last executing test programs: 11m28.606036849s ago: executing program 1 (id=670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0xfffffffc, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xfffffffd}]}}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bind(r3, &(0x7f0000000980)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x10, 0x7, 0x0, 0xffffe929, {{0x43, 0x4, 0x2, 0x2c, 0x10c, 0x66, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x1d, 0x1, [{0x6, 0x11, "2bf521294e4cb7cb9d8038ed9daa6c"}, {0x2, 0x6, "1eda50d6"}]}, @timestamp={0x44, 0x14, 0x3b, 0x0, 0x0, [0x6, 0x89d1, 0x7, 0x2]}, @timestamp_prespec={0x44, 0x34, 0x34, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x7}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x6}, {@loopback, 0x1}, {@rand_addr=0x64010101, 0xbdd7}, {@rand_addr=0x64010100, 0x3}]}, @rr={0x7, 0x23, 0x9c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @private=0xa010101, @local, @remote, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0xd}]}, @noop, @ssrr={0x89, 0x1b, 0x97, [@remote, @multicast1, @local, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0x4d, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x5f7d549e}, {@local, 0x3}, {@multicast1, 0x97}]}, @timestamp={0x44, 0x18, 0x9b, 0x0, 0x3, [0x1, 0x3b, 0x76, 0x9, 0x9]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x4, 0x20, 0x9, 0xffffffb0, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x7, 0x7fffffff, 0x9835}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x0, 0x4, {{0xd, 0x4, 0x1, 0x3, 0x34, 0x67, 0x0, 0x2b, 0x29, 0x0, @rand_addr=0x64010100, @remote, {[@timestamp={0x44, 0x20, 0x28, 0x0, 0x6, [0x5, 0x0, 0x7, 0xfffffff8, 0x7a3a, 0x80000001, 0xffffa5d5]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14) r14 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r14, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r16}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x294, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x55}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9c66836e}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x12000}}, {0x8, 0x6, r16}}}]}}]}, 0x294}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r17 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r17, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a00011100ffffffffffd24581000000000000000000000014", @ANYRES64=r17, @ANYRES8=0x0], 0x30}}, 0x0) 11m28.319821704s ago: executing program 1 (id=673): r0 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000002140), 0x0, 0x142, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = syz_open_procfs(0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000000c0)={@dev}, 0x5) getdents64(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getdents(r4, 0x0, 0x3b) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x20000018}, 0xffffffffffffffe2) r7 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000002100)=ANY=[@ANYRES8=r6, @ANYRESHEX=r0, @ANYRES8=r6, @ANYRES32], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001680)={0x2c, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20004010) syz_usb_control_io(r7, 0x0, 0x0) 11m26.881492504s ago: executing program 3 (id=683): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x7ffc, 0x40024e}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) (async) r3 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28c}, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xd762, 0x100, 0x0, 0x134, 0x0, r3}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) (async, rerun: 32) sendto$inet6(r6, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x4, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) setpgid(0x0, 0x0) recvmmsg(r6, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/86, 0x56}, 0x6}], 0x1, 0x142, 0x0) (async) io_uring_enter(r3, 0x8184c, 0x0, 0x9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x54, 0x0, 0x0, 0x2, 0x0, 0x1, 0x40, 0x1}) (async) io_uring_enter(r0, 0x627, 0xc104effd, 0x43, 0x0, 0x0) 11m25.456879198s ago: executing program 3 (id=687): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r0, &(0x7f0000000100)='mountinfo\x00') mlockall(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') openat$incfs(r1, &(0x7f0000000100)='.pending_reads\x00', 0x8340, 0x101) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0105b08, &(0x7f0000000040)) 11m25.048238611s ago: executing program 1 (id=688): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 11m24.776697365s ago: executing program 1 (id=689): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000040)=""/60) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e6574"], 0x64}}, 0x0) unshare(0x2c020400) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000100)={0x55, 0x6, &(0x7f0000000680)}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff7, &(0x7f00000004c0)={[0xc]}, 0x8) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timerfd_settime(r1, 0x2, &(0x7f0000000200)={{r5, r6+60000000}, {0x0, 0x989680}}, &(0x7f0000000240)) umount2(&(0x7f0000000080)='./file0\x00', 0xb) 11m24.754010369s ago: executing program 3 (id=690): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xfffffffffffffffd, 0x101000) read$hiddev(r0, &(0x7f0000000040)=""/203, 0xcb) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r1, 0x0) r3 = syz_io_uring_complete(r2) recvmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000140)=@un=@abs, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/99, 0x63}, {&(0x7f0000000240)=""/21, 0x15}], 0x2, &(0x7f00000002c0)=""/124, 0x7c}, 0x42) setsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000380)="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", 0x1000) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000001380)) r4 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000013c0)) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) write$cgroup_pressure(r3, &(0x7f0000001400)={'some', 0x20, 0xe, 0x20, 0x5}, 0x2f) ioctl$int_in(r4, 0x5452, &(0x7f0000001440)=0x9) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000014c0), r3) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x44, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000001640)) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000001680), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f00000016c0)={0x20, r7, 'id1\x00'}) fsetxattr$security_ima(r4, &(0x7f0000001740), &(0x7f0000001780)=@v1={0x2, "06"}, 0x2, 0x1) r9 = socket$inet6(0xa, 0x5, 0x2) sync_file_range(r9, 0x8, 0x7, 0x2) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f00000017c0)=0xa20) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001840), r3) sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f00000019c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x840022}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xe0, r11, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x31}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) openat(0xffffffffffffffff, &(0x7f0000001a00)='./file0\x00', 0x402081, 0x40) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000001c00)={0x1, &(0x7f0000001a40)=""/251, &(0x7f0000001bc0)=[{0x8, 0x5e, 0xffff0001, &(0x7f0000001b40)=""/94}]}) syz_open_dev$sg(&(0x7f0000001c40), 0x800, 0x210000) getsockopt$inet6_int(r8, 0x29, 0x4c, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) 11m24.201862301s ago: executing program 3 (id=692): r0 = mq_open(&(0x7f0000000380)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r1, 0x6, 0x23, &(0x7f0000003340)=""/4096, &(0x7f0000000080)=0x1000) pread64(r0, &(0x7f0000000000)=""/112, 0x70, 0x2) 11m24.112121205s ago: executing program 3 (id=693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xd, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x7, @remote, 0xc}, 0x1c, 0x0, 0x0, 0x0, 0x300}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) write$char_usb(r4, &(0x7f00000001c0)="5e1984c1e6bf8be3bc28a5e73a6bd68c4791ae5e1e214d624f8774e5a45e39211ef8d5e89da9a4b6230e2a156f55fbe5eef127777607846c07b0f588ae2e0bd57bffc64a4eb0d8e8c07f9b0b1deac8b7a6831e0b957ef622846a6f3ff7224a4ae7c1dea13bad06cf9771f942e8", 0x6d) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0x19, 0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x10401, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)=@other={0x9, &(0x7f0000000000)=0x3}) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xffffffffffffff4e, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfffffffffffffff7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) 11m23.924059747s ago: executing program 3 (id=694): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x13, 0x89, 0x2, 0x0, 0x4000a, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800}, [@map_fd, @generic={0x39, 0x1, 0x8, 0x81, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xea, &(0x7f0000000340)=""/234}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x12102, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000140)={0x28, 0x0, r5, 0x69, &(0x7f0000000640)=""/105}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x44, 0xf, 0x7, 0x100, 0x6, 0x1000002}) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x4f, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xe}, &(0x7f00000002c0)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c804) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r7, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) r8 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) r9 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r9, &(0x7f0000000180)=r10, 0x12) 11m23.602604935s ago: executing program 1 (id=695): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) (async) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)={0x0, 0x31, 0x3, "00ff91"}, 0x0, 0x0}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e20, 0x3, @remote, 0x6}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="f514a7beb92389e1b26e671587cb21a5b1"}, 0x20) 11m22.80995288s ago: executing program 1 (id=699): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 11m21.882884312s ago: executing program 32 (id=699): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 11m8.104153895s ago: executing program 33 (id=694): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x13, 0x89, 0x2, 0x0, 0x4000a, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800}, [@map_fd, @generic={0x39, 0x1, 0x8, 0x81, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xea, &(0x7f0000000340)=""/234}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x12102, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000140)={0x28, 0x0, r5, 0x69, &(0x7f0000000640)=""/105}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x44, 0xf, 0x7, 0x100, 0x6, 0x1000002}) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x4f, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xe}, &(0x7f00000002c0)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c804) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r7, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) r8 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) r9 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r9, &(0x7f0000000180)=r10, 0x12) 10m58.265905349s ago: executing program 2 (id=751): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'pim6reg\x00', @ifru_map={0x401, 0x6a, 0x1410, 0x6f, 0xe3}}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x238, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001100000000000000d25aea94d742000000000000000000000000000000003c9a0f3af89832bf216e4c9380e2da125d1595f2a5a3ba0182213a7dc814"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000400006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffe, 0x800001b4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001700)=""/4095, 0xfff}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x0, 0x1}, 0x20) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400000002000000000000", @ANYRES32=0x0, @ANYBLOB="01310100220002002b0012800e000100a55ece757273000000000000000000ffff763da70cbaa37ea44440ac141426080004000000050000000c0051000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x44010) 10m55.237640231s ago: executing program 2 (id=756): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000300000008000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x5f, &(0x7f0000000300)={@local, @empty, @void, {@llc={0x4, {@snap={0xaa, 0xab, "c6", "4d830c", 0x88e7, "7a45a2cd18fb821c7097e388706298ef95aac44e05985a762daaa1d63d7ceafe307b21620f2173f5b45e14cd2ef447cf17b2882e51f5c605378827d76f85a5f30fc1add916a5217d9a"}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 10m55.018967042s ago: executing program 2 (id=757): syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlockall(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x8340, 0x101) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0105b08, &(0x7f0000000040)) 10m54.444356719s ago: executing program 2 (id=760): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(0x0, 0x5dc, 0x2) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x90) pwritev(r6, 0x0, 0x0, 0xe, 0x4) r7 = epoll_create1(0x80000) epoll_pwait(r7, 0xfffffffffffffffc, 0x5b, 0x2, 0x0, 0x1f) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000", @ANYRES16=r8], 0x18}, 0x40c0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fedbdf2504000000140001800d0001007564703a73797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x860}, 0x20000000) 10m53.457716846s ago: executing program 2 (id=761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) r4 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000100)={0x0, 0xf}, 0x2) r5 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000080)={0x0, 0xea60}, 0x10) ppoll(&(0x7f0000000300)=[{r3}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000040)=0x4005, 0x4) shutdown(r0, 0x0) 10m51.951294298s ago: executing program 2 (id=766): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000200)={'\x00', 0xfffffe01, 0x0, 0xfffffff9}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) 10m50.709006972s ago: executing program 34 (id=766): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000200)={'\x00', 0xfffffe01, 0x0, 0xfffffff9}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) 2m13.016351217s ago: executing program 6 (id=2833): syz_usb_connect(0x2, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xe0, 0x58, 0x71, 0x40, 0xccd, 0x10b2, 0xc71b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x31, 0x7, 0x0, 0x73, 0x8, 0x7f, 0x80}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="623e81d1037e3a00fc000000000000000000000000000000fc000000000000000000000000000000ff0b"], 0x3a6) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) r4 = epoll_create(0x7) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)) r8 = epoll_create1(0x0) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000040)={0x0, 0x0, 0x1a}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect(0x1, 0x2da, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x55, 0x9, 0x33, 0x10, 0x335f, 0xd05a, 0xbdec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c8, 0x2, 0xf, 0x9, 0x80, 0x8e, [{{0x9, 0x4, 0x23, 0x8, 0x2, 0x2, 0x2, 0x2, 0x2, [@hid_hid={0x9, 0x21, 0x2d, 0x3, 0x1, {0x22, 0xd76}}], [{{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x23, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x3}, @generic={0x67, 0x1, "935af0b0de4290f0d08cd709725f6be72b18f06b4a50bf9d76a8689d51a7339c414de2c78cbdfa7c90072f3b240c7fc5fe587431962ff911dcaddcd37ada4077e688c4dc8a2a31cb0ccd36a024f6ce411888bc15c1fc4dd76e64f3c0857433d5c61872de6b"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x0, 0x2}}]}}, {{0x9, 0x4, 0x29, 0x5, 0x7, 0x1, 0x4b, 0xe, 0xd7, [@hid_hid={0x9, 0x21, 0xd8, 0x10, 0x1, {0x22, 0x1b1}}], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x0, 0x3, 0x2, [@generic={0x54, 0xa, "9ba368ff00fc3add010d6e45fabc7c93c6b76c317d4dbd55ea531f0bc0864f482b6d7c78e810838a4041d40a3e43d989c5746aff04d979960ba1014f3aa3d111aa8658840b6f7f14181687d7d7c7ed66ab86"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x5, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x2, 0x2}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0x1, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0x9, 0x9, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0xa8}, @generic={0xde, 0xa, "d772ed3bac567c532e30ea803892216e0f37f87e75b1345842e19f84e521a162b31256d17184668126b8ece1f4359805da9961f0f24ace7843818d852ee302baeb6eb287c9e31c0a22f5c28ba1e8a1b1f5a4d51cd40f53af5ff926b8185bcc163818277cf575f09041494f98c5a148494513fe3306a861f2ebe6aa1bb2f9305eaa438151db7fcf8b05e7955928f18e15f9be664ab05fcb682f13d1f1d46e64067d63e58a62c978da31687c5d32e19c7b6ccf02f8be0697f94182cccc124673934ebcfb49a8e9efac7529c3469a99527d505283a4697640ce655daada"}]}}, {{0x9, 0x5, 0xf8ec53697e1704e1, 0x1, 0x200, 0xe1, 0x4, 0x6, [@generic={0x7e, 0xb, "a2ff92c63c5eebc2e02dff5c2a2365746124fb236589038cfe6e2518ec16e0081afa37379b15706f1dfc2749a1d3bffa5b88ac9c287700691f57e138c4381a50daf23d0919ba95a491526318a0d92958d55e6c8839acd4fb6a81bd54078f834419f5a5d157b211611da4f3e235ac228383699574394b6043b04c09d5"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0xf7, 0x59, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x180, 0x7, 0x4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x2, 0xbf, 0x5, [@generic={0x2, 0x7}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x310, 0xf8, 0x4, 0x4, 0x24d0c3f0003f6f58, 0x55}, 0x54, &(0x7f0000000580)={0x5, 0xf, 0x54, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0xd, 0x6, 0xd308, 0xf00, 0x6, [0xff30, 0xc0, 0x7fbf00, 0xff0000, 0x3f00, 0xff3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x3, 0x9, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x6, 0xf00, 0x1, [0xc0, 0x0, 0xf, 0xc00f, 0xf, 0x30]}]}, 0x3, [{0x26, &(0x7f0000000600)=@string={0x26, 0x3, "85b546edb8c67ea9410b6ac0d4992ac17f1019decc2c204336939c909641eb1043e5de97"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x418}}, {0xc0, &(0x7f0000000680)=@string={0xc0, 0x3, "2f1ca82e1ccbfa042895c6e03980ea8472cc44c264fc0d69fa7f2236bbb220a7e56ca4d902cd2a8b17795c1c0e8bb389fc63ccd76264fdd5fb965a77002c25c6e6fea3e241fe71516dee0cc631188db3490e30f3fb29516a06c9abc3d06a5e4276637efa09ecdeddd5f33625d1ec998d2fc7a9ee2a9a7d876c1b2dfb4fca0880046bbe13e3e72f23a3e852a40f05875e15f151f680917bcef9f4b0172fd4bc9910b11fcc25a3df57e70d20e2d84f398a3fb10ce7d1440fdf4ed4dc53417b"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, &(0x7f00000001c0)={0x20, 0x22, 0x13, {0x13, 0x6, "3a8acc02e90cbfbfcf4acbbc6cb84a36f8"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x40, 0xc}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x1ff, 0x2, 0x9, 0x3, 0x8, 0x7, 0x4, 0x9, 0x2, 0xc2, 0x2, 0x101}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0xff}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 2m10.956486667s ago: executing program 6 (id=2838): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0xa, 0x20006, 0x9, 0x8, 0x0, 0x80000000, 0x400, 0x44}}) (fail_nth: 3) 2m10.346498009s ago: executing program 6 (id=2840): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000de9000/0x2000)=nil) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000140)) lseek(0xffffffffffffffff, 0x80000000004, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000002440)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000002240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x2b, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff}, @jmp={0x5, 0x0, 0x4, 0x7, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffffffff}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7ae}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000480)='GPL\x00', 0xe3fa, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x3, 0x7, 0x2}, 0x10, 0x200e4, r5, 0x0, &(0x7f0000000600)=[r3, r3, r6, r3, r3], 0x0, 0x10, 0x8}, 0x94) getsockopt$inet_opts(r4, 0x0, 0x6, 0x0, &(0x7f0000000000)) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r3, 0xffff8000) dup(r2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) 2m7.675777221s ago: executing program 6 (id=2846): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) (async) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00', 0x231) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f00003e9000/0x1000)=nil, 0x1000, 0x1000002, 0x20010, r3, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x401}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) (async) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000b00000000000000000000010001079c4e230005000000003a000000", @ANYRES32=0x0, @ANYBLOB="fc02e541065996d8ad699cfebd9fbe62dfd28e2844972253e17bcb1eea1777727f137c616c996bacb14b33cb5ea84a41ece7bb651032890036f1739e57b0747e71e7c4c5bee0d7f8e58232a99b4d8636887cc9d8ba2bd9149829a84e64367e39a738942abac5231ab922043834bd4715e6e84d951d417d73ce382b3d711f923e0b27e0c1ecc01f9dbb0bc67cef98f4a524ce88ccd5df378c2fe34fb2f4dd0f0187e2673639d55817fcf193c85f28902e9be00df3d605d21ba627e5b64a4fa97aeec585f8ec2aca693d7930", @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2m5.319998196s ago: executing program 6 (id=2855): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x97}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6}]}}}]}, 0x50}}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x224, r5, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2a361ca7160efdc0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fae4da9737be4d3f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f1f7bc706b3f2604"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1b05aa2aa5a42b55d9d87a02c1dd36ac4122286b3835e81d2f964c92596b9f13"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800008}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a2b8b72f0be5f91b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6f83dcd5e6e5ba5f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c9485899049dbb6d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a7d55468fb1843ff"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "87233bc06a3cdd3b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="51c8ef9ac1d2a9287d4b4e95c5cae1d3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0c60f913252f75b958e17e76defc85af"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c85f52e202bbee25"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa736700"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "943733229eac3ca9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0a1104e999e3f211ff2fe11d2c00fa1ae135f5e1823adba5"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "78afa3c709621193"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "520f5f73ecb5fd84"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="29f27c399ead2e27132d52eedaf81642"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5b}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="83cc25d7a4779c7c2b3ed108c931151432c0b25550e7d7d7"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ab023c0b0c8aa6eeb0cc8369a0e3da33"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="547b6b021fcafd90fa9adcc3bc73bc2d8178eb96b1e0710e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ae5d6a44c6cfcf941bb0a15a978e1d52"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7883f81d916a000234fcd4db27048f289ac544daec5cb5be419b080323d15179"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ffe81aa3ce0b034bd335658fb94c99f0ac91012fabf2b3601acfb8d7f048e3c0"}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m4.801590267s ago: executing program 6 (id=2860): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'pim6reg\x00', @ifru_map={0x401, 0x6a, 0x1410, 0x6f, 0xe3}}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x238, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000000000000", @ANYRES32, @ANYBLOB="1e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001100000000000000d25aea94d742000000000000000000000000000000003c9a0f3af89832bf216e4c9380e2da125d1595f2a5a3ba0182213a7dc814"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000400006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffe, 0x800001b4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x0, 0x1}, 0x20) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400000002000000000000", @ANYRES32=0x0, @ANYBLOB="01310100220002002b0012800e000100a55ece757273000000000000000000ffff763da70cbaa37ea44440ac141426080004000000050000000c0051000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x44010) 2m4.290195688s ago: executing program 35 (id=2860): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'pim6reg\x00', @ifru_map={0x401, 0x6a, 0x1410, 0x6f, 