last executing test programs: 8m38.872016025s ago: executing program 32 (id=597): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/124, 0x7c}, {0x0}], 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad", 0x1) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/1611], 0x64b}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8e}, {0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, r6}}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070000000000070000000800000018000180020000006e0000000000000000000800050002000000000000000000"], 0x34}}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x5adae000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r10, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x1, {0xd, 0x0, "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", 0x3a, 0x2, 0x6, 0xff, 0x4, 0xff, 0x5}, r6}}, 0x128) r11 = accept4(r0, 0x0, 0x0, 0x80000) recvfrom(r11, 0x0, 0x0, 0x2001, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x0) 8m2.408245133s ago: executing program 3 (id=735): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e23, @empty}, 0x2c4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x7fffffffffffffff, 0xc}) ioctl$TIOCMGET(r4, 0x541e, &(0x7f0000000040)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40041) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x8, 0x0, 0x0}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r7 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000240)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) rt_sigqueueinfo(0x0, 0xe, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 8m0.300127683s ago: executing program 3 (id=745): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) fanotify_mark(0xffffffffffffffff, 0x565, 0x1000000, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r0}, &(0x7f0000000180)=""/126, 0x7e, &(0x7f00000005c0)={&(0x7f0000000400)={'sm3\x00'}}) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010040000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241cc0ff0a0a200905810300020000000904010000020d00000904011102"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7m59.328594373s ago: executing program 4 (id=747): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0xebcf155132bee5f0, {{0x1, 0x3}, 0x3}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000280)="e01e0c348bfe7588619fec77b9486971aa5399a5e45c3e9c9130294891387a0147be523e7b555f70c615f50ec3bdf1c83fb969da69130227fc028b8c09fa409b4fd51ed41254a29f730780f23be1e31cf189b9", 0x53}], 0x1, &(0x7f0000000300)="ff0bb3fa0d8266b481d31bd6b905a9b666a2dc0e269c487dd5e67b1a684302e9a5ee8e265ef0826ce7d194d9c152ca6eba5f094a904e58d06a4d0ce37bd123f9e36b8b5a3f02191dea7210632a27aa45a3e419bd64b44228861ddc449971a6de2176f999d669cfe9da5cd72298e46765294d5c0fa7fbc3682245154a1304f07133759c0010d729fdb4bc6497bf90a7639b41c0a7db503d180adb319249ab31346edf117405e7e0415460c5abb4e3e2512924d730f7189090d2e668a26a945abe2e1a81c63a6cd6f39359119412ae0d17a9f4d952b827695ef317f702382874d6600cbc44cd1c131ff13c778cf75c8dae59a46c8385d4619d34", 0xf9, 0x80}, 0x804) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x5, 0x3, 0x0, 0x101}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x5}, 0x4) 7m59.052015155s ago: executing program 4 (id=748): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r0, 0x34, 0x1000, 0x10fff9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000001980)=[{{&(0x7f0000000300), 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/200, 0xc8}], 0x2, &(0x7f0000001480)=""/219, 0xdb}, 0xcdf0}, {{&(0x7f0000001580)=@nfc_llcp, 0x80, &(0x7f0000000280)=[{&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000001600)=""/249, 0xf9}, {&(0x7f0000001700)=""/166, 0xa6}, {&(0x7f0000000200)=""/22, 0x16}], 0x4, &(0x7f00000017c0)=""/30, 0x1e}, 0x4}, {{&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000001880), 0x0, &(0x7f00000018c0)=""/188, 0xbc}, 0x9}], 0x3, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) 7m58.912044785s ago: executing program 3 (id=750): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='cmdline\x00') read$FUSE(r4, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xdddd1000, 0x59a35423, 0x20003, 0x10020f5f, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {}, {}, {0x0, 0x35}, {0x0, 0x3, 0x92, '\x00', 0xfe}, {0x0, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x1, 0x8}, {0x2, 0x6, 0x1}, {}, {0x73, 0x6, 0x2, '\x00', 0xb8}, {0x0, 0x0, 0x9}, {}, {0x60}, {0x0, 0x2, 0x0, '\x00', 0xfe}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x3, 0x0, '\x00', 0xff}, {0x2, 0x0, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x40}, {0x5, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x4}]}}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) fsopen(0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x45b, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000240)='#mS\xb2jQ\x80\xb7\x94\x9c\xad=\xc8\xa0A4Z1\xcb\xa18:.)\xa5\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd2\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T\x05\x00&\xf0z\xde\xc0\xf3\xcf\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ_\x16\xecRo\xb2\f\x14Z7\xe5\xf4\x0ea\b\x8f\x1cI\xc6\xc4P\x965lWZ|\xde\x00\xd0\x8d\xfaG\xb0fDP\x83\xa1\xd4%\x93\x99P\xa4hG\x15D\xdf\xd8\x90\x02\xe3Y\x06}\"3\xa8\xb3m\xf3\xbeb?\xbd\xd87]]j)Mp\xb4\x98\xd4tu\x8f<\x04Ph!A\xd8\xc6\xc6V\x02\x15\xd5\x7fx\xbc\xc2\x9bb$\x9bJ\xd3\xe2t\x13\xc7]\xd0\xdb\xf3\x9e\xe3\x03\x91\xf3\x17\xfed[\xd9\b0\x9c\xfde^\x95b\xff\xda3\x90\xdb\xe7L\x0foR\n\xa9\xe4\xb4)hh\xcb\x93\x02\az\xa2d+z\xd2`\x84>eZ\x8a\xc6\xcd\xbb\xce=\xc9\r\x8b\xcf\x83[\xe3\xc8\xb7*\x1c\xa7\x98g\x1f\x8bu\x19\xd2\xbd\xc2\'\xcb}\x03}\xc1\xa8>\xd6K\x84\xf8\x90\x11=6\xe9\xa9\x1f\r\x95\x90\xcf,\x0f\xdbk\x04\x14\xd5I\x00\xc8p\x11\xc1#\xca\xf7\x1b\b&\x82\xea0N\xed:\xe5\x9e\xb3\x94\x87\x9d\xa6el\x8d\v\xd3\x17\xb7.6\xf6\xb1\x823\x88\xe1\x1a\xf6\xce\xebm \xda\x1d\xa3STVN& *\xe1hjC~\xb7\x1e;0,\xeb\xbc\x9e}3\xd7\xe8\x8a\x19\xa0\xdd\x15\xc9+\xd8\xb2\xab~(\xa4\xc6\x001\x89\x9eW\xe2\xc1\x92\xfc\xb82\xe9', 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a0001002dbd7000020000000a00000809"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x12b4}, 0x1, 0x0, 0x0, 0x40080c5}, 0x20000000) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1, 0x0, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0x5364, 0x0, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x6b, 0x11cfa, 0x2, 0x8000005, 0x3, 0x4, 0x1, 0x0, 0x2, 0xd}) 7m56.652360221s ago: executing program 4 (id=755): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000080)=ANY=[], 0x40) (async) write$nbd(r1, &(0x7f0000000080)=ANY=[], 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) keyctl$invalidate(0x15, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000040)=""/117, 0x75) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x800000a7}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) dup3(r0, r3, 0x0) (async) r6 = dup3(r0, r3, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x9c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1000}, @IPSET_ATTR_IFACE={0x14, 0x17, 'wlan1\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xaa7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd7}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x52}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e24, 0xd8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, {0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1, {[0x0, 0x800, 0x8, 0x1, 0xffff, 0x800, 0x4000000, 0x401]}}, 0x5c) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) flock(r7, 0x5) (async) flock(r7, 0x5) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 7m56.208825309s ago: executing program 4 (id=757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, 0x0, 0x64}) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7ff, 0x8bb, 0xb5, 0x4, 0x0, 0x8000000000000000, 0x500, 0x3b2, 0x1, 0x80000010000, 0x8, 0x7, 0x7, 0x3, 0x7, 0x200], 0xf000, 0x66000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000003c0)={0x2a6, 0x0, "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"}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x49) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400012000008000240000000030c00048005000100690000000c00038005000100430000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4) 7m55.04450461s ago: executing program 4 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) symlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 7m54.999540561s ago: executing program 3 (id=759): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff7, 0xfffffff7, 0x2, 0xffffffff}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x48, r3, 0x1, 0x0, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) unshare(0x60040200) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000755f3220dd1700555ef3010203010902"], 0x0) r4 = socket(0x2, 0x3, 0xff) sendmmsg(r4, &(0x7f0000000a00)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000400)="f9214360367a9225faca41f336c83fe3bf049ce37c58b464754594c1e96120d8b5a51321", 0x24}], 0x1}}], 0x1, 0x20044840) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x30}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x2c, r1, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20040081}, 0x880) 7m54.212350928s ago: executing program 4 (id=764): futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) cachestat(r4, &(0x7f0000000040)={0x5, 0xfffffffffffff5b3}, &(0x7f0000000080), 0x0) brk(0x5d555ede6000) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x5, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x4, 0x10, 0x6, 0x0, 0x0, 0x5, 0x10, 0x6, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0x4, 0x0, 0x7, 0x4, 0x0, 0x29, 0x3, 0x4b, 0x0, 0xa}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x8, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x2}, {0x0, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfa, 0x80}, {0x8080000, 0xeeee0000, 0xa, 0x6, 0x4, 0x0, 0x68, 0x0, 0x1, 0xf9}, {0x0, 0xdddd0000, 0xa, 0x2, 0x0, 0x1, 0x0, 0x4, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0xeeee8000, 0x0, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x401]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, 0x4}) 7m53.198987104s ago: executing program 3 (id=766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000640)={0xf38, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$NFT_BATCH(r0, 0x0, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, "fc"}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 7m52.730469516s ago: executing program 3 (id=768): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2, r0}, 0xc) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x40000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) recvfrom(r4, &(0x7f0000000140)=""/94, 0x5e, 0x12120, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) truncate(&(0x7f00000004c0)='./file0\x00', 0x100000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x8000000, 0x0, {[{{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xff000000, 0x7fffff7f, 0xff000000], 'veth1_vlan\x00', 'wlan0\x00', {}, {}, 0x3b, 0x6, 0x3, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x0, 0x2}, {0x3, 0x6, 0x3}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000000240)={'vlan1\x00', 0x1}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f000045f000/0x1000)=nil, 0x1000, 0x8, 0x38011, r7, 0x0) sendfile(r7, r7, 0x0, 0x40008) 6m44.396250236s ago: executing program 33 (id=761): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000500)=""/10, 0xa}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000003a40)=""/4091, 0xffb}, {&(0x7f00000015c0)=""/4073, 0xfe9}], 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) fcntl$setpipe(r3, 0x407, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r3, &(0x7f00000003c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x3}}}, 0x90) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_to_hsr\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "7fe64db1ab2b9c792b102378ab0bc29af7d52ea55b7957f96e29977cf7c80a4a", "06849411696d2fdccd6a605e10186f40001a8aa5b30a80dc65da48e32965fbe5", "f60120eaf9ab04b2ba13fba62324c34b0c9491057bdf07ad4bbdd482dfa637fd", "3528b51d2e434d2e8bf55eb1a66163f873a20ca7dc4632ea8fa5d2c4ab0e51f8", "c86f62aca2750aa9d950179f31e92442d356971811454044fb4341541abc4e90", "aca572754ce714a387fe11fe", 0x7, 0x8, 0x4, 0x101, 0x6}}) writev(0xffffffffffffffff, 0x0, 0x0) r6 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000007c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000840)) r8 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x3, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r11, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 6m44.052115146s ago: executing program 34 (id=767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x13, r3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r6, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000000300)={0x15, 0xce, &(0x7f0000000680)="952bb3e006ae9a4c3abdb56502dd8442fe3aba86b34d57f48ef141dc7f78bd7224fd282070feeec1ea0800b98d31cdd5aa1aa0c50dce78638ffe500c828dc62aa9534895a7cd86a80862bf81a5671def9cc90100010078f40f3c4888345f6697c1f1a9b9cd663aedcdcfd5894cc94b2102149956157809abc4b556ed8537a3940748435e25f17251bc4b12ef765b303a7881d9b3745884eebb984ae1f5f033e878940d4dd09de36d63116f96d6791a4640e2300b00d8aba9f10e886bf62041ead200"/206}) ioctl$EVIOCGBITSW(r8, 0x80404525, 0x0) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) splice(r4, 0x0, r7, 0x0, 0x25a5, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001b40)={"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"}) r9 = socket$kcm(0x10, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x19f481, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x5) ioctl$SNDCTL_SEQ_NRSYNTHS(r3, 0x40045109, &(0x7f0000000180)) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfffffffffffffe05, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0xf8) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x1000a, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2], 0x84}, 0x1, 0x0, 0x0, 0x20004004}, 0x40044) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES8=r11, @ANYBLOB="14000100ff01000000000000000000000000000114000600c5"], 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) 6m43.687133797s ago: executing program 35 (id=765): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000fdffffff000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000085000000840000005f0000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000140)={0x0, 0x22, 0x12, {0x12, 0x30, "feb9a9ce98c8e8ad98b6842026060068"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f00000001c0)={0x0, 0x22, 0x16, {[@global=@item_012={0x1, 0x1, 0x6, "c7"}, @global=@item_4={0x3, 0x1, 0x3, "012ff575"}, @main=@item_4={0x3, 0x0, 0x0, "6e6e55cc"}, @global=@item_4={0x3, 0x1, 0x7, "275bede6"}, @main=@item_4={0x3, 0x0, 0xb, "d67026ef"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc, 0x1, 0x1, {0x22, 0x55e}}}}, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x20, 0xf, 0xda, "b7dac4a720fabb68fc864cbc3ecacd4afbf33caafdd8f22a782a5778257dafd8acd281d110690eaf90700e153ff822ab9794aeb16476d5bef82c1ae290e48af711a8136cfa387429be328bba5be9827da0ebd59c73328e4e6b0490a6e92b149354655e0477e7c134485f61fdebe3cd4b15aa495fcd68a3b35b0bbcb588a1a14125e2de7ebbb11acac28d11f618ee4f272df6a07cc899e55c5f12c8388b2e5ab2702f40b7180ab208ef931cff318c42e4b90e44bb0b732fff53ed05d4ab04f6287b107c6bb9f0d589b50c5eb60ced58b048d19bc3b620d849bade"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x68}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x1, 0x91, "92a24713682da7785e3370833629ff8e1e5afb012c5108a9caa89826deee6d1aa7c64014113a648a64992c28349b7291432124095a29792e7a4e885567f8de1ab962170b17e535cc23d6e45d18751ccd72852065ac6b78febd6a78f0a11fcade3e38383394cc184e986b89a758b46ba2869e76cc971da9e79fad6667b54f13d009271d5cae237685b8b31497e63fa63a87"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xff}}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, 0x32, 0x1, 0x1, 0x0, {0x11}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, 0x20}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000fdffffff000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000085000000840000005f0000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000140)={0x0, 0x22, 0x12, {0x12, 0x30, "feb9a9ce98c8e8ad98b6842026060068"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f00000001c0)={0x0, 0x22, 0x16, {[@global=@item_012={0x1, 0x1, 0x6, "c7"}, @global=@item_4={0x3, 0x1, 0x3, "012ff575"}, @main=@item_4={0x3, 0x0, 0x0, "6e6e55cc"}, @global=@item_4={0x3, 0x1, 0x7, "275bede6"}, @main=@item_4={0x3, 0x0, 0xb, "d67026ef"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc, 0x1, 0x1, {0x22, 0x55e}}}}, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x20, 0xf, 0xda, "b7dac4a720fabb68fc864cbc3ecacd4afbf33caafdd8f22a782a5778257dafd8acd281d110690eaf90700e153ff822ab9794aeb16476d5bef82c1ae290e48af711a8136cfa387429be328bba5be9827da0ebd59c73328e4e6b0490a6e92b149354655e0477e7c134485f61fdebe3cd4b15aa495fcd68a3b35b0bbcb588a1a14125e2de7ebbb11acac28d11f618ee4f272df6a07cc899e55c5f12c8388b2e5ab2702f40b7180ab208ef931cff318c42e4b90e44bb0b732fff53ed05d4ab04f6287b107c6bb9f0d589b50c5eb60ced58b048d19bc3b620d849bade"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x68}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x1, 0x91, "92a24713682da7785e3370833629ff8e1e5afb012c5108a9caa89826deee6d1aa7c64014113a648a64992c28349b7291432124095a29792e7a4e885567f8de1ab962170b17e535cc23d6e45d18751ccd72852065ac6b78febd6a78f0a11fcade3e38383394cc184e986b89a758b46ba2869e76cc971da9e79fad6667b54f13d009271d5cae237685b8b31497e63fa63a87"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xff}}) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, 0x32, 0x1, 0x1, 0x0, {0x11}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, 0x20}}, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) 6m43.116854736s ago: executing program 36 (id=768): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2, r0}, 0xc) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x40000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) recvfrom(r4, &(0x7f0000000140)=""/94, 0x5e, 0x12120, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) truncate(&(0x7f00000004c0)='./file0\x00', 0x100000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x8000000, 0x0, {[{{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xff000000, 0x7fffff7f, 0xff000000], 'veth1_vlan\x00', 'wlan0\x00', {}, {}, 0x3b, 0x6, 0x3, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x0, 0x2}, {0x3, 0x6, 0x3}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000000240)={'vlan1\x00', 0x1}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f000045f000/0x1000)=nil, 0x1000, 0x8, 0x38011, r7, 0x0) sendfile(r7, r7, 0x0, 0x40008) 6m38.522892373s ago: executing program 37 (id=764): futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) cachestat(r4, &(0x7f0000000040)={0x5, 0xfffffffffffff5b3}, &(0x7f0000000080), 0x0) brk(0x5d555ede6000) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x5, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x4, 0x10, 0x6, 0x0, 0x0, 0x5, 0x10, 0x6, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0x4, 0x0, 0x7, 0x4, 0x0, 0x29, 0x3, 0x4b, 0x0, 0xa}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x8, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x2}, {0x0, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfa, 0x80}, {0x8080000, 0xeeee0000, 0xa, 0x6, 0x4, 0x0, 0x68, 0x0, 0x1, 0xf9}, {0x0, 0xdddd0000, 0xa, 0x2, 0x0, 0x1, 0x0, 0x4, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0xeeee8000, 0x0, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x401]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, 0x4}) 3m26.413536369s ago: executing program 0 (id=1140): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1}, 0x6e) 3m26.253442584s ago: executing program 0 (id=1141): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000) 3m26.084289147s ago: executing program 0 (id=1142): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xac, "2865b254a704a1efeac5405d5573a53d62e4ab5d80942a877cdcde59afc67ce6c599b7acf9a0e0ab40f6e375fa9214965fa4a025936c85ffdd7c1a5f439f086d6c0361377c1c61f9fc9aad0ac872290fdf8c8ec1f654851f4c7acdd7a5b1717e2c774969c94b93802f43909867c611e22343512db8a06603680548bd0a8acb1f696ec2e84669c9fc2a52d3b9d5abe56ff0336f74fe79d08080f486aa9e1ae40607b2b317e42c8c2a53e69aac"}, &(0x7f0000000100)=0xb4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x7ff, 0x7686, 0xfffffffc, 0x1, 0x40, 0x8, 0x4}, &(0x7f0000000200)=0x9c) (async) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x3, 0xf0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffb6, 0x9, 0x4, 0xfc}, {0x6, 0x24, 0x1a, 0x101, 0x24}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x27, 0xfa, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x4, 0x1}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x7, 0xf2, 0x6, 0x8, 0xa9}, 0x99, &(0x7f0000000300)={0x5, 0xf, 0x99, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x4, 0x0, 0x4d05, [0xffc000, 0xc000, 0x3f, 0xc0c0, 0x3f00]}, @generic={0x74, 0x10, 0x1, "4c245ce280b44484702afa7a6ad956a937cb8978daad7ae02304721328476c164393096bf725a1433e834b75683c92385f576c892ff65fdbc0ebf74cd5d2f8db5906f194138d1a756637869da45b8a8a95b7b7017ee6d70b8aba75f467b7ff81ef3bf267a8c465623052bb4534744a1fc8"}]}, 0x6, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44}}, {0x76, &(0x7f00000004c0)=@string={0x76, 0x3, "6ee44ecb0cea82781bcd317d51d248ffd963090228f56d25bfda35b1ca02635df561e1bc022e064a4bec003edc878015cb85eb97ee77550131eb4c8f4bd42370e9f3e369b32398c709a807ed62896f6decfd8ecd55eca5b92da3fff2e3345c9eab5555df382df6209c3e0222adfd2c39771ecf2f"}}, {0x1c, &(0x7f0000000440)=@string={0x1c, 0x3, "e5f90616f92a3fc37fbc1cd84b10626459a8832fa97821b9abf8"}}, {0x54, &(0x7f0000000540)=@string={0x54, 0x3, "e3872cbe2ba0e61c46d21ea6336c355177aa241edef92c0359613452dce725885713326a9f7da3b41a4f6956c5a8c778a7a0dfa68868c0666707cbf983226042ba06d900d063df21f4683189c1fb55224f70"}}, {0xe8, &(0x7f00000005c0)=@string={0xe8, 0x3, "41207c63db6dadc7ef8b8e12107448d253acbbf3fe80d1fde216905ed45e06b4e80fd382895128297d84c707e023293816ef9f2b1ebed7d40b1ac260373050f79f0fff4eb0ffec3b67d5cb48064cecc3664f99a9a2c01628a94ca647f7359f1d74522f00f06f11df215a7e8c6d32012b565b8d2d87a0cda1b77cb65e22c9b268c72be238376bb6a13d6e699c5d2b795fe8d97a8b17412251cb6c3d4eaae635b46582c62f76af5796aedf869cc883daac2f46bc04bb9759dbb92af0fb71e65ad73cf8568acaa8cd5ed539b5511a98655866a6fbe79ab428fba377d8d69a40c2aaf74d46edaf95"}}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x70bd2b, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0x8f}}, 0x1c}}, 0x0) (async, rerun: 32) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 32) ioctl$EVIOCGMASK(r5, 0x5b02, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) (async) r8 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (async) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r13, &(0x7f0000000180)=ANY=[@ANYRES64=r12], 0x118) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0) (async, rerun: 32) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r13, 0x0, r9}) (async) r14 = dup(r5) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0x0, 0xffffe258, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x12, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}, [@tail_call, @ldst={0x2, 0x1, 0x3, 0x9, 0x0, 0x6, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @tail_call, @map_fd={0x18, 0x3}]}, &(0x7f0000000980)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x1, 0x1, 0x1, 0x8}, 0x10, 0x247fb, 0xffffffffffffffff, 0x9, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, r13, r14, r15], &(0x7f0000000bc0)=[{0x3, 0x1, 0x8}, {0x4, 0x2, 0x7, 0x4}, {0x3, 0x2, 0xe, 0xc}, {0x1, 0x1}, {0x1, 0x4, 0xf, 0xb}, {0x4, 0x4, 0xa, 0xb}, {0x4, 0x1, 0x7}, {0x2, 0x3, 0xd, 0x4}, {0x4, 0x2, 0x1, 0x4}], 0x10, 0x5, @void, @value}, 0x94) tkill(r8, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x0, &(0x7f0000000740)) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r7}]}]}, 0x28}}, 0x0) read$char_usb(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_disconnect(r2) (rerun: 32) 3m24.72327236s ago: executing program 0 (id=1148): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000008}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x8091) r3 = socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x6000, 0x20, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r4, r5) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000600)={0x4, 0x0, [{0x9f6, 0x0, 0x2}, {0xb82, 0x0, 0x7f}, {0x1c8, 0x0, 0x4}, {0x1b0, 0x0, 0x2}]}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000006c0), r2) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000002200)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000021c0)={&(0x7f0000000700)={0x1aa0, r7, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x10e0, 0x8, 0x0, 