device descriptor read/8, error -71 [ 1623.813241][T15678] usb usb4-port1: unable to enumerate USB device [ 1624.158303][T25258] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4157'. [ 1625.326933][T25275] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4208'. [ 1625.457783][T25276] kvm: kvm [25271]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1625.472087][T25276] kvm: kvm [25271]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1625.482907][T25276] kvm: kvm [25271]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1625.500500][T25276] kvm_intel: kvm [25271]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 1627.025742][ T5935] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1627.197140][ T5935] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1627.226270][ T5935] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1627.316548][ T5935] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1627.405955][ T5935] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.486786][T25289] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1627.587919][ T5935] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1627.792410][T25289] fuse: Unknown parameter 'ŒùŠ£ˆý·xòz1ª' [ 1627.820179][T25289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1627.863599][T25289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1628.351177][T25299] bridge0: entered allmulticast mode [ 1628.435607][T15678] usb 10-1: USB disconnect, device number 19 [ 1629.105822][T10015] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1629.298017][T10015] usb 1-1: config 0 has no interfaces? [ 1629.304058][T10015] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1629.411333][T10015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.442248][T10015] usb 1-1: config 0 descriptor?? [ 1629.919222][T25320] veth1_to_bond: entered allmulticast mode [ 1629.990479][T15678] usb 1-1: USB disconnect, device number 31 [ 1630.596421][T25318] veth1_to_bond: left allmulticast mode [ 1631.175759][T15742] Bluetooth: hci2: command 0x0406 tx timeout [ 1631.181980][T25313] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1631.763131][T25313] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1631.774201][T25313] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1631.782541][T25313] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1631.790092][T25313] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1631.804833][T25313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1631.812932][T25313] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1631.839300][T25313] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1632.125195][T10015] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1632.295429][T10015] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 1632.313433][T10015] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.326210][ T5935] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1632.338354][T10015] usb 1-1: config 8 has no interface number 0 [ 1632.351633][T10015] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1632.384223][T10015] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1632.420370][T10015] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1632.447343][T10015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.530788][T10015] usb 1-1: Product: syz [ 1632.545768][T10015] usb 1-1: Manufacturer: syz [ 1632.616351][T10015] usb 1-1: SerialNumber: syz [ 1632.621905][ T5935] usb 10-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1632.860672][ T5935] usb 10-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1632.881113][ T5935] usb 10-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1632.892424][ T5935] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.940215][ T5935] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1633.138273][T25368] kvm: kvm [25360]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1633.294296][T15742] Bluetooth: hci3: command 0x0406 tx timeout [ 1633.511939][ T5935] gspca_sn9c2028: read1 error -110 [ 1633.518756][ T5935] gspca_sn9c2028: read1 error -32 [ 1633.526567][ T5935] gspca_sn9c2028: read1 error -32 [ 1633.531779][ T5935] sn9c2028 10-1:220.0: probe with driver sn9c2028 failed with error -32 [ 1633.632080][T25368] kvm: kvm [25360]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1633.683698][T25368] kvm: kvm [25360]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1634.086329][T15742] Bluetooth: hci0: command 0x0c1a tx timeout [ 1634.092556][T15742] Bluetooth: hci5: command 0x0406 tx timeout [ 1634.208715][T21233] Bluetooth: hci4: command 0x0406 tx timeout [ 1634.440686][T25368] kvm_intel: kvm [25360]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 1635.182951][T14339] usb 10-1: USB disconnect, device number 20 [ 1636.295963][T25376] Bluetooth: hci0: command 0x0c1a tx timeout [ 1636.378182][T25376] Bluetooth: hci5: command 0x0406 tx timeout [ 1636.482688][T25373] delete_channel: no stack [ 1636.550382][T10015] usb 1-1: USB disconnect, device number 32 [ 1637.169586][T25393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4227'. [ 1637.344505][T25393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4227'. [ 1637.426044][T10015] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1637.504473][T25398] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4229'. [ 1637.552660][T25398] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4229'. [ 1637.628457][T10015] usb 10-1: Using ep0 maxpacket: 16 [ 1637.686283][T10015] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 1637.696267][T10015] usb 10-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.708113][T10015] usb 10-1: config 226 has 0 interfaces, different from the descriptor's value: 2 [ 1637.784124][T10015] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1637.795964][T10015] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.804138][T10015] usb 10-1: Product: syz [ 1637.809875][T10015] usb 10-1: Manufacturer: syz [ 1637.830174][T10015] usb 10-1: SerialNumber: syz [ 1638.020712][T25404] loop2: detected capacity change from 0 to 7 [ 1638.107638][T25404] Dev loop2: unable to read RDB block 7 [ 1638.223529][T25404] loop2: AHDI p1 p2 p3 [ 1638.231569][T25395] FAULT_INJECTION: forcing a failure. [ 1638.231569][T25395] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1638.253873][T25404] loop2: partition table partially beyond EOD, truncated [ 1638.272790][T25404] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1638.302960][T25395] CPU: 0 UID: 0 PID: 25395 Comm: syz.1.4228 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 1638.302992][T25395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1638.303007][T25395] Call Trace: [ 1638.303017][T25395] [ 1638.303026][T25395] dump_stack_lvl+0x189/0x250 [ 1638.303061][T25395] ? __pfx____ratelimit+0x10/0x10 [ 1638.303093][T25395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1638.303128][T25395] ? __pfx__printk+0x10/0x10 [ 1638.303176][T25395] should_fail_ex+0x414/0x560 [ 1638.303208][T25395] get_futex_key+0x8dd/0x1640 [ 1638.303252][T25395] ? __pfx_get_futex_key+0x10/0x10 [ 1638.303284][T25395] ? __lock_acquire+0xab9/0xd20 [ 1638.303328][T25395] futex_wake+0xf8/0x500 [ 1638.303371][T25395] ? __pfx_futex_wake+0x10/0x10 [ 1638.303410][T25395] ? __lock_acquire+0xab9/0xd20 [ 1638.303448][T25395] do_futex+0x395/0x420 [ 1638.303487][T25395] ? __pfx_do_futex+0x10/0x10 [ 1638.303530][T25395] ? __might_fault+0xb0/0x130 [ 1638.303565][T25395] mm_release+0x188/0x390 [ 1638.303594][T25395] ? __pfx_mm_release+0x10/0x10 [ 1638.303620][T25395] ? lockdep_hardirqs_on+0x9c/0x150 [ 1638.303660][T25395] exit_mm+0xa8/0x2c0 [ 1638.303696][T25395] ? __pfx_exit_mm+0x10/0x10 [ 1638.303733][T25395] ? rcu_is_watching+0x15/0xb0 [ 1638.303764][T25395] do_exit+0x648/0x22e0 [ 1638.303804][T25395] ? do_raw_spin_lock+0x121/0x290 [ 1638.303841][T25395] ? __pfx_do_exit+0x10/0x10 [ 1638.303890][T25395] do_group_exit+0x21c/0x2d0 [ 1638.303923][T25395] ? lockdep_hardirqs_on+0x9c/0x150 [ 1638.303949][T25395] get_signal+0x1286/0x1340 [ 1638.304059][T25395] arch_do_signal_or_restart+0x9a/0x750 [ 1638.304109][T25395] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1638.304163][T25395] ? exit_to_user_mode_loop+0x40/0x110 [ 1638.304191][T25395] exit_to_user_mode_loop+0x75/0x110 [ 1638.304218][T25395] do_syscall_64+0x2bd/0x3b0 [ 1638.304244][T25395] ? lockdep_hardirqs_on+0x9c/0x150 [ 1638.304270][T25395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1638.304293][T25395] ? clear_bhb_loop+0x60/0xb0 [ 1638.304331][T25395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1638.304351][T25395] RIP: 0033:0x7f7ba3f8e9a9 [ 1638.304372][T25395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1638.304389][T25395] RSP: 002b:00007f7ba4e57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1638.304412][T25395] RAX: fffffffffffffe00 RBX: 00007f7ba41b5fa0 RCX: 00007f7ba3f8e9a9 [ 1638.304427][T25395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1638.304440][T25395] RBP: 00007f7ba4e57090 R08: 0000000000000000 R09: 0000000000000000 [ 1638.304454][T25395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1638.304467][T25395] R13: 0000000000000000 R14: 00007f7ba41b5fa0 R15: 00007f7ba42dfa28 [ 1638.304499][T25395] [ 1638.430475][T25376] Bluetooth: hci0: command 0x0c1a tx timeout [ 1638.431815][ C0] vkms_vblank_simulate: vblank timer overrun [ 1638.668468][T25404] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1639.186515][T25417] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4234'. [ 1639.807053][T25430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4236'. [ 1641.250553][T25444] wg1: entered promiscuous mode [ 1641.258188][T25444] wg1: entered allmulticast mode [ 1641.349579][T10015] usb 10-1: USB disconnect, device number 21 [ 1641.736890][T25456] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4245'. [ 1643.621588][T25473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1643.857632][ T5935] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1643.939651][T25481] kvm: kvm [25474]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1643.953835][T25481] kvm: kvm [25474]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1643.975824][T25481] kvm: kvm [25474]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1644.012692][T25481] kvm_intel: kvm [25474]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 1644.441188][ T5935] usb 1-1: config 0 has no interfaces? [ 1644.448269][ T5935] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1644.459707][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.929446][ T5935] usb 1-1: config 0 descriptor?? [ 1644.985197][T14339] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1645.145807][T14339] usb 2-1: device descriptor read/64, error -71 [ 1645.395875][T14339] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1645.675676][T14339] usb 2-1: device descriptor read/64, error -71 [ 1645.788680][T14339] usb usb2-port1: attempt power cycle [ 1646.165923][T14339] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1646.254120][T14339] usb 2-1: device descriptor read/8, error -71 [ 1646.525667][T14339] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1646.553549][ T5935] usb 1-1: USB disconnect, device number 33 [ 1646.659174][T14339] usb 2-1: device descriptor read/8, error -71 [ 1646.734089][T25512] all: renamed from bridge_slave_0 (while UP) [ 1646.784954][T14339] usb usb2-port1: unable to enumerate USB device [ 1647.072967][T25523] veth0_to_team: entered promiscuous mode [ 1647.081932][T25522] veth0_to_team: left promiscuous mode [ 1647.097458][T10074] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1647.216652][T25526] delete_channel: no stack [ 1647.269589][T10074] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.290176][T10074] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1647.302468][T10074] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1647.320177][T10074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.333653][T10074] usb 1-1: config 0 descriptor?? [ 1647.369465][T10074] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1647.386537][T10074] dvb-usb: bulk message failed: -22 (3/0) [ 1647.407324][T10074] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1647.427927][T10074] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1647.442074][T10074] usb 1-1: media controller created [ 1647.451758][T10074] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1647.480262][T10074] dvb-usb: bulk message failed: -22 (6/0) [ 1647.502145][T10074] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1647.518188][T10074] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input76 [ 1647.549297][T10074] dvb-usb: schedule remote query interval to 150 msecs. [ 1647.570650][T25535] net_ratelimit: 10 callbacks suppressed [ 1647.570670][T25535] openvswitch: netlink: IPv4 tun info is not correct [ 1647.571632][T25514] dvb-usb: bulk message failed: -22 (2/0) [ 1647.603742][T10074] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1647.646885][T10074] usb 1-1: USB disconnect, device number 34 [ 1647.771717][T10074] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1647.836487][T25541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4266'. [ 1648.095645][T14339] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1648.160847][ T5935] IPVS: starting estimator thread 0... [ 1648.256263][T25550] IPVS: using max 38 ests per chain, 91200 per kthread [ 1648.281480][T14339] usb 10-1: config 0 has no interfaces? [ 1648.297747][T14339] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1648.388580][T14339] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.432111][T25554] random: crng reseeded on system resumption [ 1648.439623][T14339] usb 10-1: config 0 descriptor?? [ 1648.765706][T14339] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1648.938395][T14339] usb 2-1: config 0 has no interfaces? [ 1648.951195][T14339] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1648.963533][T14339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.974008][T14339] usb 2-1: Product: syz [ 1648.979865][T14339] usb 2-1: Manufacturer: syz [ 1648.986354][T14339] usb 2-1: SerialNumber: syz [ 1649.005384][T14339] usb 2-1: config 0 descriptor?? [ 1649.723596][T25566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1649.921313][ T30] audit: type=1326 audit(1753538538.688:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf5b8e9a9 code=0x7ffc0000 [ 1650.052491][ T30] audit: type=1326 audit(1753538538.718:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf5b8e9a9 code=0x7ffc0000 [ 1650.123476][ T30] audit: type=1326 audit(1753538538.718:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9bf5b8d310 code=0x7ffc0000 [ 1650.291684][ T30] audit: type=1326 audit(1753538538.718:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf5b8e9a9 code=0x7ffc0000 [ 1650.435775][ T30] audit: type=1326 audit(1753538538.718:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf5b8e9a9 code=0x7ffc0000 [ 1650.550214][ T30] audit: type=1326 audit(1753538538.718:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9bf5b8e9a9 code=0x7ffc0000 [ 1650.591996][T25575] FAULT_INJECTION: forcing a failure. [ 1650.591996][T25575] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1650.613907][T25575] CPU: 0 UID: 0 PID: 25575 Comm: syz.7.4277 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 1650.613949][T25575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1650.613963][T25575] Call Trace: [ 1650.613972][T25575] [ 1650.613982][T25575] dump_stack_lvl+0x189/0x250 [ 1650.614013][T25575] ? __pfx____ratelimit+0x10/0x10 [ 1650.614038][T25575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1650.614064][T25575] ? __pfx__printk+0x10/0x10 [ 1650.614096][T25575] ? fs_reclaim_acquire+0x7d/0x100 [ 1650.614127][T25575] should_fail_ex+0x414/0x560 [ 1650.614157][T25575] prepare_alloc_pages+0x213/0x610 [ 1650.614188][T25575] __alloc_frozen_pages_noprof+0x123/0x370 [ 1650.614216][T25575] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1650.614243][T25575] ? lockdep_hardirqs_on+0x9c/0x150 [ 1650.614270][T25575] ? policy_nodemask+0x27c/0x720 [ 1650.614298][T25575] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1650.614330][T25575] alloc_pages_mpol+0x232/0x4a0 [ 1650.614367][T25575] vma_alloc_folio_noprof+0xe4/0x200 [ 1650.614401][T25575] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1650.614446][T25575] folio_prealloc+0x30/0x180 [ 1650.614477][T25575] do_wp_page+0x1231/0x5800 [ 1650.614529][T25575] ? __pfx_do_wp_page+0x10/0x10 [ 1650.614553][T25575] ? do_raw_spin_lock+0x121/0x290 [ 1650.614594][T25575] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1650.614635][T25575] __handle_mm_fault+0x1144/0x5620 [ 1650.614685][T25575] ? __pfx___handle_mm_fault+0x10/0x10 [ 1650.614736][T25575] ? find_vma+0xe7/0x160 [ 1650.614764][T25575] ? __pfx_find_vma+0x10/0x10 [ 1650.614794][T25575] handle_mm_fault+0x40a/0x8e0 [ 1650.614835][T25575] do_user_addr_fault+0x764/0x1390 [ 1650.614874][T25575] exc_page_fault+0x76/0xf0 [ 1650.614899][T25575] asm_exc_page_fault+0x26/0x30 [ 1650.614920][T25575] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1650.614952][T25575] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1650.614970][T25575] RSP: 0018:ffffc9000b1877f8 EFLAGS: 00050206 [ 1650.614989][T25575] RAX: ffffffff84bdfa01 RBX: ffff888042864000 RCX: 0000000000001000 [ 1650.615005][T25575] RDX: 0000000000000000 RSI: ffff888042864000 RDI: 0000200000001740 [ 1650.615019][T25575] RBP: ffffc9000b187948 R08: ffff888042864fff R09: 1ffff1100850c9ff [ 1650.615035][T25575] R10: dffffc0000000000 R11: ffffed100850ca00 R12: 1ffff92001630faf [ 1650.615051][T25575] R13: 0000200000001740 R14: ffffc9000b187d88 R15: 0000000000001000 [ 1650.615075][T25575] ? _copy_to_iter+0x1a1/0x16f0 [ 1650.615109][T25575] _copy_to_iter+0x24c/0x16f0 [ 1650.615145][T25575] ? __pfx_filemap_get_pages+0x10/0x10 [ 1650.615167][T25575] ? __pfx__copy_to_iter+0x10/0x10 [ 1650.615193][T25575] ? folio_mark_accessed+0x42c/0x8b0 [ 1650.615223][T25575] ? page_copy_sane+0x16a/0x280 [ 1650.615252][T25575] copy_page_to_iter+0x10c/0x1c0 [ 1650.615284][T25575] filemap_read+0x7c0/0x11a0 [ 1650.615315][T25575] ? __pfx___schedule+0x10/0x10 [ 1650.615347][T25575] ? __pfx_filemap_read+0x10/0x10 [ 1650.615396][T25575] ? lockdep_hardirqs_on+0x9c/0x150 [ 1650.615424][T25575] ? down_read+0x1ad/0x2e0 [ 1650.615452][T25575] blkdev_read_iter+0x30a/0x440 [ 1650.615492][T25575] vfs_read+0x4d0/0x980 [ 1650.615530][T25575] ? __pfx_vfs_read+0x10/0x10 [ 1650.615574][T25575] ? __fget_files+0x2a/0x420 [ 1650.615602][T25575] ksys_read+0x145/0x250 [ 1650.615631][T25575] ? __pfx_ksys_read+0x10/0x10 [ 1650.615655][T25575] ? rcu_is_watching+0x15/0xb0 [ 1650.615683][T25575] ? do_syscall_64+0xbe/0x3b0 [ 1650.615711][T25575] do_syscall_64+0xfa/0x3b0 [ 1650.615736][T25575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.615756][T25575] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1650.615776][T25575] ? clear_bhb_loop+0x60/0xb0 [ 1650.615802][T25575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.615822][T25575] RIP: 0033:0x7f5884f8e9a9 [ 1650.615840][T25575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1650.615857][T25575] RSP: 002b:00007f5882dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1650.615878][T25575] RAX: ffffffffffffffda RBX: 00007f58851b6080 RCX: 00007f5884f8e9a9 [ 1650.615893][T25575] RDX: 0000000000002020 RSI: 0000200000001740 RDI: 000000000000000a [ 1650.615905][T25575] RBP: 00007f5882dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1650.615918][T25575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1650.615931][T25575] R13: 0000000000000000 R14: 00007f58851b6080 R15: 00007f58852dfa28 [ 1650.615964][T25575] [ 1651.056039][ C0] vkms_vblank_simulate: vblank timer overrun [ 1651.077112][ T30] audit: type=1326 audit(1753538538.718:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf5b8e9a9 code=0x7ffc0000 [ 1651.177731][ T30] audit: type=1326 audit(1753538538.718:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf5b8e9a9 code=0x7ffc0000 [ 1651.206386][T10074] usb 10-1: USB disconnect, device number 22 [ 1651.282336][T25577] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4281'. [ 1651.342208][ T30] audit: type=1326 audit(1753538538.718:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf5b8e9a9 code=0x7ffc0000 [ 1651.446172][ T30] audit: type=1326 audit(1753538538.718:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.0.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bf5b8e9a9 code=0x7ffc0000 [ 1651.473042][T14339] usb 2-1: USB disconnect, device number 3 [ 1651.619702][T25591] usb usb8: usbfs: process 25591 (syz.1.4284) did not claim interface 0 before use [ 1651.966113][ T43] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1652.399304][ T43] usb 1-1: config 0 has no interfaces? [ 1652.408559][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1652.419595][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.431655][ T43] usb 1-1: Product: syz [ 1652.453315][ T43] usb 1-1: Manufacturer: syz [ 1652.463906][ T43] usb 1-1: SerialNumber: syz [ 1652.499233][ T43] usb 1-1: config 0 descriptor?? [ 1652.586373][T10074] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1652.776400][T10074] usb 4-1: Using ep0 maxpacket: 16 [ 1652.802427][T10074] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 1652.814077][T10074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.839670][T10074] usb 4-1: Product: syz [ 1652.866191][T10074] usb 4-1: Manufacturer: syz [ 1652.873294][T10074] usb 4-1: SerialNumber: syz [ 1652.987562][T10074] usb 4-1: config 0 descriptor?? [ 1653.239718][T10074] usb 4-1: USB disconnect, device number 47 [ 1654.206714][T10074] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1654.366418][T10074] usb 4-1: Using ep0 maxpacket: 32 [ 1654.380691][T10074] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1654.447356][T10074] usb 4-1: config 0 has no interface number 0 [ 1654.453551][T10074] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1654.550379][ T43] usb 1-1: USB disconnect, device number 35 [ 1654.584249][T10074] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1654.611850][T10074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.649767][T10074] usb 4-1: Product: syz [ 1654.689808][T10074] usb 4-1: Manufacturer: syz [ 1654.722833][T10074] usb 4-1: SerialNumber: syz [ 1654.781769][T10074] usb 4-1: config 0 descriptor?? [ 1654.804291][T10074] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1654.823850][T10074] em28xx 4-1:0.132: Video interface 132 found: [ 1655.201069][T10074] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1655.836090][T10074] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 1655.850927][T10074] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1656.140759][T10074] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1656.169509][T10074] em28xx 4-1:0.132: analog set to bulk mode. [ 1656.207112][ T5935] em28xx 4-1:0.132: Registering V4L2 extension [ 1656.228078][T10074] usb 4-1: USB disconnect, device number 48 [ 1656.358693][T10074] em28xx 4-1:0.132: Disconnecting em28xx [ 1656.763148][T25644] FAULT_INJECTION: forcing a failure. [ 1656.763148][T25644] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.871134][T25644] CPU: 0 UID: 0 PID: 25644 Comm: syz.1.4296 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 1656.871165][T25644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1656.871179][T25644] Call Trace: [ 1656.871189][T25644] [ 1656.871199][T25644] dump_stack_lvl+0x189/0x250 [ 1656.871234][T25644] ? __pfx____ratelimit+0x10/0x10 [ 1656.871259][T25644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1656.871283][T25644] ? __pfx__printk+0x10/0x10 [ 1656.871315][T25644] ? __pfx___might_resched+0x10/0x10 [ 1656.871340][T25644] ? fs_reclaim_acquire+0x7d/0x100 [ 1656.871366][T25644] should_fail_ex+0x414/0x560 [ 1656.871394][T25644] should_failslab+0xa8/0x100 [ 1656.871435][T25644] __kmalloc_noprof+0xcb/0x4f0 [ 1656.871461][T25644] ? l2tp_session_create+0x44/0xd60 [ 1656.871497][T25644] l2tp_session_create+0x44/0xd60 [ 1656.871537][T25644] pppol2tp_connect+0xc2e/0x1750 [ 1656.871568][T25644] ? __pfx_pppol2tp_connect+0x10/0x10 [ 1656.871587][T25644] ? aa_sk_perm+0x81e/0x950 [ 1656.871607][T25644] ? __might_fault+0xb0/0x130 [ 1656.871638][T25644] ? __pfx_aa_sk_perm+0x10/0x10 [ 1656.871669][T25644] ? bpf_lsm_socket_connect+0x9/0x20 [ 1656.871696][T25644] __sys_connect+0x316/0x440 [ 1656.871726][T25644] ? __fget_files+0x3a0/0x420 [ 1656.871746][T25644] ? __pfx___sys_connect+0x10/0x10 [ 1656.871789][T25644] ? __pfx_ksys_write+0x10/0x10 [ 1656.871815][T25644] ? rcu_is_watching+0x15/0xb0 [ 1656.871848][T25644] __x64_sys_connect+0x7a/0x90 [ 1656.871879][T25644] do_syscall_64+0xfa/0x3b0 [ 1656.871902][T25644] ? lockdep_hardirqs_on+0x9c/0x150 [ 1656.871925][T25644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.871945][T25644] ? clear_bhb_loop+0x60/0xb0 [ 1656.871971][T25644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.871992][T25644] RIP: 0033:0x7f7ba3f8e9a9 [ 1656.872011][T25644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1656.872027][T25644] RSP: 002b:00007f7ba4e57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1656.872047][T25644] RAX: ffffffffffffffda RBX: 00007f7ba41b5fa0 RCX: 00007f7ba3f8e9a9 [ 1656.872063][T25644] RDX: 0000000000000032 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1656.872077][T25644] RBP: 00007f7ba4e57090 R08: 0000000000000000 R09: 0000000000000000 [ 1656.872091][T25644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1656.872104][T25644] R13: 0000000000000000 R14: 00007f7ba41b5fa0 R15: 00007f7ba42dfa28 [ 1656.872137][T25644] [ 1657.117665][ C0] vkms_vblank_simulate: vblank timer overrun [ 1657.238432][T25650] veth5: entered promiscuous mode [ 1657.444029][ T5935] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1657.457765][ T5935] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1657.473747][ T5935] em28xx 4-1:0.132: No AC97 audio processor [ 1657.512773][ T5935] usb 4-1: Decoder not found [ 1657.533050][ T5935] em28xx 4-1:0.132: failed to create media graph [ 1657.558197][ T5935] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1657.572755][ T5935] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1657.583641][T10074] em28xx 4-1:0.132: Closing input extension [ 1657.618700][T25658] "syz.9.4299" (25658) uses obsolete ecb(arc4) skcipher [ 1657.627512][T25656] "syz.1.4301" (25656) uses obsolete ecb(arc4) skcipher [ 1657.627594][T10074] em28xx 4-1:0.132: Freeing device [ 1658.096206][ T1210] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1658.316106][ T1210] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.367804][ T1210] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1658.500239][ T1210] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1658.721504][T25665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1658.729908][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.839438][T25668] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1658.881929][ T1210] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1659.089722][T25659] delete_channel: no stack [ 1659.147280][ T1210] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1659.217109][T18954] udevd[18954]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1659.238543][ T1210] usb 1-1: USB disconnect, device number 36 [ 1659.436377][T25234] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1659.606280][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1659.632822][T25234] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1659.643884][T25234] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1659.670120][T25234] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1659.760003][T25234] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1659.798569][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1659.809870][ T43] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1659.821141][T25234] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.903839][ T43] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1659.916871][T25234] usb 10-1: Product: syz [ 1659.916898][T25234] usb 10-1: Manufacturer: syz [ 1659.916915][T25234] usb 10-1: SerialNumber: syz [ 1659.972991][T25234] hub 10-1:1.0: bad descriptor, ignoring hub [ 1660.001349][T25234] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1660.256425][T25234] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1660.561059][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1660.607776][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.716108][ T43] usb 2-1: Product: syz [ 1660.738374][ T43] usb 2-1: Manufacturer: syz [ 1660.884373][ T43] usb 2-1: SerialNumber: syz [ 1661.234054][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1661.297929][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.518562][ T43] usb 2-1: can't set config #1, error -71 [ 1661.539136][ T43] usb 2-1: USB disconnect, device number 4 [ 1661.643474][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1661.726441][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.002175][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1662.016393][T10074] usb 10-1: USB disconnect, device number 23 [ 1662.026585][T10074] usblp0: removed [ 1662.054219][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.303027][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1662.381643][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.816215][T10074] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1662.976466][ T1210] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1663.048336][T10074] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.086271][T10074] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1663.162150][T10074] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1663.173587][T10074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.203307][ T1210] usb 10-1: Using ep0 maxpacket: 32 [ 1663.220429][T10074] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1663.231568][ T1210] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1663.282175][ T1210] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.310576][T10074] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1663.325709][T14339] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1663.331572][ T1210] usb 10-1: config 0 descriptor?? [ 1663.389544][ T1210] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1663.469444][T25682] delete_channel: no stack [ 1663.493882][T10074] usb 2-1: USB disconnect, device number 5 [ 1663.557091][T14339] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 1663.565800][T14339] usb 1-1: config 0 has no interface number 0 [ 1663.638659][T14339] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 1663.663442][T14339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.739421][T25693] kvm: kvm [25690]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1663.858604][T14339] usb 1-1: Product: syz [ 1663.889642][T14339] usb 1-1: Manufacturer: syz [ 1663.926501][T14339] usb 1-1: SerialNumber: syz [ 1663.951954][T14339] usb 1-1: config 0 descriptor?? [ 1663.997346][T14339] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1664.041554][T14339] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 1664.626918][T25010] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1664.643341][T25010] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1664.670032][T25010] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1664.727825][T25010] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1664.776386][T25010] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1665.995233][T10015] usb 10-1: USB disconnect, device number 24 [ 1666.103980][T25712] "syz.9.4313" (25712) uses obsolete ecb(arc4) skcipher [ 1666.491002][T25719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1666.765680][T10015] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1667.002887][T25376] Bluetooth: hci1: command tx timeout [ 1667.057905][T10015] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1667.085825][T10015] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1667.107748][T10015] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1667.251030][ T13] bond0 (unregistering): Released all slaves [ 1667.268914][T10015] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1667.285650][T10015] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.330964][T10015] usb 10-1: Product: syz [ 1667.337815][T10015] usb 10-1: Manufacturer: syz [ 1667.365561][T10015] usb 10-1: SerialNumber: syz [ 1667.391553][T10015] hub 10-1:1.0: bad descriptor, ignoring hub [ 1667.413822][T10015] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1667.624890][T10015] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1667.899308][ T13] bond1 (unregistering): Released all slaves [ 1668.195607][ T13] bond2 (unregistering): Released all slaves [ 1668.817503][ T13] tipc: Disabling bearer [ 1668.838530][ T13] tipc: Left network mode [ 1668.883689][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.890995][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.017351][T25376] Bluetooth: hci1: command tx timeout [ 1669.118844][T25736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4315'. [ 1669.710251][ T5935] usb 1-1: USB disconnect, device number 37 [ 1669.855996][T10015] usb 10-1: USB disconnect, device number 25 [ 1669.876353][T10015] usblp0: removed [ 1669.982449][T25743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1670.000694][ T13] hsr_slave_0: left promiscuous mode [ 1670.042482][ T13] hsr_slave_1: left promiscuous mode [ 1670.309691][ T13] veth1_vlan: left promiscuous mode [ 1671.113665][T25376] Bluetooth: hci1: command tx timeout [ 1672.540474][T25752] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4317'. [ 1672.763028][T25704] chnl_net:caif_netlink_parms(): no params data found [ 1672.803660][T25773] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4321'. [ 1672.869437][T25773] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4321'. [ 1672.986648][T25773] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4321'. [ 1673.088921][T25780] kvm: kvm [25774]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1673.111412][T25780] kvm: kvm [25774]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1673.123917][T25780] kvm: kvm [25774]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1673.140769][T25780] kvm_intel: kvm [25774]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 1673.176590][T25376] Bluetooth: hci1: command tx timeout [ 1673.911543][T25704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.966501][T25704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.038822][T25704] bridge_slave_0: entered allmulticast mode [ 1674.082323][T25704] bridge_slave_0: entered promiscuous mode [ 1674.164050][T25704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.219864][T25704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.229159][T25815] "syz.9.4328" (25815) uses obsolete ecb(arc4) skcipher [ 1674.256208][T25704] bridge_slave_1: entered allmulticast mode [ 1674.266961][T25704] bridge_slave_1: entered promiscuous mode [ 1674.590200][ T13] IPVS: stop unused estimator thread 0... [ 1674.901951][T25824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1675.152241][T25704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.265507][T10015] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1675.300043][T25704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.480829][T10015] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1675.528555][T10015] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1675.554692][T25829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4329'. [ 1675.593672][T25704] team0: Port device team_slave_0 added [ 1675.614428][T10015] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1675.652753][T25704] team0: Port device team_slave_1 added [ 1675.720638][T10015] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1675.788798][T10015] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.829703][T10015] usb 10-1: Product: syz [ 1675.845068][T10015] usb 10-1: Manufacturer: syz [ 1675.867992][T10015] usb 10-1: SerialNumber: syz [ 1675.938898][T10015] hub 10-1:1.0: bad descriptor, ignoring hub [ 