0xe3}}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x238, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000000000000", @ANYRES32, @ANYBLOB="1e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001100000000000000d25aea94d742000000000000000000000000000000003c9a0f3af89832bf216e4c9380e2da125d1595f2a5a3ba0182213a7dc814"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000400006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffe, 0x800001b4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x0, 0x1}, 0x20) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400000002000000000000", @ANYRES32=0x0, @ANYBLOB="01310100220002002b0012800e000100a55ece757273000000000000000000ffff763da70cbaa37ea44440ac141426080004000000050000000c0051000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x44010) 12.975174902s ago: executing program 0 (id=3256): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_io_uring_setup(0xb11, &(0x7f0000000000)={0x0, 0x366a, 0x8, 0x2, 0x3ba}, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00<\x00'/26, @ANYRES32=0x0], 0x20}}, 0x800) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000900000000000000", @ANYRES32=0x1, @ANYRES8=r6, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r7}, 0x48) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r5) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x5, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/180, 0xb4}, {&(0x7f0000000240)=""/11, 0xb}, {&(0x7f0000000280)=""/32, 0x20}]}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) 9.861963305s ago: executing program 0 (id=3272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = semget$private(0x0, 0x6, 0x3b1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b640)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="1c8b8753c92bc4d09ca098bed056bbb670d43c6f8443b71e59a53f327f5942ad30aa90", 0x23}, {&(0x7f00000002c0)="87a2978462ecec58035ccd5b38ec0518dd0c53495154fb334c4516d2a8efdc30d4ff", 0x22}, {&(0x7f00000007c0)="daf3004b9f61d415fab14abc3f862cecba094592c8209803984f6cb408ae4cc8a3150b9fe4bcacb0000d5ce7dc8c10683314c972452e02dc03b2bb9991f24dc24b0cf98954dfc88f2e9b70e19100", 0x4e}, {&(0x7f0000000540)}, {&(0x7f00000003c0)="18a4041483ee1b822fcb2ab546d32e0c86bd6a1106b6f4f3eaccb21025d2b2981f9b09e6f10714569e", 0x29}, {&(0x7f00000005c0)="4d6d172ebfe1e9a70190afb12af797428b053f64", 0x14}, {&(0x7f0000000600)="cee9e85060f653c5121679b7b87175e776e2047fbe8399902b5699f12a01f5b51b751dc6cc8f79e169208e2d5b4faa3940bd3a827dca5a9abc841253a14b9a839b533f3e853616c88d82c8da50e03ab4d3db1dff56b10a456ff9f0cc267989aa1903a0d99f4037748a31bfb0b9ed93ca92d9fa121387b0952b7c2b3cb4", 0x7d}], 0x7, &(0x7f0000006e80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x110}}, {{&(0x7f0000000f80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000007040)=[{&(0x7f0000006fc0)="51423d22162be206380796b09e1a9357de9e39055fc7f361688d5cf7b45c7caed4260d726c9d02d086569f92b54e07c1c8b95c70b382b53cd39546e347ca13318fbd0b22f1726ea5e595275ca5a3652a18aa9b80afa2f4b7a1424638bb98e7ff7a54", 0x62}, {&(0x7f0000001000)="bf508f309d050bc2d285449a3131b5c7a940e04cd5059305ce", 0x19}], 0x2, &(0x7f0000007140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20, 0x80}}, {{&(0x7f0000007180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000007200), 0x0, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r0, r0, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r1, r0, r1, r0, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r0, r1]}}], 0x128, 0x40004}}, {{&(0x7f0000007700)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000007b80)=[{&(0x7f0000007780)="d40fcd59e1a4a334dd103b6ef4631167ffb7e861b3dc24747ba71c447e2947202e6c18e46601c59bceb737e09b79c39586ec2421da3ec2e342c20193f2502837d6fece98eb84dc5b7578d29e56d27dbac3e34f29be270d4850f707b259301553e358753fe71cd037f723895f1a262681ba70cde5253f324c830671f6171830ee4c149a75629923079f7e51fcf9c6d8946edf92dcd5dc0dbbec27c8c698501e87bd", 0xa1}, {&(0x7f0000007840)}, {&(0x7f0000007880)="790da8b6f70d30a43505a5bdda85ff989dd6d9a721ec90aff4169f0123bfb9274fed122eb004c644dffb4befb76e9e2386eaed68a9dedaef1923051be5", 0x3d}, {&(0x7f00000078c0)="01ecdf1cb325ed32f07e3a9fd4bafdebd12c9b98ccc73efc40d2c06519fe5dba7a418f7dbff2e1b12582d7dc2f64570a7bb92eddfe7a4b4ed4cbd26d", 0x3c}, {&(0x7f0000007900)='\x00\x00\x00\x00', 0xfffffffffffffe62}, {0x0}, {&(0x7f0000007980)="ef5476739cdaa4734c3cae105f38ead1f7a5d66a812e3e05d5b1e5d6cab7c3b73061e9de06312afc7f7c87aed29986633bbc977bc34682b4e58f76734af75014fd800876ed5b69530e5fb0d97cafafe70f7bdf4cbe4634907b8214279a251c19c51a6121e1d6ed0a11462c9c2a9c36593928cca51ca340a9a1b132fe509501c4276c3e622e5df5e4ab5cbdd5de95ae25961a8cc80d6229ed1a0ccafe7726597b10af068004404859b118a5dddbdcecd17e435e6f2bfdd3bb1eac81f0e63b6eab26a43ef10e06c9be", 0xc8}, {&(0x7f0000007a80)="014f168a4a68fb368d46ad2abb7935ea80c91cab22801611783185f6a17adc7f60ccf789863cbf64fbcb2c3f08d899494e545276a94165fb9a8ef974fd9a0cb904ef7237d7350738dd756176722a841c4a8a22cd70bd1bc7b0a9441280c7d644d827f3ef99b6fffad563e38d", 0x6c}, {&(0x7f0000007b00)="1bde814f5449478be556a2d18ed3abed41d0a4604a336c73bfef93be93607798bfcb00a2316a58dd60058bf192b897ec792b40cb13692d608fc3ba05de8c89624326620330a538cc04a182295e2cd06a78ca", 0x52}], 0x9, &(0x7f0000009e80)=[@cred={{0x0, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0xd0, 0x4000}}, {{&(0x7f0000009f80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f000000b540)=[{&(0x7f000000a000)="46f63b9b9281bfb02f12aba73ee0f48f88cc0294d3c91c06038546df144bbf36cedf6a2ef65d166f3c7666c43bcc3a8301c1405c09f314a47fc9568307376745960e22125694aed43e3b469f819c5faecfbfff6603b95f7bd32ed0ce1743dcf43ccc6ad7b984c178e751b5655c3125808ac1099386883da12f76abfe682289dc25ad9de1da3b203b82458e7847ac2e5844e8f5f1574eec6a3978185a8f", 0x9d}, {&(0x7f000000a0c0)="cb42c6de00c497556f99d54a0b0f61c23e379292e1594f5e9f2fa76c62e088", 0x1f}, {&(0x7f000000a100)="9631a5a00d98c1214a5b547a3a9381b5fb7f0e77c9a7d8bf80ac17bb72b5d0c00814babdd046f840ff536271", 0x2c}, {&(0x7f000000a140)="d50f701925c1834f762586ff52f7ea5f90c46639c7ee01698a7b3c968d1e1c1102e0ca3a64aecfc79931e9410e178f86596ebded02fdbf7719", 0x39}, {&(0x7f000000a180)="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", 0x1000}, {&(0x7f000000b180)="29ddd4059a9477872337013e27d5a39ac952bf2bc738c32f715f5cf0335bca5cc3236d3216b7bdf21626b834cb9104af963ee0146408563fb70f030c32ac0fbd53093db262f7b972564cf6a208057f2798708605d8c042391ef110ffae8f4979f44054a083b1cf58bb2fa0619455b02a473ecde2f0620c0000bc528e32455f5bcb67eacad5f7d1a41f0d06881e3f808b8547aedd6047c44aa0c607332bdb66841addc0ed053a39f436ffcbed2bb98580cdf10d9ec926186d7752c125d71a04702937315ef8", 0xc5}, {&(0x7f000000b280)="26f2d18f06e68c46687aaad8286fbf36d25ab3637ec07eb388695ab553a6bae6b3055815d9fa8a735650a7383ec4cfd0d55ef64f1315eabe6c52171425f8c4b28a37e301de5f5e1c7b095b351f0c0e0f5196ff24ff8585d3ecfbfd5483affdd35cd84cde8b2c9ae525eabd1b026786b15c28736e3cfcc1d7df25669a1d49c9c455ed6f395b1da808a12da1d94581adbad29aacf5af59a28c2bfca7f7a280cb03433c502ab4af0740e8f488f2917970ac872d8c3b839fba9edbd47622d41d1ad4e666ab479c405515b6b7b7ad77e75294f1f24d9cfc5866d165626f2a124ea43a853aeafe075a62f9b8864fae26c56aa84e91f3a1a926ad", 0xf7}, {&(0x7f000000b380)="746f0d628fc4225473ae00e65f685b5f2c2f7cf01595f9d6106567534a4f3c459630cd794463c9ad5bab1a31df485c32e0f028ca35f3d5951d162131735e0c755201a36c3e9c8e3be97f3048b83b75020894e0bcaf032510b7ebbaac5072bb8671b6b848ef6399153127326bef5b23f7cc1f148f286f917c49d6f528535199366d8df482289f47f57a58e29906a7e25ca207adb3bed2bd3e800ef886e3d2e675323b6dbd08d0f1d4d9d4ca53f36cdfea286e2f65b03c629f2d83867e0ccb6355269faa4f6c87d33f6257cd874e51dcbce9da2b2a5cd2e4ea73def3abfda81ef4", 0xe0}, {&(0x7f0000000840)="3059a8e1e89455a27c7fff42eb6747eb5588c22c963a9977b039faf9bfcbe55ff51d25d8eff388f75a50f4ff79c264cf5cc5288174e2a6f35f412acf462901274d9534a2ff5f2fa5e8dfd096eb22f67891c4e429d0e1878681b5fa251d1fe62a62bf6bf3a18349cfa7b240501a141c27bcd9b6ef5061c09934b9e272a76000b2cfb3d5f6f6a0bed147f2b9ed665f9a25777fc2bd4c79b0e8b01f77c57dac1fc5ce75dc75eaad1c49f58b18ece8d0cbd8b178f5ac946b41cf1274f0c82a7e38470bbe9710833dc56ff9d8527ebb0bedafc66c0499db9832", 0xd7}], 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="2400000088181a5c0dc7240e72793afd", @ANYRESHEX, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x4081}}], 0x5, 0x40) socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000000c0)={&(0x7f0000001080)=""/4096, 0x1000}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="4d63bd8d756117d6663d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10a000, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x50, &(0x7f0000000bc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b3bf00", @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESDEC=r2], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r3, &(0x7f0000000080), 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="183000000a0000180000000001000000b7080000000000007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000080000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x12}, 0x94) 8.547688481s ago: executing program 0 (id=3275): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000280)}}, {{&(0x7f0000000340)={0x2, 0x4e25, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="161d5211bd491115d064dcb6fa35f129a9d50abfe0a8d3fa86f3a787cd0126b625bde68b0478db0b9c83e32d219c7f4d6a12d483c8d1fa22c2dfd5366c0afbc849e27ce178d48c0f4a724a7dda8802072b0054dcf083f4f469320c39e3f5b9ce32d30d63ea2fb68da2edc8a772ac590bd0e1f034692f1eb4d83c750cad416b645625d3464bb3bd1b819252a05ddcbc610f63940e67fc2ebb2f9e0b766a656f7a284fbdbdf94823085a69df2b4e250cbabbe3adf11438d1331976a05a288beb387351289dde532bc1a42f4b79764e63c1a1858b47896989bee4da002b3ce3a681b785106dcec2fc3fcb"], 0x53}}], 0x2, 0x2004c8e4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0xc081) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x8000000, &(0x7f0000000880)="48405b2b1b3fcc9f62b653b36d9211db60265422e275737f10d5513bb991592c90a7287a3dd559abbe22e13ffad2340ba16c0df1a33221ec4667fbb6b7bbf7988676285673dba97553de0b00e739a948b07b5a6b488b56fc3261a024ea009f6543be24694553626e357c8e6f5b0eb1ffc9894c9924e1017e8623dc168694779b76fbf70898c161efe7989a6d2aa67b0c3947ad47af41f4ee69391c005afaf9e9d63db63059582a7a7ba0a0e32401a1d41b161e6a160473ed8677a9c000c5", 0xbe, &(0x7f0000000300), &(0x7f0000000940), &(0x7f0000000980)="bf5a1cb57339e9c329831ae584fedc8ba66c8b7e0e06c481d8b2557dc9cd12b49ed6528ab63cf3b78d3c7371df92a684386e4f78f96892ea4be105edd2918837a3c278c9c365bae776b77fbd97a645f2fad89476f5961bba263f4f416862ae53c90b3c97dd638252f132533860a264d7df18ef64ecdf190fca56182445c8eb7e22c2070fd8e67c5824608dc5b6792e4a22dc678331425505c225a51f354d28576507cb6f831ecfe0ed8ffcd4222d15b9472b252999da3f7756b83e8a92789d165ce4962b7f590e26e34287e8538cf9") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) r9 = open(&(0x7f00000002c0)='./file0\x00', 0x400000, 0x1d) pidfd_getfd(r0, r9, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000280)={0x10000, 0x2, 0x3000, 0x1000, &(0x7f0000004000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f0966f2a665f0ff0f0fc73666ba2100ecc4e2e59364498e2e0f06ea009000002c00c4c1b81516", 0x27}], 0x1, 0x11, 0x0, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x309942, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000580)) close(r11) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000380)={"aa31cea9562b1cab454f7946784176ae0fea19424e0eab9fe15b3120ff8aa2ea622bb6b582f0dd3290cb7fc5291d596952035c146d5844c87cdd214ae46d3c1a8376efb98f7dc16fedf2b0caa558adb197fd7dfcde54fea5db87c24d6b88d5f4967d742fd7cac1ae1141948261a24ad7591eeae05bc8cf9b3b01bd48c01fbe57a84641721cc9d7c4780633c2b1d986fe2406d183da15b92f8bd93f5e09309f38295448bb64a258b0ee13ec6a1205c8d3822d68061a62d42313d9f2d920ad5c1cced1ff2762eb0cbd9e49d5eb938f143e4289a18e9a62c8e68e320c0d829236fae5faf7c54dd28fff85bfd542ce750b462d1e6b7325fc98dc6f1c2ad04c0d13b13e38e97221ce375205f63ccc13726d77eb31d9352ada6110247f327683e27a409e95f298cb4c5bc007428865250faddaab3f5645b7d9efa4925733538ba97d6e7437c6cbbc5ceee929372421ea144423b1df9a0a04c972518e1de4879058832e7c5cdc0a36714b57fbb9a4d7ed238bf6948773a3d2c4d23b534db696f7915763c8d89193c6504ce422908639d3b71b29d0740e47cfee853631ab3375fff43b2e33f7021d26e91fd3f2fe0a70be84afea363fa2682d4943005cac1d0a2ca545a8bb21816d3ebb748ef327578253d5151d15c2a5a5c555211b279b2a83838c693deeee69c9604d32ffbf2f242931f2e24bfed64cda9cd26968d292253e53b793e645d570586062185c180c55f570dbfc67710174e21f492694248580b44db9df803908087a2057f348763ac2b375bf488aba808e198e7b1490d5c49b61f1e57a1133c61ff281dfb4447e716788b837ad3b4b8be81bf1d2859ddf4a0f640c84fdee547f88f0362175b8a008645dc806079218969f2a18e2102cb32cd9a3618f0ded224b3df593aff66306d312e0b450fba96625edfeec0b18c9c144da6ba70fd19fa0bf2e9dc5905d7228e275d9cdada5d22bb0f4e171258ffa5bb44b76f993794568ab6e7932eef75442f12e7fac777d9fc6a501dd360e56af90b16f17a1112dbe645634c26f9c199a225b5ddc5d0a8a8e43c07144df197cbed9ff8e2d59d12b0c9f4791b17cf583587cbffc38431c8b1514aedb8bba35852b350be676a2ccf7ca387029d7cd2b07c5ddfa71144462f72109db96a3dde83d817a83474546abba2e85b246dcec1d7a9a4faa066ad6fc2ca7309e3944ee19bb2460a842b396cce8eb7434fe09ea29258b941c1622d779fbe9202eb5b3cb98319937d37ee73f4247a5270b2e6a7774a3176f3b91feb30f69b92d7890f5ce835389bb39279e8931bf6fe02df0a95bdaf54200e566c57feb33837e3ac9336738e2ec900c69063150dc222f07ba2b53bd7c8ab3ff8c3999848a0ecddb4e403d05294ba2f888251003da45775738c82e82f2794016eb42cfbd3bfd32729d03b0f4d34b4556d05dd09839be"}) sendmsg$IPSET_CMD_RENAME(r8, 0x0, 0x1) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 7.88954831s ago: executing program 5 (id=3279): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0xdeff, 0x0, 0x0, 0x100000000}) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0xfd32}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x48}, [@ldst={0x6, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x10, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000)=0x10001, 0x4) 7.887299752s ago: executing program 4 (id=3280): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) shutdown(r0, 0x1) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 7.738382229s ago: executing program 5 (id=3281): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xf, 0x4}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@bridge_newneigh={0x30, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r1, 0x10, 0x14, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x80c0) 7.368442223s ago: executing program 5 (id=3285): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x11, 0x0, 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x80000006}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x3}, {0x0, 0x5, 0xf, 0x9}]}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',gro']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a", 0x8) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.181529253s ago: executing program 0 (id=3286): r0 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000280)={0xa, 0x1, 0x7, {0x8000, 0x1000, 0x4, 0x8}}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='gid', &(0x7f0000000180)='gid', 0x0) syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31b80b6b5c96910d480d33742e87d5028e9d36367518f71e3a05a88f045ff2b5cb327b40249d56fc4d0d1bee52bb29f60f21750e7403c8d5baa76cd03df1a41cc7baa6377a0e5b0c57e449b4043f1d477e25208aca35ea07e309115c19c5a535026e3172f81dcb8c2feb5ded3d7588f90536638ebd51f3e3d1a59e95684a"], 0x0) 6.691268643s ago: executing program 7 (id=3289): r0 = syz_usb_connect(0x1, 0xaf9, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x92, 0xbd, 0xa7, 0x10, 0x584, 0x8, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae7, 0x2, 0x2, 0x3a, 0xb0, 0x3, [{{0x9, 0x4, 0x45, 0x17, 0x3, 0x1a, 0x24, 0x8e, 0x75, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0xe5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x206, 0x5, 0x5, 0x101, 0x0, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x203, 0x6, 0x3, 0xd63, 0x1, 0x83}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x9, "e6a8"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0x0, 0xf0, 0x4, [@generic={0x9e, 0x1, "f4838cdeda3d02c1226e576566b1bf41b5561f56c5e2b9d317e2b1cdd2cd1c982196698837dfb850cff18d99497dbf4b3843c75cac02eb93e007e73479d9a7f78eb387f6151a5ad0f5037c853bc840260ac3dedb8a8e9f5d25e86e8e25adba53061ee7986adb3f4e62354e74e10a14f7f63ead3aa7ea3454d943f5ea2e2cbbeaa7055b1d5317662e7099f5506ddafaecfc42e83f5e7b2f3a3c1be5f7"}, @generic={0xa8, 0x22, "1c27afee92ded1d27988e5ee0e96402e59186f8566f9ead38345f0a9cba92e23cbb7e777f49e7857b48e0c1397221d353e912341e0f620490782d200d86e49434c944b32ef7ac4f979c33e4ebc9516b8d69997d201e89654fb012faf038e40478536f984a8a7b1219062bd9cbf5c93145b897399fbebbb0e8b321086c337ad9d0b20b5a78f6229d8edb953b98d36530520a308f18bb13a38d0d340d7305e24c61a0baa4e3a0c"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x5, 0x6, 0x8, [@generic={0xe0, 0x30, "2f96b4083224fa1e54afa9d649d52b0dc60b7d904bd6a191724cb2fbf415ce07fb4a64f646521f9bbfa900442d0a744ca4cbb8289f461f6ca328b50ff088aae0ea00b69aebdee7ca9651e60e7d3de200758ed43f8156c3802c1c5e24923a39b993faf14b6aeca46d385a8fbbf03f0b221355bba79e9aa903cd2d097d0b53d7345b6b5e4d9d15681cc87e5cad7db73b0cf9548cb4319f620078cb46340957da8b2add79eb75a0bc0682445563ab823268860c5837f94c8ab02c8dfedd29b8ec51fe065ddf82d9b67e6c3b1777ea26c310877cb11f7271591889f01c5d6436"}, @generic={0xed, 0x22, "b0dbed638379dcc0d884c54e9fc713da3e0eb09640ffa986f835a84eefe8bc2b952dfcc375a3077e55d6358066a596cc6e78dd9fe8ec9da5812df859ec8478804f7a3869db6583eb2be961cc406773cb8de8dce6b4c323089503eb02f1a1962d6bcc27f62ed4f789f286203962ece860c0f2df8e4724bcb7e5cd34c96717346b84f03b16c4647fb08e501fc16b8b40bb597f682556d1a3309d86524e92d78c95ffcd1a657fe57ca26ffee349fe3c1f708ef001b78cf2edab10537c7fbb859e0422a7f02297f0622d239272a1d11764cd544b1296db7880e1c0c48bc8ed4f5743530c832c656d276c04809d"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x9, 0x4, 0x46, [@generic={0x24, 0x8, "6812998a22df0df01b61f85f498a822265701e375a78ac469118ea4fdd521294194e"}, @generic={0xfe, 0xa, "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"}]}}]}}, {{0x9, 0x4, 0x99, 0xf0, 0xf, 0xff, 0x5, 0xe, 0x0, [@generic={0xfc, 0x5, "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"}], [{{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x2}, @generic={0x80, 0x5, "3b1eee5d9448a3c2ab40cfa94041a262ad9b5aa7fec2131183d08766f708ee049bbdf4de3a2a5a6419d6b861515e9dd4de902bfb3b4dbbb770c122028481f65a529310026e20985d2d4997590082ca79d5f699afc8ef9ba3191a066a85c27692aafc57c9a45790af78412e159142888b30a9cd8e4e77b20b1c804f0d7898"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x13b3611fd2bfff0c, 0x1, 0xd3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7ff}]}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0x0, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4}, @generic={0x35, 0x6, "cff4df3c0c986b9366139086eb19ba565dcaf88a26df1e9c4ab7711ad23cefe6128ac767b732a82b24948e24f5e824b74d9e34"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x220, 0x4, 0x8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xee, 0x3}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x5, 0x9, 0x9, [@generic={0x91, 0x1, "28e0dea90ea53dc6214c25e9d7672441fb3b1d5da75a1e2e9f5b56c68f1b4e51c3ad4948e62851f563fa0f0cbc14c163571a548ffea31e5657f075d1e2cafb750d0b19c94bd80874bf2fd10e568fe97a38173fef68ddaf88da0f6cbdf4ff191ea3ba3936b33d57bdd2c6e3783d9b51a836bfa858034fdcc8fa68a80cd6daf2f1f8c4a768395a19912de6454fa3f646"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x80, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4000}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0xdc, 0x49, 0x0, [@generic={0x1a, 0x21, "e84d5656db1e3527f6a082488b6e4763f8bd5b69bf753ed1"}, @generic={0x1d, 0x23, "f4a25763859238e8515bab91431f3a313d1ea8abe6b9aa52326fc1"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xff, 0x1, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xdb, 0x2c}, @generic={0xe9, 0x2, "c3bb83f02a1892044a3025e518a2386edf484e906756cf3160e7066584cece1d7ffc1e298bcfd77c0bf5d4a8e815f1824fc34be6dd81caae25ee32d928e95e8be60ccfed62332a054d2b3154a36c86774ebfb77ef7e37b4f42ea01ada660745b0ca3723deebfb51a2e25b6162b9f9104479a6fca9981ed08effb36e2b13e2431b72bdaebbe24062b0c80903993d8f247fd0de2e47ad1065ade443fb7f149ce0a2787202199395d4a81d5b120fc968ed7f2134a300b4c0373737d6c5ab522e26f4d4c28cd2561e6e01b1e4ede61e813a8a2ac59140ac25f188c32180617dc74087174d20cd0059e"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x2c, 0x1d, 0x3, [@generic={0xd4, 0x9, "27e1ea224b81de21209882e89362eb1e97303eb28a76638b45214b5d7fd85eccc19d53761901a1b946076be1b401df3c5a57380a16af90203d0e696af067d8c7689695aafdcef01e046649d40fdda239b5a57d8a45db5cb8eb9493386c4fb877abe86c6da596cc8bf42116aedad307ca5e602b9db0dfd190ff368d1a10fc7b23222ff4d42c1a7988d7d26033c67b834eec6e290ba2fdee6f3076cb311cc38bdfb3c95006674726b30bb8c44419954ac1332b27e00459e5a0e05ea384a0c83dc393c8ef7a97618755e68d4a6e9e00bafbf6f8"}, @generic={0x50, 0x2, "7aa4755e3f6cc5ccde92810ed71e69056af1627fb638bf39c4899b252feb8fe7f0361f8e1e599aff91355b21789fa8f6823d9e7116e71e31c7085c4bf1bfb7a56c9622d256305b89268ca634feb1"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x4, 0x5, 0x9, [@generic={0x10, 0x10, "c9581a8f6ea027349b83ec86bfc2"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xdb, 0x3d, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3837}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x1, 0x5e, [@generic={0x4a, 0x10, "6eb3ae9f9d8d93d576c7de479048b708d8dd7c06399ac89af8c66bed436967f4e6ed77cbdf5958f41b256688f056a94c0a6ad0d59e98a368fc41a55902fd6ca5c3cdb696420193bd"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x0, 0x4, 0x3, 0x61, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2f, 0xf}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x4, 0x3, 0x6, [@generic={0xa0, 0xa, "dfeda97d01a208afaec7b45db8af9bcb05e89c001ddb36f0f8c59b1b26f875242efddd36e14286a9788a2d33fc4bd539c6ed6a90c14a08c97fef93acd592a85576ef70a9c3ec75f8f38740a6a03382610c293151503ee91d24e343dfc81925646636aa8e5acadf342631e37f7af5a8ca3e652ae32e79221c3144ed55bff2926411b9603efbd3b289d474eb6e2abb3e79010b80e26e96c59134953e64181d"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x1, 0xeb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x9}]}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x210, 0x8, 0x4, 0x1, 0x10, 0x5}, 0x59, &(0x7f0000000b40)={0x5, 0xf, 0x59, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x2, 0xebc}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "557e2dc409adae6f0e480808752bc004"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x1, 0x7, 0x1, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "0e423a4b36e7e1d96e8d3a4adb4d9dec"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfe, "744d10a5433882b37120476b26e0a945"}]}, 0x8, [{0x93, &(0x7f0000000bc0)=@string={0x93, 0x3, "c9354d608c90da90426044a7698bb300e743dd02a5b16d5ee9e6ad032d97b6e78d13b5b2ac7dac1654d761654c1af78781fb8cf75dc15866bfb5af384a91060ee48dfb34b43b6ed7f7e86e405af06ffad7b3e01c1c6b59517b8d3444d760ae9dd417412881af523845c3dccb8de138f002cedea2d6eedb4ca7c80f0de38ef53c1cd450da8c5b24019829cc6d3cc095e209"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xd2, &(0x7f0000000cc0)=@string={0xd2, 0x3, "e86f2daff527eb50c5ff5cec0796605b24b7e40f76ca646fcb53e85be6607b3af5d5d25c5642d4bce1ae60434917c8bdf0d67dc8f2cb5798480ebdf92fea2e1cfd10f7c998deaa5d6044ab0c0fd74bc41b8c62f7157706474f1d7201ecef66f299067c179095d6e458461976bd5a96896d315e8e58966d6fd581e2ed9c03c193b1829086af9743c70cf7280a17a309774078e261bee8cb0d8daa5a76bb12413706da87684b3b74d6bb7e89c2d211c6fdb182ebd4667af952b7b6732d3c7a58d9570506ec2504383ccbfeb3038d61b7ee"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x140c}}, {0xe, &(0x7f0000000e80)=@string={0xe, 0x3, "2e75bcb119d3470621872a73"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x404}}]}) syz_usb_ep_write(r0, 0x8, 0xca, &(0x7f0000000f80)="d686503773cb922be24438dae08c48d46b9e908a523d3a9d576df75fc48647ff950e3f4ba77c4e18c2632549ff1c3a3e08da43d2737d342a95fe6d8183bda47dc65ca5ff4b5423cc9a6e7d87b1dfc4416b444f88b0a6166309085a78705a8b37a04248506ba4c4e7148f5726e72dadf4d7bdc788f8ab217ca60e41b04494fd49cafe867563309326cc9104ace480b8e3f6548922aa95f2d28efdf4d80178a5dd53538e15cf39d23b9daa56d15c731deafdac53eb2dac83be2848dbc6f4e9b2bb0be746e7f9012faf46b3") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x22000, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0xc, 0x0, 0x1, 0xda, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000001140)={0x7, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}, {}]}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000001180)={0x3, 0xffff, 0x0, 0x9}, 0x10) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001300)={0x14, &(0x7f00000011c0)={0x0, 0xd, 0xd9, {0xd9, 0x9, "653913244cc4024e15bed2c7af99097b6f8bc9a68555cd49349866952d5d4d2dd9f5622677b8a52adb71ff7dd79266290865477f07bbe65c582758c6360933b26878b30c48a8e7e9ad9023df3b7fde5e556f85fa5b5dba39a07b4f682e882b6fdb4efddccfafd5e0074c53bb883f4f33d2a900e8d9c469f9dfb5852b47401a8abb1c58bd4cd90f8404286b7bc28268176f6252844f803c283d46d53f906e9f85c89631e3517f128b1f114640512fd4540d667bc7c46bee89dcd4016a9099ace5aa594c2ffaf6c99be9545af5012ace73bd9af4db704d45"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001400)={0x1c, &(0x7f0000001340)={0x20, 