0x1, [{0x250, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x210, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x6}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}]}, {0xe8c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x250, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4fc, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4d20c3306b8084f4cc4aff85a3265a07a6946cceb60d6320948aa93525de2747"}, @WGPEER_A_ALLOWEDIPS={0x3e4, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @local, 0x7fffffff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x2fc, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffffff}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PEERS={0x988, 0x8, 0x0, 0x1, [{0x334, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x19c, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7fffffff, @mcast1, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "736dd95929070eb09d09560affa46df15cc0c1aa55b6a81b5056ee581af8ec23"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x5f4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20}}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2757a1b474bdbaa3f611611c909b86bd8f77da4a9737f7a28d6d0a67d19507ed"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x488, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xffffffff, @remote, 0x7}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}]}, 0x1aa0}, 0x1, 0x0, 0x0, 0x1}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)=@getnexthop={0x20, 0x6a, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40040a0) fspick(r8, &(0x7f0000002340)='./file0\x00', 0x0) r9 = openat$cgroup_devices(r6, &(0x7f0000002380)='devices.allow\x00', 0x2, 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) ppoll(&(0x7f00000023c0)=[{r9, 0x1084}, {r1, 0x4202}, {r6, 0x60}, {r3, 0xa0cc}, {r10, 0x5}], 0x5, &(0x7f0000002400), &(0x7f0000002440)={[0x1]}, 0x8) r11 = fspick(r6, &(0x7f0000002480)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000002a00)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000029c0)={&(0x7f0000002500)={0x4b8, r0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x1a4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "60a444f3dae81ad6995d00a03d193fc18d3075a2a7"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "c92ea0f8c5545e18cfebe06dc47707beb1862f9735ab"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "449e07b69c6059e5247d21988ce8035e7d0cf12db8711d6f9ae44f517a2b353d21d49d6446caa994009191191385c318542a548dad5f9eac1e3447f2edfdeda2c305aa742d5e17bc30265ce05050ef3050efc144163d6c22605ac46da2d7c699b131de174f568d6231bfec87fcc662158e6892ef80b7d164a2ba2a004c819f170a061e670a6c6b"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "1cea8bac03adc12396885c9a4fd9cc1b81237d4f"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "06a50382b706e84abb1123e854567e94a03a9e986174e29dbbf48c30787254f7197fc1"}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "e694f2ae0ee1bd141d2d4f33df0113f52f25e07c094066"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "79a7a8a50ac2d1214a64e48d00ae0d5d0a696aceb3efa158fbce"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "7cbbe8b293d85c9591209f3ffb9b8fa728c9a6a100044fca1a2d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa8, 0x3, "ec47bc409a06cf28124ada6bab4e4f57422d73dff1561b836beac6bf9057c72e9b04270d46fb0ff275364f96ac318cf3f01c193db80178e5ad4cf11c900206e6a278f184f5f35024c87e3cd21808b31cdf3ff9a8b4676b0361c067c0ce032df242ff2b426f57d3d1f65736d0eee13d45ee3946a4a2ee847468e535f010ed24aa1b6086c1b76c162b275a38abf191d751af983cad1489b7697e83c0dcc753011eeca668e2"}, @TIPC_NLA_NODE_ID={0x32, 0x3, "fc13ae73e6b53b89285598e7b6c97c426f099ccbdf64751e19c2932023be9423419d01f6a7ed50390f1e0297c1de"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000002ac0)={&(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002a80)=[0x0, 0x0], 0x5, 0x0, 0x9c9c9c9c}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000002b40)={&(0x7f0000002b00)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000002c00)={&(0x7f0000002bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000002d40)={0x6, 0x0, &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000002f00)={&(0x7f0000002d80)=[0x0], &(0x7f0000002dc0)=[{}, {}], &(0x7f0000002e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000003000)={&(0x7f0000002f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000003240)={0x1, 0x3, &(0x7f0000002c80)=[r12, r13, r14], &(0x7f0000002cc0)=[0x5], &(0x7f00000031c0)=[r15, r16, 0x0, 0x0, r17, 0x0, 0x0, 0x0], &(0x7f0000003200)=[0x7ff, 0x2, 0x2]}) 3m24.489926009s ago: executing program 0 (id=1149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="99742bbd7000fbdbdf2515"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x0, 0x0, 0x0, 0x0, 0xdf, 0xa, 0x4, 0x0, 0x3}, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x282) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000100)=""/219, 0xdb}], 0x1, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0xa417f, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001500), 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008085) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000880)="340000001a005f0400f9f407000904018000000000000004000000000800020040000000839935e7dfc4a6df20655e90819c0bb7", 0x34) r7 = syz_io_uring_setup(0x2e7f, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x1, 0x112}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffffffffd55, 0x0}) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$char_usb(r10, &(0x7f0000001840)=""/4090, 0xffa) 3m21.550470172s ago: executing program 0 (id=1158): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async, rerun: 32) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) r4 = memfd_secret(0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000000)={0x80, 0x4, 0x4, 0xe05, 0xe3, 0x80}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async, rerun: 64) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/87, 0x57}], 0x1) (async, rerun: 64) fchdir(r5) (async, rerun: 32) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e0072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8bfa541265406c7f306003d8a0f4bd00", [0x0, 0x800]}}) (rerun: 32) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/53, 0x35}, {&(0x7f00000000c0)=""/193, 0xc1}, {&(0x7f0000000040)=""/51, 0x3f}, {&(0x7f0000000240)=""/211, 0xd3}], 0x4, &(0x7f0000000340)=""/214, 0xfd40}, 0x9}], 0x1, 0x22, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x3, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4001) (async) socket$inet(0xa, 0x801, 0x84) syz_io_uring_setup(0x38fe, 0x0, 0x0, 0x0) (async) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f00000004c0)) (async) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905080a1e04f70709090587024000020500"], 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x0, 0x4047701) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x101, 0x8, 0x3f, 0x3202, @vifc_lcl_ifindex=r1, @private=0xa010101}, 0x10) 3m6.355426262s ago: executing program 38 (id=1158): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async, rerun: 32) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) r4 = memfd_secret(0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000000)={0x80, 0x4, 0x4, 0xe05, 0xe3, 0x80}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async, rerun: 64) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/87, 0x57}], 0x1) (async, rerun: 64) fchdir(r5) (async, rerun: 32) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e0072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8bfa541265406c7f306003d8a0f4bd00", [0x0, 0x800]}}) (rerun: 32) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/53, 0x35}, {&(0x7f00000000c0)=""/193, 0xc1}, {&(0x7f0000000040)=""/51, 0x3f}, {&(0x7f0000000240)=""/211, 0xd3}], 0x4, &(0x7f0000000340)=""/214, 0xfd40}, 0x9}], 0x1, 0x22, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x3, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4001) (async) socket$inet(0xa, 0x801, 0x84) syz_io_uring_setup(0x38fe, 0x0, 0x0, 0x0) (async) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f00000004c0)) (async) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905080a1e04f70709090587024000020500"], 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x0, 0x4047701) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x101, 0x8, 0x3f, 0x3202, @vifc_lcl_ifindex=r1, @private=0xa010101}, 0x10) 2m35.907809022s ago: executing program 9 (id=1305): r0 = socket(0x2a, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0xea9d, 0x4, 0xd9d, 0x6, 0x1000}) 2m35.735484322s ago: executing program 9 (id=1306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010035bd7000030000040300000005c9f702f4040002000a0000"], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x40018) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x10) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = dup(r3) r7 = io_uring_setup(0x2d00, &(0x7f0000000140)={0x0, 0xe5d0, 0x0, 0x3, 0x3cc, 0x0, r3}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1}) ioctl$SNDCTL_SEQ_RESETSAMPLES(r6, 0x40045109, &(0x7f00000002c0)=0x3) io_uring_enter(r7, 0x90d, 0x5115, 0xb, &(0x7f0000000080)={[0x3]}, 0x8) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000000)={0xea9, 0x8, 0xca, 0x8, 0x0, "118d14532f9a51a8c2e7def6952170b9fa26ee", 0x7, 0x2}) setns(r6, 0x20000000) write$UHID_INPUT(r6, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac6d70f02ab8e00000010100000006c16eb28b56ec752d52a3d3df23b9aa8178aa8bd4b5ab0989000000ffffffffac1414bb0a0101000a010102e033000160002df1604aa25c5f40307340eff95904597cc310e322da2319eecbc3f5cf"], 0x28) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000001740)={0x1, "acbfdddcdd500f7c1662848d3669eb668ab5f8615647403123410bdf28a41f6c", 0x1}) eventfd2(0x4, 0x0) 2m34.465897507s ago: executing program 9 (id=1307): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2, 0xfffd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x5}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}}, 0x0) dup2(r0, r0) 2m34.17249976s ago: executing program 9 (id=1308): r0 = accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) connect(r0, &(0x7f00000000c0)=@ethernet={0x306, @local}, 0x80) syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x6b63d15d}]}, 0x44}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x4, 0x3}, 0x0) r5 = gettid() add_key(&(0x7f00000003c0)='rxrpc_s\x00', &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121140, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) r7 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "b42c1700000000000000000000001300", 0x38414761}) 2m33.132209475s ago: executing program 9 (id=1314): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4008050) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4008050) unshare(0x2040400) (async) unshare(0x2040400) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x20, &(0x7f0000000440)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket(0x840000000002, 0x3, 0x100) (async) r4 = socket(0x840000000002, 0x3, 0x100) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 2m32.820875725s ago: executing program 9 (id=1317): unshare(0x40020080) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x4c831, 0xffffffffffffffff, 0xd72c000) migrate_pages(0x0, 0x200, 0x0, &(0x7f0000000240)=0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000900020073797a1400000000050004000100000005000100060000001400078008000640000000000800134000000000050005000a00000010000300686173683a69702c6d616300"], 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00'}) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x351031d0fadc178b, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r5, &(0x7f0000004ec0)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x8100, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01032cbd7000fedbdf250000000008000100581d2784006e33aa385b9aed599b004d17b461cb0dae89911fdc11d6b12f1a45ca09895f5bf8a4f3203d0cb11b517284519a6d0d7f6978c0bf1a9c4e65f4519f9a73501e9606fa97bd78f5eef6184055c23c1d2d93892bcf304ad6e200"/125, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x8010400) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000001c0)={0x6, @multicast1, 0x4e20, 0x1, 'lblc\x00', 0x1, 0x6, 0x48}, 0x2c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 2m17.674181873s ago: executing program 39 (id=1317): unshare(0x40020080) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x4c831, 0xffffffffffffffff, 0xd72c000) migrate_pages(0x0, 0x200, 0x0, &(0x7f0000000240)=0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000900020073797a1400000000050004000100000005000100060000001400078008000640000000000800134000000000050005000a00000010000300686173683a69702c6d616300"], 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00'}) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x351031d0fadc178b, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r5, &(0x7f0000004ec0)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x8100, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01032cbd7000fedbdf250000000008000100581d2784006e33aa385b9aed599b004d17b461cb0dae89911fdc11d6b12f1a45ca09895f5bf8a4f3203d0cb11b517284519a6d0d7f6978c0bf1a9c4e65f4519f9a73501e9606fa97bd78f5eef6184055c23c1d2d93892bcf304ad6e200"/125, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x8010400) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000001c0)={0x6, @multicast1, 0x4e20, 0x1, 'lblc\x00', 0x1, 0x6, 0x48}, 0x2c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 54.128579172s ago: executing program 7 (id=1669): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) open(&(0x7f0000000280)='.\x00', 0x80, 0x28) (async) r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r0, 0x402, 0x8000003d) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x7e6a, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f00000001c0)={0x400, 0x1, &(0x7f0000000340)=[r4], &(0x7f0000000180)=[0x1], &(0x7f0000000200), &(0x7f0000000240)}) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) fcntl$setown(r0, 0x8, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4020410) openat$cgroup_ro(r0, &(0x7f0000000240)='memory.swap.current\x00', 0x275a, 0x0) 53.958736605s ago: executing program 7 (id=1671): fcntl$notify(0xffffffffffffffff, 0x402, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 53.03263012s ago: executing program 7 (id=1678): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r10, 0x80585414, &(0x7f0000000140)) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x40) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fddbdf250f00000008000300", @ANYRES32=r9, @ANYBLOB="0500380000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x2, 0x4800) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x3, 0x1000, 0x2c, &(0x7f0000000000)="edfc3b8cd1dd4c4d59d7ea503b15b213b35d41f6c652b9b3a65667491eda3223a8920c23c042e5209ba4c995", 0x13, 0x0, &(0x7f0000000040)="87044e95619b9bf02767785c5ef59599ebefa7"}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r11, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r12}, &(0x7f0000000840), &(0x7f0000000880)=r11}, 0x20) close(r11) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r12, &(0x7f0000000900)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000005600000428bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="833e545778af2a24bbd880eead4793f964b74ed3a2d8b89d65fc7e411958409525294d58e3cab040d12438e3bbf486f9623317f519e604262f90ee1769f31983accb66d312e62ac9c12bf063df58a851fd2e536e79ff8eb15346413935dd75775af011e4c8371ca5382be2998659b861c0ea9d0572786d5a6f8341c6250a5ce9aceaa6590945f5d0f71d3dca1701501904d81354140fa87431bb81788e8c5449554b22130902e650f5abcf"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x44010) 51.157394064s ago: executing program 7 (id=1690): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r1 = syz_open_dev$vim2m(&(0x7f00000005c0), 0xca0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x2, 0x7, {0x77359400}, {0x0, 0x2, 0x0, 0xfe, 0x9, 0x0, "6a77ec24"}, 0x0, 0x1, {0x0}}) 50.968571541s ago: executing program 7 (id=1692): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)) close_range(r0, 0xffffffffffffffff, 0x0) 50.512942594s ago: executing program 7 (id=1695): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) syz_io_uring_setup(0x12bb, &(0x7f0000000080)={0x0, 0x81b, 0x1, 0x2, 0x279, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9", 0x3}], 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x13, 0x80801) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f00000000c0)}) r3 = socket(0x2b, 0x1, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000000000007b8af8ff00000000b7"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000640)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000680)=""/72, 0x48}], 0x1, &(0x7f0000000540)=""/221, 0xdd}, 0xa079}], 0x1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r10, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) read$FUSE(r10, &(0x7f0000005b80)={0x2020}, 0xfd95) ioctl$BTRFS_IOC_ADD_DEV(r9, 0xff08, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 35.452077439s ago: executing program 40 (id=1695): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) syz_io_uring_setup(0x12bb, &(0x7f0000000080)={0x0, 0x81b, 0x1, 0x2, 0x279, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9", 0x3}], 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x13, 0x80801) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f00000000c0)}) r3 = socket(0x2b, 0x1, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000000000007b8af8ff00000000b7"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000640)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000680)=""/72, 0x48}], 0x1, &(0x7f0000000540)=""/221, 0xdd}, 0xa079}], 0x1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r10, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) read$FUSE(r10, &(0x7f0000005b80)={0x2020}, 0xfd95) ioctl$BTRFS_IOC_ADD_DEV(r9, 0xff08, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 12.384587245s ago: executing program 2 (id=1809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x0, 0x1, 0x7ffffffc}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000380)=""/62, 0x3e}, {&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000001a00)=""/222, 0xde}], 0x5, &(0x7f0000000840)=""/2, 0x2}, 0xffff}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000300)=@phonet, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000680)=""/156, 0x9c}, 0x8001}, {{&(0x7f0000000440)=@in, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/2, 0x2}], 0x1, &(0x7f0000000740)=""/218, 0xda}, 0x3}], 0x2, 0x2, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) r8 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000100)={'veth0\x00', 0x42}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x0, 0x5, 0x0, 0x8000000000000001}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xff, 0x2, 0x0, 0x800000000000000}, {0x0, 0x33, 0x0, 0x0, 0x4, 0x5, 0x4, 0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11.348617174s ago: executing program 2 (id=1812): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000010000304000000000000100000000000", @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0xba01}, 0x0) 11.103197601s ago: executing program 2 (id=1813): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(0x0, r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x4001c000}, 0x0) listen(0xffffffffffffffff, 0x8) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x4000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 10.872388455s ago: executing program 1 (id=1815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x7, 0x801}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x60, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x78}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x60}}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x2000}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, &(0x7f0000000040)={0x100, [0x50e, 0x800, 0x3, 0x7f5, 0x4, 0x4, 0x9, 0xc, 0x2, 0x663, 0xad, 0x3, 0x0, 0x2, 0x3, 0x1, 0x8000, 0x1, 0x4, 0x6, 0xfc, 0x5, 0xc, 0x8, 0x4, 0x3, 0x80, 0x8, 0x6, 0x4, 0x1, 0x3, 0x0, 0x800, 0x2, 0x74, 0x9ca, 0xe, 0x2, 0x43a3, 0x2, 0xd, 0x200, 0x0, 0x9, 0x8, 0xd9, 0x9], 0x3}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xffe0, 0xffe0}, {0x0, 0xb}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3a}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220540e9}, 0x80) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000, 0x500}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x7, 0x801}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x60, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x78}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x60}}, 0x40) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x2000}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, &(0x7f0000000040)={0x100, [0x50e, 0x800, 0x3, 0x7f5, 0x4, 0x4, 0x9, 0xc, 0x2, 0x663, 0xad, 0x3, 0x0, 0x2, 0x3, 0x1, 0x8000, 0x1, 0x4, 0x6, 0xfc, 0x5, 0xc, 0x8, 0x4, 0x3, 0x80, 0x8, 0x6, 0x4, 0x1, 0x3, 0x0, 0x800, 0x2, 0x74, 0x9ca, 0xe, 0x2, 0x43a3, 0x2, 0xd, 0x200, 0x0, 0x9, 0x8, 0xd9, 0x9], 0x3}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xffe0, 0xffe0}, {0x0, 0xb}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3a}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220540e9}, 0x80) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000, 0x500}) (async) 10.232474936s ago: executing program 1 (id=1818): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x800, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYBLOB], 0x9) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) clock_gettime(0x4, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) unshare(0x22020600) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x4000000000000005, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f0000000180), r8}) r9 = getpgrp(0x0) syz_pidfd_open(r9, 0x0) 9.03766147s ago: executing program 2 (id=1823): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000600)={0x0, 0x86f7, 0x20000, 0x0, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1, 0x0, 0x5, 0x3, 0x7ff}, 0x400, 0x9, 0x5}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f00000006c0)={{0xffffffffffffffff, 0x400}, {0x65, 0xc0}, 0x8, 0x1}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_open_dev$vbi(&(0x7f0000000680), 0x3, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c1) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000008000440000000000900010073797a30000000000900020073797a3200000000050007402d0000001400000011000100000006000000008000000000000000dacf643f05aa0ce6b63dbd72328b013ce91087cae33ef3855757db9e8372bd1b749cbe6012cb22afc3c16e8254d4aece20bd5ed09c5e7279ac7d198ea652a5b6850a0ad3098ac818a8de448dc3fe66489a220ade249d0a1e5ff2e44f0e632e6db800"/238], 0x80}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)={'sit0\x00', r9, 0x20, 0x7800, 0x7, 0x8, {{0xe, 0x4, 0x3, 0x4, 0x38, 0x67, 0x0, 0x1, 0x4, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x17, 0x3c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}]}, @rr={0x7, 0x7, 0x9b, [@private=0xa010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000140)=0x80000000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_emit_ethernet(0x8f, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000884700000000000000000000000000000000000000000000000000000000000000000101df43394e883ed1879f5f7678e03c0a482c207476f3051ab27cc27114824d680a90c8d9c19a6b7fafbdff2d07dd6a261682f4920053e498f07957a0120b2eb3e567a8b13547a57f71f17bd397f419a4ca17c7e7aa8ad433423de48fc91e81523d6fa5ac3c831c9f2d60d5b3703bc9d366f50b1906ff8663831ad65f008141283f9285f9bd07ea4e33d4c0729865e550a3a6fb785df45ab3b05627e626"], 0x0) 8.908373699s ago: executing program 5 (id=1824): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x4000400) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) close(r1) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)={0x73, 0x2e, '\x00', [@generic={0x0, 0xdc, "417ad70e88737ff193654a1d016c1092016e26c65e6cad3ea30197976f0251547764b136a0862f6cdf09037747b2e12263f5d90c70377a550a3e00ba92b73679ea77543ca996811c5afd3bd695161954d3d9fe33a2622562b680062abb29ee7ff3444b749702b43c41cb070a929e2c344ed4ce067b42f33b8f22aaaff825b24447c3ca36b379fadb9fcee84587c432e6400b1625ff2b0929679ce3a7eca0fce702e3149957ca76c6cce06a7109354265f8e0e206bfe19c285dbfcedcd05ace9b62257197185df2bbc2e1f52074ce0bc0ed642460179737bb68690c94"}, @ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x7fff}, @calipso={0x7, 0x28, {0x3, 0x8, 0x4, 0xd73d, [0x4, 0x2, 0x1, 0xb]}}, @ra={0x5, 0x2, 0x5}, @generic={0x1, 0x5c, "6256d0e45f7c8d4a0d8ef07ec13ff3a14a948313d870f1104790e9f704f9d4155f3590264479bbd0c2008c68eada8afcaa3b882a6f34993f2a39b0983a77d8eea7ad1d888586d44fae48fdb678f6b7aec77d0c9fee72b19e084c6bb3"}]}, 0x180) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004a00030000000000000000000a05"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x10000000}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010000104000000000000000900010000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r9], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) close(0x3) 