1675.946920][T10015] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1676.160800][T10015] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1676.280269][T25704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1676.575687][T25704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.615901][T25835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4330'. [ 1676.642741][T25704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1676.730613][T25842] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4331'. [ 1677.417552][T25704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.446262][T25704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.683401][T25704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.978533][T25845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1678.446257][T25704] hsr_slave_0: entered promiscuous mode [ 1678.466291][ T1210] usb 10-1: USB disconnect, device number 26 [ 1678.483162][T25704] hsr_slave_1: entered promiscuous mode [ 1678.484024][ T1210] usblp0: removed [ 1678.542452][T25852] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4334'. [ 1678.828614][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4333'. [ 1678.905919][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4333'. [ 1678.983634][T25858] FAULT_INJECTION: forcing a failure. [ 1678.983634][T25858] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1679.009862][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4333'. [ 1679.036760][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4333'. [ 1679.057271][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4333'. [ 1679.068302][T25858] CPU: 1 UID: 0 PID: 25858 Comm: syz.1.4336 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 1679.068334][T25858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1679.068348][T25858] Call Trace: [ 1679.068356][T25858] [ 1679.068366][T25858] dump_stack_lvl+0x189/0x250 [ 1679.068397][T25858] ? __pfx____ratelimit+0x10/0x10 [ 1679.068421][T25858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1679.068445][T25858] ? __pfx__printk+0x10/0x10 [ 1679.068475][T25858] ? fs_reclaim_acquire+0x7d/0x100 [ 1679.068505][T25858] should_fail_ex+0x414/0x560 [ 1679.068534][T25858] prepare_alloc_pages+0x213/0x610 [ 1679.068564][T25858] __alloc_frozen_pages_noprof+0x123/0x370 [ 1679.068592][T25858] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1679.068625][T25858] ? policy_nodemask+0x27c/0x720 [ 1679.068653][T25858] ? __lock_acquire+0xab9/0xd20 [ 1679.068680][T25858] alloc_pages_mpol+0x232/0x4a0 [ 1679.068714][T25858] vma_alloc_folio_noprof+0xe4/0x200 [ 1679.068755][T25858] ? page_table_check_set+0x18d/0x730 [ 1679.068786][T25858] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1679.068830][T25858] folio_prealloc+0x30/0x180 [ 1679.068859][T25858] __handle_mm_fault+0x2c88/0x5620 [ 1679.068908][T25858] ? __pfx___handle_mm_fault+0x10/0x10 [ 1679.068950][T25858] ? follow_page_pte+0x8d6/0x14b0 [ 1679.068992][T25858] handle_mm_fault+0x40a/0x8e0 [ 1679.069032][T25858] __get_user_pages+0x1af4/0x30b0 [ 1679.069095][T25858] ? __pfx___get_user_pages+0x10/0x10 [ 1679.069121][T25858] ? __gup_longterm_locked+0xbf7/0x15b0 [ 1679.069147][T25858] ? down_read_killable+0x1d1/0x350 [ 1679.069173][T25858] ? try_get_folio+0x633/0x660 [ 1679.069202][T25858] __gup_longterm_locked+0xd66/0x15b0 [ 1679.069234][T25858] ? try_grab_folio_fast+0x35b/0x4f0 [ 1679.069265][T25858] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 1679.069299][T25858] gup_fast_fallback+0x1cd4/0x2260 [ 1679.069363][T25858] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1679.069396][T25858] ? rcu_is_watching+0x15/0xb0 [ 1679.069421][T25858] ? is_valid_gup_args+0x11f/0x200 [ 1679.069449][T25858] ? pin_user_pages_fast+0x4d/0xb0 [ 1679.069479][T25858] rds_info_getsockopt+0x1fb/0x470 [ 1679.069512][T25858] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1679.069541][T25858] ? __might_fault+0xb0/0x130 [ 1679.069574][T25858] ? rds_getsockopt+0x31d/0x500 [ 1679.069606][T25858] ? __pfx_rds_getsockopt+0x10/0x10 [ 1679.069638][T25858] do_sock_getsockopt+0x36f/0x450 [ 1679.069675][T25858] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1679.069707][T25858] ? do_syscall_64+0x20/0x3b0 [ 1679.069739][T25858] ? __fget_files+0x3a0/0x420 [ 1679.069757][T25858] ? __fget_files+0x2a/0x420 [ 1679.069784][T25858] __x64_sys_getsockopt+0x1a5/0x250 [ 1679.069815][T25858] ? do_syscall_64+0x20/0x3b0 [ 1679.069841][T25858] ? do_syscall_64+0x20/0x3b0 [ 1679.069869][T25858] do_syscall_64+0xfa/0x3b0 [ 1679.069892][T25858] ? lockdep_hardirqs_on+0x9c/0x150 [ 1679.069915][T25858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.069936][T25858] ? clear_bhb_loop+0x60/0xb0 [ 1679.069962][T25858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.069982][T25858] RIP: 0033:0x7f7ba3f8e9a9 [ 1679.070002][T25858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1679.070022][T25858] RSP: 002b:00007f7ba4dd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1679.070044][T25858] RAX: ffffffffffffffda RBX: 00007f7ba41b6080 RCX: 00007f7ba3f8e9a9 [ 1679.070060][T25858] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000005 [ 1679.070074][T25858] RBP: 00007f7ba4dd1090 R08: 00002000000000c0 R09: 0000000000000000 [ 1679.070088][T25858] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 1679.070101][T25858] R13: 0000000000000000 R14: 00007f7ba41b6080 R15: 00007f7ba42dfa28 [ 1679.070134][T25858] [ 1679.465744][T25851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4333'. [ 1679.960665][T25869] FAULT_INJECTION: forcing a failure. [ 1679.960665][T25869] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.058481][T25869] CPU: 0 UID: 0 PID: 25869 Comm: syz.0.4338 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 1680.058514][T25869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1680.058528][T25869] Call Trace: [ 1680.058537][T25869] [ 1680.058547][T25869] dump_stack_lvl+0x189/0x250 [ 1680.058578][T25869] ? __pfx____ratelimit+0x10/0x10 [ 1680.058603][T25869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1680.058628][T25869] ? __pfx__printk+0x10/0x10 [ 1680.058668][T25869] ? __pfx___might_resched+0x10/0x10 [ 1680.058699][T25869] should_fail_ex+0x414/0x560 [ 1680.058728][T25869] should_failslab+0xa8/0x100 [ 1680.058766][T25869] __kmalloc_noprof+0xcb/0x4f0 [ 1680.058794][T25869] ? __kasan_kmalloc+0x93/0xb0 [ 1680.058821][T25869] ? nla_strdup+0x9d/0x140 [ 1680.058852][T25869] nla_strdup+0x9d/0x140 [ 1680.058879][T25869] nf_tables_newchain+0x1998/0x2900 [ 1680.058920][T25869] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1680.058985][T25869] ? nfnl_pernet+0x23/0x240 [ 1680.059020][T25869] ? __nla_parse+0x40/0x60 [ 1680.059051][T25869] nfnetlink_rcv+0x112f/0x2520 [ 1680.059111][T25869] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1680.059154][T25869] ? ref_tracker_free+0x63a/0x7d0 [ 1680.059212][T25869] ? __netlink_deliver_tap+0x807/0x850 [ 1680.059252][T25869] ? netlink_deliver_tap+0x2e/0x1b0 [ 1680.059281][T25869] ? netlink_deliver_tap+0x2e/0x1b0 [ 1680.059317][T25869] netlink_unicast+0x75c/0x8e0 [ 1680.059357][T25869] netlink_sendmsg+0x805/0xb30 [ 1680.059397][T25869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1680.059431][T25869] ? aa_sock_msg_perm+0x94/0x160 [ 1680.059457][T25869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1680.059479][T25869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1680.059511][T25869] __sock_sendmsg+0x21c/0x270 [ 1680.059540][T25869] ____sys_sendmsg+0x505/0x830 [ 1680.059567][T25869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1680.059598][T25869] ? import_iovec+0x74/0xa0 [ 1680.059632][T25869] ___sys_sendmsg+0x21f/0x2a0 [ 1680.059656][T25869] ? __pfx____sys_sendmsg+0x10/0x10 [ 1680.059717][T25869] ? __fget_files+0x2a/0x420 [ 1680.059734][T25869] ? __fget_files+0x3a0/0x420 [ 1680.059765][T25869] __x64_sys_sendmsg+0x19b/0x260 [ 1680.059789][T25869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1680.059821][T25869] ? __pfx_ksys_write+0x10/0x10 [ 1680.059847][T25869] ? rcu_is_watching+0x15/0xb0 [ 1680.059878][T25869] ? do_syscall_64+0xbe/0x3b0 [ 1680.059906][T25869] do_syscall_64+0xfa/0x3b0 [ 1680.059929][T25869] ? lockdep_hardirqs_on+0x9c/0x150 [ 1680.059952][T25869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.059979][T25869] ? clear_bhb_loop+0x60/0xb0 [ 1680.060005][T25869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.060024][T25869] RIP: 0033:0x7f9bf5b8e9a9 [ 1680.060043][T25869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1680.060061][T25869] RSP: 002b:00007f9bf6a6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1680.060084][T25869] RAX: ffffffffffffffda RBX: 00007f9bf5db5fa0 RCX: 00007f9bf5b8e9a9 [ 1680.060100][T25869] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1680.060113][T25869] RBP: 00007f9bf6a6b090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.060126][T25869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1680.060139][T25869] R13: 0000000000000000 R14: 00007f9bf5db5fa0 R15: 00007f9bf5edfa28 [ 1680.060172][T25869] [ 1680.391026][ C0] vkms_vblank_simulate: vblank timer overrun [ 1680.637522][T25867] __nla_validate_parse: 47 callbacks suppressed [ 1680.637542][T25867] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4339'. [ 1680.711721][T25867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1680.896717][T25867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1680.948426][T10015] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1681.441401][T10015] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1681.452218][T10015] usb 10-1: no configurations [ 1681.477318][T10015] usb 10-1: can't read configurations, error -22 [ 1682.417827][T25902] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4343'. [ 1682.845899][T10015] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1683.045941][T10015] usb 10-1: Using ep0 maxpacket: 16 [ 1683.244522][T25704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1683.426309][T25704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1683.532810][T25909] input: syz0 as /devices/virtual/input/input77 [ 1683.598717][T25704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1684.187661][T25704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1684.199839][T25914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4344'. [ 1684.229197][T25918] "syz.7.4345" (25918) uses obsolete ecb(arc4) skcipher [ 1684.957243][T25921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1685.310952][T25927] netlink: 'syz.0.4346': attribute type 1 has an invalid length. [ 1685.681621][T25704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1685.831835][T25704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.033932][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.041309][ T8859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.169791][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.176995][ T5953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.368528][T10015] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1686.460819][T10015] usb 10-1: no configurations [ 1686.481411][T10015] usb 10-1: can't read configurations, error -22 [ 1686.805749][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1686.805768][ T30] audit: type=1800 audit(1753538575.568:853): pid=25953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4350" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1687.070788][T25704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.319804][T25704] veth0_vlan: entered promiscuous mode [ 1687.423291][T25704] veth1_vlan: entered promiscuous mode [ 1687.635382][T25704] veth0_macvtap: entered promiscuous mode [ 1687.673170][T25704] veth1_macvtap: entered promiscuous mode [ 1687.827094][T25704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1687.882359][T25704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1687.988607][T25704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.126151][T25704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.281708][T25704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.315647][T25234] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1688.355815][T25704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.455791][T25234] usb 