0x1, 0x38, "97e1a78a1ecd66aaa7df110ab2643296e9f7491ea15c027e3a5e7bd5ba8de570a933b06b2fca96404998f03e6c5a9b4ec0b4be46dda6da79"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x3}}) pread64(r1, &(0x7f0000001440)=""/102, 0x66, 0x312) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001540)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000001580)={@local, 0x5, r3}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000015c0)={0x0, 0xfff}, &(0x7f0000001600)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001640)={r4, 0x9, 0xfffe}, 0x8) execveat(r2, &(0x7f0000001680)='./file0\x00', &(0x7f0000001780)={[&(0x7f00000016c0)='/sys/kernel/debug/binder/stats\x00', &(0x7f0000001700)='{\x00', &(0x7f0000001740)='\'(\x00']}, &(0x7f00000018c0)={[&(0x7f00000017c0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000001800)='\x00', &(0x7f0000001840)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000001880)='^{\'--^\x00']}, 0x1000) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000001900)={'veth1_virt_wifi\x00', 0x400}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001980), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x68, r5, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9ec3}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x81) r6 = openat$cgroup(r2, &(0x7f0000001ac0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000001b00)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001c80)={&(0x7f0000001b40), 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0xa8, 0x13, 0x800, 0x70bd27, 0x25dfdbff, {0x4}, [@generic="3902985c69f89e5a4f4489e1d7c278a107df5dc9549672accc9e4abe7dfd896b3dfa0ff12e5475ae5b29e94748cb84fd83973297682abeeb35d9c44ebce6b79d789d3941a1a054fc0bf7ab5c6d454415223c2f27bf88f29fc0f38a07af82906fe867cac406ab620141bc21b47e70f2583d7ff1ee8f747514af1ceeac842a2350ae89cfcc824ee15b5269b0eb22849d2c86248549"]}, 0xa8}, 0x1, 0x0, 0x0, 0x8010}, 0x40800) mkdirat$cgroup(r6, &(0x7f0000001cc0)='syz0\x00', 0x1ff) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000001d40)={0x17, 0x0, &(0x7f0000001d00)}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001dc0), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x2c, r8, 0x15, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffb16}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) pwritev2(r7, &(0x7f0000002440)=[{&(0x7f0000001ec0)="9174d50385b8fe72bdc9d4f3af6788539716007be0ebbffae9dc39ffc60aff276ec63abab4b0dfd2012bc51fe65e3fd8793fbe3f50f32909d574c693258f86cc2464d6dbe062399444cb680e68526826ccec4ec3a17832bcb4ce738d52ea3407f297d4364bcab2805e9a9a6e373e198d41a3f902b9cf9fdfcfffd20d3a620b18dfc68a08c23eed318ca24460f97da9a3975423134a9da430bffed350b825fcbe03f7c272a180fcad296402f6f836977016751985ef0645", 0xb7}, {&(0x7f0000001f80)="a5b6ba9bc1db5677c670fc32fa8e24cdc2c447f76ba78624f01c076821323d0efd20ccc64a93bb0065f3419e7c9d6d8ec24e7c4c43020cac9375a510a43795da7f2fa9c6d490d01e3a4da3cbfaef188d9c70f521eb2555ebc41a8d678fc0eb5ed1b35079bb1fc643e29fc69f68bd84541a330fb838539c1c2163a4fcf8aa56ffae5d527ec76a96657597049eaf10c172ec63cd673027202170ce863cd07fd95aeda43d9012f1196cad414da827b54c23b6da5816f0e06af4d9", 0xb9}, {&(0x7f0000002040)="492373b6d7196026ce8e02565316f06554ca031fad5cdc07e459f93a19f3b9ae6072cfb82868e54284c547be2ee3d7d2b3ea051a6e5e647ce4b980bf6e1fbfe2eb8b5e8fa3fbbab1bf8ecb65e1dfd066137c6e7f5b36df20eacb3df8e6d218fcedb1fcbf32f698250dc185e63570dfb3c08b88152eb6fb3319fb1f39a10cc7f2379017ecf2b3aaf7d7890fbd1062a609eb89132b7ec183c649b15fe9e5486774cd32c38fa741b33f49a1aa155db19e40bfbfa30ae75a2bf87ebe68e2f682f44d8e702f8871f56195107ce9cda6afb14b16885b44f09f9744584886f88de83b0043a7722fcfb1e5fa1ec19cf625f58685af8d48ad4d9d0cc6e4a90719e88d2c", 0xff}, {&(0x7f0000002140)="9186237de4573e5ea6a4af8d4038d24a4f", 0x11}, {&(0x7f0000002180)="78a0fe48cdc096a30a1a6f293ec9b3d3eb63d308bed015f956f243a43e38c691bb4e6951b19582cf5c0a8e68b878a8c0489884d75055f6baea72634925f8fddb39d43e0132c5679aae6f45e27b408c9699ea39c991c701a911062d795441202c7341c8a416a8fa7f0d83e37f8a5c65e7dcf8f11df2e2ab428cc39f61f419e2ebea4167edff2942ff68ebbf8342b8e2385d45a19f28265ae27a6102f1ff8654ee391fe7d0c69b32641ac072fdcda12bb320758c39beced6372171eafcfff1", 0xbe}, {&(0x7f0000002240)="a5981c297c434cc05583ab63db739a656bd42966c14630b336f05c350e9fc5d2d12073ad6110b25c15469bec1a619e17c8e5aaedeab8ae2d95cb2766acb932351d", 0x41}, {&(0x7f00000022c0)="c707538a38e22949fd96283c3f0a94ad42589a42b92a309c2b2c803a1c8af32a2e9e9c3626711cfe2cdc0421ce4082bd5ed7d07883bfdb8b6f5201d73979eecb2ae54eb93396d6fffc115e010862415785dc5700023a4801299c699d7d443203aabbba577179fd327ca9056ff8061063448cd251c16ee89af8bbca", 0x7b}, {&(0x7f0000002340)="72dc61026b25784efdf098159d9da9d03252e00812667c682d029eefc1584810de970ff972de6813ffb1327ced1346e06cb6fb0b1118da4bfb13fc5726e63a70ac7260da9d29590101e9f2a581e5192fa7d939dee956abde96d7e19df660af1c34124c0aada58068b4ecdc5052041c72cb890b12aff21cd5e9a6d3758c9696874e8de46dadfbbb06fab0d7a11bc7469994a92277b89ea0c13e6d3a9c2d6c9587908d3a2b939b86619d5f6cdd117b58de26", 0xb1}, {&(0x7f0000002400)="2421e5b4baca4ccae9ca0677489ca5ec03dd1b955161afed375816981f927ab826868b7d", 0x24}], 0x9, 0x5, 0x7ff, 0x11) r9 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000002500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xa, 0x7, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x7, 0xb}}]}}}]}}]}}, &(0x7f00000028c0)={0xa, &(0x7f0000002540)={0xa, 0x6, 0x300, 0x8, 0xb, 0x31, 0x10, 0xf}, 0x19, &(0x7f0000002580)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "6519a38ad287950123d0461c631b8e1e"}]}, 0x8, [{0x4, &(0x7f00000025c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x2801}}, {0x42, &(0x7f0000002640)=@string={0x42, 0x3, "0e224c241ae0d4029940beee52d36bdfca8be396acff31b0e39ccc8b88fa01803a6781a0d42beae2b2b0b0643355541999a943fbfd1ae1225403f113e69acd42"}}, {0xea, &(0x7f00000026c0)=@string={0xea, 0x3, "e2a7fdf8ca0893fd7259886c9f9da0c8a53d3538a45764b031a0b5da381fb615e412fd2f33945b06167cb68d6c9cbbb596b344903ddcd5622cad21d41f7460c170074c7457d31d0288d3127bb9bdf4600d0bf8d306f0c4154d62540f7bf10914e4ead7cee835ec4f3ca183ccdb03e4f4ce134347f4d04a34c49089c8e0b0c6aa8e30697a39937f590fda2f9fc33d4232c03e7b72444ce0e65353de0ced22a8249ab72dded05258a33372cd8807ba612da0e2f96ed072cf42a6f60145e720e8a1f79209aafbef083dfbf0d6c4e2edb82306b8d735b1b574d03a5c8110603240cf73fc5236cd556756"}}, {0x4, &(0x7f00000027c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x23}}, {0x4, &(0x7f0000002840)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000002880)=@lang_id={0x4, 0x3, 0x861}}]}) syz_usb_control_io(r9, &(0x7f0000002c80)={0x2c, &(0x7f0000002940)={0x20, 0x21, 0x79, {0x79, 0x22, "21389ded23f3013a0035834fb090827e4eff55c5d7c0edd98061affbc835abddf7ac038094a802ed1d6483eb9da6d5fb68dce4d4a8609d5970972c914b73a8031ff0b2ba84ebe53605140a93c5448cf3c62ef27302a992a93e0df2502ba732ed9235508a5fac052a45378717a62e8bd21206df7c6751a1"}}, &(0x7f00000029c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2008}}, &(0x7f0000002a00)={0x0, 0xf, 0x1e8, {0x5, 0xf, 0x1e8, 0x6, [@generic={0xcd, 0x10, 0x2, "0456ef87800c5d5618cf8ae9f5faa75cbbbb4a6d54ae8c63836090b9a68416174728d65e61495e620ea216046dd521ccf7021ed9593437acda110f07dd1fb4133700face3d68e291b8d29a7a0f3e85c423ba8ece1206c81859b7b3dcf9fcdfb9a4487f1aa1642f21368ea5907a9782f609ccb0a987a495618e2e46c203d6826eaa4b40ecf4a37cb7afd697e6ff6733324c5d0e064901d6ff3f428eaeac4b91ae78e610104c001d193decfdeb3846a640a198e9e202aa27331215643c1794245b5307a67578781e59218c"}, @generic={0xe1, 0x10, 0xa, "3d2467e4cdac2160a78d500b2184c00238040eebddf7fc68bac0f97c18558204eeffbf28b49cdbb16395c4e575d7ae74e61e4a26064b6f3e822fbcbac9cc18c86b3de9d41bd94822e36ed4ccc89092a80b860fd87b676668555ecce9cb0be8915c9beeeb113e12d54ca435d7505b5f765c2db389d3fbe91c44cf465991f86018e74e221b75cfb361f635313d1c55167b5dc240e08fcfd3bae454bef26baf2b748b2611a3aa17411f2f9d2284427de61109ac995e69784f47524c7bda0b34241f1c7a4876b4dceaefa50ae3529d0188b3b4a5a1f2f57310906a02f763cc0a"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x80, 0x3, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x36, 0x0, 0x8, 0x0, 0x7}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x6, 0xf, 0x32, [0xf, 0xff0000, 0xff0000, 0x3f00]}]}}, &(0x7f0000002c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x7, 0x0, "6bf161f1", "70c2803a"}}, &(0x7f0000002c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x4, 0x3, 0x9, 0x3, 0x8000}}}, &(0x7f0000003100)={0x84, &(0x7f0000002cc0)={0x20, 0xb, 0x70, "4f9f675a7f728e9f3e4aec2fd999d81160e9b271cd44122f63748ad8d50ab2d802d2ec6f6f05b9b957239d724450398004eb62e1d10a438a5e4e306c2fee42341fed59e32b076daf846ab5486816c1bb1782c7ac690b4f2ac46c64ffd71c71526791c6bde07187815f715a670c64f9db"}, &(0x7f0000002d40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002d80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002dc0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000002e00)={0x20, 0x0, 0x4, {0x40, 0x10}}, &(0x7f0000002e40)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000002e80)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000002ec0)={0x40, 0xb, 0x2, "5615"}, &(0x7f0000002f00)={0x40, 0xf, 0x2}, &(0x7f0000002f40)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, &(0x7f0000002f80)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000002fc0)={0x40, 0x19, 0x2, "8288"}, &(0x7f0000003000)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000003040)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000003080)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000030c0)={0x40, 0x21, 0x1, 0x6}}) syz_open_dev$sndctrl(&(0x7f00000031c0), 0x1, 0x420002) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000003200)={0x2, 0x0, @pic={0x0, 0x1, 0x81, 0xb, 0x2, 0xa, 0x33, 0x20, 0x4, 0x6, 0x3, 0x7, 0x6, 0x1, 0x9, 0x4}}) 6.611508789s ago: executing program 5 (id=3290): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r0) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x104, 0x1) getdents64(r3, 0x0, 0xfffffffffffffccf) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x800, 0x0, 0x3, 0x1, 0x2}, 0x20) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={0x0}) syz_open_procfs(r0, 0x0) 6.553726132s ago: executing program 4 (id=3291): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r6, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r3, r4, 0x0, 0x20000023896) syz_io_uring_setup(0x6f10, &(0x7f00000002c0)={0x0, 0xd629, 0x8, 0x2, 0x1a}, &(0x7f0000000100), &(0x7f0000000340)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x0, 0x5}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 5.824851688s ago: executing program 5 (id=3293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2069092, &(0x7f0000000380)=ANY=[]) truncate(&(0x7f00000001c0)='./file0\x00', 0x100000000) (async) truncate(&(0x7f00000001c0)='./file0\x00', 0x100000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000) (async) sendmmsg$inet6(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={r8, 0xffffffff}, 0x8) close(r5) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r9, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) sendto$inet(r9, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r9, 0x1) (async) shutdown(r9, 0x1) recvfrom(r9, 0x0, 0x0, 0x61, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 4.217331673s ago: executing program 4 (id=3296): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000001970d4a100cfcdc8b5e5d149000000000e000000007e6430ea00e5d226df907e651553319682de8da14d0a8936a44c72c6265868f6ce2d134a8333a7b64173525358bc1050583452e6472e7b057d75c8d4a882b8a8a0391e280f9d471a7fd50f96a789b512", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = mq_open(&(0x7f00000004c0)=' \x01 \x00\x00\x00\x00\x0f\x00\x00\x00\x00\xd0\xe3\xac\x88\xc1s\xc5\xec\xa5O\xa2\xf3\"\x88p\"k/K\x99\x147~H\x0f,\x86\xad\xa3\xc0J\v\x1a&\xf0\\\xb8\xcf\xad\xae\x93J\xe7\xcd,\xeb\xef\xee\x93\a\xc51\xd6\x98\x13\xf2\xe8\xe8hY\xd7\x03.\xac\x16H\xcb[,0\x8b\xa0\x83\x84\xb66\xff\xdc\xfe\xb9%\xf7\xdeQ\v\xbe$\xa1\xc8\x97\x9b\xba\n\xd1\x14*\xac\x84\t\xe93qE\x8f_\xcb\xeap\x0f\\;\xb7\x1c\x03\x03\xbc\xa3\xcc\xbe\x03\xb3$\x95\xb4\xd9\xca$%_\x1b{\xfa~y\xba\xf5I\xbar)\n\x93\xbe\a6\xf8&\xbe-\xb2\xf2\xa5|Jh\x15,\\(=t\xa8\xe3\xe3\xf8!B[\xa8\x1bz\x83i\xa2\x1e\xb4V\xc7\xc0\x00P,\x81x\x7f\xc6\x05~\x9e\xa9\x97<2C\x13\xc9\x01N\xfa\x97\\<\xbc\xb6<\xb5\xc4.\xcaX4%fn|\x00'/237, 0x40, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000240)=0x200000000) write$vhost_msg_v2(r6, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000000000)=""/119, 0x77, 0x0, 0x1, 0x2}}, 0x48) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r8 = socket$inet(0x2, 0x3, 0x9) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB]) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x12, r2, 0x5ad11000) 3.902477561s ago: executing program 4 (id=3299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) set_mempolicy(0x8004, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) statfs(&(0x7f0000000000)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x48}}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) syz_emit_ethernet(0xd2, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 3.509673344s ago: executing program 0 (id=3300): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40e802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ce) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\tx\x8a\fx\x92\xac?!h\xef\xda/\xb1\xddArd\f\xccyJn\x04i\xbai\xe9\xb0\x91\x84,\x1dkfL\xe0\x05\x10\xc5O\xd4$\xc6\xa5\x16\xc9a\x8d\xedq\xe4\xca\xa5\x00\xa8\xf3J\x9a\xaa\xd2\xf9\x12\x1buw\xa9\xd0\xe2\xe7\x0f\xd4YN\xe4\xf3\xe0\xe7\xb3\xa3\xf2\xd1O\x15N\xdau\\\xc5\xad\x87b\x9f\xb3\xb8\xbb8\x95rfp\xb4\xd4\xae\x97|\x1b\xa3\xcb\xce\xa6~3>\x97\x1e\xdd\x05\x88\xcbNe\xb2H\xf3I\x1d\x1a\x11u\xc0\xdcA,\x16<\xa6\xb5\xea\x13tUA0h\xf9/S \xb4\xb5\xe98T\xac/\xac\xe4\xcb\n\x18\xf6\xaa\xcd\x8e\xc8>E\xb8\x11\x14\x87\xaa\xe5v\x95\x81\xe4\t\xd9\xc5\x9cQ\xe1\x02\"\xeeC\xd8\x95<\x05l\x8c\xb0\x8e_\x1b\xf2\xe1\x17\xe7o\r6DM/w\xe9I\xce\xb9\xf7\xdc\xc4\x11\xbaG\xcb\xa7\xbcj[~\x06\x87|8r|f\xcdIY\xa5]\xcc\x80AV\xe6\x9b\xa8\x90I\xc4\xc7'}]}, 0x106) close(r5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}, {&(0x7f0000000100)=""/17, 0x11}], &(0x7f0000000400)=[0xfffffffffffffff7, 0x7fffffff], 0x2}, 0x20) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100000001e1c010a0000009004006010a649fce8514b04f4820a7b76000000a3a2d22109625b907a2f92150d4ac73e9e55d124b3c7ef71841dc278046d2faf2879f2e7b0bc4bd524580e2329f59dab0c4c6be6bf3f97400c4dee84659c36d5f9e04544d380738decf8b454e5d5eccf88874125b379429e1bd61fe1e540d5e2e2f4294d4450a8c59894fb7fdfdfa8b8a70000000081f619dc9a7944c6269ddfd3212bfab7399025b19f71d0b2033283775814300e444ab228bfb6a0adb5e16c93a77c078e17e9f67f3b0780af52a6aa43873574b1779468bc8abcd8c2c7c32fc593e8645246e397f9bbb14a58076cc468a814061fbe67a133"], 0x1c}, 0x1, 0x0, 0x0, 0x800d1}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103241, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) 3.509244099s ago: executing program 5 (id=3301): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000dc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=@delneigh={0x30, 0x1a, 0x1, 0x70bd2b, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.418199459s ago: executing program 7 (id=3302): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') modify_ldt$write(0x1, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) socket(0xa, 0x3, 0x3a) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000000c0)={'geneve1\x00', {0x2, 0x4e19, @broadcast}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c42165d", @ANYRES16=r4, @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x3, 0x401, 0x0, 0x92, 0x55, 0x2, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$media(&(0x7f00000012c0), 0x3, 0x180502) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x40010, r6, 0xaffb000) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x40, &(0x7f0000000240)={0x0, 0x0, 0xf, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket(0x14, 0x80000, 0x9) 2.674759941s ago: executing program 8 (id=3304): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0/file0\x00', 0x13e) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0/file0\x00', 0x20001, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) dup(r3) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r5, 0x200004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000900000000ab8d3d1f6aeb025f222ec6e7d8e400d8c90d8071aa2a57f792f48ee40ab5ef55b13aa6f4872b8e5ce903c455dcc90846c0cd8b395df0710373dcc7219ac73446e22e9c1a3afcd2a7b205de4f7213e719b581d898cbbc646978ea8a3f1cf1633fc5a88eeee5b8b3ae2a862fe9"], 0x48) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000100b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000800000001811000069585d04a76c89801a82e5a5f9", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000180)) r8 = socket$inet6(0xa, 0x6, 0x101) sendmmsg$inet6(r8, &(0x7f00000015c0)=[{}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @private1, 0x80}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000640)="9e5a9fb66c96c50817cf9473f4cc98735b3ebdfbf5add00832b853c58aa02e7dfe1e64580da7364f11f75fa411ed5c0bdcd18587293a2fabe19c24431ae4136237221d553379a949e5de45ae916498121dc5419709971e40337b51a0edf1b3fb711d77beb58eb0a99ec38b4dfe30f65442", 0x71}, {&(0x7f00000006c0)="a8967b61c4dd9cf32f24469af3268585c38260a42d8a5a4f070a0dcf7ed53f9daf1ac7ea49bcd72ce8c8dd080cf89a7018422b85b273510469a87006306505d82c437f8c3152caae902e8ebe5fff2701204aa7edc28aed129bace44e022a9ad1f7b3432492dae52f34f38f8c8c5352143ca3ecf49fe0949727a62271dfccebe84736f9bd368656ae137cbeaad5bef25fa2fcbb9334efdeccb8085b2334326997238f823eadff2d579ef936f1d160e62984761743edd8b17f99c570a79a", 0xbd}, {&(0x7f00000001c0)}, {&(0x7f0000000780)="855bce1c916208cb4af2f91eab9b7fa133a5f8580445a1fe1c2253a9f1c08a4d96427a9b5e56c3ba28c290c328a7f753c9ce719abc8bf051d52a370450a2786679b61f34367755278948d199e17397eb2c9c6ad1231fbd802f9db87c624ecbc82071b8c3b840", 0x66}, {&(0x7f00000021c0)="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", 0x1000}], 0x5}}, {{&(0x7f0000000880)={0xa, 0x4e21, 0xfffffff4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000000c00)=[{&(0x7f00000008c0)="3641866de74f71f7c58e52552b8cb0668ee8c0044fa46b58548684f8a0f15744bf9f18e4b675f842d5f6", 0x2a}, {&(0x7f0000000900)="218f3d87e0fc108a9438a11460748577c10c1eb5b05e96cd66c9935f00197459382eb24b75628e8e8dfa6dd8ab5e81bc72e9bad3ff82aa92bf730ed85b84e461898b5d3dba3d81aca405859ded741225b04be8c3afabdf02bb81860465cdf63e1a31aa80148c4ac7128dc411eda8ea49ae67b6347c2fb5871d", 0x79}, {&(0x7f0000000980)="19f35f10a612c19984c85c6038fd30bece4f03843307ea82a90218339a7f082464a1eae91e606afd81624e29bc4e7bf3744f5f40cfae06286a3aaf825ccaa0e0ea344364e3080120c41d03dd19711c8b66472109b384ef33e0c08c084068f0e03489253eb328348f8ee5e13f972d23269d444a885646120702867426b18ea1231710154567ed580ccd86aa53e25f5b1e11ccc4c20e41d70029252b6921c8694e5f6e25510b6690c0d46eb9539a52aec755cbdd4a6e8e5fa16a6bc7", 0xbb}, {&(0x7f0000000a40)="3a1433b232f443ddd449ccb5041b2f0029acc5149fb8dc4c1073193bba8ce2aee0b87ea9c6cc1c0f82fb4b07cf8eba777fda1c0ae61ea8a1a5e44b8109e61a1705e2de1831181b0bde26f8186680548543102a6f526260ea82dc2f8c62085e426d1bec7276c658111ff2313d02679d9d29880f23472b2b18c4f28b109f1fd642e98d7013502aaa53c6c36796a3e7125431889f934d425ad2a598f6c93724f588090b40d8b040cdecb072024c6d", 0xad}, {&(0x7f0000001740)="fa49023e7321f84228575d3b2294f0dbb0b6e6d22e644aa4a9a54c46f43b8609d3ac32ea315edefac9697a914706fb302ff1310b78d223c27c28366ff7373ca0e0f63e27c01045369dd14741067683a05608c491183c1aaaf769fad51d47616fba6b265902c1992b53244b88bd7462b16b7a1371d5206afe8dc0471ad4f06f29c54fc584c2402d042088d83ac4325ae1d436584ed77ff491631e4d5bec1a46da0f97e188efb04060d4a302d5dfdea9a3ab26f4635e9e940fd0dceebd273c19b038060ee4e05ab53f8b6575f625f915fd23f9b8671db8f8189ba758acb598f7a0c5143755db799779179f71b670641232f19e283e3e54ed56870ac665ff7f520bbf7bdf377e49488e456593d30eb0b1da6fb9d480c11b8d222652e4a43a69014ec33ff747bd520600000000000000a29d8c7c633f9a72bf908e08a31dc683a749c1c27fccc5b2df54cf4334fa3f0c45fc89f9b5c722be24", 0x157}], 0x5}}, {{&(0x7f0000000c80)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000cc0)="d7b2ad9a53d6365b5dff91618843f21d1dc009660f4a7cfea3f3541c6b2a61532970222647d85a435de347b76f59751a8007b8bae75eea0c279181633faabaab65dfe26bcf25054613fe1250cd13e0fbc9510627eabde1754e1567e01a8d877e6e617817bb953953152c5712f55de9c277379f2c80157f6365743979c52bb72880ed36e8b8b58064324eaf0ddc1fced5956cfac87c1ad1ae71ba12a3946afa0c054eda6e8fe6ec2fc19c021f1afe159a93e7182ed222af52562bef68fb98a113356e8906162c4bd1dbd2adacfc57860d9511451b9d", 0xd5}, {&(0x7f0000000dc0)="551881d71fac93aebfda261e0f24b333c7ad29fe304077d43d1bb4ef9d5f0356cab435943d20d66d9ffa3668ffbe9a3c230b0301bae45a88bbf2c9b27d32ef6774780a7088805b589e71464d773abacf6104ddd6f89bb6e35c88b28f41334ad10ab6f567aaa09777811ea4e243f682323753aa", 0x73}, {&(0x7f0000000e40)="ba59cb3b21ccf940385670bd52d91335a984e3dca537af89502eb7a9e70d781057bea364ea8223fc6ee993e2190885f8aa57fb29fa9a76a253f3855eb662d12267dabd71c9e79e9e88afc87cf258b32866c3111b76ce74ae04030d50b5dc0d0ffb4212007e0960c1f26502e45e7e48506d0dd1cf87f82510496f639b618c3942daf71cfa00a14230d6423ad6a8caf45ec64179bb6a47dd364eb698a1a11e4b815dfe28d34cfb3e7a2240f40fc7fdefa0693d23039f772fca6323dfa3effac69701aba4f7480de8f44ffd", 0xca}, {&(0x7f0000000f40)="f01b01be6a1f9c7ab863be93c40b774eea4e3124067e93d5a4eb0b498aab4fc10412114cefca6a6c93ead131e1f81bf8ca3647b1d7366a43467199fbe4949429421fd49f920b79d675a32f9b9555011fda1c0552c744ec43b4822c87f4220bc55338da63802e", 0x66}, {&(0x7f0000000fc0)="5a7e3fcbccdb998862fa122a5eb4e3e1f960af7a8406c2f50d8bceccb9a0dd990ca4e59baddbcdbf6b932430141742608b", 0x31}, {&(0x7f0000001000)="187530cf69948d6aa38a183a9e9915079259f754db3213e54471fc070da574afe39d1527b8f16b5be552e2b857c3950991eae384eac3345bad7483e762aee4bf71ab453688458d624c0342dbe22ba9e4dcf6", 0x52}, {&(0x7f0000001080)="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", 0xfb}, {&(0x7f0000001180)="53458487a062cb0ca29dd591acc83b75763269120dccab345782e34e8054b15b452d6d60c6301acf41901176010178d211c10ee3890fe6ac954e297dca8a7eab99eff3df08b72da0f05febdf342000d23d92aec7098daaf589d3551107a0852876ccecb859481b7abb38530930905689b1e5e6e57cf7ff8e8f113b56a2875c4abfd87f7edd840e", 0x87}], 0x8, &(0x7f00000013c0)=[@dstopts={{0x60, 0x29, 0x37, {0x2b, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x30, {0x2, 0xa, 0xe, 0x8, [0x46f1, 0xffffffffffffffed, 0x9e, 0x5, 0x8]}}, @jumbo, @pad1, @enc_lim={0x4, 0x1, 0x59}]}}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0x6c, 0x16, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x17}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xff, 0x90, "0c7217ec84c9a94946243c7b1f3a5343ae2ad2819b5cba84cd4dbab9cb6740f5f1e8d3ee2b2b7b06ab3bb2dc2306c08f51a8454e577ec9b342fcf792321d6ad8143699c8451913d32604251a07ebe5fdbcd5f56991fd93ce0f4433e9ee75d0b433df7c552c0bf909831b09d0bc2b4ee2ce43ceaceb44bf1c8e68f00f61d6ab70bbde7723d387467ab5effe7eda38adb9"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hopopts={{0xb0, 0x29, 0x36, {0x2, 0x12, '\x00', [@ra={0x5, 0x2, 0x4}, @enc_lim, @generic={0xff, 0x5, "49007b86ac"}, @generic={0x2, 0x84, "7e672dc5931c7515b07686412aa315d2d04f1495f350c010dc99e749badfc63f31f8a39c85e8b1c9203549453916e72e095d0e1a5ac9a6c97f41a921034a644b27230b09c05b10c5c75cbee9f3f9eb591af9816641aa4b4ce950d457b2f45f367f228b1f91d51fee3337c342d98d55acad6daad296b5cbe9e9d5b23b04beb938b73db8bd"}]}}}], 0x1f8}}], 0x6, 0x1c000) 1.993866768s ago: executing program 0 (id=3305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 1.714665607s ago: executing program 4 (id=3306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7", 0x23}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a240104000502010207240705000005082408050400049604000000010302000100060006092403050503060581092403060101040505072404"], 0x0) (async) syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0xa106, 0x13100, 0x2, 0x2dd}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000480)={0x0, 0x0, 0x84000}) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @local, 0x9}, 0x1c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00"], 0x24}}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffdc8, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000002030300000000000000000000000000000002000800006102000000"], 0x20}}, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r8, 0x26}, 0x20) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000002ce208332bf6192e181c148eb88aa58800694e8bb35b0000000000000080741ce94e123ae301cee501248852d786d524957a"], 