8.243728427s ago: executing program 5 (id=1825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') preadv(r3, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x111, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 7.84494153s ago: executing program 5 (id=1828): r0 = socket(0x10, 0x803, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1000000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffffc}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x3c}}, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x123001) socket$inet6(0xa, 0x800, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x10ef}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}]}, 0x44}}, 0x44) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_macvtap\x00', &(0x7f0000000300)=@ethtool_stats}) socket$l2tp6(0xa, 0x2, 0x73) 7.834415774s ago: executing program 8 (id=1829): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002000400baacfb276a25ebe4d93aac0d19979f7212adafdb410a3298736a09f57af39f8ec0f6606712e9c849dd3ea40ae50999d3270a627578f296ba8fc3aec66edce39d03acf3616afad8b0"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110011837fb106d0481c2da5c010203012402"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) sendto$inet6(r1, &(0x7f0000000000)="ee", 0x1, 0x40050, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @local, 0x1}, 0x1c) 7.408452861s ago: executing program 5 (id=1830): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x581041) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000fc0)=0x2, 0x4) (async) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="13c6", 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="4800000000000000290000003700000033050000000000000001000104000000000109000000000000000000c910fc00000000000000000000000000001a0103000000000000000038"], 0x80}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9c}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000004c0)="0604347a43be2557dc6de06720df77af663ba951bfa5c84ae7e678cb898870d8f13c2b547ed17d47f4d68be5959d093531e2fe243d72c2402d3c9e06d1b55721438cf42cea083523f8a09f70595d5bad2fdaca94c3fc2d53a2411673e9bae645c572f94731ef1708b2ffc02d17a55e65a5e0fe561ccbb5d4c9a03c5a3d29d894df8beb4b4ad251bdaffb9bf0f4f8c69893e0ea5c89857c1bfa57e21ecb2a3773f904dd6e7d3ceff56089885d9822611bb43d7c4ce9ad382ef94352fb135f56ba34ffc78f0f2bf1c872856202289d79b319b4281cc60e85e7688739fa4bdad2be08", 0xe1}, {&(0x7f00000005c0)="63659fbf67ada579e90ad963fe7ce0a62fb57bb30cb8168afc6c442ec534e72f633a103e5e39c809bbea456d41e98aea096870ac3dddf8012c4b09452c942c50c5db737a9616010776df4f5a0c8db50bea4d9b453236880510f6851e690b", 0x5e}, {&(0x7f0000000640)="daecde3c661dc429cb07959d35baefd888bc24b8b6d71e4f5117e1c58f88ac89b8598954798836a62611cb0a68c7f3fd5524340736c2a13f79378a6bc140b610286065aa516b5249848710bb", 0x4c}, {&(0x7f0000001000)="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", 0x40e}], 0x4}}], 0x2, 0x44) 7.394720063s ago: executing program 2 (id=1831): syz_usb_connect(0x0, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) syz_open_dev$amidi(&(0x7f0000000240), 0x3e0, 0x123c80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) fspick(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1c002fd, [{{0x9, 0x2, 0x48}}]}}, 0xffffffffff600000) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) 7.302494215s ago: executing program 5 (id=1832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) mlock(&(0x7f0000014000/0x1000)=nil, 0x1000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x3, 0x1, 0x0, 0x2000, &(0x7f0000014000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x4c, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x23}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 7.060398659s ago: executing program 5 (id=1833): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x3a, 0xcb, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0x20, 0x2}]}}}]}, 0x3c}}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000180)=0x1, 0x4) r6 = fcntl$dupfd(r2, 0x0, r3) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000280), &(0x7f0000000300)=0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x22, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x80000000, 0x100, 0x1, 0x1, 0x9, 0x3, 0x3, 0xb7, 0x5, 0x1f01, 0x6, 0x3, 0xd, 0x99, 0x0, 0x0, {0x2, 0x6}, 0x1, 0x1}}) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={'vcan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) connect$can_j1939(r4, &(0x7f00000010c0)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0x2, 0xffeb}, {0xe, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x34, 0x12, 0xdbf44c00c5896d57, 0x10000010, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x34}}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5f, 0x82, 0x10, 0x20, 0xae6f, 0x79f4, 0x8f99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x58, 0x42, 0x0, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r10, 0xc04c5349, &(0x7f0000000480)={0x400, 0x40, 0x9}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x3, {0x2, 0xf, 0x4}, 0xfe}, 0x18) 6.659644243s ago: executing program 1 (id=1834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = socket(0x10, 0xa, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000a40)={'syztnl2\x00', r3, 0x29, 0x3, 0x4, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30e) r5 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6) syz_usb_connect(0x2, 0x3d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000033aab94028e8a8ce03500102030109022b00010000f800090478000201039cfd090502020004458306072f880103000009050c"], 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r7, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x100003}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x10000, 0x9, 0x1, "038c82515d07ca21ca86870a14448ca87f12beca42c872ab8de22a008be1ac6d", 0x4c47504a}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd2a, 0x13, {0x1c}, [@HEADER={0x20}]}, 0x97}}, 0x0) 4.958743522s ago: executing program 1 (id=1837): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000440)={0x300, 0x2, 0x800, 0xfffffffffffffffc}) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000140)=@v2={0x2000000, [{0x3475, 0x7}, {0x81, 0x5}]}, 0x14, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2c767e8, 0x4) syz_usb_connect$uac1(0x0, 0x7e, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x1, 0x6, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x1}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x3, 0x3, [0xf, 0x2, 0x9], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xa, 0x2a, 0xf, {0x7, 0x25, 0x1, 0x0, 0x9, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb3, 0x3, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4, 0x401}}}}}}}]}}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket(0x2a, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000140)={0xea9d, 0x4, 0xd9d, 0x6, 0x1000}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a0000000500010006000000140007800800064020000000080013"], 0x64}}, 0x24002800) 4.657265226s ago: executing program 8 (id=1838): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x9, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010"], 0x7c}}, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c28000050006"], 0x48}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) 4.380602669s ago: executing program 8 (id=1839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') preadv(r3, &(0x7f0000000300), 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x111, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 4.060750227s ago: executing program 8 (id=1840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtaction={0x48, 0x32, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000540)={0x14, &(0x7f0000000080)={0x20, 0xe, 0x65, {0x65, 0x14, "a14da89732d5c931e36064f969c875efba21da541d052b12fe1d6ac6462ca9c436b327165c81823420f0a30bb81cc86bdb119742719a2c58e16b0296ce61830b3ca53bfc598bd18881711e27922ad2d0238cf9a14fb2243e01020d5062d23d8285af3f"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000580)={0x0, 0xc, 0xaa, "6070d63f99d67031cd811585caf7c9354cf2d92cc497c59eafb33d48e3e4eb860b7f4736ce461162b9b694259483f7c2aded3abf4aa8c48fb0fec05a9f0e23ec599399d61848d53aab593fa1f3a07fd7a622106a1df20567c4087365d4da954fef3206b8a1903416a0ea6f7bf3634f69d4e8a1717479de5d8cacb0083c85f1e4e3a1663ed47b9018b82673b1a4869999c32bc10c47a46a1dabe17760281308f636816c4a1cc03f9b0074"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000280)={0x20, 0x81, 0x2, "3d81"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "18cf"}, &(0x7f0000000400)={0x20, 0x83, 0x1, '@'}, &(0x7f0000000440)={0x20, 0x84, 0x3, "311399"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "a42dab"}}) 3.299818212s ago: executing program 2 (id=1841): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000440)={0x300, 0x2, 0x800, 0xfffffffffffffffc}) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000140)=@v2={0x2000000, [{0x3475, 0x7}, {0x81, 0x5}]}, 0x14, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0x1, &(0x7f0000000240)=""/201, &(0x7f0000000000)=0xc9) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2c767e8, 0x4) syz_usb_connect$uac1(0x0, 0x7e, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x1, 0x6, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x1}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x3, 0x3, [0xf, 0x2, 0x9], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xa, 0x2a, 0xf, {0x7, 0x25, 0x1, 0x0, 0x9, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb3, 0x3, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4, 0x401}}}}}}}]}}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket(0x2a, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000140)={0xea9d, 0x4, 0xd9d, 0x6, 0x1000}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a0000000500010006000000140007800800064020000000080013"], 0x64}}, 0x24002800) 3.027647256s ago: executing program 6 (id=1842): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000045, [0x2, 0x89ff]}}) (async, rerun: 32) r1 = socket(0x10, 0x80002, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fc"], 0x48}}, 0x0) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000900)={0x7fff, 0x9, 0x1, 0xfffffffe, 0x80}) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.634004216s ago: executing program 6 (id=1843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') preadv(r3, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x111, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 1.70412067s ago: executing program 6 (id=1844): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000080)=0x40, 0x4) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) (async) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000300)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x5, 0x6, 0xa}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000380)="cfe8ca6b5650f12f149ab065dfaf5a38a0bba2a07c99510349d059a3840b03fac9421a6bf55b1845af2728da9046315b60f3248f869fd8833112317f7f7ed2815e362a981878b4307f578a6967d764bce49a65824a3e19210c0dc5e57c6eee54686307c8be323581d1a0cb644f75658b3b208777de7fd2a02b1a236ec09894a415191163d14359f109640f", 0x8b}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000380)="cfe8ca6b5650f12f149ab065dfaf5a38a0bba2a07c99510349d059a3840b03fac9421a6bf55b1845af2728da9046315b60f3248f869fd8833112317f7f7ed2815e362a981878b4307f578a6967d764bce49a65824a3e19210c0dc5e57c6eee54686307c8be323581d1a0cb644f75658b3b208777de7fd2a02b1a236ec09894a415191163d14359f109640f", 0x8b, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000600)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x8}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000600)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000840)={&(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[{}, {}], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], 0x2, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000940)={&(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xdededede}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000b40)={&(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000b40)={&(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000c40)={&(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xe0e0e0e0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000c40)={&(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000e40)={&(0x7f0000000c80)=[0x0, 0x0], &(0x7f0000000cc0)=[{}, {}, {}], &(0x7f0000000dc0)=[0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0], 0x3, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000001140)={&(0x7f0000000ec0)=[0x0], &(0x7f0000000f00)=[{}, {}, {}, {}, {}], &(0x7f0000001080)=[0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000001140)={&(0x7f0000000ec0)=[0x0], &(0x7f0000000f00)=[{}, {}, {}, {}, {}], &(0x7f0000001080)=[0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000001240)={0x0, 0x6, &(0x7f0000000640)=[r2, r3, r4, 0x0, r5, r6], &(0x7f0000000680)=[0x87, 0x0, 0x5, 0xf, 0xfffff298, 0x7, 0x0], &(0x7f00000011c0)=[r7, r8, r9, r10, r11, r12], &(0x7f0000001200)=[0x1ff, 0x7ff, 0x74f07016, 0x3], 0x0, 0x101}) r13 = socket$kcm(0x29, 0x5, 0x0) bind$inet6(r1, &(0x7f0000001280)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) socket$key(0xf, 0x3, 0x2) r14 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000012c0), 0x101a00) ioctl$SNDRV_TIMER_IOCTL_SELECT(r14, 0x40345410, &(0x7f0000001300)={{0x0, 0x0, 0x6}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close(r0) listen(r13, 0xffa) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000001340)={0xd3}, 0x1) (async) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000001340)={0xd3}, 0x1) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) getresuid(&(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400)) (async) getresuid(&(0x7f0000001380)=0x0, &(0x7f00000013c0), &(0x7f0000001400)) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@local, @in=@empty, 0x4e20, 0x0, 0x4e23, 0x6, 0xa, 0x40, 0x100, 0x2f, 0x0, r15}, {0x10, 0x7ec, 0x7f, 0x1, 0x3, 0x5, 0x8000000000000000, 0x10000}, {0x10001, 0x2, 0xc, 0x7191e333}, 0x1, 0x6e6bb9, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x4d6, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3506, 0x4, 0x1, 0x5, 0x8, 0x3}}, 0xe8) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@local, @in=@empty, 0x4e20, 0x0, 0x4e23, 0x6, 0xa, 0x40, 0x100, 0x2f, 0x0, r15}, {0x10, 0x7ec, 0x7f, 0x1, 0x3, 0x5, 0x8000000000000000, 0x10000}, {0x10001, 0x2, 0xc, 0x7191e333}, 0x1, 0x6e6bb9, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x4d6, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3506, 0x4, 0x1, 0x5, 0x8, 0x3}}, 0xe8) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000001580)={0x4, 0x0, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0]}) recvfrom$l2tp6(r1, &(0x7f00000015c0)=""/172, 0xac, 0x40000020, &(0x7f0000001680)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x20) (async) recvfrom$l2tp6(r1, &(0x7f00000015c0)=""/172, 0xac, 0x40000020, &(0x7f0000001680)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x20) 1.392332778s ago: executing program 6 (id=1845): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) (async) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) (async) sendmsg$inet6(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2f6c62fdf406a1a0175bd356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x22}], 0x1}, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f00000000c0), 0x4) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000005400e501020000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="005db3d6ea01000000000000000000000000000186dd00"], 0x38}}, 0x24000040) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x4}, {0x0, 0x3938700}}, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/52, 0x34}, {0x0}], 0x2) (async) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) shmget(0x0, 0x4000, 0x54001208, &(0x7f0000ffc000/0x4000)=nil) (async) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20401, 0x30) writev(r4, &(0x7f00000003c0)=[{&(0x7f00000004c0)='V', 0x1}, {&(0x7f0000000180)="fc", 0x1}], 0x20) (async) writev(r4, &(0x7f0000000f40)=[{&(0x7f0000000ac0)="9523151423a014b012228df76ea0be9e6d374c41fb324d0d640bba86a795cdfaeb89c5793cb50dcc64a276a343472570edf73f032c648da92b6c1afef7b41e55aa8460de94de0a264ad9a7514ffacc86364d8590279061bb1bbc2d4e1ed12a60919f758e41fb48c672f7a88f2d947b746758b6cda7d0890130b04166707f4cac4f3a6c346df72126da9aba0b22bef64239060958fad76922451c4d58abd4892d77a7bb06da6f223ec6fa1414b0aa87b00497e94517dc320729a06ea1172501d68207a71a4b862ade0d5e81298ac4144ce20a51ec9028bd0e35", 0xd9}, {&(0x7f0000000bc0)="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", 0xfc}, {&(0x7f0000000400)="3afea8ab1a236d2f12e96e8f9caf60bd7a2b36c3d86232dbfd9dd85136841d22b522ef78e4102645bea10433a79edcb0cfa0dbe0b7dc927d49c1ad5e0b92fd1829c9db80bb46b9f5f2975bc6d7df31ab07df4bf9f03c765363750c28286ca8d4a106f807c1a22ffec340945b27e4f01152b6cfc2714ea111f4064d975b329118c27ed7b8d20a2e83ab07fbdc4f735322a3d10fc3e300cb2b017c8b4581b5a3cd95dbb201dac81f5f42f9eda6f70d7ac457d7982b01", 0xb5}, {&(0x7f0000000cc0)="9769c8a6da0a1bd0d09e2709fa68abf0c061c6bf1d1f83e0f05a00bac4304e690e0136052da8aa826f5e9e294d07ec64fe615a374700950dbbd2ebf991f9883bcdf4cace76d45fb445f28e674bc0188d4bfac560441338fbd8f9f4ebe4212dc52aea5391d5b9fcb8684fb5643a801d39b66dbf1617319832d260aa9f7d7cfa6c5d9bd40b5c480d7dc8f5a2b163bf83adc9d0eb8b6c691327a2eddd2762c598a5861a5569fb33ab2e9db5b2814de53e4dde718e63649e8631d15aa1d1708349516e0fa92053b4435658a85c6737d13920ae3b5fed8d53b63c52c44a25b87a3438b33c08dcd3a4b89082ac", 0xea}, {&(0x7f0000000dc0)="232c19d3c988ee244dfa659484877b0e655c6a235383981784b90e2b2b194a55f0d334a61a50b7188adbbea6aedb0e226af112d6ec9f17854854b43115d0c93aae3699a7461de0ee7496f167764dde83330d3043d9f3c43a6813258175e6ab1378648e76caa468cf48ad4abdf94273b25cec9b4ae5cd0b3cd3b4972f0c86d6b4be079e9973fc3f0e090a892d310c1ddb103c834a2742c80395bed6a157894b71eba11eac2ae1f929aa1c80bf83f0275cbc9c", 0xb2}, {&(0x7f0000000140)=':d\t', 0x3}, {&(0x7f0000000280)="254b99f74bd0f5aa8ef4a9f1195cf02659d4798be37fc03bebb7c3c5e882c13b54c1d386e196c908f3734251be306512f733881343ca4f82e15b9a6a7f8b6bdf052d44056c726f26cf0e02dfbb", 0x4d}, {&(0x7f0000000e80)="70cda6864029768f8fdff1b15bcd229b6c8d8c491e3e641faab7afaa7d07950bc5fbed8b99f601c73af4b2ace9a9a29e3d7e66ae1950ed9d1ad1c9ee8bd96bf88641d9b3ca05d93716328c9e9691412ccc1a7727a6a2925029307fead2b42d6bfd1aa0e7636d62fbf73e707f72ea187de9e5033ddc5e4dacfc11a5eb2bc0b3a4f130c64a070328169fd07829e7b98c79e8cc5a5925c7743be4a45e89c898a379a98d501a45fa266f1277f958ce885f61734eea3be8744ae88117647f774158", 0xbf}], 0x8) (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00') lseek(r5, 0x2000, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0xe8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000300), {[{{@arp={@multicast2, @rand_addr=0x64010100, 0xffffffff, 0xffffff00, 0x9, 0x10, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0xb8, 0x74ab, 0xae2c, 0x1, 0x7, 'gretap0\x00', 'erspan0\x00', {0xff}, {}, 0x0, 0x43c}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @remote, @empty, 0x1}}}, {{@arp={@multicast1, @private=0xa010102, 0xffff00, 0x0, 0x3, 0xd, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x6, 0xbf, 0x5, 0xfff7, 0x4, 0x8, 'bond0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) write$P9_ROPEN(r4, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x40, 0x2, 0x2}, 0xe}}, 0x18) 1.002506842s ago: executing program 1 (id=1846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000b40)={0x3000, 0xa000, 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000019580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r4, 0x24, &(0x7f0000000300)={0x1, 0x0, 0x215, 0x7, r5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003780)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x800) 895.891814ms ago: executing program 8 (id=1847): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x20, 0x1, 0x3, "000000000000000405f126f8454ad22d00", 0x20363059}) close_range(r0, 0xffffffffffffffff, 0x0) 552.042591ms ago: executing program 1 (id=1848): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'pimreg\x00', {0x2, 0x0, @local}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x41, 0x8e, 0x9, 0x2, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x4, 0x3}}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r1, 0x2f, 0x9, 0xa, 0xe5, 0x4, @empty, @remote, 0x1, 0x80, 0xf, 0xfff}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x27c, 0x5}}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000280)={0xa0000015}) r3 = socket$inet(0x2, 0x80000, 0x7) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000002c0)={'icmp\x00'}, &(0x7f0000000300)=0x1e) r4 = socket$netlink(0x10, 0x3, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80401, 0x0) fsetxattr(r5, &(0x7f0000000380)=@random={'trusted.', 'syztnl0\x00'}, &(0x7f00000003c0)='icmp\x00', 0x5, 0x2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000440)=0x7e46ec71, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f00000008c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xd0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x93, 0x7, 0x1, 0x0, "8ab95765c094647574d7a91c9f9cd30f995f3398c14a3bc9827f006ea8c547fccaff6d44eac5d2db677feef6944f90183ea5cf93853c05fedc1c668d2e060bad17c2bf14e1dd2d6158379fcbdfbb02e23895ffbd7216e03c8a4ecf84391e9025895223fd5b0b4baa731ee2fbfeba641c787eacbfcc424d99ad762b74e598be8ae47a71863c339c91d4eb6ce63c5357"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSETELEM={0x54, 0xe, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x100, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x80, 0xc, "844f586d5e978ab74c720dc086b05e4138d645d7e900e8848277ae9a9fbadb70121d572ee340b009891a009618883d65da75621355e46c1febfcb91d59e56f35ab8742e844e8ae4f8bef5718b157d1fe351bfdbf06319fe27ab681ba8fdf2a3be11a2010ac10f2681200eff95e5cfc35d94358b5b65140bae043d0d7"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x3c, 0xc, "386a1f6203d123d1e9a6d4d4e99289d5d4cfc5fa0953590c034f7c7505f8eab233c23e528a2d88dbe5088308d0c2462c66329352a55ef736"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0xfc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x94, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x71ddd112}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x72b}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x384}, 0x1, 0x0, 0x0, 0x80}, 0x22000084) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000940)={0x0, 0xfff7, 0x1, [0x5]}, &(0x7f0000000980)=0xa) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000009c0)={r9, 0x1, 0x4, 0x0, 0x4, 0xffffffbc}, 0x14) sendto$inet(r5, &(0x7f0000000a00)="5889132902b3c0ad9b8b497d81790bd7212e4cadc5fe400a2dafd73df29c18c1a31f2ad1", 0x24, 0x20044004, 0x0, 0x0) shutdown(r4, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000e00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x28c, r10, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c7325523f2c1094f49c9803ef810d8e372a740a6e9611a8b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "24dfb2ea8380416264ed45b18c12efad22e4435f65ce7cc1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5d8a15c0ce938947e70c94ef5713dbcc9007abb94b65f440"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "982806dc56960fa6ca27b5db92f5abeb9a55fb0148ddc01e"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4fc14878ab5a830d382f281107bbc7994b90b5a8119ba349"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "331a2aadc34584e0828b192384a281f3c0c217c390c98869"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "abd833193f762ec926711e7f6f7c5c368894e47e053bdad7"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3851a3641f8674f5de28e5783ac65b7651964f7c184dcc7c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f146ec623eceaf10c578cbcc891e77485561ded44ad9f78e"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x28c}, 0x1, 0x0, 0x0, 0x41}, 0x4) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x5, [@enum64={0x6, 0x5, 0x0, 0x13, 0x1, 0x2, [{0xf, 0x6, 0xc}, {0x2, 0x1ff, 0x60000}, {0x5, 0x5, 0x8}, {0xa, 0xfffff78d, 0x7}, {0x6, 0x4, 0x7}]}, @const={0xe, 0x0, 0x0, 0xa, 0x3}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x74, 0x0, 0x1d, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x1}, @func={0x9, 0x0, 0x0, 0xc, 0x2}, @fwd={0x9}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x30, 0x0]}}, &(0x7f0000001100)=""/19, 0xdd, 0x13, 0x0, 0x9, 0x0, @void, @value}, 0x28) r13 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000011c0), 0x4100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xe, &(0x7f0000000e40)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x1, 0x2, 0x1, 0x1, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @ldst={0x2, 0x3, 0x1, 0x1, 0x0, 0x10}, @jmp={0x5, 0x0, 0xd, 0x5, 0x565d664ffe99a860, 0x18, 0xfffffffffffffff0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @generic={0x2, 0x2, 0x6, 0x7, 0xffffff7f}, @alu={0x7, 0x0, 0xf, 0x9, 0x1, 0x0, 0xfffffffffffffff0}], &(0x7f0000000ec0)='GPL\x00', 0xffffffe0, 0xc3, &(0x7f0000000f00)=""/195, 