2-1: device descriptor read/64, error -71 [ 1688.529888][T25975] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4355'. [ 1688.588724][T25975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1688.705126][T25234] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1688.798993][T25975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.845860][ T5935] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1688.866622][T25234] usb 2-1: device descriptor read/64, error -71 [ 1688.975407][T25234] usb usb2-port1: attempt power cycle [ 1689.022218][ T5935] usb 10-1: Using ep0 maxpacket: 16 [ 1689.038593][ T5935] usb 10-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 1689.125609][ T5935] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.160890][ T5935] usb 10-1: Product: syz [ 1689.200724][ T5935] usb 10-1: Manufacturer: syz [ 1689.210884][ T5935] usb 10-1: SerialNumber: syz [ 1689.224287][ T5935] usb 10-1: config 0 descriptor?? [ 1689.332842][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.337587][T25234] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1689.366925][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.430295][T25234] usb 2-1: device descriptor read/8, error -71 [ 1689.460366][T10015] usb 10-1: USB disconnect, device number 31 [ 1689.618145][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.640892][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.726916][T25234] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1689.941507][T25234] usb 2-1: device descriptor read/8, error -71 [ 1690.095476][T25234] usb usb2-port1: unable to enumerate USB device [ 1691.169487][T10074] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1691.394108][T10074] usb 1-1: config 0 has no interfaces? [ 1691.447959][T10074] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1691.466578][T10074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.503668][T10074] usb 1-1: Product: syz [ 1691.512501][T10074] usb 1-1: Manufacturer: syz [ 1691.528802][T10074] usb 1-1: SerialNumber: syz [ 1691.546730][T10074] usb 1-1: config 0 descriptor?? [ 1692.485897][ T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1692.659484][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1692.701373][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.748462][ T43] usb 2-1: config 0 descriptor?? [ 1693.019846][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 1693.038299][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1693.092101][ T43] usb 2-1: USB disconnect, device number 10 [ 1693.772648][T25234] usb 1-1: USB disconnect, device number 38 [ 1693.952453][T26051] @: renamed from vlan0 (while UP) [ 1694.136560][T26056] FAULT_INJECTION: forcing a failure. [ 1694.136560][T26056] name failslab, interval 1, probability 0, space 0, times 0 [ 1694.196060][T26060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4373'. [ 1694.201842][T26056] CPU: 0 UID: 0 PID: 26056 Comm: syz.0.4371 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 1694.201878][T26056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1694.201894][T26056] Call Trace: [ 1694.201905][T26056] [ 1694.201916][T26056] dump_stack_lvl+0x189/0x250 [ 1694.201951][T26056] ? __pfx____ratelimit+0x10/0x10 [ 1694.201978][T26056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1694.202014][T26056] ? __pfx__printk+0x10/0x10 [ 1694.202056][T26056] ? ref_tracker_alloc+0x318/0x460 [ 1694.202086][T26056] should_fail_ex+0x414/0x560 [ 1694.202116][T26056] should_failslab+0xa8/0x100 [ 1694.202154][T26056] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1694.202186][T26056] ? skb_clone+0x212/0x3a0 [ 1694.202215][T26056] skb_clone+0x212/0x3a0 [ 1694.202243][T26056] __netlink_deliver_tap+0x404/0x850 [ 1694.202291][T26056] ? netlink_deliver_tap+0x2e/0x1b0 [ 1694.202327][T26056] netlink_deliver_tap+0x19c/0x1b0 [ 1694.202362][T26056] netlink_unicast+0x730/0x8e0 [ 1694.202406][T26056] netlink_sendmsg+0x805/0xb30 [ 1694.202452][T26056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1694.202490][T26056] ? aa_sock_msg_perm+0x94/0x160 [ 1694.202518][T26056] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1694.202544][T26056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1694.202577][T26056] __sock_sendmsg+0x21c/0x270 [ 1694.202610][T26056] ____sys_sendmsg+0x505/0x830 [ 1694.202640][T26056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1694.202674][T26056] ? import_iovec+0x74/0xa0 [ 1694.202711][T26056] ___sys_sendmsg+0x21f/0x2a0 [ 1694.202737][T26056] ? __pfx____sys_sendmsg+0x10/0x10 [ 1694.202804][T26056] ? __fget_files+0x2a/0x420 [ 1694.202824][T26056] ? __fget_files+0x3a0/0x420 [ 1694.202864][T26056] __x64_sys_sendmsg+0x19b/0x260 [ 1694.202890][T26056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1694.202925][T26056] ? __pfx_ksys_write+0x10/0x10 [ 1694.202953][T26056] ? rcu_is_watching+0x15/0xb0 [ 1694.202987][T26056] ? do_syscall_64+0xbe/0x3b0 [ 1694.203027][T26056] do_syscall_64+0xfa/0x3b0 [ 1694.203052][T26056] ? lockdep_hardirqs_on+0x9c/0x150 [ 1694.203076][T26056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.203100][T26056] ? clear_bhb_loop+0x60/0xb0 [ 1694.203129][T26056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.203152][T26056] RIP: 0033:0x7f9bf5b8e9a9 [ 1694.203175][T26056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1694.203195][T26056] RSP: 002b:00007f9bf6a6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1694.203223][T26056] RAX: ffffffffffffffda RBX: 00007f9bf5db5fa0 RCX: 00007f9bf5b8e9a9 [ 1694.203240][T26056] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000004 [ 1694.203256][T26056] RBP: 00007f9bf6a6b090 R08: 0000000000000000 R09: 0000000000000000 [ 1694.203272][T26056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1694.203285][T26056] R13: 0000000000000000 R14: 00007f9bf5db5fa0 R15: 00007f9bf5edfa28 [ 1694.203320][T26056] [ 1694.695722][ T43] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1694.855088][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1694.892798][ T43] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1694.915647][ T43] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1694.952986][ T43] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1695.046986][ T43] usb 4-1: config 250 has no interface number 0 [ 1695.053360][ T43] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1695.125612][ T43] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1695.163750][ T43] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 1695.195110][T14339] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1695.208940][T26078] netlink: 'syz.1.4378': attribute type 2 has an invalid length. [ 1695.236093][ T43] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1695.247938][T10015] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 1695.280220][ T43] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1695.353222][ T43] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1695.380616][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1695.381126][T26080] hsr0: entered promiscuous mode [ 1695.391961][ T43] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1695.432883][T10015] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.451377][T26080] macvlan2: entered allmulticast mode [ 1695.459872][T10015] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1695.474544][ T43] usb 4-1: Product: syz [ 1695.479025][T14339] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1695.496243][T14339] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.499159][T26080] hsr0: entered allmulticast mode [ 1695.504570][ T43] usb 4-1: SerialNumber: syz [ 1695.516324][T10015] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1695.516358][T10015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.518083][T14339] usb 10-1: Product: syz [ 1695.547286][T10015] usb 1-1: config 0 descriptor?? [ 1695.603914][ T43] hub 4-1:250.228: bad descriptor, ignoring hub [ 1695.611595][T26080] hsr_slave_0: entered allmulticast mode [ 1695.621226][T10015] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1695.641955][ T43] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1695.663779][T14339] usb 10-1: Manufacturer: syz [ 1695.676991][T10015] dvb-usb: bulk message failed: -22 (3/0) [ 1695.688092][T14339] usb 10-1: SerialNumber: syz [ 1695.704048][T26080] hsr_slave_1: entered allmulticast mode [ 1695.711758][T10015] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1695.733297][T14339] usb 10-1: config 0 descriptor?? [ 1695.749106][T10015] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1695.762473][T26072] dvb-usb: bulk message failed: -22 (2/0) [ 1695.762793][T14339] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 032 [ 1695.785597][T26062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.803928][T10015] usb 1-1: media controller created [ 1695.813279][T26080] hsr0: left allmulticast mode [ 1695.819895][T26062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.833358][T10015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1695.850306][T26062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.861670][T26080] hsr_slave_0: left allmulticast mode [ 1695.876913][T26080] hsr_slave_1: left allmulticast mode [ 1695.889650][T26062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.910540][T10015] dvb-usb: bulk message failed: -22 (6/0) [ 1695.921333][T10015] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1695.932796][T26062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.963563][T10015] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input78 [ 1695.976033][T26062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.991542][T26062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.030170][T14339] (null): failure setting delay to 10us [ 1696.039802][T14339] i2c-tiny-usb 10-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1696.062813][T10015] dvb-usb: schedule remote query interval to 150 msecs. [ 1696.079859][T14339] usb 10-1: USB disconnect, device number 32 [ 1696.088939][T26062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.102191][T10015] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1696.176434][T26062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.200190][T10015] usb 1-1: USB disconnect, device number 39 [ 1696.305244][T26062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.533707][ T43] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 49 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1696.563031][T10015] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1696.635839][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1696.793153][ T43] usb 4-1: USB disconnect, device number 49 [ 1696.815575][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1696.839452][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4380'. [ 1696.889948][ T43] usblp0: removed [ 1697.171762][T10015] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1697.356108][T10015] usb 1-1: Using ep0 maxpacket: 8 [ 1697.504430][T10015] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1697.529555][T10015] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1697.647830][T10015] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1697.724415][T10015] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1697.749296][T10015] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1697.792390][T10015] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1697.811706][T10015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.076361][T10015] usb 1-1: GET_CAPABILITIES returned 0 [ 1698.096770][T10015] usbtmc 1-1:16.0: can't read capabilities [ 1698.276352][T10074] usb 1-1: USB disconnect, device number 40 [ 1700.047112][T26091] team0 (unregistering): Port device team_slave_0 removed [ 1700.206144][T26091] team0 (unregistering): Port device team_slave_1 removed [ 1701.741168][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1701.853225][ T24] usb 2-1: no configurations [ 1701.874698][ T24] usb 2-1: can't read configurations, error -22 [ 1701.996234][T15678] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1702.250576][T15678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.330173][T15678] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1702.510586][T15678] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1702.545940][T15678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.588396][T15678] usb 1-1: config 0 descriptor?? [ 1702.645484][ T24] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1703.050801][T15678] kye 0003:0458:0138.002E: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.0-1/input0 [ 1703.176467][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.192067][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1703.214398][ T24] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1703.214437][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.256762][T10015] usb 1-1: USB disconnect, device number 41 [ 1703.263338][ T24] usb 2-1: config 0 descriptor?? [ 1703.268941][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1703.268990][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1703.303808][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1703.313874][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1703.313933][ T24] usb 2-1: media controller created [ 1703.317382][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1703.414917][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1703.415030][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1703.433040][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input79 [ 1703.464798][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1703.464827][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1703.477290][T26159] dvb-usb: bulk message failed: -22 (2/0) [ 1703.486073][ T24] usb 2-1: USB disconnect, device number 12 [ 1703.557610][T26162] fido_id[26162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1703.723397][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1704.580722][T26172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4393'. [ 1705.451157][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4398'. [ 1705.621868][T26186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4399'. [ 1706.265941][ T5935] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1706.415806][ T5935] usb 10-1: device descriptor read/64, error -71 [ 1706.656462][ T5935] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1706.795560][ T5935] usb 10-1: device descriptor read/64, error -71 [ 1706.906055][ T5935] usb usb10-port1: attempt power cycle [ 1707.285075][ T5935] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1707.285630][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1707.312009][ T5935] usb 10-1: device descriptor read/8, error -71 [ 1707.555580][ T5935] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1707.576044][ T5935] usb 10-1: device descriptor read/8, error -71 [ 1707.610401][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1707.640160][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.659692][ T24] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1707.697523][ T5935] usb usb10-port1: unable to enumerate USB device [ 1707.809575][ T24] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1707.866827][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1707.932074][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.943621][ T24] usb 4-1: Product: syz [ 1707.959248][ T24] usb 4-1: Manufacturer: syz [ 1707.963990][ T24] usb 4-1: SerialNumber: syz [ 1708.175628][ T30] audit: type=1326 audit(1753538596.928:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26224 comm="syz.7.4409" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5884f8e9a9 code=0x0 [ 1708.393599][T26227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.407880][T26227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.527716][T26238] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4411'. [ 1709.592286][T26238] vlan2: entered promiscuous mode [ 1709.631177][T26238] team0: entered promiscuous mode [ 1709.662976][T26238] team_slave_0: entered promiscuous mode [ 1709.711371][T26238] team_slave_1: entered promiscuous mode [ 1709.998888][T26243] fuse: Unknown parameter 'ro' [ 1710.471104][ T24] usb 4-1: USB disconnect, device number 50 [ 1710.649572][T26252] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4415'. [ 1710.666106][T10015] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1710.689922][T26247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4414'. [ 1710.737162][T26253] ptrace attach of "./syz-executor exec"[23866] was attempted by "./syz-executor exec"[26253] [ 1710.874605][T10015] usb 1-1: config 0 has no interfaces? [ 1710.880371][T10015] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1710.890638][T10015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.916670][T10015] usb 1-1: config 0 descriptor?? [ 1710.945749][T25234] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1711.105537][T25234] usb 10-1: Using ep0 maxpacket: 16 [ 1711.133773][T25234] usb 10-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 1711.219188][T25234] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.291582][T25234] usb 10-1: Product: syz [ 1711.339390][T25234] usb 10-1: Manufacturer: syz [ 1711.398542][T25234] usb 10-1: SerialNumber: syz [ 1711.699528][T25234] usb 10-1: config 0 descriptor?? [ 1711.862812][T26268] FAULT_INJECTION: forcing a failure. [ 1711.862812][T26268] name failslab, interval 1, probability 0, space 0, times 0 [ 1711.930493][T26268] CPU: 1 UID: 0 PID: 26268 Comm: syz.7.4418 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 1711.930525][T26268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1711.930540][T26268] Call Trace: [ 1711.930547][T26268] [ 1711.930554][T26268] dump_stack_lvl+0x189/0x250 [ 1711.930579][T26268] ? __pfx____ratelimit+0x10/0x10 [ 1711.930595][T26268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1711.930613][T26268] ? __pfx__printk+0x10/0x10 [ 1711.930632][T26268] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 1711.930667][T26268] ? __lock_acquire+0xab9/0xd20 [ 1711.930685][T26268] should_fail_ex+0x414/0x560 [ 1711.930711][T26268] should_failslab+0xa8/0x100 [ 1711.930744][T26268] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1711.930774][T26268] ? dst_alloc+0x105/0x170 [ 1711.930800][T26268] dst_alloc+0x105/0x170 [ 1711.930828][T26268] xfrm_alloc_dst+0x76/0x160 [ 1711.930849][T26268] xfrm_lookup_with_ifid+0x77e/0x1a70 [ 1711.930890][T26268] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1711.930935][T26268] xfrm_lookup_route+0x3c/0x1c0 [ 1711.930968][T26268] udp_sendmsg+0x143c/0x2180 [ 1711.931013][T26268] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1711.931040][T26268] ? __pfx_udp_sendmsg+0x10/0x10 [ 1711.931069][T26268] ? preempt_schedule_irq+0xde/0x150 [ 1711.931092][T26268] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1711.931112][T26268] ? do_wp_page+0x161d/0x5800 [ 1711.931146][T26268] ? irqentry_exit+0x74/0x90 [ 1711.931183][T26268] ? __pfx_aa_sk_perm+0x10/0x10 [ 1711.931202][T26268] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1711.931233][T26268] ? sock_rps_record_flow+0x19/0x410 [ 1711.931262][T26268] ? inet_sendmsg+0x29c/0x370 [ 1711.931284][T26268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1711.931310][T26268] __sock_sendmsg+0x19c/0x270 [ 1711.931340][T26268] ____sys_sendmsg+0x52d/0x830 [ 1711.931366][T26268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1711.931397][T26268] ? import_iovec+0x74/0xa0 [ 1711.931431][T26268] ___sys_sendmsg+0x21f/0x2a0 [ 1711.931455][T26268] ? __pfx____sys_sendmsg+0x10/0x10 [ 1711.931524][T26268] ? __might_fault+0xb0/0x130 [ 1711.931556][T26268] __sys_sendmmsg+0x227/0x430 [ 1711.931583][T26268] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1711.931601][T26268] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1711.931656][T26268] ? ksys_write+0x22a/0x250 [ 1711.931694][T26268] ? __pfx_ksys_write+0x10/0x10 [ 1711.931719][T26268] ? rcu_is_watching+0x15/0xb0 [ 1711.931751][T26268] __x64_sys_sendmmsg+0xa0/0xc0 [ 1711.931774][T26268] do_syscall_64+0xfa/0x3b0 [ 1711.931798][T26268] ? lockdep_hardirqs_on+0x9c/0x150 [ 1711.931820][T26268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.931841][T26268] ? clear_bhb_loop+0x60/0xb0 [ 1711.931867][T26268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.931888][T26268] RIP: 0033:0x7f5884f8e9a9 [ 1711.931907][T26268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1711.931927][T26268] RSP: 002b:00007f5882df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1711.931950][T26268] RAX: ffffffffffffffda RBX: 00007f58851b5fa0 RCX: 00007f5884f8e9a9 [ 1711.931966][T26268] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 1711.931980][T26268] RBP: 00007f5882df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.931993][T26268] R10: 0000000000000bb8 R11: 0000000000000246 R12: 0000000000000002 [ 1711.932006][T26268] R13: 0000000000000000 R14: 00007f58851b5fa0 R15: 00007f58852dfa28 [ 1711.932040][T26268] [ 1711.975926][ T5935] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1712.240275][ C0] vkms_vblank_simulate: vblank timer overrun [ 1712.323891][T15678] usb 10-1: USB disconnect, device number 37 [ 1712.733871][ T5935] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.016362][ T5935] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1713.128665][ T5935] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1713.185599][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.262346][T26273] FAULT_INJECTION: forcing a failure. [ 1713.262346][T26273] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.308372][ T5935] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1713.366878][T26273] CPU: 0 UID: 0 PID: 26273 Comm: syz.7.4419 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 1713.366911][T26273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1713.366923][T26273] Call Trace: [ 1713.366931][T26273] [ 1713.366941][T26273] dump_stack_lvl+0x189/0x250 [ 1713.366970][T26273] ? __pfx____ratelimit+0x10/0x10 [ 1713.366992][T26273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1713.367015][T26273] ? __pfx__printk+0x10/0x10 [ 1713.367046][T26273] ? __pfx___might_resched+0x10/0x10 [ 1713.367075][T26273] should_fail_ex+0x414/0x560 [ 1713.367101][T26273] should_failslab+0xa8/0x100 [ 1713.367131][T26273] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 1713.367161][T26273] ? __get_vm_area_node+0x13f/0x300 [ 1713.367194][T26273] __get_vm_area_node+0x13f/0x300 [ 1713.367227][T26273] __vmalloc_node_range_noprof+0x301/0x12f0 [ 1713.367258][T26273] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1713.367311][T26273] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1713.367344][T26273] ? __might_fault+0xb0/0x130 [ 1713.367380][T26273] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1713.367399][T26273] __vmalloc_noprof+0xb1/0xf0 [ 1713.367428][T26273] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1713.367450][T26273] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1713.367476][T26273] bpf_prog_alloc+0x3c/0x1a0 [ 1713.367500][T26273] __get_filter+0xff/0x400 [ 1713.367528][T26273] sk_attach_filter+0x24/0x140 [ 1713.367554][T26273] sk_setsockopt+0x1fc5/0x2d30 [ 1713.367584][T26273] ? __pfx___might_resched+0x10/0x10 [ 1713.367614][T26273] ? __pfx_sk_setsockopt+0x10/0x10 [ 1713.367642][T26273] ? __lock_acquire+0xab9/0xd20 [ 1713.367669][T26273] ? aa_sk_perm+0x81e/0x950 [ 1713.367703][T26273] ? __fget_files+0x2a/0x420 [ 1713.367721][T26273] ? aa_sock_opt_perm+0x74/0x110 [ 1713.367746][T26273] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1713.367774][T26273] do_sock_setsockopt+0x11b/0x1b0 [ 1713.367809][T26273] __x64_sys_setsockopt+0x13f/0x1b0 [ 1713.367847][T26273] do_syscall_64+0xfa/0x3b0 [ 1713.367879][T26273] ? lockdep_hardirqs_on+0x9c/0x150 [ 1713.367905][T26273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.367926][T26273] ? clear_bhb_loop+0x60/0xb0 [ 1713.367953][T26273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.367973][T26273] RIP: 0033:0x7f5884f8e9a9 [ 1713.367991][T26273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1713.368009][T26273] RSP: 002b:00007f5882df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1713.368032][T26273] RAX: ffffffffffffffda RBX: 00007f58851b5fa0 RCX: 00007f5884f8e9a9 [ 1713.368047][T26273] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 1713.368060][T26273] RBP: 00007f5882df6090 R08: 0000000000000010 R09: 0000000000000000 [ 1713.368072][T26273] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1713.368085][T26273] R13: 0000000000000000 R14: 00007f58851b5fa0 R15: 00007f58852dfa28 [ 1713.368117][T26273] [ 1713.426515][T26273] syz.7.4419: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 1713.427692][ C0] vkms_vblank_simulate: vblank timer overrun [ 1713.435136][T26273] ,cpuset= [ 1713.882782][ T5935] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1714.006822][T26273] /,mems_allowed=0-1 [ 1714.011274][T26273] CPU: 0 UID: 0 PID: 26273 Comm: syz.7.4419 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 1714.011297][T26273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1714.011307][T26273] Call Trace: [ 1714.011313][T26273] [ 1714.011320][T26273] dump_stack_lvl+0x189/0x250 [ 1714.011342][T26273] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1714.011368][T26273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1714.011385][T26273] ? __pfx__printk+0x10/0x10 [ 1714.011406][T26273] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1714.011426][T26273] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1714.011451][T26273] warn_alloc+0x214/0x310 [ 1714.011470][T26273] ? __pfx_warn_alloc+0x10/0x10 [ 1714.011485][T26273] ? __get_vm_area_node+0x13f/0x300 [ 1714.011510][T26273] ? __get_vm_area_node+0x2b5/0x300 [ 1714.011537][T26273] __vmalloc_node_range_noprof+0x326/0x12f0 [ 1714.011587][T26273] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1714.011612][T26273] ? __might_fault+0xb0/0x130 [ 1714.011637][T26273] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1714.011652][T26273] __vmalloc_noprof+0xb1/0xf0 [ 1714.011674][T26273] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1714.011691][T26273] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1714.011710][T26273] bpf_prog_alloc+0x3c/0x1a0 [ 1714.011727][T26273] __get_filter+0xff/0x400 [ 1714.011748][T26273] sk_attach_filter+0x24/0x140 [ 1714.011767][T26273] sk_setsockopt+0x1fc5/0x2d30 [ 1714.011789][T26273] ? __pfx___might_resched+0x10/0x10 [ 1714.011814][T26273] ? __pfx_sk_setsockopt+0x10/0x10 [ 1714.011835][T26273] ? __lock_acquire+0xab9/0xd20 [ 1714.011854][T26273] ? aa_sk_perm+0x81e/0x950 [ 1714.011877][T26273] ? __fget_files+0x2a/0x420 [ 1714.011891][T26273] ? aa_sock_opt_perm+0x74/0x110 [ 1714.011909][T26273] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1714.011929][T26273] do_sock_setsockopt+0x11b/0x1b0 [ 1714.011956][T26273] __x64_sys_setsockopt+0x13f/0x1b0 [ 1714.011982][T26273] do_syscall_64+0xfa/0x3b0 [ 1714.012000][T26273] ? lockdep_hardirqs_on+0x9c/0x150 [ 1714.012016][T26273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.012036][T26273] ? clear_bhb_loop+0x60/0xb0 [ 1714.012054][T26273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.012068][T26273] RIP: 0033:0x7f5884f8e9a9 [ 1714.012082][T26273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1714.012095][T26273] RSP: 002b:00007f5882df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1714.012110][T26273] RAX: ffffffffffffffda RBX: 00007f58851b5fa0 RCX: 00007f5884f8e9a9 [ 1714.012122][T26273] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 1714.012131][T26273] RBP: 00007f5882df6090 R08: 0000000000000010 R09: 0000000000000000 [ 1714.012141][T26273] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1714.012150][T26273] R13: 0000000000000000 R14: 00007f58851b5fa0 R15: 00007f58852dfa28 [ 1714.012172][T26273] [ 1714.299178][ C0] vkms_vblank_simulate: vblank timer overrun [ 1714.429332][T26273] Mem-Info: [ 1714.438380][T26273] active_anon:16804 inactive_anon:1 isolated_anon:0 [ 1714.438380][T26273] active_file:19726 inactive_file:5707 isolated_file:0 [ 1714.438380][T26273] unevictable:768 dirty:31 writeback:0 [ 1714.438380][T26273] slab_reclaimable:7858 slab_unreclaimable:111383 [ 1714.438380][T26273] mapped:41043 shmem:7242 pagetables:1896 [ 1714.438380][T26273] sec_pagetables:0 bounce:0 [ 1714.438380][T26273] kernel_misc_reclaimable:0 [ 1714.438380][T26273] free:1292212 free_pcp:15777 free_cma:0 [ 1714.619708][T26273] Node 0 active_anon:64816kB inactive_anon:4kB active_file:78904kB inactive_file:22696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:168172kB dirty:124kB writeback:0kB shmem:27432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13892kB pagetables:7432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1714.653156][ C0] vkms_vblank_simulate: vblank timer overrun [ 1714.666597][T26273] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1714.698022][ C0] vkms_vblank_simulate: vblank timer overrun [ 1714.707539][T26273] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1714.752884][ T5935] usb 1-1: USB disconnect, device number 42 [ 1714.938006][T26273] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1714.943896][T26273] Node 0 DMA32 free:1256192kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63560kB inactive_anon:4kB active_file:78892kB inactive_file:21640kB unevictable:1536kB writepending:188kB present:3129332kB managed:2558492kB mlocked:0kB bounce:0kB free_pcp:39248kB local_pcp:21216kB free_cma:0kB [ 1715.062891][T26273] lowmem_reserve[]: 0 0 1 1 1 [ 1715.075653][T26273] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:280kB inactive_anon:0kB active_file:12kB inactive_file:1304kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:8kB free_cma:0kB [ 1715.184373][T26273] lowmem_reserve[]: 0 0 0 0 0 [ 1715.203198][T26273] Node 1 Normal free:3897672kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:27300kB local_pcp:17140kB free_cma:0kB [ 1715.267544][T10074] usb 4-1: USB disconnect, device number 51 [ 1715.309710][T26263] delete_channel: no stack [ 1715.325385][T26273] lowmem_reserve[]: 0 0 0 0 0 [ 1715.388754][T26273] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1715.415742][ T5935] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1715.485927][T26273] Node 0 DMA32: 411*4kB (UM) 1086*8kB (UM) 1143*16kB (UME) 584*32kB (UME) 582*64kB (UME) 725*128kB (UME) 581*256kB (UME) 165*512kB (UME) 66*1024kB (UME) 3*2048kB (M) 189*4096kB (UM) = 1258444kB [ 1715.519334][T26273] Node 0 Normal: 1*4kB (M) 3*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 1715.584988][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 1716.130617][T26273] Node 1 Normal: 176*4kB (UME) 55*8kB (UME) 41*16kB (UME) 162*32kB (UME) 50*64kB (UME) 11*128kB (UME) 6*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 947*4096kB (ME) = 3897672kB [ 1716.151168][ T5935] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1716.166602][ T5935] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1716.179050][ T5935] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1716.205660][ T5935] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1716.226177][ T5935] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1716.227875][T26273] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1716.275651][T26273] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1716.297136][T26273] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1716.315668][T26273] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1716.377440][ T5935] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1716.415666][T10015] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1716.431502][T26273] 32668 total pagecache pages [ 1716.439594][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.455467][T26273] 1 pages in swap cache [ 1716.460648][T26273] Free swap = 124992kB [ 1716.475621][T26273] Total swap = 124996kB [ 1716.493721][T26273] 2097051 pages RAM [ 1716.502904][T26273] 0 pages HighMem/MovableOnly [ 1716.510568][T26273] 425386 pages reserved [ 1716.520885][T26273] 0 pages cma reserved [ 1716.658369][T10015] usb 4-1: Using ep0 maxpacket: 32 [ 1716.668682][T10015] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 1716.815767][T10015] usb 4-1: config 0 has no interface number 1 [ 1716.822897][ T5935] usb 1-1: usb_control_msg returned -32 [ 1716.830558][ T5935] usbtmc 1-1:16.0: can't read capabilities [ 1716.847803][T10015] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1716.910650][T10015] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.920184][T10015] usb 4-1: Product: syz [ 1716.925801][T10015] usb 4-1: Manufacturer: syz [ 1716.941976][T10015] usb 4-1: SerialNumber: syz [ 1716.994129][T10015] usb 4-1: config 0 descriptor?? [ 1717.068227][T10015] snd-usb-audio 4-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 1717.551885][T18954] udevd[18954]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1718.593886][ T5935] usb 1-1: USB disconnect, device number 43 [ 1718.770321][T26312] xt_TCPMSS: Only works on TCP SYN packets [ 1718.797152][T26312] xt_TCPMSS: Only works on TCP SYN packets [ 1718.815843][T26312] xt_TCPMSS: Only works on TCP SYN packets [ 1718.829715][T26312] xt_TCPMSS: Only works on TCP SYN packets [ 1718.856611][T26312] xt_TCPMSS: Only works on TCP SYN packets [ 1718.879494][T26312] xt_TCPMSS: Only works on TCP SYN packets [ 1718.902640][T26312] xt_TCPMSS: Only works on TCP SYN packets [ 1718.983362][T26312] xt_TCPMSS: Only works on TCP SYN packets [ 1719.117861][T26312] xt_TCPMSS: Only works on TCP SYN packets [ 1719.124100][T26312] xt_TCPMSS: Only works on TCP SYN packets [ 1719.179748][ T5935] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1719.342006][T25234] usb 4-1: USB disconnect, device number 52 [ 1719.365059][ T5935] usb 1-1: device descriptor read/64, error -71 [ 1719.630410][T26319] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1719.658533][ T5935] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1719.805940][ T5935] usb 1-1: device descriptor read/64, error -71 [ 1719.968804][ T5935] usb usb1-port1: attempt power cycle [ 1720.215195][T10074] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1720.327553][ T5935] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1720.370492][ T5935] usb 1-1: device descriptor read/8, error -71 [ 1720.491385][T10074] usb 10-1: config 0 has no interfaces? [ 1720.498914][T10074] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1720.510270][T10074] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.567438][T10074] usb 10-1: config 0 descriptor?? [ 1720.627279][ T5935] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1720.691022][ T5935] usb 1-1: device descriptor read/8, error -71 [ 1720.806136][ T5935] usb usb1-port1: unable to enumerate USB device [ 1721.228996][ T30] audit: type=1326 audit(1753538609.998:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26336 comm="syz.7.4437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5884f8e9a9 code=0x0 [ 1723.033633][T25234] usb 10-1: USB disconnect, device number 38 [ 1723.292168][T26372] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4446'. [ 1724.311670][T26380] syzkaller1: entered promiscuous mode [ 1724.370239][T26380] syzkaller1: entered allmulticast mode [ 1725.213907][T26384] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4450'. [ 1725.525813][T26391] kvm: user requested TSC rate below hardware speed [ 1725.548222][T26391] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 1725.629604][T26397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.673336][T26397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.345451][T25234] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1727.601255][T25234] usb 1-1: config 0 has no interfaces? [ 1727.607940][T25234] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1727.626194][T25234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.653405][T25234] usb 1-1: config 0 descriptor?? [ 1727.856532][T26414] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4458'. [ 1727.927245][T26418] tipc: Enabled bearer , priority 0 [ 1727.935891][T26418] syzkaller0: entered promiscuous mode [ 1727.941509][T26418] syzkaller0: entered allmulticast mode [ 1728.007776][T26418] tipc: Resetting bearer [ 1728.232128][T26418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1728.880659][T26417] tipc: Resetting bearer [ 1729.253068][T26417] tipc: Disabling bearer [ 1729.675596][T25234] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1729.843282][T25234] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1729.886551][T25234] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1729.905974][T25234] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1729.919118][T25234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.960763][T26437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1729.987611][T25234] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1730.155680][T10074] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1730.304166][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.311896][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.318016][T10074] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.371163][T10074] usb 2-1: config 0 has no interfaces? [ 1730.379699][ T24] usb 1-1: USB disconnect, device number 48 [ 1730.405313][T10074] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1730.416307][T25234] usb 4-1: USB disconnect, device number 53 [ 1730.426712][T10074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.458065][T10074] usb 2-1: Product: syz [ 1730.462940][T10074] usb 2-1: Manufacturer: syz [ 1730.476693][T10074] usb 2-1: SerialNumber: syz [ 1730.492495][T10074] usb 2-1: config 0 descriptor?? [ 1730.723030][T10074] usb 2-1: USB disconnect, device number 13 [ 1730.815660][T25234] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1730.908421][ T30] audit: type=1326 audit(1753538619.678:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26451 comm="syz.0.4471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bf5b8e9a9 code=0x0 [ 1730.972783][T26433] tipc: New replicast peer: 255.255.255.255 [ 1730.991895][T26433] tipc: Enabled bearer , priority 0 [ 1731.005224][T25234] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1731.018175][T25234] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1731.031805][T26433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4463'. [ 1731.099509][T25234] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1731.125956][T25234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.161987][T26437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1731.220322][T26437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1731.271901][T25234] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1731.849390][T25234] usb 4-1: USB disconnect, device number 54 [ 1732.142804][ T1210] tipc: Node number set to 2883763937 [ 1732.411972][T26463] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4473'. [ 1732.586536][T26467] fuse: Bad value for 'fd' [ 1732.734861][T25234] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1732.962935][T25234] usb 1-1: Using ep0 maxpacket: 32 [ 1732.976906][T25234] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1733.028513][T25234] usb 1-1: config 0 has no interface number 0 [ 1733.053506][T25234] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1733.113032][T25234] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1733.165981][T25234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.174083][T25234] usb 1-1: Product: syz [ 1733.180748][T25234] usb 1-1: Manufacturer: syz [ 1733.189775][T25234] usb 1-1: SerialNumber: syz [ 1733.317888][T25234] usb 1-1: config 0 descriptor?? [ 1733.344092][T25234] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1733.432127][T26495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'. [ 1733.734039][T26492] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4482'. [ 1733.873843][T25234] em28xx 1-1:0.132: Video interface 132 found: [ 1733.977503][T25234] em28xx 1-1:0.132: chip ID is em2840 [ 1734.179035][T26463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.215660][T26463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.775346][ T5935] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1734.935915][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 1734.950918][ T5935] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1734.963213][ T5935] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1735.135473][ T5935] usb 4-1: string descriptor 0 read error: -22 [ 1735.149003][ T5935] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1735.169273][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.300229][T25234] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1735.316416][T25234] em28xx 1-1:0.132: board has no eeprom [ 1735.375830][T25234] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1735.385803][ T24] usb 10-1: new low-speed USB device number 39 using dummy_hcd [ 1735.396075][T25234] em28xx 1-1:0.132: analog set to bulk mode. [ 1735.403096][T26509] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1735.412576][T10074] em28xx 1-1:0.132: Registering V4L2 extension [ 1735.437182][T25234] usb 1-1: USB disconnect, device number 49 [ 1735.518116][T25234] em28xx 1-1:0.132: Disconnecting em28xx [ 1735.628652][ T24] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1735.688022][ T24] usb 10-1: config 0 has no interface number 0 [ 1735.758268][ T24] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1735.924210][T26509] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1736.053493][ T24] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1736.093676][ T24] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1736.130108][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.183548][ T24] usb 10-1: config 0 descriptor?? [ 1736.353437][T26513] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22 [ 1736.406427][ T24] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1736.889477][T10074] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1737.138597][T10074] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1737.289460][T10074] em28xx 1-1:0.132: No AC97 audio processor [ 1737.406231][T10074] usb 1-1: Decoder not found [ 1737.415692][T10074] em28xx 1-1:0.132: failed to create media graph [ 1737.433226][T10074] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1737.560660][T10074] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1737.571545][T25234] em28xx 1-1:0.132: Closing input extension [ 1737.652118][T25234] em28xx 1-1:0.132: Freeing device [ 1737.706767][T10074] usb 10-1: USB disconnect, device number 39 [ 1737.826230][T26530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4490'. [ 1737.886485][T26530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4490'. [ 1739.276453][ T5935] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 1739.375785][T26556] "syz.7.4498" (26556) uses obsolete ecb(arc4) skcipher [ 1739.383799][ T5935] usb 4-1: USB disconnect, device number 55 [ 1739.401412][ T5935] usblp0: removed [ 1789.840911][T25010] Bluetooth: hci1: command 0x0406 tx timeout [ 1792.679719][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.695516][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1895.181265][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1895.197047][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1907.784244][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1907.791265][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2/1:b..l [ 1907.799564][ C1] rcu: (detected by 1, t=10503 jiffies, g=193417, q=526 ncpus=2) [ 1907.807414][ C1] task:kthreadd state:R running task stack:25048 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00004000 [ 1907.822471][ C1] Call Trace: [ 1907.825795][ C1] [ 1907.828764][ C1] __schedule+0x16fd/0x4cf0 [ 1907.833331][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1907.839709][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 1907.845048][ C1] ? __pfx___schedule+0x10/0x10 [ 1907.849946][ C1] ? __pfx___schedule+0x10/0x10 [ 1907.854853][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1907.860222][ C1] preempt_schedule_irq+0xb5/0x150 [ 1907.865382][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1907.871161][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1907.877014][ C1] irqentry_exit+0x6f/0x90 [ 1907.881468][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1907.887486][ C1] RIP: 0010:__asan_memset+0x31/0x50 [ 1907.892730][ C1] Code: 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 7e e4 ff ff 84 c0 74 11 4c 89 f7 89 ee 48 89 da 5b 41 5e <5d> e9 49 91 4b 09 31 c0 5b 41 5e 5d c3 cc cc cc cc cc 66 66 66 66 [ 1907.912489][ C1] RSP: 0018:ffffc90000077208 EFLAGS: 00000202 [ 1907.918616][ C1] RAX: 1ffff9200000ee01 RBX: ffffc90000077380 RCX: ffffffff8172b6d8 [ 1907.926639][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000077398 [ 1907.934656][ C1] RBP: 0000000000000000 R08: ffffc900000773a7 R09: 1ffff9200000ee74 [ 1907.942670][ C1] R10: dffffc0000000000 R11: fffff5200000ee75 R12: ffffc900000773e0 [ 1907.950691][ C1] R13: ffffc90000077398 R14: ffffc90000077348 R15: ffffc90000077390 [ 1907.958725][ C1] ? unwind_next_frame+0xc98/0x2390 [ 1907.963988][ C1] unwind_next_frame+0xc98/0x2390 [ 1907.969069][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1907.974227][ C1] ? arch_stack_walk+0xe4/0x150 [ 1907.979128][ C1] __unwind_start+0x5b9/0x760 [ 1907.983855][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1907.990055][ C1] arch_stack_walk+0xe4/0x150 [ 1907.994789][ C1] ? stack_trace_save+0x9c/0xe0 [ 1907.999689][ C1] stack_trace_save+0x9c/0xe0 [ 1908.004415][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1908.009846][ C1] save_stack+0xf5/0x1f0 [ 1908.014137][ C1] ? __pfx_save_stack+0x10/0x10 [ 1908.019053][ C1] ? page_ext_put+0x97/0xc0 [ 1908.023615][ C1] __reset_page_owner+0x71/0x1f0 [ 1908.028610][ C1] __free_frozen_pages+0xc71/0xe70 [ 1908.033790][ C1] __put_partials+0x161/0x1c0 [ 1908.038515][ C1] put_cpu_partial+0x17c/0x250 [ 1908.043324][ C1] ? put_cpu_partial+0x6d/0x250 [ 1908.048221][ C1] __slab_free+0x2f7/0x400 [ 1908.052687][ C1] ? __phys_addr+0xd3/0x180 [ 1908.057241][ C1] qlist_free_all+0x97/0x140 [ 1908.061883][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1908.067393][ C1] __kasan_slab_alloc+0x22/0x80 [ 1908.072294][ C1] __kmalloc_cache_noprof+0x1be/0x3d0 [ 1908.077711][ C1] ? set_kthread_struct+0xbb/0x340 [ 1908.082876][ C1] set_kthread_struct+0xbb/0x340 [ 1908.087863][ C1] ? __asan_memset+0x22/0x50 [ 1908.092508][ C1] copy_process+0x10b7/0x3b80 [ 1908.097242][ C1] ? copy_process+0x978/0x3b80 [ 1908.102065][ C1] ? __pfx_copy_process+0x10/0x10 [ 1908.107149][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1908.113103][ C1] ? __pfx_kthread+0x10/0x10 [ 1908.117787][ C1] kernel_clone+0x21e/0x870 [ 1908.122354][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1908.127426][ C1] ? __schedule+0x171b/0x4cf0 [ 1908.132170][ C1] ? __pfx_kthread+0x10/0x10 [ 1908.136822][ C1] kernel_thread+0x10c/0x160 [ 1908.141473][ C1] ? __pfx_kernel_thread+0x10/0x10 [ 1908.146632][ C1] ? __lock_acquire+0xab9/0xd20 [ 1908.151533][ C1] ? __pfx_kthread+0x10/0x10 [ 1908.156200][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1908.161456][ C1] kthreadd+0x575/0x770 [ 1908.165663][ C1] ? kthreadd+0x30b/0x770 [ 1908.170040][ C1] ? __pfx_kthreadd+0x10/0x10 [ 1908.174770][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1908.180005][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1908.185239][ C1] ? __pfx_kthreadd+0x10/0x10 [ 1908.189962][ C1] ret_from_fork+0x3fc/0x770 [ 1908.194598][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1908.199760][ C1] ? __switch_to_asm+0x39/0x70 [ 1908.204579][ C1] ? __switch_to_asm+0x33/0x70 [ 1908.209398][ C1] ? __pfx_kthreadd+0x10/0x10 [ 1908.214120][ C1] ret_from_fork_asm+0x1a/0x30 [ 1908.218946][ C1] [ 1911.434157][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 1911.451891][ T31] Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 [ 1914.732033][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.747289][ T1302] ieee802154 phy1 wpan1: encryption failed: -22