0x20}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00009b8000/0x4000)=nil, 0x4000}}) (async) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r11}]}, 0x20}}, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r8, 0x942e, 0x0) (async) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000000000000000000800202000000000000ff070000060000000a000000030000000000000000000000000000000400000002000000010000000000000001000000181f5db844b2feba770300000000000000000000000000000000000000030000c00400000002000000040000003b050000020000000b0000000000000000000000000000002f0cc08a04000000000000000193000080020000050000000000010000000000000000000000000000000040ff7f000006000000040000000200000002000000030000000000000000000000000000000d000000110000000100000003000000010001000400000001040000000000"]) 1.612109402s ago: executing program 8 (id=3307): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') getcwd(&(0x7f0000000440)=""/211, 0xd3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000007000080000000000700001811000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000300000085000000b593c3c5b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x400002}, 0x94) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120101021b0471205b0416003618010203010902120001050c80fa0904c4c8008440a07f"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="307ddfb9", 0x4}, {&(0x7f0000000340)="ced98c1a5f5a93258dfa9a8c31878af8d7be921a531da9e6c50efdba96722424d55ce610a4d9b534b3aa09618dfc04f5504e30a263ad3fedf0a7381a8a", 0x3d}], 0x2}}], 0x3, 0x2000c8c0) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="93503d6b60b5c819fbce75edd0c1fe2f96fd0fd484a174aa2ef5b07c9988406d3d1af13e48bc2a9bf3f92de202dfbd8a23e48b2f907dfa4f885d20b0feab3db91100f0574e43b153643c7043b00a4d5459faf10f364201e38be65bc5", 0x5c}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)=""/211, 0xd3}, {0x0}], 0x2}, 0x9}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2a042dbd7000fbdbdf25030000000800040020000000c19cc59edb70a9f0a35348fd4b44f09508a60016965cc393f04a4472050e3e642b561381444325ff118ad96b4453275faa81c5d959a910b449f8ef9761187d6e739311772e468c5415687c3bde6a4bbfd4324d79de"], 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000) 1.36573747s ago: executing program 7 (id=3308): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "840011000000000002000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) 1.341308282s ago: executing program 7 (id=3309): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x7f, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0x17, 0x1, [{0x5, 0x11, "31ed4b3b2bed17eda99c03613c7c47"}]}, @ssrr={0x89, 0x7, 0xa7, [@local]}, @lsrr={0x83, 0xf, 0xf8, [@private=0xa010101, @multicast2, @rand_addr=0x64010101]}, @lsrr={0x83, 0xb, 0xed, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, "04"}}}}}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x23, 0x800, 0xffffffff) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x9, 0x4) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000080)={{r2}, 0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0x100], 0x90, 0x8, 0x1}) 1.173899154s ago: executing program 7 (id=3310): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080), 0x4) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}}, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) (async) read$FUSE(r1, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r7, &(0x7f0000000380)=[{&(0x7f0000000340)=""/5, 0x5}], 0x20) 1.017818319s ago: executing program 7 (id=3311): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/73, 0x49) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x5, 0x31, 0xffffffffffffffff, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xc, 0x3, 0x0) syz_usb_connect(0x3, 0x58, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xa, [{0xc5, &(0x7f0000000240)=@string={0xc5, 0x3, "5ae4545c49bf3e589875295236e200e0acf268b589b671b03a5cfc57b9b60fc1c62772b2d9dce6d5d79bcd046c039cac90ddd9c31d0e29545699e7635cc852aae8f0ae67f2d1c22b01e8608f9bbe662fc5407b3e8e3ebdc0d515ffb5c704e39a2a5908d8142405daedbbf33647fb5bb480c41a97fba6be20b09a7a35c2543a92fd3433590e709bd45a40c409eb46c2489dec2832a405ec099df2a197c0961279d8ffb0e94b28a9f0e49f301c187a308df72ff5c44a2de2b1f71738dd3b245105f8fb32"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c01}}, {0xb8, &(0x7f0000000500)=@string={0xb8, 0x3, "b868214dad17a1d0565c59b1edfcedcaff0b390bd1475d650ff44fc4410c0578c011fc4728726105bf5b244b4d632ec4dbb7c95b36115f1b88e0003e63135e491e3aeac770dc6e05cd534641a7797f343a80c2b06810d58e5601e9f2fbbfad169a888d4753294d13c715d2d778d1f7d3ccc02ab2b9a0b1bb4e325b34f6491f7dcc3d33888d5930643a661a24e933646e1a4a4e8c5218111a0f5d8f45776f0abe66abce261a1ef69da704894eeea730052a5d9c6e478e"}}, {0x5e, &(0x7f0000000380)=@string={0x5e, 0x3, "199e63a93253360f071e564522fffdec51d6162b5b5ba119d38692ff0f3a869fbf5c66ff47f155be5e6b76d3f57a9abb322c6bd62e441fdc793b561732ded9df1199bc8c146fce3b9ec3059841bf3216224a3b9b592a655a8a0237cd"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x102, &(0x7f0000000980)=@string={0x102, 0x3, "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"}}, {0x67, &(0x7f0000000900)=@string={0x67, 0x3, "3be7caddc8ad10a12550efd50b45808b5916f50baeaa2c816fc3a878c228e222468ac960cdfed2c478e37b6606fe1b2bc5a36945f66e7e62cf65dacb897d35db6944bcdc2843bb08ca1a4ca7df4ecf0b3378af4d0c3a253265caf45e0cc8114d8fa872203d"}}, {0xe0, &(0x7f00000006c0)=@string={0xe0, 0x3, "2a5bbb325e1d6ed858bbbca9ca76e7f349ff759e41ba0bf3fcbf6290ea3b4b5ddac4ea654bd84e9f1cc22b29cc820b2359cfca3c84b0b011d0380288d77b9e2e3db4eca36f15537a09f26c2a660cacf6af80ce243a348bf44fa5fc10a5cc92c6fb4b5004ff8e7d5611b72c7ed89a50b35c5eaa4ef0f7a220a3515295dea0b043496b6759f247d9d53d15acfe3fb5944dbdeec9ceb754e31d9ce61c19c752aeb8e199e0f730573f30dc09e9e3334cfc6e84f57c22fc458cac2d6de6b2799fd8b92b6451c5907cc33f82ce1926498b2d9a31287ea8ce72881e555642e4397d"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xfcb4}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x2001}}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000340), 0x10000, 0x4402) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0x80, 0x2, 0x800002, 0xfffffffffffffffd, 0x7, 0x40, 0x0, 0xfffffffffffffffe, 0x40000, 0x2, 0x7f, 0x9, 0x978, 0x1, 0x1002], 0x1, 0x3e2987}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000430000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYRES64=r1, @ANYRES64=r5, @ANYRESHEX=r1, @ANYRES64=r7, @ANYRES16, @ANYRES64=r7], 0x38}, 0x1, 0x0, 0x0, 0x404c044}, 0x40040) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201007a4d242108d80981006230010203010902120001000021000915f4"], 0x0) 933.760198ms ago: executing program 4 (id=3312): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) socket(0x1a, 0x6, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r2 = userfaultfd(0x80801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x911d, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x3, 0x8000052, 0x3, 0x12, 0x100001, 0x1, 0x7, 0x2, 0x5}, 0x0) r5 = syz_open_procfs(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r5, @ANYRESDEC=r1, @ANYRESDEC, @ANYRES16, @ANYRESOCT=r2, @ANYRESOCT], 0x48) sendmsg$nl_xfrm(r6, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af0117030109021200010000000009"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c0010800800014000000014080002"], 0x80}}, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r8, 0xc0445624, &(0x7f0000000040)={0x8001, 0x0, "60055808889f90ac060000050000009ab67e1db9c9a431078d40f722e600", 0x4, 0x0, 0x0, 0x0, 0x161}) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 922.134645ms ago: executing program 8 (id=3313): syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103"], 0x0) (async) r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010000000009045f00020103"], 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) r2 = socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b036c00e0ff64000212475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) connect$can_bcm(r3, &(0x7f0000000080), 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES8=r8], 0x48}, 0x1, 0x0, 0x0, 0x44801}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0) 175.175379ms ago: executing program 8 (id=3314): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x11, 0x0, 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x80000006}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x3}, {0x0, 0x5, 0xf, 0x9}]}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',ro']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a", 0x8) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 63.203068ms ago: executing program 8 (id=3315): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) (async) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setitimer(0x0, 0x0, 0x0) (async) setitimer(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffe9, 0x18, &(0x7f0000001b80)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0xb, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000b80)=""/4096, 0x1000, 0x1, 0x17}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=3316): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0408040cc8007a"], 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20ef0000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x88) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x10000a006) syz_emit_vhci(0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9c, 0x4) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) kernel console output (not intermixed with test programs): 0x7ffc0000 [ 862.347919][ T30] audit: type=1326 audit(1760269788.051:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b818eec9 code=0x7ffc0000 [ 862.370440][ T30] audit: type=1326 audit(1760269788.051:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b818eec9 code=0x7ffc0000 [ 862.393439][ T30] audit: type=1326 audit(1760269788.051:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd6b818eec9 code=0x7ffc0000 [ 862.416475][ T30] audit: type=1326 audit(1760269788.051:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b818eec9 code=0x7ffc0000 [ 862.439950][ T30] audit: type=1326 audit(1760269788.051:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b818eec9 code=0x7ffc0000 [ 862.462710][ T30] audit: type=1326 audit(1760269788.051:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd6b818eec9 code=0x7ffc0000 [ 862.486058][ T30] audit: type=1326 audit(1760269788.361:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.4.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b818eec9 code=0x7ffc0000 [ 862.733168][T12853] syz_tun (unregistering): left allmulticast mode [ 862.748228][T12853] team0: Port device syz_tun removed [ 863.052932][T17037] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2861'. [ 863.606634][T17041] netlink: 'syz.0.2863': attribute type 10 has an invalid length. [ 863.700731][T17041] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 863.718621][T17041] team0: Failed to send options change via netlink (err -105) [ 863.739738][T17041] team0: Port device netdevsim0 added [ 863.859965][ T5948] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 864.057807][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 864.071093][ T9682] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 864.082065][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 864.092827][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 864.101489][ T5948] usb 5-1: config 0 has no interfaces? [ 864.107131][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 864.115351][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 864.141364][ T5948] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 864.160096][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.173889][ T5948] usb 5-1: Product: syz [ 864.180105][ T5948] usb 5-1: Manufacturer: syz [ 864.184965][ T5948] usb 5-1: SerialNumber: syz [ 864.195456][ T5948] usb 5-1: config 0 descriptor?? [ 864.233509][ T9682] usb 6-1: unable to get BOS descriptor or descriptor too short [ 864.244254][ T9682] usb 6-1: not running at top speed; connect to a high speed hub [ 864.279793][ T9682] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 864.315613][ T9682] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 864.325597][ T36] bridge_slave_1: left allmulticast mode [ 864.340120][ T36] bridge_slave_1: left promiscuous mode [ 864.350561][ T9682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.365744][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.373732][ T9682] usb 6-1: Product: syz [ 864.378124][ T9682] usb 6-1: Manufacturer: syz [ 864.399443][ T9682] usb 6-1: SerialNumber: syz [ 864.418795][ T5948] usb 5-1: USB disconnect, device number 62 [ 864.446339][ T36] bridge_slave_0: left allmulticast mode [ 864.484367][ T36] bridge_slave_0: left promiscuous mode [ 864.504404][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.866202][ T9682] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 864.881979][ T9682] usb 6-1: unit 2 not found! [ 864.940517][ T5917] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 864.999232][ T9682] usb 6-1: USB disconnect, device number 4 [ 865.054361][ T6032] udevd[6032]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 865.110578][ T5917] usb 1-1: device descriptor read/64, error -71 [ 865.373702][ T5917] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 865.495386][T17075] netlink: 532 bytes leftover after parsing attributes in process `syz.4.2868'. [ 865.530249][ T5917] usb 1-1: device descriptor read/64, error -71 [ 865.648702][ T5917] usb usb1-port1: attempt power cycle [ 865.786386][ T36] team0: Port device bond0 removed [ 865.795705][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.807096][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.819588][ T36] bond0 (unregistering): Released all slaves [ 865.847075][ T36] bond1 (unregistering): Released all slaves [ 866.030847][ T5917] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 866.069199][ T5917] usb 1-1: device descriptor read/8, error -71 [ 866.073290][T17091] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2872'. [ 866.162233][ T5828] Bluetooth: hci5: command tx timeout [ 866.263471][ T36] bond2 (unregistering): Released all slaves [ 866.330754][ T5917] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 866.361632][ T5917] usb 1-1: device descriptor read/8, error -71 [ 866.396730][ T36] tipc: Left network mode [ 866.481374][ T5917] usb usb1-port1: unable to enumerate USB device [ 866.880183][T17052] chnl_net:caif_netlink_parms(): no params data found [ 866.896967][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2877'. [ 867.219751][T17114] vlan1 (unregistering): left allmulticast mode [ 867.227761][T17114] veth0_vlan (unregistering): left allmulticast mode [ 867.232615][ T9681] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 867.236805][T17114] vlan1 (unregistering): left promiscuous mode [ 867.250068][T17114] bridge0: port 4(vlan1) entered disabled state [ 867.381511][ T36] hsr_slave_0: left promiscuous mode [ 867.399531][ T36] hsr_slave_1: left promiscuous mode [ 867.407472][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.416544][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.443671][ T9681] usb 5-1: unable to get BOS descriptor or descriptor too short [ 867.453043][ T9681] usb 5-1: not running at top speed; connect to a high speed hub [ 867.464353][T17133] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2879'. [ 867.475899][ T9681] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 867.487002][ T9681] usb 5-1: config 1 interface 0 has no altsetting 0 [ 867.493978][T17134] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2879'. [ 867.506134][ T9681] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 867.523642][ T9684] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 867.551127][ T9681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.559210][ T9681] usb 5-1: Product: syz [ 867.579027][ T9684] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 867.600545][ T9681] usb 5-1: Manufacturer: syz [ 867.611434][ T9681] usb 5-1: SerialNumber: syz [ 867.640295][T17117] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 867.848484][T17138] netlink: 'syz.0.2880': attribute type 4 has an invalid length. [ 867.856577][T17138] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2880'. [ 867.873343][T17117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.894081][T17117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.909229][T17117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.922269][T17117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.936504][T17117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.950558][T17117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.966211][T17117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.978966][T17117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.999222][T17117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.012087][T17117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.076528][ T9681] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input85 [ 868.119332][ T5181] bcm5974 5-1:1.0: could not read from device [ 868.146476][ T5181] bcm5974 5-1:1.0: could not read from device [ 868.155303][ T9681] usb 5-1: USB disconnect, device number 63 [ 868.240235][ T5828] Bluetooth: hci5: command tx timeout [ 868.477266][ T36] team0 (unregistering): Port device team_slave_1 removed [ 868.541057][ T36] team0 (unregistering): Port device team_slave_0 removed [ 869.537228][T17152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.557103][T17152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.872464][T17052] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.892266][T17052] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.909353][T17052] bridge_slave_0: entered allmulticast mode [ 869.933127][T17052] bridge_slave_0: entered promiscuous mode [ 869.968397][T17159] FAULT_INJECTION: forcing a failure. [ 869.968397][T17159] name failslab, interval 1, probability 0, space 0, times 0 [ 869.980109][T17052] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.993326][T17052] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.008909][T17052] bridge_slave_1: entered allmulticast mode [ 870.019618][T17052] bridge_slave_1: entered promiscuous mode [ 870.024319][T17159] CPU: 1 UID: 0 PID: 17159 Comm: syz.0.2885 Not tainted syzkaller #0 PREEMPT(full) [ 870.024349][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 870.024360][T17159] Call Trace: [ 870.024368][T17159] [ 870.024377][T17159] dump_stack_lvl+0x189/0x250 [ 870.024403][T17159] ? __pfx____ratelimit+0x10/0x10 [ 870.024431][T17159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 870.024451][T17159] ? __pfx__printk+0x10/0x10 [ 870.024477][T17159] ? __pfx___might_resched+0x10/0x10 [ 870.024501][T17159] ? fs_reclaim_acquire+0x7d/0x100 [ 870.024529][T17159] should_fail_ex+0x414/0x560 [ 870.024562][T17159] should_failslab+0xa8/0x100 [ 870.024588][T17159] __kmalloc_cache_noprof+0x6f/0x6f0 [ 870.024608][T17159] ? ovs_flow_tbl_init+0xf8/0x7f0 [ 870.024639][T17159] ovs_flow_tbl_init+0xf8/0x7f0 [ 870.024663][T17159] ? ovs_dp_cmd_new+0x1ac/0xaf0 [ 870.024689][T17159] ? __alloc_skb+0x1bc/0x2d0 [ 870.024719][T17159] ovs_dp_cmd_new+0x24b/0xaf0 [ 870.024759][T17159] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 870.024794][T17159] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 870.024824][T17159] genl_family_rcv_msg_doit+0x215/0x300 [ 870.024852][T17159] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 870.024886][T17159] ? bpf_lsm_capable+0x9/0x20 [ 870.024902][T17159] ? security_capable+0x7e/0x2e0 [ 870.024928][T17159] genl_rcv_msg+0x60e/0x790 [ 870.024955][T17159] ? __pfx_genl_rcv_msg+0x10/0x10 [ 870.024975][T17159] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 870.025003][T17159] ? __asan_memcpy+0x40/0x70 [ 870.025021][T17159] ? __pfx_ref_tracker_free+0x10/0x10 [ 870.025048][T17159] netlink_rcv_skb+0x208/0x470 [ 870.025071][T17159] ? __lock_acquire+0xab9/0xd20 [ 870.025095][T17159] ? __pfx_genl_rcv_msg+0x10/0x10 [ 870.025116][T17159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 870.025161][T17159] ? down_read+0x1ad/0x2e0 [ 870.025185][T17159] genl_rcv+0x28/0x40 [ 870.025202][T17159] netlink_unicast+0x82f/0x9e0 [ 870.025241][T17159] ? __pfx_netlink_unicast+0x10/0x10 [ 870.025266][T17159] ? netlink_sendmsg+0x642/0xb30 [ 870.025297][T17159] ? skb_put+0x11b/0x210 [ 870.025326][T17159] netlink_sendmsg+0x805/0xb30 [ 870.025363][T17159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 870.025392][T17159] ? aa_sock_msg_perm+0xf1/0x1d0 [ 870.025415][T17159] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 870.025438][T17159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 870.025464][T17159] __sock_sendmsg+0x21c/0x270 [ 870.025491][T17159] ____sys_sendmsg+0x505/0x830 [ 870.025524][T17159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 870.025560][T17159] ? import_iovec+0x74/0xa0 [ 870.025590][T17159] ___sys_sendmsg+0x21f/0x2a0 [ 870.025622][T17159] ? __pfx____sys_sendmsg+0x10/0x10 [ 870.025690][T17159] ? __fget_files+0x2a/0x420 [ 870.025714][T17159] ? __fget_files+0x3a0/0x420 [ 870.025751][T17159] __x64_sys_sendmsg+0x19b/0x260 [ 870.025774][T17159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 870.025817][T17159] ? __pfx_ksys_write+0x10/0x10 [ 870.025844][T17159] ? do_syscall_64+0xbe/0xfa0 [ 870.025869][T17159] do_syscall_64+0xfa/0xfa0 [ 870.025887][T17159] ? lockdep_hardirqs_on+0x9c/0x150 [ 870.025907][T17159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.025927][T17159] ? clear_bhb_loop+0x60/0xb0 [ 870.025953][T17159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.025972][T17159] RIP: 0033:0x7f547a18eec9 [ 870.025993][T17159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.026012][T17159] RSP: 002b:00007f547af3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 870.026043][T17159] RAX: ffffffffffffffda RBX: 00007f547a3e5fa0 RCX: 00007f547a18eec9 [ 870.026059][T17159] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 870.026073][T17159] RBP: 00007f547af3f090 R08: 0000000000000000 R09: 0000000000000000 [ 870.026086][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 870.026098][T17159] R13: 00007f547a3e6038 R14: 00007f547a3e5fa0 R15: 00007f547a50fa28 [ 870.026135][T17159] [ 870.322144][ T5828] Bluetooth: hci5: command tx timeout [ 870.401691][T17170] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2887'. [ 870.418806][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.450982][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.639375][T17052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.679106][T17052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.695008][T17177] fuse: Bad value for 'fd' [ 870.723523][T17179] netlink: 'syz.0.2890': attribute type 32 has an invalid length. [ 870.777224][T17179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2890'. [ 870.877535][T17052] team0: Port device team_slave_0 added [ 870.894526][T17052] team0: Port device team_slave_1 added [ 870.923825][ T36] IPVS: stop unused estimator thread 0... [ 871.066971][ T5917] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 871.134403][T17052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.152213][T17052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.227704][T17052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.257762][T17052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.272754][T17052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.286808][ T5917] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 871.339014][T17052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.363172][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.382228][ T5917] usb 1-1: Product: syz [ 871.386602][ T5917] usb 1-1: Manufacturer: syz [ 871.396988][ T5917] usb 1-1: SerialNumber: syz [ 871.438184][ T5917] usb 1-1: config 0 descriptor?? [ 871.664083][ T5917] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 871.839747][T17052] hsr_slave_0: entered promiscuous mode [ 871.881361][T17052] hsr_slave_1: entered promiscuous mode [ 871.905137][T17052] debugfs: 'hsr0' already exists in 'hsr' [ 871.928965][T17052] Cannot create hsr debugfs directory [ 872.303379][ T5917] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 872.491733][ T5828] Bluetooth: hci5: command tx timeout [ 873.203971][T17052] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 873.224658][T17052] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 873.248076][T17052] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 873.276926][T17052] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 873.460030][ T9681] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 873.569287][T17052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.610036][ T9681] usb 6-1: Using ep0 maxpacket: 32 [ 873.618875][ T9681] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 873.631043][T17052] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.638489][ T9681] usb 6-1: config 0 has no interface number 0 [ 873.650644][ T9681] usb 6-1: config 0 interface 12 has no altsetting 0 [ 873.663990][T12245] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.671303][T12245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.752748][T12252] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.760023][T12252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.812704][ T9681] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 873.843575][ T9681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.858071][ T5917] usb 1-1: USB disconnect, device number 56 [ 873.914880][ T9681] usb 6-1: Product: syz [ 873.919129][ T9681] usb 6-1: Manufacturer: syz [ 873.959941][ T9681] usb 6-1: SerialNumber: syz [ 873.985275][ T9681] usb 6-1: config 0 descriptor?? [ 874.022255][T17052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.233723][T17052] veth0_vlan: entered promiscuous mode [ 874.302339][T17052] veth1_vlan: entered promiscuous mode [ 874.437327][T17052] veth0_macvtap: entered promiscuous mode [ 874.479359][T17052] veth1_macvtap: entered promiscuous mode [ 874.602330][T17052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.649021][T17052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.717588][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.773468][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.835236][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.856695][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.030011][ T5917] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 875.116938][T12253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.136278][T12253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.224290][ T5917] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 875.240231][T12245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.259277][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.267965][T12245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.278176][ T5917] usb 1-1: Product: syz [ 875.289373][ T5917] usb 1-1: Manufacturer: syz [ 875.306152][ T5917] usb 1-1: SerialNumber: syz [ 875.342522][ T5917] usb 1-1: config 0 descriptor?? [ 875.704528][T17241] bond5: option fail_over_mac: invalid value (33) [ 875.724630][T17241] bond5 (unregistering): Released all slaves [ 875.865514][ T5823] usb 1-1: USB disconnect, device number 57 [ 876.098475][ T9681] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 876.129954][ T9681] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 876.157777][ T9681] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 876.210211][ T9681] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 876.258762][ T9681] usb 6-1: USB disconnect, device number 5 [ 876.858490][T17263] ptrace attach of "./syz-executor exec"[8740] was attempted by ""[17263] [ 876.901943][T17263] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2902'. [ 877.059641][T17263] bond3: entered allmulticast mode [ 877.171987][T17263] 8021q: adding VLAN 0 to HW filter on device bond3 [ 877.584935][T17269] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 877.599528][T17269] batman_adv: batadv0: Adding interface: ip6gretap0 [ 877.615744][T17269] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.681620][T17269] batman_adv: batadv0: Interface activated: ip6gretap0 [ 877.731577][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 877.742745][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 877.778800][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 877.791684][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 877.799533][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 877.911076][T12562] syz_tun (unregistering): left allmulticast mode [ 878.438777][T17289] : entered promiscuous mode [ 878.778801][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2911'. [ 878.844106][T17299] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 878.912169][ T982] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 878.958132][T17275] chnl_net:caif_netlink_parms(): no params data found [ 879.063233][ T982] usb 5-1: device descriptor read/64, error -71 [ 879.225841][T17275] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.233800][T17275] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.241748][T17275] bridge_slave_0: entered allmulticast mode [ 879.276022][T17275] bridge_slave_0: entered promiscuous mode [ 879.303925][T17275] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.311406][T17275] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.319439][T17275] bridge_slave_1: entered allmulticast mode [ 879.326389][ T982] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 879.335653][T17275] bridge_slave_1: entered promiscuous mode [ 879.440417][T17313] B: renamed from veth0 [ 879.470204][ T982] usb 5-1: device descriptor read/64, error -71 [ 879.480878][T17275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.501542][T17275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.593147][T17275] team0: Port device team_slave_0 added [ 879.606742][T17275] team0: Port device team_slave_1 added [ 879.610482][ T982] usb usb5-port1: attempt power cycle [ 879.700480][T17275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.720290][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.763162][T17275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.794033][T17275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.823610][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.849644][ C1] vkms_vblank_simulate: vblank timer overrun [ 879.857381][T17275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.920194][ T52] Bluetooth: hci3: command tx timeout [ 879.971938][ T982] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 880.002628][ T982] usb 5-1: device descriptor read/8, error -71 [ 880.031732][T17275] hsr_slave_0: entered promiscuous mode [ 880.039571][T17275] hsr_slave_1: entered promiscuous mode [ 880.086417][T17275] debugfs: 'hsr0' already exists in 'hsr' [ 880.096165][T17275] Cannot create hsr debugfs directory [ 880.241140][ T982] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 880.281449][ T982] usb 5-1: device descriptor read/8, error -71 [ 880.400851][ T982] usb usb5-port1: unable to enumerate USB device [ 880.428550][T17275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.537477][T17275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.634458][T17275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.762533][T17275] team0: Port device netdevsim0 removed [ 880.773813][T17338] futex_wake_op: syz.5.2922 tries to shift op by 32; fix this program [ 880.774338][T17275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.053642][T17275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 881.067494][T17275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 881.081116][T17275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 881.097618][T17275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 881.305549][T17275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.375276][T17275] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.403851][T12245] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.411293][T12245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.432786][T12245] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.440246][T12245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.440300][T17361] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 881.635238][T17275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.858760][T17275] veth0_vlan: entered promiscuous mode [ 882.017212][ T52] Bluetooth: hci3: command tx timeout [ 882.088186][T17275] veth1_vlan: entered promiscuous mode [ 882.514926][ T5948] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 882.829133][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.880200][ T5948] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 882.992101][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.046957][ T5948] usb 5-1: config 0 descriptor?? [ 883.191103][T17275] veth0_macvtap: entered promiscuous mode [ 883.534528][ T5948] waterforce 0003:1044:7A4D.003B: item fetching failed at offset 0/3 [ 883.717443][ T5948] waterforce 0003:1044:7A4D.003B: hid parse failed with -22 [ 883.736586][ T5948] waterforce 0003:1044:7A4D.003B: probe with driver waterforce failed with error -22 [ 883.747061][T17275] veth1_macvtap: entered promiscuous mode [ 883.922723][T17383] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2931'. [ 883.954526][T17275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.973126][T17367] vim2m vim2m.0: vidioc_s_fmt queue busy [ 884.025302][T17275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.141725][ T52] Bluetooth: hci3: command tx timeout [ 884.192071][T12254] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.234214][T12254] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.253865][T17396] misc userio: Can't change port type on an already running userio instance [ 884.273164][T12254] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.317676][T12254] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.392414][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.415357][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.592960][T12251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.618055][T12251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.815354][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2901'. [ 885.402681][T17404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 885.523519][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2937'. [ 885.562273][T17410] FAULT_INJECTION: forcing a failure. [ 885.562273][T17410] name failslab, interval 1, probability 0, space 0, times 0 [ 885.605926][T17410] CPU: 1 UID: 0 PID: 17410 Comm: syz.8.2939 Not tainted syzkaller #0 PREEMPT(full) [ 885.605960][T17410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 885.605973][T17410] Call Trace: [ 885.605982][T17410] [ 885.605992][T17410] dump_stack_lvl+0x189/0x250 [ 885.606019][T17410] ? __pfx____ratelimit+0x10/0x10 [ 885.606072][T17410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 885.606093][T17410] ? __pfx__printk+0x10/0x10 [ 885.606121][T17410] ? __pfx___might_resched+0x10/0x10 [ 885.606155][T17410] should_fail_ex+0x414/0x560 [ 885.606204][T17410] should_failslab+0xa8/0x100 [ 885.606232][T17410] __kmalloc_noprof+0xcb/0x7f0 [ 885.606262][T17410] ? kfree+0x4d/0x6d0 [ 885.606278][T17410] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 885.606311][T17410] tomoyo_realpath_from_path+0xe3/0x5d0 [ 885.606337][T17410] ? tomoyo_domain+0xd9/0x130 [ 885.606367][T17410] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 885.606398][T17410] tomoyo_path_number_perm+0x1e8/0x5a0 [ 885.606432][T17410] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 885.606505][T17410] ? __fget_files+0x2a/0x420 [ 885.606535][T17410] ? __fget_files+0x3a0/0x420 [ 885.606557][T17410] ? __fget_files+0x2a/0x420 [ 885.606583][T17410] security_file_ioctl+0xcb/0x2d0 [ 885.606616][T17410] __se_sys_ioctl+0x47/0x170 [ 885.606639][T17410] do_syscall_64+0xfa/0xfa0 [ 885.606658][T17410] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.606679][T17410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.606700][T17410] ? clear_bhb_loop+0x60/0xb0 [ 885.606726][T17410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.606745][T17410] RIP: 0033:0x7fb48638eec9 [ 885.606765][T17410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.606784][T17410] RSP: 002b:00007fb487211038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 885.606807][T17410] RAX: ffffffffffffffda RBX: 00007fb4865e5fa0 RCX: 00007fb48638eec9 [ 885.606823][T17410] RDX: 0000200000000580 RSI: 00000000c03864bc RDI: 0000000000000003 [ 885.606836][T17410] RBP: 00007fb487211090 R08: 0000000000000000 R09: 0000000000000000 [ 885.606850][T17410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.606862][T17410] R13: 00007fb4865e6038 R14: 00007fb4865e5fa0 R15: 00007fb48670fa28 [ 885.606898][T17410] [ 885.606908][T17410] ERROR: Out of memory at tomoyo_realpath_from_path. [ 886.120330][ T5948] usb 5-1: USB disconnect, device number 68 [ 886.168545][ T52] Bluetooth: hci3: command tx timeout [ 886.187762][T17412] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2940'. [ 886.236385][T17421] Cannot find add_set index 0 as target [ 886.256911][T17418] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 886.692809][T17431] lo: entered allmulticast mode [ 886.738039][T17435] lo: left allmulticast mode [ 886.843188][T17437] sctp: [Deprecated]: syz.0.2943 (pid 17437) Use of int in maxseg socket option. [ 886.843188][T17437] Use struct sctp_assoc_value instead [ 887.159953][ T5917] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 887.379036][ T5917] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 887.399517][ T5917] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 887.586710][ T5917] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 887.640745][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.775393][ T5917] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 887.818819][ T5917] usb 5-1: invalid MIDI out EP 0 [ 887.998458][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 887.998480][ T30] audit: type=1326 audit(1760269813.981:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.4.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b818eec9 code=0x7ffc0000 [ 888.080095][T17436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.094165][T17436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.153558][ T30] audit: type=1326 audit(1760269813.981:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.4.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6b818d710 code=0x7ffc0000 [ 888.588145][ T30] audit: type=1326 audit(1760269813.981:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.4.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6b818eacb code=0x7ffc0000 [ 888.611953][ T5917] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 888.745636][ T30] audit: type=1326 audit(1760269813.981:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.4.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6b818eacb code=0x7ffc0000 [ 888.768053][ C1] vkms_vblank_simulate: vblank timer overrun [ 888.857636][ T30] audit: type=1326 audit(1760269814.091:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.7.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d18eec9 code=0x7ffc0000 [ 888.880674][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.079987][ T30] audit: type=1326 audit(1760269814.091:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.7.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d18eec9 code=0x7ffc0000 [ 889.169726][ T30] audit: type=1326 audit(1760269814.181:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.4.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b818eec9 code=0x7ffc0000 [ 889.289056][ T30] audit: type=1326 audit(1760269814.181:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.4.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b818eec9 code=0x7ffc0000 [ 889.361945][ T30] audit: type=1326 audit(1760269814.181:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.4.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd6b818eec9 code=0x7ffc0000 [ 889.458919][ T30] audit: type=1326 audit(1760269814.181:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17425 comm="syz.4.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b818eec9 code=0x7ffc0000 [ 889.860036][ T5917] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 890.013449][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 890.037516][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.068839][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 890.133561][ T5917] usb 1-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 890.161777][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.300772][ T5917] usb 1-1: config 0 descriptor?? [ 890.493790][ T9684] usb 5-1: USB disconnect, device number 69 [ 890.698327][ T5917] usbhid 1-1:0.0: can't add hid device: -71 [ 890.735563][ T5917] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 890.786350][ T5917] usb 1-1: USB disconnect, device number 58 [ 890.934281][T17496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.040560][T17496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.273711][T17502] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 891.345254][ T9684] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 891.360042][ T5917] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 891.528345][ T5917] usb 1-1: device descriptor read/64, error -71 [ 891.729965][ T9684] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 891.750193][ T9684] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 891.781951][ T9684] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 891.805990][ T9684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.869992][ T5823] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 891.869996][ T5917] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 891.895691][ T9684] usb 5-1: Product: syz [ 891.905870][ T9684] usb 5-1: Manufacturer: syz [ 891.916376][ T9684] usb 5-1: SerialNumber: syz [ 892.033511][ T5917] usb 1-1: device descriptor read/64, error -71 [ 892.065727][ T5823] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.076432][ T5823] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 892.129984][ T5823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.146513][ T9684] usb 5-1: USB disconnect, device number 70 [ 892.167131][ T5917] usb usb1-port1: attempt power cycle [ 892.225072][ T5823] usb 9-1: config 0 descriptor?? [ 892.262571][ T5823] pwc: Askey VC010 type 2 USB webcam detected. [ 892.581051][ T5917] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 892.620772][ T5917] usb 1-1: device descriptor read/8, error -71 [ 892.673436][ T5823] pwc: recv_control_msg error -32 req 02 val 2b00 [ 892.719997][ T5823] pwc: recv_control_msg error -32 req 02 val 2700 [ 892.727656][ T5823] pwc: recv_control_msg error -32 req 02 val 2c00 [ 892.742061][ T5823] pwc: recv_control_msg error -32 req 04 val 1000 [ 892.767465][ T5823] pwc: recv_control_msg error -32 req 04 val 1300 [ 892.855365][ T5823] pwc: recv_control_msg error -32 req 04 val 1400 [ 892.866256][ T5823] pwc: recv_control_msg error -32 req 02 val 2000 [ 892.886137][ T5823] pwc: recv_control_msg error -32 req 02 val 2100 [ 892.900079][ T5917] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 892.950018][ T5917] usb 1-1: device descriptor read/8, error -71 [ 893.070541][ T5917] usb usb1-port1: unable to enumerate USB device [ 893.188382][ T5823] pwc: recv_control_msg error -71 req 02 val 2500 [ 893.224016][ T5823] pwc: recv_control_msg error -71 req 02 val 2400 [ 893.261488][ T5823] pwc: recv_control_msg error -71 req 02 val 2600 [ 893.293669][ T5823] pwc: recv_control_msg error -71 req 02 val 2900 [ 893.327783][ T5823] pwc: recv_control_msg error -71 req 02 val 2800 [ 893.361037][ T5823] pwc: recv_control_msg error -71 req 04 val 1100 [ 893.388145][ T5823] pwc: recv_control_msg error -71 req 04 val 1200 [ 893.424478][ T5823] pwc: Registered as video103. [ 893.480308][ T5823] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input88 [ 893.553031][ T5823] usb 9-1: USB disconnect, device number 2 [ 893.790831][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 893.790862][ T30] audit: type=1326 audit(1760269819.751:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 893.974982][ T30] audit: type=1326 audit(1760269819.751:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 894.105676][ T30] audit: type=1326 audit(1760269819.751:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 894.175347][ T30] audit: type=1326 audit(1760269819.751:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 894.266225][ T30] audit: type=1326 audit(1760269819.761:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 894.288982][ T30] audit: type=1326 audit(1760269819.761:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 894.331116][T17550] sctp: [Deprecated]: syz.0.2965 (pid 17550) Use of int in max_burst socket option. [ 894.331116][T17550] Use struct sctp_assoc_value instead [ 894.399940][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 894.419320][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 894.432397][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 894.454591][ T30] audit: type=1326 audit(1760269819.761:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 894.490761][ T30] audit: type=1326 audit(1760269819.761:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 894.513539][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 894.521316][ T30] audit: type=1326 audit(1760269819.761:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 894.545664][ T30] audit: type=1326 audit(1760269819.761:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17530 comm="syz.5.