0x40f00, 0x8, '\x00', r7, @sched_cls=0x36, r12, 0x8, &(0x7f0000001180)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r13, 0x8, &(0x7f0000001200)=[r8, r8, r8], &(0x7f0000001240)=[{0x5, 0x3, 0x10, 0x5}, {0x2, 0x5, 0xe, 0xc}, {0x5, 0x2, 0x9, 0x6}, {0x7, 0x2, 0x8, 0x5}, {0x5, 0x0, 0x8, 0x2}, {0x3, 0x5, 0x3, 0x8}, {0x2, 0x2, 0xb}, {0x3, 0x2, 0xf, 0x1}], 0x10, 0x100, @void, @value}, 0x94) r14 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001380), 0xa400, 0x0) landlock_restrict_self(r14, 0x4) 508.933033ms ago: executing program 6 (id=1849): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x718801) (async) r1 = socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$kcm(0x11, 0x2, 0x0) (async) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) (async) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000500)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}) (async) r10 = socket(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x803, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="00ed34", 0x3}], 0x1}, 0x4) (async) ioctl$SIOCSIFHWADDR(r13, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) (async) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) (async) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00', 0x2) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0x8}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x10000], [], [0x0, 0x3, 0x400000006, 0x101]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000004c0)={r9}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r16}) 337.14606ms ago: executing program 8 (id=1850): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x21110, r1, 0xc5deb000) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000f8ca44dfaa000000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000002152000000000ac061ca7baa2", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000003020000b68c52d2be3c0d90"], 0x48}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x18, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000440)={0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="bfddc898c757e4d7"], 0x0, 0x0}) syz_clone(0x630051c0, 0x0, 0x22, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) io_uring_setup(0x6c39, &(0x7f0000000780)={0x0, 0x1bb8, 0x80, 0x1, 0x26, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000180)) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000140)={0x80}, 0x4) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x4) 0s ago: executing program 6 (id=1851): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x43, 0x0, 0x80000000, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x7800, 0x40, 0x7, 0x200}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x240, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa4, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0xffbc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x108, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x240}, 0x1, 0x0, 0x0, 0x80}, 0xc1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x149080, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x13, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="000000000000000085100000faffffff180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000085100000faffffff"], &(0x7f0000000240)='syzkaller\x00', 0x2000000, 0xf2, &(0x7f0000000380)=""/242, 0x41000, 0x0, '\x00', r0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000480)=[{0x4, 0x1, 0xf, 0x2}, {0x4, 0x1, 0x5, 0xa}, {0x2, 0x5, 0x5, 0x5}], 0x10, 0xb5, @void, @value}, 0x94) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0) (async) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, 0x0}, 0x108) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2}, {r6, 0xd}, {r7, 0x60}, {r8, 0x8204}, {r5, 0x4}, {0xffffffffffffffff, 0x6000}], 0x6, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={[0x8]}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @pic={0x1, 0xfb, 0xc, 0x3, 0x6, 0x3, 0x4, 0x6, 0xfd, 0x8, 0x4, 0xe4, 0x0, 0x3, 0x7f, 0x3}}) (async) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @pic={0x1, 0xfb, 0xc, 0x3, 0x6, 0x3, 0x4, 0x6, 0xfd, 0x8, 0x4, 0xe4, 0x0, 0x3, 0x7f, 0x3}}) socket$inet_sctp(0x2, 0x1, 0x84) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e21, 0xffffff81, @mcast1, 0x5}}, 0x7a, 0x5, 0xfff, 0xc}, &(0x7f0000000380)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000003c0)={r11, @in6={{0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7fffffff}}, 0x26, 0xff, 0x1b36, 0x6, 0x18, 0xffff, 0x9}, 0x9c) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000240001240000000", @ANYRES32=r12, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000580)={0x1, 0x100, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@jmp={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(r2, &(0x7f0000000900)='./file0\x00', 0x90000, 0x102) (async) openat(r2, &(0x7f0000000900)='./file0\x00', 0x90000, 0x102) kernel console output (not intermixed with test programs): egasus_irq - nonzero urb status received: -71 [ 832.693317][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.700498][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.707687][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.715123][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.722275][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.729446][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.736617][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.743768][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.751156][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.758326][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.765546][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.772688][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.780097][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.787279][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.794487][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.801662][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.809082][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.816260][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.823422][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.830601][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.837971][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.845150][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.852290][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.859458][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.866802][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.873984][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.881204][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.888381][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.895784][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.902942][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.910115][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.917294][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.924742][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.931913][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.939110][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.946309][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.953480][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.960907][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.968102][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.975307][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.982474][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.989871][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 832.997080][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.004244][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.011382][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.018750][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.025948][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.033107][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.040289][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.047678][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.054842][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.061997][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.069179][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.076666][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.083831][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.090995][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.098200][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.105615][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.112825][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.120028][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.127222][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.134663][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.141825][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.149015][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.156188][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.163345][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.170744][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.177944][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.185124][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.192278][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.199729][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.206929][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.214144][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.221298][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.228711][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.235881][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.243055][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.250248][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.257664][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.264943][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.272108][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.279285][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.286667][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.293812][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.300976][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.308146][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.315512][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.322665][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.329840][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.337034][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.344447][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.351590][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.358761][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.365989][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.373151][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.380570][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.387741][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.394991][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.402134][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.409501][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.416669][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.423810][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.430989][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.439272][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.446515][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.453683][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.460895][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.468319][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.475549][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.482696][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.489874][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.497287][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.504459][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.511610][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.518892][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.526293][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.533470][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.540655][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.547840][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.554200][ T5187] usb 8-1: control msg error: -110 [ 833.555400][ C0] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.567586][ C0] usb 8-1: pegasus_irq - usb_submit_urb failed with result -1 [ 833.685404][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.693172][ T5187] usb 8-1: control msg error: -32 [ 833.699094][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.699377][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.699675][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.699879][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.700120][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.700422][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.700682][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.700948][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.701272][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.701634][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.710192][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.717727][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.725247][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.739894][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.747467][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.754818][ T9] usb 9-1: reset high-speed USB device number 35 using dummy_hcd [ 833.755211][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.830814][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.839436][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.847039][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.854608][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.862272][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.869795][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.878750][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.894432][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.902737][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.910364][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.917687][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.925118][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.932902][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.940597][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.948291][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.956007][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.963397][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.970722][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.978225][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.986096][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 833.994902][ C1] usb 8-1: pegasus_irq - urb shutting down with status: -2 [ 834.041593][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.049246][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.065323][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.073045][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.080857][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.088787][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.094432][ T9] usb 9-1: device descriptor read/64, error -32 [ 834.096622][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.109859][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.117519][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.124986][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.132452][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.139846][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.147292][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.154688][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.162018][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.169366][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.176707][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.184025][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.191376][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.198700][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.206059][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.213407][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.220930][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.228457][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.236014][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.243356][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.250790][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.258175][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.265578][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.272918][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.281692][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.284038][ T9857] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 834.291306][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.304203][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.311557][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.318893][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.326253][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.333573][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.336416][ T9] usb 9-1: reset high-speed USB device number 35 using dummy_hcd [ 834.340944][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.355835][ T978] usb 8-1: USB disconnect, device number 58 [ 834.362597][ C1] usb 8-1: pegasus_irq - nonzero urb status received: -71 [ 834.369724][ C1] usb 8-1: pegasus_irq - usb_submit_urb failed with result -19 [ 834.394480][ T5187] usb 8-1: control msg error: -71 [ 834.405029][ T9258] usb 6-1: config 0 descriptor?? [ 834.463543][ T9258] usb 6-1: can't set config #0, error -71 [ 834.470035][ T5202] Dev loop8: unable to read RDB block 1 [ 834.495724][ T5202] loop8: unable to read partition table [ 834.501620][ T5202] loop8: partition table beyond EOD, truncated [ 834.519868][ T9258] usb 6-1: USB disconnect, device number 23 [ 834.569618][ T9857] usb 2-1: Using ep0 maxpacket: 8 [ 834.589380][ T9857] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 834.610006][ T9857] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 834.662196][ T9857] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 834.759217][ T9857] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 834.789786][ T9857] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 834.819632][ T9857] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 834.847812][ T9857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.964726][ T978] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 834.984172][ T9258] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 835.114909][ T9857] usb 2-1: usb_control_msg returned -32 [ 835.120550][ T9857] usbtmc 2-1:16.0: can't read capabilities [ 835.177226][ T978] usb 8-1: Using ep0 maxpacket: 8 [ 835.188186][ T9258] usb 6-1: config 0 has no interfaces? [ 835.200266][ T9258] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 835.229095][ T978] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 835.236316][ T9271] usb 9-1: USB disconnect, device number 35 [ 835.285511][ T9258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.293491][ T978] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 835.318067][ T9258] usb 6-1: Product: syz [ 835.322243][ T9258] usb 6-1: Manufacturer: syz [ 835.351583][ T9258] usb 6-1: SerialNumber: syz [ 835.370839][ T978] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 835.383876][ T9258] usb 6-1: config 0 descriptor?? [ 835.460046][ T978] usb 8-1: config 250 has no interface number 0 [ 835.497143][ T978] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 835.584914][ T978] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 835.660626][ T978] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 835.684078][ T978] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 835.731951][ T978] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 835.780261][ T978] usb 8-1: config 250 interface 228 has no altsetting 0 [ 835.860778][ T978] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 835.883502][ T978] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 835.894377][ T978] usb 8-1: Product: syz [ 835.898619][ T978] usb 8-1: SerialNumber: syz [ 835.916555][ T5202] Dev loop8: unable to read RDB block 1 [ 836.023409][T14518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.060117][ T978] hub 8-1:250.228: bad descriptor, ignoring hub [ 836.067028][ T5202] loop8: unable to read partition table [ 836.096229][ T5202] loop8: partition table beyond EOD, truncated [ 836.113381][ T978] hub 8-1:250.228: probe with driver hub failed with error -5 [ 836.178672][ T9258] usb 6-1: USB disconnect, device number 24 [ 836.260513][ T978] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 59 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 836.280781][ T5202] Dev loop8: unable to read RDB block 1 [ 836.312663][ T5202] loop8: unable to read partition table [ 836.346019][ T5202] loop8: partition table beyond EOD, truncated [ 836.523239][T14545] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1537'. [ 836.559021][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1537'. [ 836.644487][ T9258] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 836.695245][ T978] usb 8-1: USB disconnect, device number 59 [ 836.732104][ T978] usblp0: removed [ 836.807061][ T9258] usb 9-1: config 0 has no interfaces? [ 836.857281][ T9258] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 836.932045][ T9258] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.959607][ T978] usb 2-1: USB disconnect, device number 77 [ 837.022721][ T9258] usb 9-1: Product: syz [ 837.052049][ T9258] usb 9-1: Manufacturer: syz [ 837.060344][ T9258] usb 9-1: SerialNumber: syz [ 837.107332][ T9258] usb 9-1: config 0 descriptor?? [ 837.320046][T14543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.331383][T14564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1546'. [ 837.344382][T14543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.377069][T14564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1546'. [ 837.409498][T14567] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1548'. [ 837.482762][ T30] audit: type=1326 audit(1748157479.537:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14565 comm="syz.6.1548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe30998e969 code=0x0 [ 837.611130][T14558] netlink: 'syz.5.1544': attribute type 29 has an invalid length. [ 837.628646][T14558] netlink: 'syz.5.1544': attribute type 29 has an invalid length. [ 837.661850][T14558] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1544'. [ 837.684788][ T9304] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 837.879340][ T9304] usb 8-1: Using ep0 maxpacket: 16 [ 838.612203][T14591] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 838.618752][T14591] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 838.671080][T14591] vhci_hcd vhci_hcd.0: Device attached [ 838.676777][T14596] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 838.683397][T14596] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 838.696340][T14596] vhci_hcd vhci_hcd.0: Device attached [ 838.708268][T14591] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 838.743190][T14591] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 838.749819][T14591] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 838.762693][T14591] vhci_hcd vhci_hcd.0: Device attached [ 838.779200][T14591] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16) [ 838.785825][T14591] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 838.805489][T14591] vhci_hcd vhci_hcd.0: Device attached [ 838.819454][T14591] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(18) [ 838.826082][T14591] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 838.836668][T14591] vhci_hcd vhci_hcd.0: Device attached [ 838.844155][ T9258] vhci_hcd: vhci_device speed not set [ 838.856155][T14591] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 838.881355][T14591] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 838.898567][T14591] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 838.907155][ T9258] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 838.907197][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 839.076252][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.086993][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 839.099668][ T24] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 839.114644][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 839.122923][ T24] usb 6-1: SerialNumber: syz [ 839.178131][T14603] vhci_hcd: connection closed [ 839.178677][ T9035] vhci_hcd: stop threads [ 839.180532][T14597] vhci_hcd: connection closed [ 839.195572][T14599] vhci_hcd: connection closed [ 839.200285][T14601] vhci_hcd: connection closed [ 839.206973][T14594] vhci_hcd: connection reset by peer [ 839.240542][ T9035] vhci_hcd: release socket [ 839.249226][ T9035] vhci_hcd: disconnect device [ 839.264406][ T9035] vhci_hcd: stop threads [ 839.273284][ T9035] vhci_hcd: release socket [ 839.288504][ T9035] vhci_hcd: disconnect device [ 839.293815][ T9035] vhci_hcd: stop threads [ 839.305440][ T9035] vhci_hcd: release socket [ 839.313372][ T9035] vhci_hcd: disconnect device [ 839.327015][ T9035] vhci_hcd: stop threads [ 839.332598][ T9035] vhci_hcd: release socket [ 839.340566][ T9035] vhci_hcd: disconnect device [ 839.349806][ T9035] vhci_hcd: stop threads [ 839.359944][ T9035] vhci_hcd: release socket [ 839.369323][ T9035] vhci_hcd: disconnect device [ 839.407362][ T9857] usb 9-1: USB disconnect, device number 36 [ 839.441623][ T5202] Dev loop8: unable to read RDB block 1 [ 839.449302][ T5202] loop8: unable to read partition table [ 839.460765][ T5202] loop8: partition table beyond EOD, truncated [ 839.864891][ T24] usb 6-1: 0:2 : does not exist [ 839.884574][ T9857] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 839.890572][ T24] usb 6-1: USB disconnect, device number 25 [ 839.984657][T14619] loop6: detected capacity change from 0 to 7 [ 840.037842][T12258] udevd[12258]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 840.066062][ T9857] usb 9-1: Using ep0 maxpacket: 8 [ 840.087529][T14619] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 840.092957][T14619] loop6: partition table partially beyond EOD, truncated [ 840.100847][T14619] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 840.127683][ T9857] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 840.135867][ T9857] usb 9-1: config 0 has no interface number 0 [ 840.141987][ T9857] usb 9-1: config 0 interface 12 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 840.153467][ T9857] usb 9-1: config 0 interface 12 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 840.199883][ T9857] usb 9-1: config 0 interface 12 altsetting 0 endpoint 0x88 has invalid maxpacket 10453, setting to 1024 [ 840.221070][ T9857] usb 9-1: config 0 interface 12 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 840.253893][ T9857] usb 9-1: config 0 interface 12 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 840.278033][ T9857] usb 9-1: config 0 interface 12 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 840.311481][ T9857] usb 9-1: New USB device found, idVendor=1066, idProduct=0700, bcdDevice=60.6a [ 840.322300][ T9857] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.331007][ T9857] usb 9-1: Product: syz [ 840.338736][ T9857] usb 9-1: Manufacturer: syz [ 840.350280][ T9857] usb 9-1: SerialNumber: syz [ 840.363608][ T9857] usb 9-1: config 0 descriptor?? [ 840.375448][T14609] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 840.383152][T14609] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 840.402070][ T9857] ipaq 9-1:0.12: PocketPC PDA converter detected [ 840.409692][ T9857] usb 9-1: active config #0 != 1 ?? [ 840.618639][ T9857] usb 9-1: USB disconnect, device number 37 [ 840.765583][ T9304] usb 8-1: unable to get BOS descriptor or descriptor too short [ 840.846037][ T9304] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 840.853651][ T9304] usb 8-1: can't read configurations, error -71 [ 841.309212][ T5202] Dev loop8: unable to read RDB block 1 [ 841.330505][ T5202] loop8: unable to read partition table [ 841.350500][ T5202] loop8: partition table beyond EOD, truncated [ 841.467325][ T5202] Dev loop8: unable to read RDB block 1 [ 841.481433][ T5202] loop8: unable to read partition table [ 841.488654][ T5202] loop8: partition table beyond EOD, truncated [ 841.656720][T14657] bridge0: port 3(netdevsim0) entered blocking state [ 841.675087][T14657] bridge0: port 3(netdevsim0) entered disabled state [ 841.894116][ T9857] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 841.902581][ T9] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 842.055742][T14660] netlink: 'syz.7.1568': attribute type 29 has an invalid length. [ 842.067003][T14660] netlink: 'syz.7.1568': attribute type 29 has an invalid length. [ 842.074230][ T9857] usb 2-1: Using ep0 maxpacket: 32 [ 842.086345][ T9857] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 842.088263][T14660] netlink: 500 bytes leftover after parsing attributes in process `syz.7.1568'. [ 842.121281][ T9] usb 9-1: config 0 interface 0 altsetting 128 bulk endpoint 0xB has invalid maxpacket 1023 [ 842.134163][ T9857] usb 2-1: config 0 has no interface number 0 [ 842.140630][ T9] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x6 has an invalid bInterval 209, changing to 11 [ 842.152749][ T9857] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 842.165875][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 842.172815][ T9857] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 842.184715][ T9] usb 9-1: New USB device found, idVendor=0451, idProduct=f430, bcdDevice=42.7a [ 842.194399][ T9857] usb 2-1: config 0 interface 126 has no altsetting 0 [ 842.201479][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.215261][ T9857] usb 2-1: New USB device found, idVendor=09ad, idProduct=0311, bcdDevice=b0.1c [ 842.226026][ T9857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.235388][ T9857] usb 2-1: Product: syz [ 842.239831][ T9857] usb 2-1: Manufacturer: syz [ 842.246560][ T9] usb 9-1: config 0 descriptor?? [ 842.255408][T14656] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 842.273671][ T9] ti_usb_3410_5052 9-1:0.0: TI USB 3410 1 port adapter converter detected [ 842.285811][ T9857] usb 2-1: SerialNumber: syz [ 842.294423][ T9271] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 842.305512][ T9] ti_usb_3410_5052 9-1:0.0: missing endpoints [ 842.314886][ T9857] usb 2-1: config 0 descriptor?? [ 842.330592][T14655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 842.338789][T14655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 842.485173][ T9] usb 9-1: USB disconnect, device number 38 [ 842.524848][ T9271] usb 7-1: device descriptor read/64, error -71 [ 842.764109][ T9271] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 842.844057][ T9858] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 842.897179][ T9271] usb 7-1: device descriptor read/64, error -71 [ 843.003509][ T5202] Dev loop8: unable to read RDB block 1 [ 843.010576][ T9271] usb usb7-port1: attempt power cycle [ 843.016595][ T5202] loop8: unable to read partition table [ 843.022488][ T5202] loop8: partition table beyond EOD, truncated [ 843.038077][ T9858] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 843.054077][ T9858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.069818][ T9858] usb 8-1: Product: syz [ 843.074785][ T9858] usb 8-1: Manufacturer: syz [ 843.079428][ T9858] usb 8-1: SerialNumber: syz [ 843.087517][ T9858] usb 8-1: config 0 descriptor?? [ 843.096669][ T9858] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 843.136216][T14680] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1574'. [ 843.180029][ T5202] Dev loop8: unable to read RDB block 1 [ 843.186289][ T5202] loop8: unable to read partition table [ 843.192188][ T5202] loop8: partition table beyond EOD, truncated [ 843.216919][ T9304] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 843.304799][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.316118][ T5202] Dev loop8: unable to read RDB block 1 [ 843.319112][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.321741][ T5202] loop8: unable to read partition table [ 843.338198][ T5202] loop8: partition table beyond EOD, truncated [ 843.374716][ T9304] usb 6-1: Using ep0 maxpacket: 8 [ 843.384560][ T9271] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 843.386282][ T9304] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 843.407200][ T9304] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 843.407449][ T9271] usb 7-1: device descriptor read/8, error -71 [ 843.421188][ T9304] usb 6-1: language id specifier not provided by device, defaulting to English [ 843.434900][ T9304] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.446521][ T9304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.456470][ T9304] usb 6-1: Product: syz [ 843.460677][ T9304] usb 6-1: Manufacturer: 뇎冮Ꙝ푿႞锂ᙇ灡槦㈮飜빛㴮升Ⴄ荎˔⤊ᢎ稚鄞쭘耲㻨삺앹ꨨ鈦뚕湜萺뒛ꇉ摒툔욼蚈鹀樚蛁﹃뺐ᏪƲ㼘軇⠾尬콜ღ⏻㌎ᗨ鳉ꐤ㱉⵻ꐄ챮辳昍桘儬۲㪉፴櫼厚⦄Ⲽ浆捈숙뛮擅㡂化沤fl먻哈씏ᄙ򢚹 [ 843.491854][ T9304] usb 6-1: SerialNumber: syz [ 843.580642][T14687] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 843.712905][ T9304] cdc_ncm 6-1:1.0: bind() failure [ 843.716927][ T9271] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 843.727160][ T9304] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 843.742962][ T9304] cdc_ncm 6-1:1.1: bind() failure [ 843.751091][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.760342][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.770928][ T9271] usb 7-1: device descriptor read/8, error -71 [ 843.788326][ T9304] usb 6-1: USB disconnect, device number 26 [ 843.884673][ T9271] usb usb7-port1: unable to enumerate USB device [ 844.054484][ T9258] vhci_hcd: vhci_device speed not set [ 844.180564][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.190571][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.328254][ T5202] Dev loop8: unable to read RDB block 1 [ 844.336307][ T5202] loop8: unable to read partition table [ 844.345609][ T5202] loop8: partition table beyond EOD, truncated [ 844.520852][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1580'. [ 844.532313][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1580'. [ 844.542023][T14697] netlink: 'syz.5.1580': attribute type 7 has an invalid length. [ 844.623725][ T9271] usb 2-1: USB disconnect, device number 78 [ 844.714090][ T9304] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 844.803852][ T9858] gspca_sunplus: reg_r err -71 [ 844.813294][ T9858] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 844.838869][ T9858] usb 8-1: USB disconnect, device number 62 [ 844.874058][ T9304] usb 9-1: Using ep0 maxpacket: 16 [ 844.884915][ T9304] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.897079][ T9304] usb 9-1: config 0 has no interfaces? [ 844.903938][ T9304] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 844.926000][ T9304] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.971915][ T9304] usb 9-1: config 0 descriptor?? [ 845.337698][T14699] netlink: 'syz.5.1581': attribute type 29 has an invalid length. [ 845.350722][T14699] netlink: 'syz.5.1581': attribute type 29 has an invalid length. [ 845.361486][T14699] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1581'. [ 845.384055][ T9] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 845.512512][T14709] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1584'. [ 845.614433][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 845.630501][ T9] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 845.649901][ T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 845.690821][ T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 845.713512][ T9] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 845.739653][ T9] usb 7-1: config 1 interface 1 has no altsetting 0 [ 845.761036][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 845.771579][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.779763][ T9] usb 7-1: Product: syz [ 845.792314][T14711] loop6: detected capacity change from 0 to 63 [ 845.802562][T14711] Buffer I/O error on dev loop6, logical block 0, async page read [ 845.820414][T14711] Buffer I/O error on dev loop6, logical block 1, async page read [ 845.835177][ T9] usb 7-1: Manufacturer: syz [ 845.841882][ T9] usb 7-1: SerialNumber: syz [ 845.849392][T14711] Buffer I/O error on dev loop6, logical block 2, async page read [ 845.904596][T14711] Buffer I/O error on dev loop6, logical block 3, async page read [ 845.912857][T11746] Buffer I/O error on dev loop6, logical block 0, async page read [ 845.921644][T11746] Buffer I/O error on dev loop6, logical block 1, async page read [ 845.942438][T11746] Buffer I/O error on dev loop6, logical block 2, async page read [ 845.962615][T11746] Buffer I/O error on dev loop6, logical block 3, async page read [ 845.987203][T14711] Buffer I/O error on dev loop6, logical block 0, async page read [ 846.000220][T14711] Buffer I/O error on dev loop6, logical block 1, async page read [ 846.123817][ T9] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 846.181390][ T9] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 846.359739][ T9] usb 7-1: USB disconnect, device number 70 [ 847.264106][ T9271] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 847.417265][ T9271] usb 7-1: device descriptor read/64, error -71 [ 847.654112][ T9271] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 847.784193][ T9271] usb 7-1: device descriptor read/64, error -71 [ 847.820792][ T5883] usb 9-1: USB disconnect, device number 39 [ 847.901406][ T5202] Dev loop8: unable to read RDB block 1 [ 847.905773][ T9271] usb usb7-port1: attempt power cycle [ 847.918168][ T5202] loop8: unable to read partition table [ 847.969542][ T5202] loop8: partition table beyond EOD, truncated [ 848.332441][ T9271] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 848.365160][ T9271] usb 7-1: device descriptor read/8, error -71 [ 848.644089][ T9271] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 848.664979][ T9271] usb 7-1: device descriptor read/8, error -71 [ 848.739765][T14756] netlink: 'syz.8.1597': attribute type 29 has an invalid length. [ 848.752754][T14756] netlink: 'syz.8.1597': attribute type 29 has an invalid length. [ 848.790491][T14756] netlink: 500 bytes leftover after parsing attributes in process `syz.8.1597'. [ 848.795180][ T9271] usb usb7-port1: unable to enumerate USB device [ 849.038228][ T5202] Dev loop8: unable to read RDB block 1 [ 849.043847][ T5202] loop8: unable to read partition table [ 849.059353][ T5202] loop8: partition table beyond EOD, truncated [ 849.124516][ T9271] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 849.229576][ T5202] Dev loop8: unable to read RDB block 1 [ 849.246780][ T5202] loop8: unable to read partition table [ 849.271660][ T5202] loop8: partition table beyond EOD, truncated [ 849.284462][ T9271] usb 6-1: device descriptor read/64, error -71 [ 849.399305][T14776] kvm: pic: level sensitive irq not supported [ 849.399538][T14776] kvm: pic: non byte read [ 849.410524][T14776] kvm: pic: level sensitive irq not supported [ 849.410592][T14776] kvm: pic: non byte read [ 849.443792][T14776] kvm: pic: level sensitive irq not supported [ 849.443845][T14776] kvm: pic: non byte read [ 849.458962][T14776] kvm: pic: level sensitive irq not supported [ 849.459031][T14776] kvm: pic: non byte read [ 849.472758][T14776] kvm: pic: level sensitive irq not supported [ 849.472831][T14776] kvm: pic: non byte read [ 849.499548][T14776] kvm: pic: level sensitive irq not supported [ 849.499604][T14776] kvm: pic: non byte read [ 849.520621][T14776] kvm: pic: level sensitive irq not supported [ 849.520687][T14776] kvm: pic: non byte read [ 849.544799][T14776] kvm: pic: level sensitive irq not supported [ 849.544872][T14776] kvm: pic: non byte read [ 849.558464][ T9271] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 849.569153][T14776] kvm: pic: level sensitive irq not supported [ 849.569204][T14776] kvm: pic: non byte read [ 849.583293][T14776] kvm: pic: level sensitive irq not supported [ 849.583365][T14776] kvm: pic: non byte read [ 849.714414][ T9271] usb 6-1: device descriptor read/64, error -71 [ 849.722349][ T5202] Dev loop8: unable to read RDB block 1 [ 849.728501][ T5202] loop8: unable to read partition table [ 849.735851][ T5202] loop8: partition table beyond EOD, truncated [ 849.835812][ T9271] usb usb6-port1: attempt power cycle [ 849.966783][T14790] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 850.104125][ T5883] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 850.194253][ T9271] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 850.215197][ T5202] Dev loop8: unable to read RDB block 1 [ 850.231246][ T5202] loop8: unable to read partition table [ 850.245764][ T9271] usb 6-1: device descriptor read/8, error -71 [ 850.252109][ T5202] loop8: partition table beyond EOD, truncated [ 850.265793][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.308181][T14799] netlink: 'syz.8.1611': attribute type 10 has an invalid length. [ 850.324664][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.344862][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.379882][T14799] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 850.389347][ T5883] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 850.408594][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.436256][ T5883] usb 2-1: config 0 descriptor?? [ 850.507024][ T9271] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 850.547574][ T9271] usb 6-1: device descriptor read/8, error -71 [ 850.665092][ T9271] usb usb6-port1: unable to enumerate USB device [ 850.776973][T14801] netlink: 'syz.7.1612': attribute type 29 has an invalid length. [ 850.791128][T14801] netlink: 'syz.7.1612': attribute type 29 has an invalid length. [ 850.802246][T14801] netlink: 500 bytes leftover after parsing attributes in process `syz.7.1612'. [ 850.834176][ T9] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 850.853284][T14791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.872498][T14791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.897188][ T5883] dragonrise 0003:0079:0011.0020: unknown main item tag 0x1 [ 850.912833][ T5883] dragonrise 0003:0079:0011.0020: reserved main item tag 0xe [ 850.932559][ T5883] dragonrise 0003:0079:0011.0020: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.1-1/input0 [ 851.012099][ T9] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 851.029961][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.039734][ T9] usb 7-1: Product: syz [ 851.048125][ T9] usb 7-1: Manufacturer: syz [ 851.052856][ T9] usb 7-1: SerialNumber: syz [ 851.069387][ T9] usb 7-1: config 0 descriptor?? [ 851.115793][ T5883] usb 2-1: USB disconnect, device number 79 [ 851.132924][ T5832] Bluetooth: hci7: urb ffff888033444a00 submission failed (2) [ 851.213732][ T5202] Dev loop8: unable to read RDB block 1 [ 851.221531][ T5202] loop8: unable to read partition table [ 851.237524][ T5202] loop8: partition table beyond EOD, truncated [ 851.294585][T14808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.313627][T14808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.329785][ T9258] usb 7-1: USB disconnect, device number 75 [ 851.365367][ T9271] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 851.535224][ T9271] usb 8-1: Using ep0 maxpacket: 8 [ 851.546747][ T9271] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 851.557446][ T9271] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 851.568026][ T9271] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 851.579495][ T9271] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 851.590793][ T9271] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 851.604728][ T9271] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 851.613898][ T9271] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.851288][ T9271] usb 8-1: usb_control_msg returned -32 [ 851.866816][ T9271] usbtmc 8-1:16.0: can't read capabilities [ 852.249351][ T5202] Dev loop8: unable to read RDB block 1 [ 852.258301][ T5202] loop8: unable to read partition table [ 852.274821][ T5202] loop8: partition table beyond EOD, truncated [ 852.384117][ T5883] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 852.402946][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1621'. [ 852.429663][T14832] netlink: 220 bytes leftover after parsing attributes in process `syz.8.1621'. [ 852.546149][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.557382][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.567568][ T5883] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 852.576775][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.588794][ T5883] usb 6-1: config 0 descriptor?? [ 852.674919][ T5202] Dev loop8: unable to read RDB block 1 [ 852.691632][ T5202] loop8: unable to read partition table [ 852.709661][ T5202] loop8: partition table beyond EOD, truncated [ 852.991281][ T5202] Dev loop8: unable to read RDB block 1 [ 853.001379][ T5202] loop8: unable to read partition table [ 853.024297][ T9] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 853.033508][ T5202] loop8: partition table beyond EOD, truncated [ 853.042341][ T5883] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 853.142550][ T5883] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 853.162891][ T5202] Dev loop8: unable to read RDB block 1 [ 853.175411][ T5202] loop8: unable to read partition table [ 853.186494][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 853.199573][ T5202] loop8: partition table beyond EOD, truncated [ 853.217898][ T9] usb 7-1: config 0 has an invalid interface number: 145 but max is 0 [ 853.235036][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.320272][ T5883] cp2112 0003:10C4:EA90.0021: Part Number: 0x82 Device Version: 0xFE [ 853.337677][ T9] usb 7-1: config 0 has no interface number 0 [ 853.379585][ T9] usb 7-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=d8.06 [ 853.400262][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.430035][ T9] usb 7-1: Product: syz [ 853.451955][ T9] usb 7-1: Manufacturer: syz [ 853.478793][ T9] usb 7-1: SerialNumber: syz [ 853.501483][ T9] usb 7-1: config 0 descriptor?? [ 853.654112][ T5836] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 853.718900][T14842] program syz.6.1622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 853.846282][ T5836] usb 9-1: config 0 has an invalid interface number: 23 but max is 0 [ 853.855318][ T5836] usb 9-1: config 0 has no interface number 0 [ 853.872988][T14855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.882803][ T5836] usb 9-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 853.896217][ T5836] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.904278][T14857] program syz.6.1622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 853.919586][T14842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.920119][T14855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.954707][ T5836] usb 9-1: Product: syz [ 853.959036][ T5836] usb 9-1: Manufacturer: syz [ 853.966967][ T5836] usb 9-1: SerialNumber: syz [ 853.996792][ T5836] usb 9-1: config 0 descriptor?? [ 854.014486][T14855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.023888][T14842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.025536][ T5836] ftdi_sio 9-1:0.23: FTDI USB Serial Device converter detected [ 854.052021][ T5836] usb 9-1: Detected SIO [ 854.057056][T14855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.070434][ T5836] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 854.155024][ T9] usb 7-1: Found UVC 0.00 device syz (2833:0201) [ 854.161432][ T9] usb 7-1: No valid video chain found. [ 854.216455][ T5836] usb 9-1: USB disconnect, device number 40 [ 854.230968][ T5836] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 854.270087][ T5836] ftdi_sio 9-1:0.23: device disconnected [ 854.287120][ T9] usb 7-1: USB disconnect, device number 76 [ 854.349437][ T9271] usb 8-1: USB disconnect, device number 63 [ 854.831958][ T5202] Dev loop8: unable to read RDB block 1 [ 854.854849][ T5202] loop8: unable to read partition table [ 854.873251][ T5202] loop8: partition table beyond EOD, truncated [ 855.124201][ T9271] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 855.278973][ T9271] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 855.306570][ T9271] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.315362][ T9] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 855.399179][ T5883] cp2112 0003:10C4:EA90.0021: error setting SMBus config [ 855.443379][ T5883] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -71 [ 855.453117][ T9271] usb 7-1: config 0 descriptor?? [ 855.523663][ T9271] cp210x 7-1:0.0: cp210x converter detected [ 855.566133][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 855.590789][ T9] usb 9-1: not running at top speed; connect to a high speed hub [ 855.602864][ T9] usb 9-1: config 4 interface 0 has no altsetting 0 [ 855.612731][ T9] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 855.625816][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.647157][ T5883] usb 6-1: USB disconnect, device number 31 [ 855.693126][ T9271] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 855.725029][ T9] usb 9-1: Product: Г [ 855.729162][ T9] usb 9-1: Manufacturer: Е [ 855.736655][ T9271] cp210x 7-1:0.0: querying part number failed [ 855.747114][ T9] usb 9-1: SerialNumber: ꮹꝘ垆엸멤¦﷌⨌ᄟ뽕옶랟ꮙ䬈ໄ擈纚弴羝쟾⍊塅튨묘ꔋ㱠ڽ䕙㪝棜⳧纅ᇧ》浲缺㌸盰௏䅘昂廑㷫蘔럗䉇갅ਇ끪⢂긹꯻韧Ꮏ쵪䕑嫂찞谞컏⠫蘿꣖ꞡ榣鮲䙯춉읪邵翺㽅㈄ᴣෙ⛾爾벇ﭢݭ䰵뼚⾎歝뿧ཊ祃ㄠ [ 855.810974][ T9271] usb 7-1: cp210x converter now attached to ttyUSB0 [ 856.054085][ T5883] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 856.237401][ T9] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 856.291758][ T9] usb 9-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 856.310064][ T9] usb 9-1: USB disconnect, device number 41 [ 856.384298][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 856.399526][ T5883] usb 6-1: config 0 has an invalid interface number: 17 but max is 0 [ 856.415810][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.449954][ T5883] usb 6-1: config 0 has no interface number 0 [ 856.462082][ T5883] usb 6-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 856.472143][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.482924][ T5883] usb 6-1: Product: syz [ 856.492972][ T5883] usb 6-1: Manufacturer: syz [ 856.492992][ T5883] usb 6-1: SerialNumber: syz [ 856.505551][ T5883] usb 6-1: config 0 descriptor?? [ 856.714922][ T5883] usb 6-1: Found UVC 0.00 device syz (0408:4034) [ 856.724600][ T5883] usb 6-1: No valid video chain found. [ 856.807532][ T5202] Dev loop8: unable to read RDB block 1 [ 856.818440][ T5202] loop8: unable to read partition table [ 856.840747][ T5202] loop8: partition table beyond EOD, truncated [ 856.925602][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.945458][T14885] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 856.955204][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.968839][ T5883] usb 6-1: USB disconnect, device number 32 [ 857.073866][ T5202] Dev loop8: unable to read RDB block 1 [ 857.080626][ T5202] loop8: unable to read partition table [ 857.089543][ T5202] loop8: partition table beyond EOD, truncated [ 857.232336][ T5202] Dev loop8: unable to read RDB block 1 [ 857.248462][ T5202] loop8: unable to read partition table [ 857.265544][ T5202] loop8: partition table beyond EOD, truncated [ 857.281125][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1636'. [ 857.481390][T14902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.802864][T14915] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 857.829074][T14915] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 857.950016][ T30] audit: type=1326 audit(1748157500.007:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.8.1644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafd798e969 code=0x0 [ 858.032408][ T9] usb 7-1: USB disconnect, device number 77 [ 858.074013][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 858.082320][ T9] cp210x 7-1:0.0: device disconnected [ 858.422815][T14944] loop6: detected capacity change from 0 to 63 [ 858.434448][ T9] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 858.440333][T12258] buffer_io_error: 734 callbacks suppressed [ 858.440353][T12258] Buffer I/O error on dev loop6, logical block 0, async page read [ 858.456389][ T5883] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 858.465528][T14944] Buffer I/O error on dev loop6, logical block 0, async page read [ 858.475024][T14944] Buffer I/O error on dev loop6, logical block 0, async page read [ 858.482997][T14944] Buffer I/O error on dev loop6, logical block 0, async page read [ 858.493736][T12258] Buffer I/O error on dev loop6, logical block 0, async page read [ 858.502554][T12258] Buffer I/O error on dev loop6, logical block 0, async page read [ 858.512159][T14944] Buffer I/O error on dev loop6, logical block 0, async page read [ 858.521401][T12258] Buffer I/O error on dev loop6, logical block 0, async page read [ 858.529833][T14944] Buffer I/O error on dev loop6, logical block 0, async page read [ 858.538876][T12258] Buffer I/O error on dev loop6, logical block 0, async page read [ 858.614667][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 858.624221][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 858.630439][ T9] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 858.638208][ T5883] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 858.644264][ T9271] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 858.649642][ T5883] usb 6-1: config 0 has no interface number 0 [ 858.672648][ T9] usb 7-1: config 0 has no interface number 0 [ 858.679070][ T5883] usb 6-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 858.679100][ T5883] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 858.679128][ T5883] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 858.679156][ T5883] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 858.679181][ T5883] usb 6-1: config 0 interface 219 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 858.683399][ T5883] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 858.721383][ T9] usb 7-1: config 0 interface 12 has no altsetting 0 [ 858.790433][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 858.794476][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.817861][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.833972][ T9] usb 7-1: Product: syz [ 858.847799][ T9] usb 7-1: Manufacturer: syz [ 858.854399][ T9] usb 7-1: SerialNumber: syz [ 858.868404][ T5883] usb 6-1: Product: syz [ 858.874030][ T9] usb 7-1: config 0 descriptor?? [ 858.881341][ T5883] usb 6-1: Manufacturer: syz [ 858.896314][ T5883] usb 6-1: SerialNumber: syz [ 858.912757][ T5883] usb 6-1: config 0 descriptor?? [ 858.926759][ T9271] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.929379][T14940] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 858.944309][ T9271] usb 8-1: config 0 has no interfaces? [ 858.957387][ T9271] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.974192][ T9271] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.992630][ T9271] usb 8-1: Product: syz [ 859.002761][ T9271] usb 8-1: Manufacturer: syz [ 859.012692][ T9271] usb 8-1: SerialNumber: syz [ 859.040692][ T9271] usb 8-1: config 0 descriptor?? [ 859.168407][ T5883] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 859.189528][ T5883] usb 6-1: USB disconnect, device number 33 [ 859.309843][T14942] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1649'. [ 859.328393][T14942] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 859.364643][ T9271] usb 8-1: USB disconnect, device number 64 [ 859.834481][ T9857] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 860.014710][ T9857] usb 9-1: Using ep0 maxpacket: 8 [ 860.021402][ T30] audit: type=1800 audit(1748157502.047:921): pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1656" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 860.085993][ T9857] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 860.205588][ T9857] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.229436][ T9857] usb 9-1: Product: syz [ 860.241402][ T9857] usb 9-1: Manufacturer: syz [ 860.270044][ T9857] usb 9-1: SerialNumber: syz [ 860.291103][ T9857] usb 9-1: config 0 descriptor?? [ 860.534736][ T9857] usb read operation failed. (-32) [ 860.783057][T14934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.799472][T14934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.800690][ T9857] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 860.829725][ T9857] usb 9-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 860.841550][ T9857] usb 9-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 860.909367][ T9] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 860.918347][ T9] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 861.003445][ T9] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 861.073590][ T9] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 861.144084][ T9] usb 7-1: USB disconnect, device number 78 [ 861.504718][ T9] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 861.596617][T15001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.668052][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 861.687448][ T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 861.705961][ T9] usb 7-1: config 0 has no interface number 0 [ 861.722004][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 861.760633][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 861.789234][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 861.837749][ T9] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 861.874001][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 861.893784][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.922086][ T9] usb 7-1: config 0 descriptor?? [ 861.967777][ T9] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 862.768426][ T9258] usb 7-1: USB disconnect, device number 79 [ 862.781725][ T9258] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 862.956013][ T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 863.130485][ T9] usb 2-1: config 0 has no interfaces? [ 863.145147][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 863.158825][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.167432][ T9] usb 2-1: Product: syz [ 863.171979][ T9] usb 2-1: Manufacturer: syz [ 863.178170][ T9] usb 2-1: SerialNumber: syz [ 863.191762][ T9] usb 2-1: config 0 descriptor?? [ 863.347470][ T30] audit: type=1326 audit(1748157505.407:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15024 comm="syz.7.1671" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85b818e969 code=0x0 [ 863.644156][ T9] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 863.814186][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 863.821922][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 863.831449][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 863.842042][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 863.852403][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 863.863085][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.880552][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 863.890676][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.114966][ T9] usb 7-1: usb_control_msg returned -32 [ 864.126068][ T9] usbtmc 7-1:16.0: can't read capabilities [ 864.474509][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 864.514428][ T9258] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 864.625949][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 864.658613][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 864.671818][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 864.692123][ T9] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 864.701552][ T9258] usb 8-1: Using ep0 maxpacket: 8 [ 864.707907][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.716910][ T9] usb 6-1: Product: syz [ 864.721546][ T9] usb 6-1: Manufacturer: syz [ 864.726731][ T9] usb 6-1: SerialNumber: syz [ 864.733089][ T9258] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 864.744934][ T9258] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.753590][ T9] usb 6-1: config 0 descriptor?? [ 864.766150][ T9258] usb 8-1: Product: syz [ 864.777755][ T9258] usb 8-1: Manufacturer: syz [ 864.791638][ T9258] usb 8-1: SerialNumber: syz [ 864.810870][ T9258] usb 8-1: config 0 descriptor?? [ 864.832598][ T9258] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 864.884114][ T9] rc_core: IR keymap rc-streamzap not found [ 864.890098][ T9] Registered IR keymap rc-empty [ 864.910932][ T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 864.929022][ T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input43 [ 864.992590][T15043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.003565][T15043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.215694][ T9] usb 2-1: USB disconnect, device number 80 [ 865.369563][ T5883] usb 6-1: USB disconnect, device number 34 [ 865.447129][T15045] batman_adv: batadv0: Adding interface: dummy0 [ 865.466087][T15045] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.507426][T15045] batman_adv: batadv0: Interface activated: dummy0 [ 865.546201][ T9258] gspca_sonixj: reg_w1 err -71 [ 865.556014][ T9258] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 865.585581][ T9258] usb 8-1: USB disconnect, device number 65 [ 865.876806][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1687'. [ 865.890414][T15084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.901616][T15084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.244438][ T9271] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 866.359158][T15103] FAULT_INJECTION: forcing a failure. [ 866.359158][T15103] name failslab, interval 1, probability 0, space 0, times 0 [ 866.372085][T15103] CPU: 1 UID: 0 PID: 15103 Comm: syz.1.1693 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 866.372104][T15103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 866.372114][T15103] Call Trace: [ 866.372121][T15103] [ 866.372129][T15103] dump_stack_lvl+0x189/0x250 [ 866.372167][T15103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 866.372195][T15103] ? __pfx__printk+0x10/0x10 [ 866.372221][T15103] ? __pfx___might_resched+0x10/0x10 [ 866.372238][T15103] ? fs_reclaim_acquire+0x7d/0x100 [ 866.372267][T15103] should_fail_ex+0x414/0x560 [ 866.372285][T15103] should_failslab+0xa8/0x100 [ 866.372305][T15103] __kmalloc_noprof+0xcb/0x4f0 [ 866.372321][T15103] ? kfree+0x4d/0x440 [ 866.372335][T15103] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 866.372357][T15103] tomoyo_realpath_from_path+0xe3/0x5d0 [ 866.372376][T15103] ? tomoyo_domain+0xda/0x130 [ 866.372398][T15103] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 866.372412][T15103] tomoyo_path_number_perm+0x1e8/0x5a0 [ 866.372429][T15103] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 866.372454][T15103] ? __lock_acquire+0xaac/0xd20 [ 866.372487][T15103] ? __fget_files+0x2a/0x420 [ 866.372508][T15103] ? __fget_files+0x3a0/0x420 [ 866.372525][T15103] ? __fget_files+0x2a/0x420 [ 866.372545][T15103] security_file_ioctl+0xcb/0x2d0 [ 866.372560][T15103] __se_sys_ioctl+0x47/0x170 [ 866.372577][T15103] do_syscall_64+0xf6/0x210 [ 866.372597][T15103] ? clear_bhb_loop+0x60/0xb0 [ 866.372614][T15103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.372627][T15103] RIP: 0033:0x7f630bf8e969 [ 866.372639][T15103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.372651][T15103] RSP: 002b:00007f630ce73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 866.372666][T15103] RAX: ffffffffffffffda RBX: 00007f630c1b6080 RCX: 00007f630bf8e969 [ 866.372676][T15103] RDX: 0000200000000580 RSI: 0000000000008933 RDI: 0000000000000004 [ 866.372685][T15103] RBP: 00007f630ce73090 R08: 0000000000000000 R09: 0000000000000000 [ 866.372693][T15103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.372702][T15103] R13: 0000000000000001 R14: 00007f630c1b6080 R15: 00007f630c2dfa28 [ 866.372722][T15103] [ 866.372728][T15103] ERROR: Out of memory at tomoyo_realpath_from_path. [ 866.459641][ T9271] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 866.616763][ T9271] usb 6-1: config 0 has no interface number 0 [ 866.622931][ T9271] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 866.634351][ T9271] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 866.647246][ T9271] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 866.656374][ T9271] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.668794][ T9271] usb 6-1: config 0 descriptor?? [ 866.676875][T15090] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 866.688143][ T9271] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 866.688297][ T5883] usb 7-1: USB disconnect, device number 80 [ 867.264272][ T5836] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 867.274433][ T5883] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 867.435926][ T5836] usb 8-1: Using ep0 maxpacket: 32 [ 867.441126][ T5883] usb 7-1: Using ep0 maxpacket: 32 [ 867.456212][ T5883] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 867.465191][ T5883] usb 7-1: config 0 has no interface number 0 [ 867.476993][ T5836] usb 8-1: too many configurations: 18, using maximum allowed: 8 [ 867.491849][ T5883] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 867.507765][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.540448][ T5883] usb 7-1: Product: syz [ 867.544881][ T5883] usb 7-1: Manufacturer: syz [ 867.549534][ T5883] usb 7-1: SerialNumber: syz [ 867.549965][ T5836] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 867.596315][ T5836] usb 8-1: can't read configurations, error -61 [ 867.614396][ T5883] usb 7-1: config 0 descriptor?? [ 867.754080][ T5836] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 867.916052][ T5836] usb 8-1: Using ep0 maxpacket: 32 [ 867.922040][ T5836] usb 8-1: too many configurations: 18, using maximum allowed: 8 [ 867.932184][ T5836] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 867.947924][ T5836] usb 8-1: can't read configurations, error -61 [ 868.320338][ T5836] usb usb8-port1: attempt power cycle [ 868.326974][ T5883] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 868.423054][ T5883] usb 7-1: USB disconnect, device number 81 [ 868.587646][T15130] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.674080][ T5836] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 868.694780][ T5836] usb 8-1: Using ep0 maxpacket: 32 [ 868.700975][ T5836] usb 8-1: too many configurations: 18, using maximum allowed: 8 [ 868.715676][ T5836] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 868.745285][ T5836] usb 8-1: can't read configurations, error -61 [ 868.898286][ T5836] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 868.946289][ T5836] usb 8-1: Using ep0 maxpacket: 32 [ 868.962943][ T5836] usb 8-1: too many configurations: 18, using maximum allowed: 8 [ 868.984862][ T5836] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 869.016410][ T5836] usb 8-1: can't read configurations, error -61 [ 869.053684][ T5836] usb usb8-port1: unable to enumerate USB device [ 869.095263][ T5836] usb 6-1: USB disconnect, device number 35 [ 869.264885][T15148] loop6: detected capacity change from 0 to 7 [ 869.290076][T12258] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 869.297197][T12258] loop6: partition table partially beyond EOD, truncated [ 869.307106][T12258] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 869.339155][T15148] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 869.351144][T15148] loop6: partition table partially beyond EOD, truncated [ 869.365561][T15148] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 869.400043][T15142] netlink: 'syz.8.1703': attribute type 29 has an invalid length. [ 869.410929][T15142] netlink: 'syz.8.1703': attribute type 29 has an invalid length. [ 869.422057][T15142] netlink: 500 bytes leftover after parsing attributes in process `syz.8.1703'. [ 869.454375][ T5836] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 869.695924][ T5836] usb 6-1: Using ep0 maxpacket: 8 [ 869.714405][ T5836] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 869.725133][ T5836] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 869.756971][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 869.813810][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 869.858417][ T5836] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 869.891940][ T5836] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 869.911612][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.962470][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.989520][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.224904][ T5836] usb 6-1: usb_control_msg returned -32 [ 870.232458][ T5836] usbtmc 6-1:16.0: can't read capabilities [ 870.502669][ T30] audit: type=1326 audit(1748157512.557:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15162 comm="syz.1.1710" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f630bf8e969 code=0x0 [ 870.870232][T15177] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1713'. [ 871.878584][T15189] netlink: 'syz.6.1717': attribute type 29 has an invalid length. [ 871.887535][T15189] netlink: 'syz.6.1717': attribute type 29 has an invalid length. [ 871.897436][T15189] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1717'. [ 872.032287][T15193] netlink: 'syz.6.1718': attribute type 10 has an invalid length. [ 872.259833][ T5883] usb 6-1: USB disconnect, device number 36 [ 872.368485][T15208] loop6: detected capacity change from 0 to 7 [ 872.393113][T15208] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 872.412969][T15208] loop6: partition table partially beyond EOD, truncated [ 872.444365][T15208] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 872.804029][ T5883] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 872.964325][ T5883] usb 7-1: Using ep0 maxpacket: 16 [ 872.979637][ T5883] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 873.002239][ T5883] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.025162][ T5883] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 873.038715][ T5883] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 873.105068][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.113205][ T5883] usb 7-1: Product: syz [ 873.125094][ T5883] usb 7-1: Manufacturer: syz [ 873.131492][ T5883] usb 7-1: SerialNumber: syz [ 873.381588][ T5883] usb 7-1: 0:2 : does not exist [ 873.625139][ T5883] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 873.670031][ T5883] usb 7-1: USB disconnect, device number 82 [ 873.749005][ T9271] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 873.914927][ T9271] usb 2-1: Using ep0 maxpacket: 8 [ 873.931483][ T9271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.961479][ T9271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 873.977915][ T9271] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 874.030591][ T9271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.049373][ T9271] usb 2-1: Product: syz [ 874.063900][ T9271] usb 2-1: Manufacturer: syz [ 874.069161][ T9271] usb 2-1: SerialNumber: syz [ 874.370676][ T9271] usb 2-1: 0:2 : does not exist [ 874.390433][ T9271] usb 2-1: USB disconnect, device number 81 [ 874.593338][T12258] udevd[12258]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.191653][T15247] netlink: del zone limit has 4 unknown bytes [ 875.286155][T15249] bridge0: port 4(vlan2) entered blocking state [ 875.292678][T15249] bridge0: port 4(vlan2) entered disabled state [ 875.318073][T15249] vlan2: entered allmulticast mode [ 875.327357][T15249] gretap0: entered allmulticast mode [ 875.336253][T15249] vlan2: entered promiscuous mode [ 875.342546][T15249] gretap0: entered promiscuous mode [ 875.350872][T15249] bridge0: port 4(vlan2) entered blocking state [ 875.357286][T15249] bridge0: port 4(vlan2) entered forwarding state [ 875.404051][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 875.564089][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 875.570986][ T24] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 875.582917][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 875.601035][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 875.611667][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.620972][ T24] usb 6-1: Product: syz [ 875.626599][ T24] usb 6-1: Manufacturer: syz [ 875.631555][ T24] usb 6-1: SerialNumber: syz [ 875.654153][ T5883] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 875.794178][ T5883] usb 2-1: device descriptor read/64, error -71 [ 875.847227][T15245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.860220][T15245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.952427][ T24] usb 6-1: 0:2 : does not exist [ 875.972526][ T24] usb 6-1: USB disconnect, device number 37 [ 876.011029][T12258] udevd[12258]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.044048][ T5883] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 876.284246][T15256] loop6: detected capacity change from 0 to 7 [ 876.310940][T15256] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 876.323824][T15256] loop6: partition table partially beyond EOD, truncated [ 876.333476][T15256] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 876.364777][ T5883] usb 2-1: device descriptor read/64, error -71 [ 876.504642][ T5883] usb usb2-port1: attempt power cycle [ 876.844053][ T5883] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 876.875844][ T5883] usb 2-1: device descriptor read/8, error -71 [ 877.078144][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1740'. [ 877.114048][ T5883] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 877.285752][ T5883] usb 2-1: device descriptor read/8, error -71 [ 877.394363][ T5883] usb usb2-port1: unable to enumerate USB device [ 878.119796][T15280] sctp: [Deprecated]: syz.6.1744 (pid 15280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 878.119796][T15280] Use struct sctp_sack_info instead [ 878.149070][T15280] vivid-007: ================= START STATUS ================= [ 878.157025][T15280] vivid-007: Generate PTS: true [ 878.163364][T15280] vivid-007: Generate SCR: true [ 878.172806][T15280] tpg source WxH: 640x360 (Y'CbCr) [ 878.178505][T15280] tpg field: 1 [ 878.181905][T15280] tpg crop: (0,0)/640x360 [ 878.186582][T15280] tpg compose: (0,0)/640x360 [ 878.191200][T15280] tpg colorspace: 8 [ 878.195393][T15280] tpg transfer function: 0/0 [ 878.201106][T15280] tpg Y'CbCr encoding: 0/0 [ 878.206024][T15280] tpg quantization: 0/0 [ 878.210209][T15280] tpg RGB range: 0/2 [ 878.214270][T15280] vivid-007: ================== END STATUS ================== [ 879.181014][T15295] netlink: 'syz.6.1746': attribute type 20 has an invalid length. [ 880.414079][ T5836] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 880.577575][ T5836] usb 2-1: unable to get BOS descriptor or descriptor too short [ 880.586490][ T5836] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 880.595327][ T5836] usb 2-1: config 6 has no interface number 0 [ 880.601442][ T5836] usb 2-1: config 6 interface 200 has no altsetting 0 [ 880.610896][ T5836] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 880.626944][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.638077][ T5836] usb 2-1: Product: syz [ 880.644057][ T5836] usb 2-1: Manufacturer: syz [ 880.649018][ T5836] usb 2-1: SerialNumber: syz [ 880.914132][ T24] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 881.064010][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 881.071285][ T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 881.122472][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 881.142629][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 881.153347][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 881.174554][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 881.195056][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 881.219507][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.369681][ T5836] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 881.431518][ T5836] dvb-usb: bulk message failed: -71 (3/0) [ 881.449300][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 881.463255][ T24] usb 7-1: usb_control_msg returned -32 [ 881.472478][ T24] usbtmc 7-1:16.0: can't read capabilities [ 881.481059][ T5836] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 881.499222][ T5836] usb 2-1: media controller created [ 881.559922][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 881.591942][ T5836] dvb-usb: bulk message failed: -71 (6/0) [ 881.601512][ T5836] dvb-usb: bulk message failed: -71 (6/0) [ 881.615047][ T5836] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 881.631353][ T5836] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input44 [ 881.675787][ T5836] dvb-usb: schedule remote query interval to 150 msecs. [ 881.683281][ T5836] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 881.764610][ T5836] usb 2-1: USB disconnect, device number 86 [ 881.836887][ T5836] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 882.174067][ T5836] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 882.270887][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 882.292718][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 882.301254][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 882.329950][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 882.339062][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 882.350135][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 882.400383][ T5836] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 882.413573][ T5836] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 882.437039][ T5836] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 882.459620][ T5836] usb 2-1: string descriptor 0 read error: -71 [ 882.466920][ T5836] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 882.476449][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.487894][ T5836] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 882.497947][ T5836] usb 2-1: no configuration chosen from 1 choice [ 882.507198][ T5836] usb 2-1: USB disconnect, device number 87 [ 883.215308][T15337] chnl_net:caif_netlink_parms(): no params data found [ 883.344198][T15345] sch_fq: defrate 2147483648 ignored. [ 883.378965][T15345] xt_socket: unknown flags 0xfc [ 883.489692][T15337] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.516624][T15337] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.527218][T15337] bridge_slave_0: entered allmulticast mode [ 883.540226][T15337] bridge_slave_0: entered promiscuous mode [ 883.548899][T15337] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.568105][T15337] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.587661][T15337] bridge_slave_1: entered allmulticast mode [ 883.599418][T15337] bridge_slave_1: entered promiscuous mode [ 883.608192][T15352] netlink: 'syz.1.1759': attribute type 10 has an invalid length. [ 883.631092][T15352] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 883.733302][T15337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.767145][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1760'. [ 883.769773][T15337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.814676][ T5836] usb 7-1: USB disconnect, device number 83 [ 884.043071][T15337] team0: Port device team_slave_0 added [ 884.079817][T15337] team0: Port device team_slave_1 added [ 884.124136][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 884.186288][T15368] usb usb8: usbfs: process 15368 (syz.8.1762) did not claim interface 0 before use [ 884.328178][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 884.374105][ T5836] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 884.384134][ T5832] Bluetooth: hci7: command tx timeout [ 884.403039][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 884.448647][T15337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.508737][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 884.533850][T15337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.585815][ T24] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 884.596349][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.604487][ T24] usb 2-1: Product: syz [ 884.616172][ T24] usb 2-1: Manufacturer: syz [ 884.621013][T15337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.655937][ T24] usb 2-1: SerialNumber: syz [ 884.690067][ T24] usb 2-1: config 0 descriptor?? [ 884.695757][T15337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.702715][T15337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.742107][ T24] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 884.778792][T15337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.929977][T15337] hsr_slave_0: entered promiscuous mode [ 884.943641][ T24] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 884.956012][ T24] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 884.977883][T15337] hsr_slave_1: entered promiscuous mode [ 884.984902][ T24] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 885.004276][T15337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 885.031945][T15337] Cannot create hsr debugfs directory [ 886.464586][ T5832] Bluetooth: hci7: command tx timeout [ 886.829462][T15377] netlink: 'syz.5.1766': attribute type 29 has an invalid length. [ 886.840389][T15387] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1766'. [ 886.850279][T15384] netlink: 'syz.5.1766': attribute type 29 has an invalid length. [ 887.384337][ T978] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 887.526108][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1768'. [ 887.534074][ T978] usb 7-1: Using ep0 maxpacket: 32 [ 887.542468][ T978] usb 7-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 887.582577][ T978] usb 7-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.804044][ T978] usb 7-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.818703][ T978] usb 7-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 887.853726][ T978] usb 7-1: config 64 interface 0 has no altsetting 0 [ 887.862573][ T978] usb 7-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 887.872629][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.884288][ T9271] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 888.044666][ T9271] usb 6-1: device descriptor read/64, error -71 [ 888.297303][ T9271] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 888.322580][T15337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 888.397250][T15337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 888.411572][T15402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.454489][ T9271] usb 6-1: device descriptor read/64, error -71 [ 888.474117][T15337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 888.489763][T15402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.518798][T15337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 888.546412][ T5832] Bluetooth: hci7: command tx timeout [ 888.603690][ T9271] usb usb6-port1: attempt power cycle [ 888.667674][T15337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.735264][T15337] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.781537][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.788740][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.815373][ T978] usbhid 7-1:64.0: can't add hid device: -71 [ 888.837818][ T978] usbhid 7-1:64.0: probe with driver usbhid failed with error -71 [ 888.858930][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.866253][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.890236][ T978] usb 7-1: USB disconnect, device number 84 [ 888.907360][ T9] usb 2-1: USB disconnect, device number 88 [ 888.986418][ T9271] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 889.026808][ T9271] usb 6-1: device descriptor read/8, error -71 [ 889.066021][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.073888][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.094333][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.117357][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.142405][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.164222][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.171648][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.186416][T15415] xt_hashlimit: size too large, truncated to 1048576 [ 889.223873][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.231423][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.239287][T15337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.264200][ T9271] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 889.273506][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.303849][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.322301][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.322814][ T9271] usb 6-1: device descriptor read/8, error -71 [ 889.342160][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.363796][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.372726][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.381373][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.389400][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.398222][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.409080][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.421200][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.432991][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.442665][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.453148][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.465792][ T9271] usb usb6-port1: unable to enumerate USB device [ 889.478287][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.500499][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.520142][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.554225][ T5836] usb 8-1: device descriptor read/64, error -110 [ 889.557250][T15337] veth0_vlan: entered promiscuous mode [ 889.570214][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.593302][T15337] veth1_vlan: entered promiscuous mode [ 889.599416][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.609848][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.628794][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.652678][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.682346][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.712922][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.726280][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.741692][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.752517][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.774952][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.778027][T15337] veth0_macvtap: entered promiscuous mode [ 889.794157][ T5836] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 889.814793][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.820395][T15337] veth1_macvtap: entered promiscuous mode [ 889.822872][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.846532][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.861598][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.869572][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.878170][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.897567][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.911939][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.928426][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.938414][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.946224][ T5836] usb 8-1: device descriptor read/64, error -32 [ 889.952985][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.992148][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 889.993083][T15337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.024188][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.031677][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.048357][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.056204][ T5836] usb usb8-port1: attempt power cycle [ 890.061657][T15337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.070317][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.078764][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.086974][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.097370][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.112517][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.118871][T15337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.130509][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.147009][T15337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.150762][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.164220][T15337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.180206][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.183233][T15337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.197370][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.214780][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.222267][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.257775][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.271694][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.290023][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.314093][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.321685][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.339836][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.350233][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.360983][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.369625][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.377287][T15436] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1772'. [ 890.387798][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.406304][ T5836] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 890.415291][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.423148][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.431148][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.454005][ T5836] usb 8-1: device descriptor read/8, error -32 [ 890.471309][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.488149][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.516710][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.520032][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.545081][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.552516][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.565970][ T5836] raw-gadget.0 gadget.7: failed to queue suspend event [ 890.578884][ T5836] raw-gadget.0 gadget.7: failed to queue reset event [ 890.587207][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.616858][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.625556][ T5832] Bluetooth: hci7: command tx timeout [ 890.631806][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.644061][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.651648][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 890.666503][ T24] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 890.694498][ T5836] raw-gadget.0 gadget.7: failed to queue resume event [ 890.756378][ T5836] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 890.854334][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 890.861504][ T5836] usb 8-1: device descriptor read/8, error -32 [ 890.968674][T15443] fido_id[15443]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 890.975152][ T5836] raw-gadget.0 gadget.7: failed to queue suspend event [ 891.029322][ T5836] usb usb8-port1: unable to enumerate USB device [ 891.117187][ T24] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 891.276422][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.294406][ C0] hrtimer: interrupt took 53316 ns [ 891.331383][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 891.430647][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 891.494092][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 891.554043][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 891.595084][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.645447][ T24] usb 7-1: config 0 descriptor?? [ 891.654377][T15448] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 891.924684][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 891.963241][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.004193][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.022562][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.054516][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.082800][ T24] plantronics 0003:047F:FFFF.0024: reserved main item tag 0xd [ 892.104194][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.162763][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.172159][ T24] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 892.201316][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.234555][ T24] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 892.257908][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.274195][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.311680][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.322757][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1774'. [ 892.342043][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.350690][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1774'. [ 892.370114][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.390439][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.408109][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.430541][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.450203][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.478800][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.504736][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.519651][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.534209][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.544043][ T9304] psmouse serio2: Failed to reset mouse on : -5 [ 892.562536][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.582807][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.603101][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.623405][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.633629][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.654018][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.674012][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.684049][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.702300][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.722689][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.734299][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.753259][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.773248][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.791370][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.804012][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.821185][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.841636][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.858899][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.892060][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.913872][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.943613][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.962174][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: unknown main item tag 0x0 [ 892.979410][T15476] netlink: 'syz.5.1777': attribute type 29 has an invalid length. [ 893.006761][ T5836] hid-generic 0000:0080:FFFFFFFE.0023: hidraw1: HID v0.00 Device [syz1] on syz0 [ 893.052003][T15481] netlink: 'syz.5.1777': attribute type 29 has an invalid length. [ 893.109555][T15476] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1777'. [ 893.165348][T15486] fido_id[15486]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 893.494070][ T5836] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 893.658949][ T5836] usb 2-1: config 0 has no interfaces? [ 893.676629][ T5836] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 893.677295][ T9271] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 893.686471][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.712221][ T5836] usb 2-1: Product: syz [ 893.722250][ T5836] usb 2-1: Manufacturer: syz [ 893.732406][ T5836] usb 2-1: SerialNumber: syz [ 893.751435][ T5836] usb 2-1: config 0 descriptor?? [ 893.894817][ T9271] usb 6-1: Using ep0 maxpacket: 16 [ 893.936424][ T9271] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 893.989472][ T9271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.035593][ T9271] usb 6-1: Product: syz [ 894.039812][ T9271] usb 6-1: Manufacturer: syz [ 894.045026][ T9271] usb 6-1: SerialNumber: syz [ 894.057479][ T9271] usb 6-1: config 0 descriptor?? [ 894.082292][ T9271] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 894.504720][ T5836] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 894.680253][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 894.712459][ T5836] usb 3-1: config 0 has an invalid descriptor of length 192, skipping remainder of the config [ 894.735156][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 894.770614][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 894.836593][ T5836] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 894.858880][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.902664][ T5836] usb 3-1: Product: syz [ 894.924374][ T5836] usb 3-1: Manufacturer: syz [ 894.942316][ T5836] usb 3-1: SerialNumber: syz [ 895.024870][T15496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.037535][T15496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.101424][ T5836] usb 3-1: config 0 descriptor?? [ 895.106585][ T9271] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 895.178761][ T5836] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 895.891340][T15527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.917178][T15527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.245369][ T9271] usb 7-1: reset high-speed USB device number 85 using dummy_hcd [ 896.464400][ T9304] misc userio: Buffer overflowed, userio client isn't keeping up [ 896.804799][ T24] usb 2-1: USB disconnect, device number 89 [ 897.102883][ T24] usb 3-1: USB disconnect, device number 71 [ 897.365446][ T5887] usb 6-1: USB disconnect, device number 42 [ 897.518101][ T9304] input: PS/2 Generic Mouse as /devices/serio2/input/input46 [ 897.715382][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 897.873225][ T9304] psmouse serio2: Failed to enable mouse on [ 897.934993][ T24] usb 3-1: device descriptor read/64, error -71 [ 898.234051][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 898.385958][ T24] usb 3-1: device descriptor read/64, error -71 [ 898.448589][T15589] netlink: 'syz.1.1793': attribute type 29 has an invalid length. [ 898.478658][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 898.510866][ T24] usb usb3-port1: attempt power cycle [ 898.593880][T15589] netlink: 'syz.1.1793': attribute type 29 has an invalid length. [ 898.638048][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 898.712759][T15572] netlink: 'syz.5.1790': attribute type 29 has an invalid length. [ 898.755478][T15572] netlink: 'syz.5.1790': attribute type 29 has an invalid length. [ 898.794339][T15596] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1790'. [ 898.924257][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 898.955325][ T24] usb 3-1: device descriptor read/8, error -71 [ 