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 894.569223][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 895.767023][T17573] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2968'. [ 895.954283][T17576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2969'. [ 896.187529][T17580] fuse: Unknown parameter 'group_id00000000000000000000' [ 896.221362][T17552] chnl_net:caif_netlink_parms(): no params data found [ 896.624882][T17589] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 896.646213][ T5828] Bluetooth: hci0: command tx timeout [ 896.864671][T17552] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.909037][T17552] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.936110][T17552] bridge_slave_0: entered allmulticast mode [ 896.961314][T17552] bridge_slave_0: entered promiscuous mode [ 896.992137][T17552] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.001051][T17552] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.008909][T17552] bridge_slave_1: entered allmulticast mode [ 897.055709][T17552] bridge_slave_1: entered promiscuous mode [ 897.228706][T17552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.266594][T17552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.545894][T17552] team0: Port device team_slave_0 added [ 897.576543][T17552] team0: Port device team_slave_1 added [ 897.770230][T17620] syzkaller0: entered promiscuous mode [ 897.775875][T17620] syzkaller0: entered allmulticast mode [ 897.817216][T17622] fuse: Unknown parameter 'group_id00000000000000000000' [ 897.918607][T17552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.997152][T17552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.105561][T17552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.157630][T17552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.174924][T17552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.381458][T17552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.720131][ T5828] Bluetooth: hci0: command tx timeout [ 899.030144][T17637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.089146][ T982] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 899.142505][T17637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.178888][T17637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.257005][ T5948] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 899.261368][T17637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.462957][ T982] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 899.479959][ T982] usb 1-1: config 0 interface 0 has no altsetting 0 [ 899.576258][ T982] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 899.698626][ T982] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 899.756483][ T982] usb 1-1: Product: syz [ 899.807205][ T982] usb 1-1: Manufacturer: syz [ 899.819980][ T982] usb 1-1: SerialNumber: syz [ 899.912543][ T982] usb 1-1: config 0 descriptor?? [ 899.929807][ T982] usb 1-1: selecting invalid altsetting 0 [ 900.756406][T17552] hsr_slave_0: entered promiscuous mode [ 900.763449][T17552] hsr_slave_1: entered promiscuous mode [ 900.770397][T17552] debugfs: 'hsr0' already exists in 'hsr' [ 900.776182][T17552] Cannot create hsr debugfs directory [ 900.807472][ T5828] Bluetooth: hci0: command tx timeout [ 901.207791][T17652] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2990'. [ 901.403927][T17658] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 901.408022][T17659] fuse: Bad value for 'user_id' [ 901.421525][T17654] syzkaller0: entered promiscuous mode [ 901.427059][T17654] syzkaller0: entered allmulticast mode [ 901.453910][T17659] fuse: Bad value for 'user_id' [ 901.840593][ T9684] usb 1-1: USB disconnect, device number 63 [ 901.875588][T17666] fuse: Bad value for 'group_id' [ 901.907337][T17666] fuse: Bad value for 'group_id' [ 901.965988][T17666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 902.347607][ T13] bridge_slave_1: left allmulticast mode [ 902.364225][ T13] bridge_slave_1: left promiscuous mode [ 902.396419][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.434772][ T13] : left allmulticast mode [ 902.449560][ T13] : left promiscuous mode [ 902.455066][ T13] bridge0: port 1() entered disabled state [ 902.886893][ T5828] Bluetooth: hci0: command tx timeout [ 903.689020][ T13] dvmrp1 (unregistering): left allmulticast mode [ 903.760406][ T9684] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 903.920064][ T9684] usb 6-1: Using ep0 maxpacket: 8 [ 903.927901][ T9684] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 903.937127][ T9684] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 903.948171][ T9684] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 903.958516][ T9684] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 903.969284][ T9684] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 903.988670][ T9684] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 903.998255][ T9684] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.229384][T17700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.253139][T17700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.276614][ T9684] usb 6-1: usb_control_msg returned -32 [ 904.282745][ T9684] usbtmc 6-1:16.0: can't read capabilities [ 904.622107][T17710] fuse: Bad value for 'user_id' [ 904.627212][T17710] fuse: Bad value for 'user_id' [ 904.665203][ T13] bond3 (unregistering): (slave bridge18): Removing an active aggregator [ 904.678862][ T13] bond3 (unregistering): (slave bridge18): Releasing backup interface [ 904.692284][ T13] bridge18 (unregistering): left promiscuous mode [ 904.699425][ T13] bridge18 (unregistering): left allmulticast mode [ 904.990648][T17720] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3005'. [ 905.062075][T17721] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3005'. [ 905.162758][T17722] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 905.243269][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.258671][ T13] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 905.269317][ T13] bond0 (unregistering): Released all slaves [ 905.285453][ T13] bond1 (unregistering): Released all slaves [ 905.306268][ T13] bond2 (unregistering): Released all slaves [ 905.546585][ T13] bond3 (unregistering): Released all slaves [ 905.607722][T17717] tipc: Enabled bearer , priority 0 [ 905.700620][T17731] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3007'. [ 905.721659][T17720] 0ªX¹¦À: renamed from caif0 [ 905.752074][T17720] 0ªX¹¦À: entered allmulticast mode [ 905.757653][T17720] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 905.918239][T17726] tipc: Resetting bearer [ 905.954313][ T13] : left promiscuous mode [ 906.113808][ T13] tipc: Left network mode [ 906.532782][T17726] tipc: Disabling bearer [ 906.569068][ T9684] usb 6-1: USB disconnect, device number 6 [ 906.859764][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3009'. [ 907.485716][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 907.485732][ T30] audit: type=1326 audit(1760269833.471:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.5.3009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0f798eec9 code=0x0 [ 908.132670][ T13] hsr_slave_0: left promiscuous mode [ 908.155678][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.532051][ T13] team0 (unregistering): Port device batadv1 removed [ 910.123069][ T9684] hid-generic 0003:0004:0000.003C: unknown main item tag 0x0 [ 910.186083][ T9684] hid-generic 0003:0004:0000.003C: unknown main item tag 0x0 [ 910.250097][ T9684] hid-generic 0003:0004:0000.003C: unknown main item tag 0x0 [ 910.402081][ T9684] hid-generic 0003:0004:0000.003C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 910.638228][T17806] fido_id[17806]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 910.959950][ T9681] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 911.280277][ T9681] usb 9-1: device descriptor read/64, error -71 [ 911.335349][ T13] team0 (unregistering): Port device team_slave_1 removed [ 911.660417][ T9681] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 911.890606][ T9681] usb 9-1: device descriptor read/64, error -71 [ 912.014465][ T9681] usb usb9-port1: attempt power cycle [ 912.374634][ T9681] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 912.416771][ T9681] usb 9-1: device descriptor read/8, error -71 [ 912.455871][ T13] lo (unregistering): left allmulticast mode [ 912.473355][T17802] syz_tun: entered allmulticast mode [ 912.521408][T17552] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 912.556184][T17552] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 912.613367][T17552] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 912.660085][ T9681] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 912.670525][T17552] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 912.697327][ T9681] usb 9-1: device descriptor read/8, error -71 [ 912.823783][ T9681] usb usb9-port1: unable to enumerate USB device [ 913.087133][ T13] IPVS: stop unused estimator thread 0... [ 913.127182][T17552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.184593][T17552] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.205657][T17782] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.213231][T17782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.228165][T12245] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.236480][T12245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.250499][ T9681] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 913.327877][T17552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.374905][T17552] veth0_vlan: entered promiscuous mode [ 913.388430][T17552] veth1_vlan: entered promiscuous mode [ 913.389311][T17830] netlink: 532 bytes leftover after parsing attributes in process `syz.0.3020'. [ 913.412778][ T9681] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 913.423833][ T9681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.435883][T17552] veth0_macvtap: entered promiscuous mode [ 913.441221][ T9681] usb 6-1: config 0 descriptor?? [ 913.446740][T17552] veth1_macvtap: entered promiscuous mode [ 913.474054][T17552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.496898][T17552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.516483][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.527156][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.536998][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.547652][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.641253][T12245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.649495][T12245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.692929][T17782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.704693][T17782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.816959][T17835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 914.139621][T17843] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3023'. [ 914.267499][ T9681] pegasus 6-1:0.0: probe with driver pegasus failed with error -121 [ 914.400292][ T9684] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 914.518152][T17852] fuse: Bad value for 'user_id' [ 914.526679][T17852] fuse: Bad value for 'user_id' [ 914.541108][T17853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3025'. [ 914.587041][T17853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3025'. [ 914.853209][ T982] usb 6-1: USB disconnect, device number 7 [ 915.081047][ T9684] usb 1-1: device descriptor read/64, error -71 [ 915.227341][T17876] input: syz1 as /devices/virtual/input/input90 [ 915.339979][ T9684] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 915.501804][ T9684] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 915.562958][T17873] syz.5.3030 (17873): drop_caches: 2 [ 915.581529][ T9684] usb 1-1: config 0 interface 0 has no altsetting 0 [ 915.630218][ T9684] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 915.649415][ T9684] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 915.667450][ T9684] usb 1-1: Product: syz [ 915.674828][ T9684] usb 1-1: Manufacturer: syz [ 915.684040][ T9684] usb 1-1: SerialNumber: syz [ 915.705602][ T9684] usb 1-1: config 0 descriptor?? [ 915.736633][ T9684] usb 1-1: selecting invalid altsetting 0 [ 915.991207][ T9687] usb 1-1: USB disconnect, device number 65 [ 916.294383][T17886] : entered promiscuous mode [ 916.470211][ T9684] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 916.514821][T17900] netlink: 'syz.7.3038': attribute type 3 has an invalid length. [ 916.524162][T17900] netlink: 666 bytes leftover after parsing attributes in process `syz.7.3038'. [ 916.638501][T17906] fuse: Bad value for 'fd' [ 916.644139][ T9684] usb 9-1: Using ep0 maxpacket: 16 [ 916.671519][ T9684] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.682099][ T9684] usb 9-1: config 0 has no interfaces? [ 916.703416][ T9684] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 916.714163][ T9684] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 916.723059][ T9684] usb 9-1: Manufacturer: syz [ 916.749247][ T9684] usb 9-1: config 0 descriptor?? [ 917.350451][ T5823] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 917.564488][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.594034][ T5823] usb 1-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df [ 917.625306][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.666897][ T5823] usb 1-1: config 0 descriptor?? [ 917.713809][ T5823] pwc: Philips PCA646VC USB webcam detected. [ 917.892504][ T5823] pwc: send_video_command error -71 [ 917.897948][ T5823] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 917.912190][ T5823] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 917.931216][ T5823] usb 1-1: USB disconnect, device number 66 [ 918.640455][ T9681] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 918.708646][T17937] ptrace attach of "./syz-executor exec"[17552] was attempted by "./syz-executor exec"[17937] [ 918.803732][ T9681] usb 6-1: Using ep0 maxpacket: 8 [ 918.815361][ T9687] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 918.817461][ T9681] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.843646][ T9681] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 918.859393][ T9681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 918.872369][ T9681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 918.887806][ T9681] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 918.914002][ T9681] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 918.923881][ T9681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 918.966851][ T9681] usb 6-1: Product: syz [ 918.975039][ T9681] usb 6-1: Manufacturer: syz [ 918.995540][ T9681] usb 6-1: SerialNumber: syz [ 919.006334][ T9681] usb 6-1: config 0 descriptor?? [ 919.034706][ T9687] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 919.052905][ T9687] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 919.070055][ T9687] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 919.108099][ T9687] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 919.118924][ T9687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.147359][ T9684] usb 9-1: USB disconnect, device number 8 [ 919.163838][ T9687] usb 1-1: Product: syz [ 919.168081][ T9687] usb 1-1: Manufacturer: syz [ 919.173293][ T9687] usb 1-1: SerialNumber: syz [ 919.187527][ T9687] usb 1-1: config 0 descriptor?? [ 919.230337][ T9681] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 919.237191][ T9681] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 919.237755][T17936] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 919.312487][T17936] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 919.325950][ T9687] usb 1-1: ucan: probing device on interface #0 [ 919.338011][T17940] syz.8.3050 (17940): drop_caches: 4 [ 919.432672][ T9681] radio-si470x 6-1:0.0: software version 253, hardware version 55 [ 919.444746][ T9681] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 919.644077][ T9681] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 919.664332][ T9681] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 919.683365][ T9681] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 919.706970][ T9681] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 919.740452][ T9681] usb 6-1: USB disconnect, device number 8 [ 919.797589][ T9687] usb 1-1: ucan: device reported invalid device info [ 919.818791][ T9687] usb 1-1: ucan: probe failed; try to update the device firmware [ 920.469236][T17954] fuse: Bad value for 'fd' [ 921.063970][T17961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 921.659125][ T9681] usb 1-1: USB disconnect, device number 67 [ 922.240121][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 922.630584][T17985] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 922.637281][T17985] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 922.645998][T17985] vhci_hcd vhci_hcd.0: Device attached [ 922.658790][T17985] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 922.665470][T17985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 922.680178][T17985] vhci_hcd vhci_hcd.0: Device attached [ 922.696269][T17985] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 922.702942][T17985] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 922.715390][T17985] vhci_hcd vhci_hcd.0: Device attached [ 922.741058][T17985] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 922.747733][T17985] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 922.792219][T17985] vhci_hcd vhci_hcd.0: Device attached [ 922.808192][T17995] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 922.814870][T17995] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 922.830239][ T982] vhci_hcd: vhci_device speed not set [ 922.871192][T17995] vhci_hcd vhci_hcd.0: Device attached [ 922.877836][T17985] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 922.898369][T17985] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(20) [ 922.905050][T17985] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 922.913081][ T982] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 922.923143][T17985] vhci_hcd vhci_hcd.0: Device attached [ 922.938581][T17985] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(23) [ 922.945322][T17985] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 922.975610][T17985] vhci_hcd vhci_hcd.0: Device attached [ 923.112114][T18001] vhci_hcd: connection closed [ 923.112517][ T13] vhci_hcd: stop threads [ 923.132146][ T13] vhci_hcd: release socket [ 923.136946][ T13] vhci_hcd: disconnect device [ 923.141816][T17999] vhci_hcd: connection closed [ 923.142771][T17992] vhci_hcd: connection closed [ 923.153145][T17986] vhci_hcd: connection reset by peer [ 923.159913][T17996] vhci_hcd: connection closed [ 923.173931][T17990] vhci_hcd: connection closed [ 923.185626][T17988] vhci_hcd: connection closed [ 923.193188][ T13] vhci_hcd: stop threads [ 923.204636][ T13] vhci_hcd: release socket [ 923.214504][ T13] vhci_hcd: disconnect device [ 923.229956][ T13] vhci_hcd: stop threads [ 923.244680][ T13] vhci_hcd: release socket [ 923.250413][ T13] vhci_hcd: disconnect device [ 923.260458][ T13] vhci_hcd: stop threads [ 923.264750][ T13] vhci_hcd: release socket [ 923.290364][ T13] vhci_hcd: disconnect device [ 923.302850][ T13] vhci_hcd: stop threads [ 923.307182][ T13] vhci_hcd: release socket [ 923.312749][ T13] vhci_hcd: disconnect device [ 923.334383][ T13] vhci_hcd: stop threads [ 923.338710][ T13] vhci_hcd: release socket [ 923.353636][ T13] vhci_hcd: disconnect device [ 923.361235][ T13] vhci_hcd: stop threads [ 923.365639][ T13] vhci_hcd: release socket [ 923.370899][ T9687] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 923.385439][ T13] vhci_hcd: disconnect device [ 923.418246][T18011] FAULT_INJECTION: forcing a failure. [ 923.418246][T18011] name failslab, interval 1, probability 0, space 0, times 0 [ 923.433553][T18011] CPU: 0 UID: 0 PID: 18011 Comm: syz.4.3066 Not tainted syzkaller #0 PREEMPT(full) [ 923.433583][T18011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 923.433595][T18011] Call Trace: [ 923.433603][T18011] [ 923.433613][T18011] dump_stack_lvl+0x189/0x250 [ 923.433652][T18011] ? __pfx____ratelimit+0x10/0x10 [ 923.433682][T18011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 923.433701][T18011] ? __pfx__printk+0x10/0x10 [ 923.433726][T18011] ? __pfx___might_resched+0x10/0x10 [ 923.433759][T18011] should_fail_ex+0x414/0x560 [ 923.433796][T18011] should_failslab+0xa8/0x100 [ 923.433823][T18011] kmem_cache_alloc_node_noprof+0x77/0x710 [ 923.433843][T18011] ? __alloc_skb+0x112/0x2d0 [ 923.433876][T18011] __alloc_skb+0x112/0x2d0 [ 923.433904][T18011] netlink_ack+0x146/0xa50 [ 923.433927][T18011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 923.433945][T18011] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 923.433970][T18011] ? __pfx_nl80211_post_doit+0x10/0x10 [ 923.433995][T18011] ? __asan_memcpy+0x40/0x70 [ 923.434013][T18011] ? __pfx_ref_tracker_free+0x10/0x10 [ 923.434041][T18011] netlink_rcv_skb+0x28c/0x470 [ 923.434064][T18011] ? __lock_acquire+0xab9/0xd20 [ 923.434091][T18011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 923.434115][T18011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 923.434160][T18011] ? down_read+0x1ad/0x2e0 [ 923.434186][T18011] genl_rcv+0x28/0x40 [ 923.434206][T18011] netlink_unicast+0x82f/0x9e0 [ 923.434237][T18011] ? __pfx_netlink_unicast+0x10/0x10 [ 923.434262][T18011] ? netlink_sendmsg+0x642/0xb30 [ 923.434285][T18011] ? skb_put+0x11b/0x210 [ 923.434313][T18011] netlink_sendmsg+0x805/0xb30 [ 923.434352][T18011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.434383][T18011] ? aa_sock_msg_perm+0xf1/0x1d0 [ 923.434408][T18011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 923.434433][T18011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.434461][T18011] __sock_sendmsg+0x21c/0x270 [ 923.434487][T18011] ____sys_sendmsg+0x505/0x830 [ 923.434523][T18011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 923.434562][T18011] ? import_iovec+0x74/0xa0 [ 923.434592][T18011] ___sys_sendmsg+0x21f/0x2a0 [ 923.434634][T18011] ? __pfx____sys_sendmsg+0x10/0x10 [ 923.434706][T18011] ? __fget_files+0x2a/0x420 [ 923.434731][T18011] ? __fget_files+0x3a0/0x420 [ 923.434766][T18011] __x64_sys_sendmsg+0x19b/0x260 [ 923.434790][T18011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 923.434833][T18011] ? __pfx_ksys_write+0x10/0x10 [ 923.434861][T18011] ? do_syscall_64+0xbe/0xfa0 [ 923.434885][T18011] do_syscall_64+0xfa/0xfa0 [ 923.434904][T18011] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.434924][T18011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.434945][T18011] ? clear_bhb_loop+0x60/0xb0 [ 923.434971][T18011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.434991][T18011] RIP: 0033:0x7f68b598eec9 [ 923.435011][T18011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.435028][T18011] RSP: 002b:00007f68b67a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.435050][T18011] RAX: ffffffffffffffda RBX: 00007f68b5be5fa0 RCX: 00007f68b598eec9 [ 923.435066][T18011] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 923.435078][T18011] RBP: 00007f68b67a4090 R08: 0000000000000000 R09: 0000000000000000 [ 923.435091][T18011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.435102][T18011] R13: 00007f68b5be6038 R14: 00007f68b5be5fa0 R15: 00007f68b5d0fa28 [ 923.435136][T18011] [ 923.861944][ T9687] usb 9-1: config 0 has an invalid interface number: 238 but max is 0 [ 923.874252][ T9687] usb 9-1: config 0 has no interface number 0 [ 923.888055][ T9687] usb 9-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 923.901610][ T9687] usb 9-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 923.913127][ T9687] usb 9-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 923.925371][ T9687] usb 9-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 923.934609][ T9687] usb 9-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 923.942744][ T9687] usb 9-1: Product: syz [ 923.946990][ T9687] usb 9-1: Manufacturer: syz [ 923.951822][ T9687] usb 9-1: SerialNumber: syz [ 923.959753][ T9687] usb 9-1: config 0 descriptor?? [ 923.996725][ T9687] ni6501 9-1:0.238: driver 'ni6501' failed to auto-configure device. [ 924.130416][ T5948] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 924.186711][ T9687] usb 9-1: USB disconnect, device number 9 [ 924.553028][ T9681] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 924.720111][ T9681] usb 1-1: Using ep0 maxpacket: 8 [ 924.857037][T18031] fuse: Bad value for 'fd' [ 924.924148][ T9681] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 924.936163][ T9681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.944597][ T9681] usb 1-1: Product: syz [ 924.948860][ T9681] usb 1-1: Manufacturer: syz [ 924.953567][ T9681] usb 1-1: SerialNumber: syz [ 924.961665][ T9681] usb 1-1: config 0 descriptor?? [ 926.006280][T18037] fuse: Bad value for 'fd' [ 926.473065][T18047] program syz.8.3076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 927.179962][ T5948] usb 6-1: device descriptor read/64, error -71 [ 927.419109][ T9681] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 927.440172][ T5948] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 927.442910][ T9681] usb 1-1: USB disconnect, device number 68 [ 927.613325][ T5948] usb 6-1: Using ep0 maxpacket: 16 [ 927.634536][ T5948] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 927.656687][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.688600][ T5948] usb 6-1: Product: syz [ 927.707589][ T5948] usb 6-1: Manufacturer: syz [ 927.717617][ T5948] usb 6-1: SerialNumber: syz [ 927.732161][ T5948] usb 6-1: config 0 descriptor?? [ 927.770906][ T5948] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 927.967298][ T9684] usb 6-1: USB disconnect, device number 10 [ 928.080011][ T982] vhci_hcd: vhci_device speed not set [ 928.420026][ T5891] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 928.550178][ T5891] usb 5-1: device descriptor read/64, error -71 [ 928.600140][ T5948] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 928.920020][ T5891] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 928.962755][ T5948] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.980911][ T5948] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 928.992689][ T5948] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 929.007405][ T5948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.016120][ T5948] usb 9-1: Product: syz [ 929.023824][ T5948] usb 9-1: Manufacturer: syz [ 929.033779][ T5948] usb 9-1: SerialNumber: syz [ 929.060158][ T5891] usb 5-1: device descriptor read/64, error -71 [ 929.172790][ T5891] usb usb5-port1: attempt power cycle [ 929.278168][ T5948] usb 9-1: 0:2 : does not exist [ 929.292122][ T5948] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 929.316034][ T5948] usb 9-1: USB disconnect, device number 10 [ 929.348540][ T6032] udevd[6032]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.540423][ T5891] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 929.570689][ T5891] usb 5-1: device descriptor read/8, error -71 [ 929.819997][ T5891] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 929.840967][ T5891] usb 5-1: device descriptor read/8, error -71 [ 929.890091][ T5948] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 929.950523][ T5891] usb usb5-port1: unable to enumerate USB device [ 930.063973][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 930.086176][ T5948] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 930.103895][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.120044][ T5948] usb 6-1: config 0 descriptor?? [ 930.126196][T18097] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 930.508523][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3094'. [ 930.741977][ T5948] usbhid 6-1:0.0: can't add hid device: -71 [ 930.890315][ T5948] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 930.908125][ T5948] usb 6-1: USB disconnect, device number 11 [ 931.010062][ T9681] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 931.180079][ T9681] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 931.199352][ T9681] usb 1-1: config 0 interface 0 has no altsetting 0 [ 931.208410][ T9681] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 931.225916][ T9681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.246019][ T9681] usb 1-1: config 0 descriptor?? [ 931.530489][ T9681] usbhid 1-1:0.0: can't add hid device: -71 [ 931.550025][ T9681] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 931.575444][ T9681] usb 1-1: USB disconnect, device number 69 [ 931.806117][ T9681] IPVS: starting estimator thread 0... [ 931.845836][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.852373][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.910196][T18129] IPVS: using max 46 ests per chain, 110400 per kthread [ 932.267769][ T5948] IPVS: starting estimator thread 0... [ 932.370255][T18139] IPVS: using max 27 ests per chain, 64800 per kthread [ 932.640263][T18149] FAULT_INJECTION: forcing a failure. [ 932.640263][T18149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.653646][T18149] CPU: 0 UID: 0 PID: 18149 Comm: syz.5.3105 Not tainted syzkaller #0 PREEMPT(full) [ 932.653675][T18149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 932.653688][T18149] Call Trace: [ 932.653697][T18149] [ 932.653708][T18149] dump_stack_lvl+0x189/0x250 [ 932.653737][T18149] ? __pfx____ratelimit+0x10/0x10 [ 932.653770][T18149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 932.653792][T18149] ? __pfx__printk+0x10/0x10 [ 932.653823][T18149] ? __might_fault+0xb0/0x130 [ 932.653858][T18149] should_fail_ex+0x414/0x560 [ 932.653897][T18149] _copy_from_user+0x2d/0xb0 [ 932.653927][T18149] sctp_setsockopt+0x19f/0x1200 [ 932.653953][T18149] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 932.653983][T18149] do_sock_setsockopt+0x17c/0x1b0 [ 932.654019][T18149] __x64_sys_setsockopt+0x13f/0x1b0 [ 932.654057][T18149] do_syscall_64+0xfa/0xfa0 [ 932.654077][T18149] ? lockdep_hardirqs_on+0x9c/0x150 [ 932.654098][T18149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.654119][T18149] ? clear_bhb_loop+0x60/0xb0 [ 932.654146][T18149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.654167][T18149] RIP: 0033:0x7fb0f798eec9 [ 932.654186][T18149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.654204][T18149] RSP: 002b:00007fb0f88c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 932.654228][T18149] RAX: ffffffffffffffda RBX: 00007fb0f7be6090 RCX: 00007fb0f798eec9 [ 932.654245][T18149] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 932.654259][T18149] RBP: 00007fb0f88c2090 R08: 000000000000009c R09: 0000000000000000 [ 932.654272][T18149] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 932.654286][T18149] R13: 00007fb0f7be6128 R14: 00007fb0f7be6090 R15: 00007fb0f7d0fa28 [ 932.654321][T18149] [ 933.491428][ T5948] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 933.551466][ T9684] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 933.653394][ T5948] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 933.670050][ T5948] usb 1-1: config 7 has no interface number 0 [ 933.689050][ T5948] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 933.701047][ T5948] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 933.712417][ T5948] usb 1-1: config 7 interface 252 has no altsetting 0 [ 933.722016][ T9684] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 933.724063][ T5948] usb 1-1: string descriptor 0 read error: -22 [ 933.739615][ T5948] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 933.749620][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.752007][ T9684] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 933.770245][ T9684] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 933.775731][ T5948] idmouse 1-1:7.252: Unable to find bulk-in endpoint. [ 933.779315][ T9684] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 933.779348][ T9684] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 933.786897][ T982] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 933.806992][ T9684] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 933.836920][ T9684] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 933.857702][ T9684] usb 5-1: Product: syz [ 933.863138][ T9684] usb 5-1: Manufacturer: syz [ 933.892549][ T9684] cdc_wdm 5-1:1.0: skipping garbage [ 933.897933][ T9684] cdc_wdm 5-1:1.0: skipping garbage [ 933.906280][ T9684] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 933.912477][ T9684] cdc_wdm 5-1:1.0: Unknown control protocol [ 933.962727][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.987966][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.003138][ T982] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 934.016805][ T982] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 934.029142][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.047490][ T982] usb 6-1: config 0 descriptor?? [ 934.102859][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 934.109553][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 934.116925][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 934.123583][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 934.132640][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 934.139302][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 934.146111][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 934.152855][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 934.159380][ T9684] usb 5-1: USB disconnect, device number 75 [ 934.166086][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 934.166113][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 934.166132][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 934.397769][ T9684] usb 1-1: USB disconnect, device number 70 [ 934.501966][ T982] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 935.012304][T18181] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3110'. [ 935.262309][T18185] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3110'. [ 936.067056][ C1] plantronics 0003:047F:FFFF.003D: usb_submit_urb(ctrl) failed: -1 [ 936.253525][ T5891] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 936.409999][ T5891] usb 6-1: device descriptor read/64, error -32 [ 936.560072][ T9687] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 936.660402][ T5891] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 936.751687][ T9687] usb 9-1: config 0 has an invalid interface number: 147 but max is 0 [ 936.760095][ T9687] usb 9-1: config 0 has no interface number 0 [ 936.766201][ T9687] usb 9-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 936.788587][ T9687] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 936.797854][ T5891] usb 6-1: device descriptor read/64, error -32 [ 936.804502][ T9687] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.823644][ T9687] usb 9-1: Product: syz [ 936.831774][ T9687] usb 9-1: Manufacturer: syz [ 936.839631][ T9687] usb 9-1: SerialNumber: syz [ 936.858123][ T9687] usb 9-1: config 0 descriptor?? [ 936.867212][T18192] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 937.046346][ T5891] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 937.076695][ T9687] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 937.199421][ T5891] usb 6-1: device descriptor read/8, error -32 [ 937.214233][ T13] usb 9-1: Failed to submit usb control message: -71 [ 937.235482][ T9687] usb 9-1: USB disconnect, device number 11 [ 937.250836][ T13] usb 9-1: unable to send the bmi data to the device: -71 [ 937.258178][ T13] usb 9-1: unable to get target info from device [ 937.274010][ T13] usb 9-1: could not get target info (-71) [ 937.280603][ T13] usb 9-1: could not probe fw (-71) [ 937.610048][ T5891] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 937.634805][ T5891] usb 6-1: device descriptor read/8, error -32 [ 937.750130][ T5891] raw-gadget.2 gadget.5: failed to queue suspend event [ 937.758260][ T982] usb 6-1: USB disconnect, device number 12 [ 937.786803][T18212] FAULT_INJECTION: forcing a failure. [ 937.786803][T18212] name failslab, interval 1, probability 0, space 0, times 0 [ 937.809745][T18212] CPU: 0 UID: 0 PID: 18212 Comm: syz.0.3120 Not tainted syzkaller #0 PREEMPT(full) [ 937.809779][T18212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 937.809797][T18212] Call Trace: [ 937.809806][T18212] [ 937.809815][T18212] dump_stack_lvl+0x189/0x250 [ 937.809844][T18212] ? __pfx____ratelimit+0x10/0x10 [ 937.809875][T18212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.809897][T18212] ? __pfx__printk+0x10/0x10 [ 937.809914][T18212] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 937.809961][T18212] should_fail_ex+0x414/0x560 [ 937.809999][T18212] should_failslab+0xa8/0x100 [ 937.810027][T18212] kmem_cache_alloc_node_noprof+0x77/0x710 [ 937.810050][T18212] ? __alloc_skb+0x112/0x2d0 [ 937.810076][T18212] ? __lock_acquire+0xab9/0xd20 [ 937.810108][T18212] __alloc_skb+0x112/0x2d0 [ 937.810138][T18212] _sctp_make_chunk+0x5e/0x430 [ 937.810158][T18212] ? __lock_acquire+0xab9/0xd20 [ 937.810188][T18212] sctp_make_heartbeat+0xa7/0x470 [ 937.810215][T18212] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 937.810243][T18212] ? is_bpf_text_address+0x26/0x2b0 [ 937.810280][T18212] sctp_sf_do_prm_requestheartbeat+0x32/0x280 [ 937.810315][T18212] sctp_do_sm+0x1e7/0x5a20 [ 937.810342][T18212] ? __pfx_sctp_pname+0x10/0x10 [ 937.810371][T18212] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 937.810393][T18212] ? arch_stack_walk+0xfc/0x150 [ 937.810436][T18212] ? __pfx_sctp_do_sm+0x10/0x10 [ 937.810461][T18212] ? stack_trace_save+0x9c/0xe0 [ 937.810480][T18212] ? __pfx_stack_trace_save+0x10/0x10 [ 937.810562][T18212] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 937.810596][T18212] sctp_apply_peer_addr_params+0xdf/0x1880 [ 937.810640][T18212] sctp_setsockopt_peer_addr_params+0x678/0x940 [ 937.810679][T18212] sctp_setsockopt+0x709/0x1200 [ 937.810702][T18212] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 937.810730][T18212] do_sock_setsockopt+0x17c/0x1b0 [ 937.810764][T18212] __x64_sys_setsockopt+0x13f/0x1b0 [ 937.810797][T18212] do_syscall_64+0xfa/0xfa0 [ 937.810815][T18212] ? lockdep_hardirqs_on+0x9c/0x150 [ 937.810834][T18212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.810855][T18212] ? clear_bhb_loop+0x60/0xb0 [ 937.810879][T18212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.810897][T18212] RIP: 0033:0x7fefef18eec9 [ 937.810916][T18212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.810934][T18212] RSP: 002b:00007feff0064038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 937.810958][T18212] RAX: ffffffffffffffda RBX: 00007fefef3e6090 RCX: 00007fefef18eec9 [ 937.810973][T18212] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 937.810987][T18212] RBP: 00007feff0064090 R08: 000000000000009c R09: 0000000000000000 [ 937.810999][T18212] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 937.811012][T18212] R13: 00007fefef3e6128 R14: 00007fefef3e6090 R15: 00007fefef50fa28 [ 937.811045][T18212] [ 937.813691][ T982] raw-gadget.2 gadget.5: failed to queue reset event [ 938.280150][ T5917] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 938.288520][ T982] raw-gadget.2 gadget.5: failed to queue resume event [ 938.322678][T18178] raw-gadget.2 gadget.5: failed to queue suspend event [ 938.341471][T18178] raw-gadget.2 gadget.5: failed to queue disconnect event [ 938.360728][ T982] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 938.440513][ T9684] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 938.441723][ T5917] usb 5-1: config 0 has an invalid interface number: 232 but max is 0 [ 938.470309][ T5917] usb 5-1: config 0 has no interface number 0 [ 938.476501][ T5917] usb 5-1: config 0 interface 232 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 938.544991][ T5917] usb 5-1: config 0 interface 232 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 938.589607][ T5917] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=67.3e [ 938.599049][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.609973][ T9684] usb 9-1: Using ep0 maxpacket: 32 [ 938.620416][ T5917] usb 5-1: Product: syz [ 938.624758][ T5917] usb 5-1: Manufacturer: syz [ 938.629387][ T5917] usb 5-1: SerialNumber: syz [ 938.632073][ T9684] usb 9-1: config 0 has an invalid interface number: 184 but max is 11 [ 938.673907][ T9684] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 938.685877][ T5917] usb 5-1: config 0 descriptor?? [ 938.715339][ T9684] usb 9-1: config 0 has no interface number 0 [ 938.752390][ T9684] usb 9-1: config 0 interface 184 has no altsetting 0 [ 938.808643][ T9684] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 938.824083][ T9684] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.854677][ T9684] usb 9-1: Product: syz [ 938.871723][ T9684] usb 9-1: Manufacturer: syz [ 938.885961][ T9684] usb 9-1: SerialNumber: syz [ 938.916679][ T9684] usb 9-1: config 0 descriptor?? [ 938.923354][ T5917] port100 5-1:0.232: NFC: Could not find bulk-in or bulk-out endpoint [ 938.933107][ T9684] smsc75xx v1.0.0 [ 939.024746][ T5917] usb 5-1: USB disconnect, device number 76 [ 939.160344][ T9684] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 939.188950][ T9684] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 939.218080][ T9684] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 939.255375][ T9684] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 939.287733][ T9684] usb 9-1: USB disconnect, device number 12 [ 941.193803][ T30] audit: type=1326 audit(1760269867.171:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d18eec9 code=0x7ffc0000 [ 941.232924][ T30] audit: type=1326 audit(1760269867.171:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d18eec9 code=0x7ffc0000 [ 941.291916][ T30] audit: type=1326 audit(1760269867.171:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5e0d18eec9 code=0x7ffc0000 [ 941.316759][ T30] audit: type=1326 audit(1760269867.171:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d18eec9 code=0x7ffc0000 [ 941.384975][ T30] audit: type=1326 audit(1760269867.171:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d18eec9 code=0x7ffc0000 [ 941.524952][ T30] audit: type=1326 audit(1760269867.171:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d18eec9 code=0x7ffc0000 [ 941.619070][ T30] audit: type=1326 audit(1760269867.171:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d18eec9 code=0x7ffc0000 [ 941.652180][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 941.667325][ T30] audit: type=1326 audit(1760269867.171:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e0d18eec9 code=0x7ffc0000 [ 941.816095][ T30] audit: type=1326 audit(1760269867.171:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d18eec9 code=0x7ffc0000 [ 941.902123][ T30] audit: type=1326 audit(1760269867.171:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5e0d18eec9 code=0x7ffc0000 [ 941.933306][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 941.981805][T18288] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3139'. [ 942.540236][ T5917] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 942.707056][ T5917] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 942.739272][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3142'. [ 942.755439][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3142'. [ 942.785876][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.821382][ T5917] usb 5-1: Product: syz [ 942.839941][ T5917] usb 5-1: Manufacturer: syz [ 942.856696][ T5917] usb 5-1: SerialNumber: syz [ 943.050667][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 943.061045][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 943.073674][ T10] usb 1-1: can't read configurations, error -71 [ 944.402188][T18323] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3150'. [ 945.370030][ T982] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 945.522562][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 945.562547][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 945.583347][ T982] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 945.597211][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.618555][ T5917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPIPE [ 945.646027][ T5917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPIPE [ 945.668957][ T5917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 945.689105][ T982] usb 1-1: config 0 descriptor?? [ 945.699801][T18337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 945.878993][ T5917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 945.914401][ T5917] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 945.967454][ T5917] usb 5-1: USB disconnect, device number 77 [ 945.994197][ T982] creative-sb0540 0003:041E:3100.003E: item fetching failed at offset 1/5 [ 946.033592][ T982] creative-sb0540 0003:041E:3100.003E: parse failed [ 946.051876][ T982] creative-sb0540 0003:041E:3100.003E: probe with driver creative-sb0540 failed with error -22 [ 946.340192][T18361] misc userio: Invalid payload size [ 946.360915][T18362] fuse: Bad value for 'group_id' [ 946.381844][T18362] fuse: Bad value for 'group_id' [ 946.440233][T18366] trusted_key: encrypted_key: master key parameter '' is invalid [ 946.668710][T18370] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 946.927342][T18385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.962593][T18385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.991829][T18385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.004740][T18385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.275117][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3166'. [ 947.286668][ T9684] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 947.475367][ T9684] usb 9-1: config 0 has no interfaces? [ 947.490686][ T9684] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 947.518853][ T9684] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.527075][T18393] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 947.568798][T18393] sctp: [Deprecated]: syz.4.3166 (pid 18393) Use of int in maxseg socket option. [ 947.568798][T18393] Use struct sctp_assoc_value instead [ 947.609961][ T9684] usb 9-1: Product: syz [ 947.631729][ T9684] usb 9-1: Manufacturer: syz [ 947.647052][ T9684] usb 9-1: SerialNumber: syz [ 947.684571][ T9684] usb 9-1: config 0 descriptor?? [ 947.781255][T18400] fuse: Bad value for 'fd' [ 947.956538][ T9681] usb 9-1: USB disconnect, device number 13 [ 948.114979][ T9684] usb 1-1: USB disconnect, device number 73 [ 948.560083][ T9684] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 948.962733][T18418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.972070][T18418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.018837][T18420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3173'. [ 949.239982][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 949.420071][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 949.430792][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 949.469950][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 949.481871][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 949.498510][ T10] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=1b.47 [ 949.509040][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 949.518508][ T10] usb 9-1: Product: syz [ 949.523183][ T10] usb 9-1: Manufacturer: syz [ 949.528117][ T10] usb 9-1: SerialNumber: syz [ 949.556976][ T10] usb 9-1: config 0 descriptor?? [ 949.571220][T18416] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 949.606931][ T10] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 949.615537][ T10] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 949.622680][ T10] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 949.634941][ T10] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 949.660041][ T10] mcba_usb 9-1:0.0: Microchip CAN BUS Analyzer connected [ 949.832355][T18416] netlink: 'syz.8.3172': attribute type 5 has an invalid length. [ 950.046953][T18416] ip6erspan0: entered promiscuous mode [ 950.084287][T18431] bridge0: port 3(macsec0) entered blocking state [ 950.092804][T18431] bridge0: port 3(macsec0) entered disabled state [ 950.105470][T18431] macsec0: entered allmulticast mode [ 950.111812][T18431] veth1_macvtap: entered allmulticast mode [ 950.140487][T18431] macsec0: entered promiscuous mode [ 950.150825][T18431] bridge0: port 3(macsec0) entered blocking state [ 950.158000][T18431] bridge0: port 3(macsec0) entered forwarding state [ 950.840272][ T9687] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 951.059994][ T9687] usb 6-1: Using ep0 maxpacket: 16 [ 951.073307][ T9687] usb 6-1: config 0 has no interfaces? [ 951.129284][T18447] IPVS: set_ctl: invalid protocol: 1344 0.32.0.0:16 [ 951.148325][T18447] IPVS: set_ctl: invalid protocol: 25972 48.0.0.0:0 [ 951.242752][ T9687] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 951.607424][ T9687] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 951.690192][ T9687] usb 6-1: Manufacturer: syz [ 951.745859][ T9687] usb 6-1: config 0 descriptor?? [ 951.943465][ T9684] usb 1-1: unable to get BOS descriptor or descriptor too short [ 951.990316][ T9684] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 952.020708][ T9684] usb 1-1: can't read configurations, error -71 [ 952.128336][T18440] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 952.164646][T18440] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 952.435586][T18469] fuse: Bad value for 'fd' [ 952.560278][ T982] usb 9-1: USB disconnect, device number 14 [ 952.590043][ T982] mcba_usb 9-1:0.0 can0: device disconnected [ 952.880082][ T9684] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 953.039904][ T9684] usb 1-1: Using ep0 maxpacket: 16 [ 953.061056][ T9684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.080012][ T982] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 953.082411][ T9684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.159411][ T9684] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 953.183155][ T9684] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 953.230194][ T982] usb 9-1: Using ep0 maxpacket: 8 [ 953.239258][ T9684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.241713][ T982] usb 9-1: config 162 has an invalid interface number: 97 but max is 0 [ 953.266533][ T982] usb 9-1: config 162 has no interface number 0 [ 953.278405][ T9684] usb 1-1: config 0 descriptor?? [ 953.289949][ T982] usb 9-1: config 162 interface 97 has no altsetting 0 [ 953.337297][ T982] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 953.350088][ T982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.392506][ T982] usb 9-1: Product: syz [ 953.396756][ T982] usb 9-1: Manufacturer: syz [ 953.433109][ T982] usb 9-1: SerialNumber: syz [ 953.612919][T18483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.640736][T18483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.781496][T18473] pim6reg1: entered promiscuous mode [ 953.786917][T18473] pim6reg1: entered allmulticast mode [ 954.189382][ T9681] usb 6-1: USB disconnect, device number 14 [ 954.701066][ T9681] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 954.748222][T18501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.748791][T18501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.854706][ T9681] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 954.854749][ T9681] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 954.854778][ T9681] usb 6-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 954.854807][ T9681] usb 6-1: config 0 interface 0 has no altsetting 0 [ 954.854872][ T9681] usb 6-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 954.854900][ T9681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.868415][ T9681] usb 6-1: config 0 descriptor?? [ 954.871452][T18496] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 954.871624][T18496] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 955.118530][T18496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.119206][T18496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.571606][ T9681] usbhid 6-1:0.0: can't add hid device: -71 [ 955.571760][ T9681] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 955.608348][ T9681] usb 6-1: USB disconnect, device number 15 [ 955.825590][ T9684] usbhid 1-1:0.0: can't add hid device: -71 [ 955.825716][ T9684] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 955.830041][ T9684] usb 1-1: USB disconnect, device number 75 [ 957.170018][ T5917] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 