899.064692][ T9271] usb 7-1: device descriptor read/64, error -71 [ 899.234379][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 899.304793][ T24] usb 3-1: device descriptor read/8, error -71 [ 899.334367][ T9271] usb 7-1: reset high-speed USB device number 85 using dummy_hcd [ 899.434395][ T24] usb usb3-port1: unable to enumerate USB device [ 899.621147][ T9271] usb 7-1: device firmware changed [ 899.624113][ T9304] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 899.666353][ T9258] usb 7-1: USB disconnect, device number 85 [ 899.795782][ T9304] usb 6-1: Using ep0 maxpacket: 8 [ 899.865457][ T9304] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 899.900526][T15599] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1794'. [ 899.909888][ T9258] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 899.948428][ T9304] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 900.004247][ T9304] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 900.088032][ T9304] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 900.098823][ T9258] usb 7-1: config 0 has no interfaces? [ 900.119744][ T9258] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 900.131071][ T9258] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.164058][ T9304] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 900.166674][ T9258] usb 7-1: Product: syz [ 900.210709][ T9258] usb 7-1: Manufacturer: syz [ 900.233566][ T9258] usb 7-1: SerialNumber: syz [ 900.250056][ T9258] usb 7-1: config 0 descriptor?? [ 900.353396][ T9304] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 900.440764][ T9304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.719450][T15622] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 900.880037][T15622] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.887738][T15622] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.001709][ T9304] usb 6-1: usb_control_msg returned -32 [ 901.096262][ T9304] usbtmc 6-1:16.0: can't read capabilities [ 901.722412][T15622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.755648][T15622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.035368][T15611] netlink: 'syz.8.1796': attribute type 10 has an invalid length. [ 902.210708][ T5887] usb 7-1: USB disconnect, device number 86 [ 902.258494][T15622] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.329491][T15622] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.343082][T15622] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.362904][T15622] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.536509][T15611] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 902.548012][T15611] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 902.563556][T15611] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 903.534045][ T9304] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 903.621760][ T24] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 903.718811][ T9304] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 903.757406][ T9304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.807748][ T9304] usb 2-1: config 0 descriptor?? [ 903.854256][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 903.870495][ T9304] cp210x 2-1:0.0: cp210x converter detected [ 903.895099][T15671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.914743][T15671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.924948][T15671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.937314][T15671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.974988][T15671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.988860][T15671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.013261][T15671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.047396][T15671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.089356][T15671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.127891][T15671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.210684][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 904.230011][ T9304] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 904.239469][ T24] usb 3-1: can't read configurations, error -71 [ 904.285769][ T9304] usb 2-1: cp210x converter now attached to ttyUSB0 [ 904.403070][ T9258] usb 6-1: USB disconnect, device number 43 [ 904.458592][ T9304] usb 2-1: USB disconnect, device number 90 [ 904.496616][ T9304] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 904.587168][ T9304] cp210x 2-1:0.0: device disconnected [ 904.914685][ T9258] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 905.082414][T15712] B: renamed from veth0 [ 905.144535][ T9258] usb 6-1: Using ep0 maxpacket: 32 [ 905.153249][ T9258] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 905.175786][ T9258] usb 6-1: config 0 has no interface number 0 [ 905.259958][ T9258] usb 6-1: config 0 interface 184 has no altsetting 0 [ 905.290826][ T9258] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 905.323545][ T9258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.357990][ T9258] usb 6-1: Product: syz [ 905.384599][ T9258] usb 6-1: Manufacturer: syz [ 905.403304][ T9258] usb 6-1: SerialNumber: syz [ 905.429005][ T9258] usb 6-1: config 0 descriptor?? [ 905.462453][ T9258] smsc75xx v1.0.0 [ 906.065498][ T9258] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 906.095575][ T9258] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 906.129126][ T9258] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 906.190907][ T9258] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 906.505481][T15741] netlink: 'syz.2.1813': attribute type 20 has an invalid length. [ 906.884874][T15755] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 906.884874][T15755] The task syz.8.1817 (15755) triggered the difference, watch for misbehavior. [ 907.258364][ T9304] usb 6-1: USB disconnect, device number 44 [ 907.344788][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 907.396753][ T30] audit: type=1326 audit(1748157549.457:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15763 comm="syz.5.1819" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11af18e969 code=0x0 [ 907.524332][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 907.542980][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 907.560610][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 907.587329][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 907.633829][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 907.694512][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 907.739295][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 907.784489][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.825333][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 907.869152][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1822'. [ 908.040550][ T24] usb 2-1: usb_control_msg returned -32 [ 908.049787][ T24] usbtmc 2-1:16.0: can't read capabilities [ 908.124900][T15435] usb 7-1: new low-speed USB device number 87 using dummy_hcd [ 908.275530][T15435] usb 7-1: device descriptor read/64, error -71 [ 908.544671][T15435] usb 7-1: new low-speed USB device number 88 using dummy_hcd [ 908.684512][T15435] usb 7-1: device descriptor read/64, error -71 [ 908.805664][T15435] usb usb7-port1: attempt power cycle [ 909.164984][T15435] usb 7-1: new low-speed USB device number 89 using dummy_hcd [ 909.215469][T15435] usb 7-1: device descriptor read/8, error -71 [ 909.454070][T15435] usb 7-1: new low-speed USB device number 90 using dummy_hcd [ 909.485111][T15435] usb 7-1: device descriptor read/8, error -71 [ 909.607434][T15435] usb usb7-port1: unable to enumerate USB device [ 910.192846][T15848] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 910.240656][T15848] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1833'. [ 910.253765][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1833'. [ 910.556477][ T9258] usb 2-1: USB disconnect, device number 91 [ 910.635556][T15435] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 910.694050][ T9304] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 910.813038][T15435] usb 6-1: Using ep0 maxpacket: 32 [ 910.829996][T15435] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 910.842647][T15435] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 910.862337][ T9304] usb 3-1: too many configurations: 253, using maximum allowed: 8 [ 910.940038][T15435] usb 6-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 910.963981][T15435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.008416][T15435] usb 6-1: Product: syz [ 911.013297][T15435] usb 6-1: Manufacturer: syz [ 911.033242][T15435] usb 6-1: SerialNumber: syz [ 911.051256][ T9258] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 911.120119][T15435] usb 6-1: config 0 descriptor?? [ 911.219652][ T9258] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 911.311972][ T9258] usb 2-1: config 0 has no interface number 0 [ 911.333413][ T9258] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 911.348952][ T9258] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 911.367104][ T9258] usb 2-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 911.381972][ T9258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.390441][ T9258] usb 2-1: Product: syz [ 911.395722][ T9258] usb 2-1: Manufacturer: syz [ 911.400837][ T9258] usb 2-1: SerialNumber: syz [ 911.410403][ T9258] usb 2-1: config 0 descriptor?? [ 911.416637][T15858] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 911.434338][ T5836] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 911.629196][T15858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1834'. [ 911.654187][ T5836] usb 7-1: Using ep0 maxpacket: 16 [ 911.655402][ T9258] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 911.677992][ T5836] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 911.682466][ T9258] usb 2-1: MIDIStreaming interface descriptor not found [ 911.696337][ T5836] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 911.770056][ T9258] usb 2-1: USB disconnect, device number 92 [ 912.050180][T13171] udevd[13171]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 912.694301][ T9258] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 912.864452][ T9258] usb 2-1: Using ep0 maxpacket: 16 [ 913.322523][ T9304] usb 3-1: string descriptor 0 read error: -71 [ 913.329109][ T9304] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 913.339146][ T9304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.401791][T15906] netlink: 'syz.8.1840': attribute type 3 has an invalid length. [ 913.405256][ T9304] usb 3-1: can't set config #1, error -71 [ 913.439015][ T9304] usb 3-1: USB disconnect, device number 78 [ 914.178152][ T5836] usb 7-1: string descriptor 0 read error: -71 [ 914.194705][ T5836] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 914.220733][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.278566][ T5836] usb 7-1: can't set config #1, error -71 [ 914.334466][ T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 914.353352][ T5836] usb 7-1: USB disconnect, device number 91 [ 914.358109][T15923] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.369076][T15923] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.377841][T15923] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.386794][T15923] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.667784][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 916.134205][ T5836] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 916.195346][ T9258] usb 2-1: unable to get BOS descriptor or descriptor too short [ 916.204033][ T9258] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 916.231167][ T9258] usb 2-1: can't read configurations, error -71 [ 916.313312][ T5836] usb 7-1: Using ep0 maxpacket: 8 [ 916.321100][ T5836] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 916.342574][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.455640][ T5836] pvrusb2: Hardware description: Terratec Grabster AV400 [ 916.506735][ T5836] pvrusb2: ********** [ 916.547655][ T5836] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 916.583837][ T5836] pvrusb2: Important functionality might not be entirely working. [ 916.608658][ T5836] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 916.632400][ T5836] pvrusb2: ********** [ 916.679902][ T2342] pvrusb2: Invalid write control endpoint [ 916.692309][ T5836] usb 7-1: USB disconnect, device number 92 [ 916.903765][ T30] audit: type=1326 audit(1748157558.957:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15957 comm="syz.6.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30998e969 code=0x7ffc0000 [ 917.183784][ T30] audit: type=1326 audit(1748157558.957:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15957 comm="syz.6.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe30998e969 code=0x7ffc0000 [ 917.222090][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 917.239410][ T2342] pvrusb2: Invalid write control endpoint [ 917.254636][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 917.262248][ T24] usb 3-1: can't read configurations, error -71 [ 917.264410][ T31] INFO: task syz.9.1317:13182 blocked for more than 143 seconds. [ 917.282816][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 917.312218][ T31] Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 [ 917.329488][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 917.365953][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 917.369184][ T31] task:syz.9.1317 state:D stack:24280 pid:13182 tgid:13180 ppid:9052 task_flags:0x400040 flags:0x00004004 [ 917.394030][ T30] audit: type=1326 audit(1748157558.957:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15957 comm="syz.6.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30998e969 code=0x7ffc0000 [ 917.418744][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 917.456847][ T2342] pvrusb2: Device being rendered inoperable [ 917.457909][ T31] Call Trace: [ 917.479516][ T31] [ 917.490406][ T31] __schedule+0x16e2/0x4cd0 [ 917.501172][ T31] ? schedule+0x165/0x360 [ 917.502785][ T2342] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 917.513148][ T2342] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 917.513711][ T31] ? __pfx___schedule+0x10/0x10 [ 917.554156][ T30] audit: type=1326 audit(1748157558.957:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15957 comm="syz.6.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30998e969 code=0x7ffc0000 [ 917.559319][ T31] ? schedule+0x91/0x360 [ 917.592103][ T2342] pvrusb2: Attached sub-driver cx25840 [ 917.618046][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 917.620781][ T31] schedule+0x165/0x360 [ 917.633006][ T31] schedule_preempt_disabled+0x13/0x30 [ 917.640215][ T31] __mutex_lock+0x724/0xe80 [ 917.644033][ T30] audit: type=1326 audit(1748157558.957:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15957 comm="syz.6.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe30998e969 code=0x7ffc0000 [ 917.645423][ T31] ? __mutex_lock+0x51b/0xe80 [ 917.666970][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.667471][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 917.694346][ T31] ? snd_seq_info_clients_read+0x14a/0x7e0 [ 917.700357][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 917.706062][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 917.712066][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 917.718955][ T31] ? __up_read+0x280/0x680 [ 917.723490][ T31] ? client_use_ptr+0xa9/0xab0 [ 917.729258][ T31] ? snd_seq_info_clients_read+0x71d/0x7e0 [ 917.740817][ T31] snd_seq_info_clients_read+0x14a/0x7e0 [ 917.744155][ T30] audit: type=1326 audit(1748157558.967:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15957 comm="syz.6.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30998e969 code=0x7ffc0000 [ 917.752662][ T31] snd_info_seq_show+0xd9/0x100 [ 917.775784][ T30] audit: type=1326 audit(1748157558.987:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15957 comm="syz.6.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe30998e969 code=0x7ffc0000 [ 917.802181][ T31] traverse+0x1e9/0x570 [ 917.804560][ T30] audit: type=1326 audit(1748157558.987:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15957 comm="syz.6.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30998e969 code=0x7ffc0000 [ 917.812418][ T31] seq_read_iter+0xcfe/0xe10 [ 917.838956][ T30] audit: type=1326 audit(1748157558.987:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15957 comm="syz.6.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe30998e969 code=0x7ffc0000 [ 917.844352][ T31] ? aa_file_perm+0x11f/0xed0 [ 917.866859][ T31] ? __asan_memset+0x22/0x50 [ 917.871591][ T31] seq_read+0x2e2/0x3d0 [ 917.876122][ T31] ? __pfx_seq_read+0x10/0x10 [ 917.881158][ T31] ? __pfx_seq_read+0x10/0x10 [ 917.888822][ T31] proc_reg_read+0x1e9/0x2e0 [ 917.888842][ T30] audit: type=1326 audit(1748157558.997:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15957 comm="syz.6.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30998e969 code=0x7ffc0000 [ 917.893653][ T31] vfs_readv+0x5a2/0x840 [ 917.915767][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.933042][ T31] ? __pfx_proc_reg_read+0x10/0x10 [ 917.938567][ T31] ? __pfx_vfs_readv+0x10/0x10 [ 917.943536][ T31] ? __fget_files+0x2a/0x420 [ 917.949072][ T31] ? __fget_files+0x3a0/0x420 [ 917.954180][ T31] ? __fget_files+0x2a/0x420 [ 917.959000][ T31] __x64_sys_preadv+0x197/0x2a0 [ 917.964320][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 917.969713][ T31] ? __pfx___x64_sys_preadv+0x10/0x10 [ 917.975825][ T31] ? do_syscall_64+0xba/0x210 [ 917.980754][ T31] do_syscall_64+0xf6/0x210 [ 917.985869][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 917.992248][ T31] ? clear_bhb_loop+0x60/0xb0 [ 917.997467][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.003579][ T31] RIP: 0033:0x7fb499b8e969 [ 918.008679][ T31] RSP: 002b:00007fb4979f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 918.017526][ T31] RAX: ffffffffffffffda RBX: 00007fb499db6080 RCX: 00007fb499b8e969 [ 918.025958][ T31] RDX: 0000000000000001 RSI: 0000200000004ec0 RDI: 0000000000000009 [ 918.034660][ T31] RBP: 00007fb499c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 918.042796][ T31] R10: 0000000000008100 R11: 0000000000000246 R12: 0000000000000000 [ 918.051290][ T31] R13: 0000000000000000 R14: 00007fb499db6080 R15: 00007fb499edfa28 [ 918.059631][ T31] [ 918.073170][ T31] [ 918.073170][ T31] Showing all locks held in the system: [ 918.138191][ T31] 7 locks held by kworker/1:0/24: [ 918.143381][ T31] 1 lock held by khungtaskd/31: [ 918.182779][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 918.193544][ T31] 2 locks held by getty/5596: [ 918.202929][ T31] #0: ffff8880346f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 918.215006][ T31] #1: ffffc9000362c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 918.226174][ T31] 2 locks held by kworker/1:4/5883: [ 918.231434][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 918.242005][ T31] #1: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 918.258822][ T31] 6 locks held by kworker/0:8/9857: [ 918.265318][ T31] #0: ffff8881446af148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 918.282668][ T31] #1: ffffc9000b5d7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 918.301150][ T31] #2: ffff888144fa0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 918.310501][ T31] #3: ffff888060de7198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 918.333733][ T31] #4: ffff88806dd50160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 918.343394][ T31] #5: ffffffff8dde4150 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 918.359614][ T31] 4 locks held by udevd/11746: [ 918.365281][ T31] #0: ffff888051da8668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 918.379603][ T31] #1: ffff8880589b8088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 918.406786][ T31] #2: ffff888032ef42d8 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 918.419044][ T31] #3: ffff888060de7198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 918.430900][ T31] 1 lock held by syz.0.1158/12387: [ 918.438519][ T31] #0: ffff88801e7921d0 (&client->ioctl_mutex){+.+.}-{4:4}, at: snd_seq_ioctl+0x232/0x420 [ 918.449170][ T31] 2 locks held by syz.9.1317/13182: [ 918.454775][ T31] #0: ffff888055f09e80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 918.463790][ T31] #1: ffff88801e7921d0 (&client->ioctl_mutex){+.+.}-{4:4}, at: snd_seq_info_clients_read+0x14a/0x7e0 [ 918.477020][ T31] 1 lock held by syz.7.1695/15109: [ 918.482180][ T31] #0: ffff888144fa0198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 918.491595][ T31] 1 lock held by syz.5.1833/15848: [ 918.497061][ T31] #0: ffffffff8df43880 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 918.508757][ T31] 1 lock held by syz.6.1851/15971: [ 918.519057][ T31] #0: ffffffff8df43880 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 918.529581][ T31] 1 lock held by dhcpcd-run-hook/15991: [ 918.535678][ T31] [ 918.538030][ T31] ============================================= [ 918.538030][ T31] [ 918.546884][ T31] NMI backtrace for cpu 0 [ 918.546900][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 918.546925][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 918.546937][ T31] Call Trace: [ 918.546946][ T31] [ 918.546955][ T31] dump_stack_lvl+0x189/0x250 [ 918.546988][ T31] ? __wake_up_klogd+0xd9/0x110 [ 918.547016][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 918.547044][ T31] ? __pfx__printk+0x10/0x10 [ 918.547078][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 918.547103][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 918.547122][ T31] ? irqentry_exit+0x74/0x90 [ 918.547146][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 918.547182][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 918.547206][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 918.547230][ T31] watchdog+0xfee/0x1030 [ 918.547268][ T31] ? watchdog+0x1de/0x1030 [ 918.547302][ T31] kthread+0x70e/0x8a0 [ 918.547330][ T31] ? __pfx_watchdog+0x10/0x10 [ 918.547355][ T31] ? __pfx_kthread+0x10/0x10 [ 918.547381][ T31] ? __pfx_kthread+0x10/0x10 [ 918.547405][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 918.547427][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 918.547463][ T31] ? __pfx_kthread+0x10/0x10 [ 918.547484][ T31] ret_from_fork+0x4b/0x80 [ 918.547503][ T31] ? __pfx_kthread+0x10/0x10 [ 918.547526][ T31] ret_from_fork_asm+0x1a/0x30 [ 918.547559][ T31] [ 918.547567][ T31] Sending NMI from CPU 0 to CPUs 1: [ 918.699567][ C1] NMI backtrace for cpu 1 [ 918.699585][ C1] CPU: 1 UID: 0 PID: 15994 Comm: sed Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 918.699605][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 918.699616][ C1] RIP: 0033:0x7f5a106088f6 [ 918.699632][ C1] Code: 29 d7 eb 24 8b 4a 04 48 83 c0 13 48 83 e0 f8 48 8d 44 08 07 48 83 e0 f8 48 01 c2 48 8d 04 3a 4c 39 c0 0f 83 f4 00 00 00 8b 02 <83> f8 04 75 d5 83 7a 08 05 75 cf 81 7a 0c 47 4e 55 00 75 c6 8b 4a [ 918.699647][ C1] RSP: 002b:00007fff880cb518 EFLAGS: 00000283 [ 918.699662][ C1] RAX: 0000000000000004 RBX: 00007f5a10356270 RCX: 000000000000000e [ 918.699674][ C1] RDX: 00007f5a10522720 RSI: 00007f5a105f85f0 RDI: ffff80a5efadd8ec [ 918.699686][ C1] RBP: 00007fff880cb990 R08: 0000000000000040 R09: 00000000effffef5 [ 918.699698][ C1] R10: 0000000070000029 R11: 00007fff880cb520 R12: 0000000000000003 [ 918.699709][ C1] R13: 00007f5a105f85f0 R14: 00007fff880cba30 R15: 00007f5a10529000 [ 918.699722][ C1] FS: 0000000000000000 GS: 0000000000000000 [ 918.702980][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 918.811558][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 918.823367][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 918.833420][ T31] Call Trace: [ 918.836696][ T31] [ 918.839627][ T31] dump_stack_lvl+0x99/0x250 [ 918.844231][ T31] ? __asan_memcpy+0x40/0x70 [ 918.848819][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 918.854026][ T31] ? __pfx__printk+0x10/0x10 [ 918.858632][ T31] panic+0x2db/0x790 [ 918.862556][ T31] ? __pfx_panic+0x10/0x10 [ 918.866980][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 918.872797][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 918.878172][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 918.884337][ T31] watchdog+0x102d/0x1030 [ 918.888672][ T31] ? watchdog+0x1de/0x1030 [ 918.893095][ T31] kthread+0x70e/0x8a0 [ 918.897188][ T31] ? __pfx_watchdog+0x10/0x10 [ 918.901871][ T31] ? __pfx_kthread+0x10/0x10 [ 918.906467][ T31] ? __pfx_kthread+0x10/0x10 [ 918.911057][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 918.916254][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 918.921545][ T31] ? __pfx_kthread+0x10/0x10 [ 918.926142][ T31] ret_from_fork+0x4b/0x80 [ 918.930557][ T31] ? __pfx_kthread+0x10/0x10 [ 918.935144][ T31] ret_from_fork_asm+0x1a/0x30 [ 918.939910][ T31] [ 918.943302][ T31] Kernel Offset: disabled [ 918.947637][ T31] Rebooting in 86400 seconds..