957.336607][ T5917] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 957.336666][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.336689][ T5917] usb 6-1: Product: syz [ 957.336706][ T5917] usb 6-1: Manufacturer: syz [ 957.336727][ T5917] usb 6-1: SerialNumber: syz [ 957.429237][ T5917] usb 6-1: config 0 descriptor?? [ 957.464672][ T5917] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 957.698008][T18534] fuse: Bad value for 'fd' [ 957.750989][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 957.892274][ T10] usb 5-1: device descriptor read/64, error -71 [ 958.100394][ T9684] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 958.160030][ T10] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 958.260022][ T9684] usb 1-1: Using ep0 maxpacket: 32 [ 958.266907][ T9684] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 958.275448][ T9684] usb 1-1: config 0 has no interface number 0 [ 958.283763][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3199'. [ 958.293485][ T10] usb 5-1: device descriptor read/64, error -71 [ 958.301874][T18543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.312148][ T9684] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 958.326179][T18543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.334696][ T9684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.345054][ T9684] usb 1-1: Product: syz [ 958.349434][ T9684] usb 1-1: Manufacturer: syz [ 958.356517][ T9684] usb 1-1: SerialNumber: syz [ 958.377921][ T9684] usb 1-1: config 0 descriptor?? [ 958.401292][ T9684] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 958.410874][ T10] usb usb5-port1: attempt power cycle [ 958.487006][ T982] metro_usb 9-1:162.97: Metrologic USB to Serial converter detected [ 958.536524][ T982] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 958.790949][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 958.851276][ T10] usb 5-1: device descriptor read/8, error -71 [ 959.109982][ T10] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 959.130986][ T10] usb 5-1: device descriptor read/8, error -71 [ 959.240253][ T10] usb usb5-port1: unable to enumerate USB device [ 959.303034][ T5917] gspca_sunplus: reg_r err -71 [ 959.314812][ T5917] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 959.342113][ T5917] usb 6-1: USB disconnect, device number 16 [ 959.919309][T18556] random: crng reseeded on system resumption [ 960.200210][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 960.383549][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.479928][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.491757][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 960.505607][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 960.515856][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.532799][ T10] usb 6-1: config 0 descriptor?? [ 960.680730][ T5917] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 960.868729][ T9684] usb 1-1: qt2_attach - failed to power on unit: -71 [ 960.889045][ T9684] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 961.000026][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 961.006121][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 961.141162][ T9684] usb 1-1: USB disconnect, device number 76 [ 961.176837][ T10] usb 6-1: USB disconnect, device number 17 [ 961.187989][T18565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.197096][T18565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.540336][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 961.540359][ T30] audit: type=1800 audit(1760269887.511:1018): pid=18572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3204" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 961.792031][T18582] netlink: 'syz.5.3206': attribute type 10 has an invalid length. [ 961.801492][T18582] veth1_vlan: entered allmulticast mode [ 961.807811][T18582] veth1_vlan: left promiscuous mode [ 961.815540][T18582] team0: Device veth1_vlan failed to register rx_handler [ 962.261866][T18588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.271206][T18588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.354304][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short [ 963.373592][ T5917] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 963.599025][ T5917] usb 5-1: can't read configurations, error -71 [ 964.332455][T18608] fuse: Unknown parameter 'user_id00000000000000000000' [ 965.232749][ T30] audit: type=1326 audit(1760269891.221:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.0.3217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefef18eec9 code=0x0 [ 966.409926][ T5917] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 966.570386][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 966.576523][T18645] fuse: Unknown parameter 'user_id00000000000000000000' [ 966.584947][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 966.597675][ T5917] usb 5-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 966.608313][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.706309][ T5917] usb 5-1: config 0 descriptor?? [ 966.837988][ T30] audit: type=1326 audit(1760269892.751:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18642 comm="syz.8.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48638eec9 code=0x7ffc0000 [ 966.860491][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.930076][ T30] audit: type=1326 audit(1760269892.751:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18642 comm="syz.8.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fb48638eec9 code=0x7ffc0000 [ 967.009568][ T30] audit: type=1326 audit(1760269892.751:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18642 comm="syz.8.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48638eec9 code=0x7ffc0000 [ 967.162567][T18637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.172059][T18637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.189139][ T30] audit: type=1326 audit(1760269892.751:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18642 comm="syz.8.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb48638eec9 code=0x7ffc0000 [ 967.340417][ T5917] logitech-hidpp-device 0003:046D:0A87.003F: unknown main item tag 0x0 [ 967.354705][ T30] audit: type=1326 audit(1760269892.751:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18642 comm="syz.8.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48638eec9 code=0x7ffc0000 [ 967.690787][ T5917] logitech-hidpp-device 0003:046D:0A87.003F: unknown main item tag 0x0 [ 967.699229][ T5917] logitech-hidpp-device 0003:046D:0A87.003F: item fetching failed at offset 3/5 [ 967.709590][ T5917] logitech-hidpp-device 0003:046D:0A87.003F: hidpp_probe:parse failed [ 967.717953][ T30] audit: type=1326 audit(1760269892.761:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18642 comm="syz.8.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb48638eec9 code=0x7ffc0000 [ 967.746187][ T5917] logitech-hidpp-device 0003:046D:0A87.003F: probe with driver logitech-hidpp-device failed with error -22 [ 967.769990][ T30] audit: type=1326 audit(1760269892.761:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18642 comm="syz.8.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48638eec9 code=0x7ffc0000 [ 967.800426][ T30] audit: type=1326 audit(1760269892.761:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18642 comm="syz.8.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48638eec9 code=0x7ffc0000 [ 967.923156][ T30] audit: type=1326 audit(1760269892.761:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18642 comm="syz.8.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb48638eec9 code=0x7ffc0000 [ 967.973204][ T30] audit: type=1326 audit(1760269892.771:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18642 comm="syz.8.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48638eec9 code=0x7ffc0000 [ 968.623918][T18662] netlink: 'syz.8.3230': attribute type 1 has an invalid length. [ 969.050069][ T9684] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 969.063731][ T10] usb 5-1: USB disconnect, device number 84 [ 969.210181][ T9684] usb 6-1: Using ep0 maxpacket: 32 [ 969.217618][ T9684] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 969.226120][ T9684] usb 6-1: config 0 has no interface number 0 [ 969.232449][ T9684] usb 6-1: config 0 interface 184 has no altsetting 0 [ 969.243351][ T9684] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 969.253098][ T9684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.262772][ T9684] usb 6-1: Product: syz [ 969.267062][ T9684] usb 6-1: Manufacturer: syz [ 969.273277][ T9684] usb 6-1: SerialNumber: syz [ 969.287858][ T9684] usb 6-1: config 0 descriptor?? [ 969.297425][ T9684] smsc75xx v1.0.0 [ 969.419964][ T10] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 969.582654][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 969.598693][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.630848][ T10] usb 5-1: config 0 descriptor?? [ 969.645391][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 969.933727][ T9684] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 969.944936][ T9684] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 970.241517][ T9684] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 970.258262][ T5823] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 970.267392][ T9684] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 970.278906][ T9684] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 970.290803][ T9684] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 970.314697][ T9684] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 970.433272][ T5823] usb 1-1: config 0 has an invalid descriptor of length 74, skipping remainder of the config [ 970.443989][ T5823] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 970.457090][ T5823] usb 1-1: New USB device found, idVendor=05ac, idProduct=e04b, bcdDevice= 0.3f [ 970.467761][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.490956][ T5823] usb 1-1: config 0 descriptor?? [ 971.085920][ T10] gspca_stv06xx: HDCS-1020 sensor detected [ 971.093621][ T5823] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 971.103251][ T5823] usb 1-1: USB disconnect, device number 77 [ 971.256869][T18709] netlink: 'syz.8.3243': attribute type 10 has an invalid length. [ 971.265148][T18709] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3243'. [ 971.275104][T18709] bridge0: port 4(dummy0) entered blocking state [ 971.282783][T18709] bridge0: port 4(dummy0) entered disabled state [ 971.290527][T18709] dummy0: entered allmulticast mode [ 971.298359][T18709] dummy0: entered promiscuous mode [ 971.305129][T18709] bridge0: port 4(dummy0) entered blocking state [ 971.311785][T18709] bridge0: port 4(dummy0) entered forwarding state [ 971.562938][ T10] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 971.594423][ T10] usb 5-1: USB disconnect, device number 85 [ 971.756755][T18718] binder: BINDER_SET_CONTEXT_MGR already set [ 971.763411][T18718] binder: 18717:18718 ioctl 4018620d 2000000002c0 returned -16 [ 971.773296][T18718] binder: 18717:18718 ioctl c0306201 200000000680 returned -14 [ 972.000235][ T9681] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 972.054789][ T5917] usb 6-1: USB disconnect, device number 18 [ 972.115418][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 972.115438][ T30] audit: type=1326 audit(1760269898.101:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18725 comm="syz.8.3246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb48638eec9 code=0x0 [ 972.455549][T18745] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3246'. [ 972.759065][T18753] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3251'. [ 975.859935][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 976.012977][ T10] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 976.038663][ T10] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 976.090394][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 976.126163][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=131 [ 976.162375][ T10] usb 6-1: Product: syz [ 976.174155][ T10] usb 6-1: Manufacturer: syz [ 976.180346][ T10] usb 6-1: SerialNumber: syz [ 976.190795][ T10] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 976.199664][ T10] usb 6-1: no configuration chosen from 1 choice [ 976.569069][T18805] syzkaller0: entered promiscuous mode [ 976.583749][T18805] syzkaller0: entered allmulticast mode [ 977.160623][T18816] debugfs: '!' already exists in 'ieee80211' [ 977.970869][ T982] usb 6-1: USB disconnect, device number 19 [ 978.125787][T18839] fuse: Bad value for 'user_id' [ 978.130965][T18839] fuse: Bad value for 'user_id' [ 978.300734][ T5917] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 978.469890][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 978.477352][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short [ 978.490524][ T5917] usb 5-1: config 1 interface 0 altsetting 11 bulk endpoint 0x82 has invalid maxpacket 16 [ 978.500842][ T5917] usb 5-1: config 1 interface 0 altsetting 11 bulk endpoint 0x3 has invalid maxpacket 1023 [ 978.512433][ T5917] usb 5-1: config 1 interface 0 has no altsetting 0 [ 978.523352][ T5917] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 978.533663][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.542546][ T5917] usb 5-1: Product: syz [ 978.547162][ T5917] usb 5-1: Manufacturer: syz [ 978.552652][ T5917] usb 5-1: SerialNumber: syz [ 978.563956][T18837] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 978.569963][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 978.572650][T18837] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 978.733284][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 978.741588][ T10] usb 6-1: config 127 has an invalid interface number: 96 but max is 0 [ 978.750310][ T10] usb 6-1: config 127 has no interface number 0 [ 978.820439][ T10] usb 6-1: config 127 interface 96 has no altsetting 0 [ 978.832918][ T10] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44 [ 978.838832][ T5917] usb 5-1: bad CDC descriptors [ 978.856472][ T5917] usb 5-1: USB disconnect, device number 86 [ 978.863792][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.875181][ T10] usb 6-1: Product: syz [ 978.886982][ T10] usb 6-1: Manufacturer: syz [ 978.891911][ T10] usb 6-1: SerialNumber: syz [ 979.121166][ T10] legousbtower 6-1:127.96: interrupt endpoints not found [ 979.153917][ T10] usb 6-1: USB disconnect, device number 20 [ 979.406525][T18847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3276'. [ 979.707944][T18852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 979.711997][T18853] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3277'. [ 980.060565][T18863] netlink: 'syz.8.3282': attribute type 13 has an invalid length. [ 980.093756][T18863] gretap0: refused to change device tx_queue_len [ 980.100949][T18863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 980.267904][T18868] trusted_key: encrypted_key: insufficient parameters specified [ 980.276559][T18868] trusted_key: encrypted_key: keylen parameter is missing [ 980.294908][ T30] audit: type=1326 audit(1760269906.281:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.5.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 980.317464][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.384657][ T30] audit: type=1326 audit(1760269906.281:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.5.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 980.410182][ T30] audit: type=1326 audit(1760269906.281:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.5.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 980.446260][ T30] audit: type=1326 audit(1760269906.281:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.5.3281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 980.469475][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.483964][ T30] audit: type=1326 audit(1760269906.281:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.5.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 980.598402][ T30] audit: type=1326 audit(1760269906.281:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.5.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 980.620835][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.658313][ T30] audit: type=1326 audit(1760269906.281:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.5.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f798eec9 code=0x7ffc0000 [ 983.559977][T18912] xt_TPROXY: Can be used only with -p tcp or -p udp [ 983.792282][T18914] kernel read not supported for file /  (pid: 18914 comm: syz.4.3296) [ 983.859878][ T30] audit: type=1800 audit(1760269909.801:1098): pid=18914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3296" name=200120 dev="mqueue" ino=94694 res=0 errno=0 [ 983.997921][ T30] audit: type=1326 audit(1760269909.981:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18919 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b598eec9 code=0x7ffc0000 [ 984.063903][ T30] audit: type=1326 audit(1760269910.021:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18919 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f68b598eec9 code=0x7ffc0000 [ 984.570975][ T9681] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 984.925348][T18940] fuse: Unknown parameter '0x0000000000000003' [ 985.159948][ T9681] usb 6-1: Using ep0 maxpacket: 16 [ 985.216590][ T9681] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 985.233231][ T9681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.296573][ T9681] usb 6-1: config 0 descriptor?? [ 985.352397][ T9681] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 986.130671][ T982] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 986.279919][ T982] usb 1-1: device descriptor read/64, error -71 [ 986.352338][T18963] xt_l2tp: v2 tid > 0xffff: 1114244 [ 986.520724][ T982] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 986.680194][ T982] usb 1-1: device descriptor read/64, error -71 [ 986.793808][ T982] usb usb1-port1: attempt power cycle [ 986.865186][T18977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.877240][T18977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.877772][T18978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.896491][T18978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.160083][ T982] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 987.182095][ T982] usb 1-1: device descriptor read/8, error -71 [ 987.210138][ T5917] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 987.360174][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 987.368638][ T5917] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 987.380482][ T5917] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 987.389719][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 987.399332][ T5917] usb 5-1: Product: syz [ 987.403751][ T5917] usb 5-1: Manufacturer: syz [ 987.408544][ T5917] usb 5-1: SerialNumber: syz [ 987.416416][ T5917] usb 5-1: config 0 descriptor?? [ 987.421664][ T982] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 987.440848][ T982] usb 1-1: device descriptor read/8, error -71 [ 987.553308][ T982] usb usb1-port1: unable to enumerate USB device [ 987.651428][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3312'. [ 988.018714][T18930] netlink: 'syz.5.3301': attribute type 1 has an invalid length. [ 988.163441][ T52] ------------[ cut here ]------------ [ 988.169470][ T52] WARNING: CPU: 0 PID: 52 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0xff/0x290 [ 988.179273][ T52] Modules linked in: [ 988.183778][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 988.193269][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 988.203451][ T52] Workqueue: hci5 hci_conn_timeout [ 988.208609][ T52] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 988.214643][ T52] Code: 48 89 df e8 53 1d 09 00 eb 07 e8 9c 95 76 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 e7 c4 fe ff e8 82 95 76 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 988.234486][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.241385][ T52] RSP: 0018:ffffc90000bd7a30 EFLAGS: 00010293 [ 988.247696][ T52] RAX: ffffffff8a49ae6e RBX: ffff888026748000 RCX: ffff88801b388000 [ 988.256184][ T52] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 988.264441][ T52] RBP: 00000000ffffffff R08: ffff888026748013 R09: 1ffff11004ce9002 [ 988.272750][ T52] R10: dffffc0000000000 R11: ffffed1004ce9003 R12: dffffc0000000000 [ 988.280891][ T52] R13: ffff88801a7cc018 R14: ffff888026748948 R15: ffff888026748010 [ 988.288879][ T52] FS: 0000000000000000(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 988.297995][ T52] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 988.304629][ T52] CR2: 0000000000000000 CR3: 0000000034a3c000 CR4: 00000000003526f0 [ 988.312946][ T52] Call Trace: [ 988.316623][ T52] [ 988.319563][ T52] ? process_scheduled_works+0x9ef/0x17b0 [ 988.325615][ T52] process_scheduled_works+0xae1/0x17b0 [ 988.331242][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 988.337244][ T52] worker_thread+0x8a0/0xda0 [ 988.341893][ T52] kthread+0x711/0x8a0 [ 988.345967][ T52] ? __pfx_worker_thread+0x10/0x10 [ 988.351135][ T52] ? __pfx_kthread+0x10/0x10 [ 988.355743][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 988.360988][ T52] ? lockdep_hardirqs_on+0x9c/0x150 [ 988.366193][ T52] ? __pfx_kthread+0x10/0x10 [ 988.370821][ T52] ret_from_fork+0x4bc/0x870 [ 988.375419][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 988.380555][ T52] ? __switch_to_asm+0x39/0x70 [ 988.385322][ T52] ? __switch_to_asm+0x33/0x70 [ 988.390195][ T52] ? __pfx_kthread+0x10/0x10 [ 988.394824][ T52] ret_from_fork_asm+0x1a/0x30 [ 988.399659][ T52] [ 988.402833][ T52] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 988.410179][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 988.419561][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 988.429720][ T52] Workqueue: hci5 hci_conn_timeout [ 988.434894][ T52] Call Trace: [ 988.438273][ T52] [ 988.441241][ T52] dump_stack_lvl+0x99/0x250 [ 988.445870][ T52] ? __asan_memcpy+0x40/0x70 [ 988.450495][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 988.455711][ T52] ? __pfx__printk+0x10/0x10 [ 988.460485][ T52] vpanic+0x237/0x6d0 [ 988.464489][ T52] ? __pfx_vpanic+0x10/0x10 [ 988.469004][ T52] panic+0xb9/0xc0 [ 988.472760][ T52] ? __pfx_panic+0x10/0x10 [ 988.477211][ T52] __warn+0x31b/0x4b0 [ 988.481311][ T52] ? hci_conn_timeout+0xff/0x290 [ 988.486288][ T52] ? hci_conn_timeout+0xff/0x290 [ 988.491234][ T52] report_bug+0x2be/0x4f0 [ 988.495580][ T52] ? hci_conn_timeout+0xff/0x290 [ 988.500558][ T52] ? hci_conn_timeout+0xff/0x290 [ 988.505501][ T52] ? hci_conn_timeout+0x101/0x290 [ 988.510631][ T52] handle_bug+0x84/0x160 [ 988.514888][ T52] exc_invalid_op+0x1a/0x50 [ 988.519421][ T52] asm_exc_invalid_op+0x1a/0x20 [ 988.524374][ T52] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 988.529937][ T52] Code: 48 89 df e8 53 1d 09 00 eb 07 e8 9c 95 76 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 e7 c4 fe ff e8 82 95 76 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 988.549557][ T52] RSP: 0018:ffffc90000bd7a30 EFLAGS: 00010293 [ 988.555636][ T52] RAX: ffffffff8a49ae6e RBX: ffff888026748000 RCX: ffff88801b388000 [ 988.563616][ T52] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 988.571602][ T52] RBP: 00000000ffffffff R08: ffff888026748013 R09: 1ffff11004ce9002 [ 988.579596][ T52] R10: dffffc0000000000 R11: ffffed1004ce9003 R12: dffffc0000000000 [ 988.587581][ T52] R13: ffff88801a7cc018 R14: ffff888026748948 R15: ffff888026748010 [ 988.595578][ T52] ? hci_conn_timeout+0xfe/0x290 [ 988.600637][ T52] ? process_scheduled_works+0x9ef/0x17b0 [ 988.606398][ T52] process_scheduled_works+0xae1/0x17b0 [ 988.611988][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 988.617999][ T52] worker_thread+0x8a0/0xda0 [ 988.622633][ T52] kthread+0x711/0x8a0 [ 988.626719][ T52] ? __pfx_worker_thread+0x10/0x10 [ 988.631852][ T52] ? __pfx_kthread+0x10/0x10 [ 988.636477][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 988.641698][ T52] ? lockdep_hardirqs_on+0x9c/0x150 [ 988.646898][ T52] ? __pfx_kthread+0x10/0x10 [ 988.651527][ T52] ret_from_fork+0x4bc/0x870 [ 988.656180][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 988.661325][ T52] ? __switch_to_asm+0x39/0x70 [ 988.666108][ T52] ? __switch_to_asm+0x33/0x70 [ 988.670879][ T52] ? __pfx_kthread+0x10/0x10 [ 988.675490][ T52] ret_from_fork_asm+0x1a/0x30 [ 988.680311][ T52] [ 988.683678][ T52] Kernel Offset: disabled [ 988.688024][ T52] Rebooting in 86400 seconds..