last executing test programs: 16m50.434014006s ago: executing program 32 (id=117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x54, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @sack={0x5, 0x16, [0x81, 0x7, 0x0, 0x1935, 0x9]}, @exp_fastopen={0xfe, 0xf, 0xf989, "2c814a60651b1d242197c2"}, @md5sig={0x13, 0x12, "befc8d6bff11af9777d6d7f97676be3d"}]}}}}}}}}, 0x0) 16m42.818889253s ago: executing program 33 (id=155): open(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lsetxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04"], 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) 16m39.261094984s ago: executing program 34 (id=166): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 16m36.101013015s ago: executing program 35 (id=174): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002f00)}], 0x1}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'sha384-generic\x00'}}) 16m27.136750436s ago: executing program 36 (id=188): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='E', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000100)) 16m20.699476484s ago: executing program 37 (id=211): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000200)={0x40, 0x15, 0x2, 'a@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0xd, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000a00)={0x0, 0x0, 0x4, "1b2ee791"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000840)={0x20, 0xc, 0x4, "f4950fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m7.831680747s ago: executing program 38 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31"], 0xec}}, 0x0) 15m45.515557161s ago: executing program 39 (id=325): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'hsr0\x00'}}, 0x1e) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r4 = openat$vimc1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0xa10000, 0x8, 0x200, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9a0905, 0x4, '\x00', @value64=0xb}}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000004c0)={0x28, 0x0, r3, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000010701010000000000000000010000010c00024000000000000000070c00022f00eef42f98064000000000000056660c00024000000000000000800900010073797a31000000000000000000e6533de8b608f0ed6149b2713a9489f9e825c28051d532"], 0x50}}, 0x48030) io_uring_setup(0x4da4, &(0x7f00000002c0)={0x0, 0x0, 0x800, 0x0, 0x30c}) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x8000000000000001, 0x101100) io_setup(0xfffdfffd, &(0x7f0000000140)) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_vif\x00') r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000008ec0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @private2, 0x1ac5}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000280)="d4", 0x1}], 0x1}}], 0x1, 0x4000010) sendto$inet6(r7, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r7, 0x1) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) 15m27.217585979s ago: executing program 40 (id=401): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x4ca) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="8e77ca3389787867582dd0b9999e5e7ce579fc6b2977bf71ab517f68a8ddb58b93c91675a4b5dde502242a66491162f75f9b28f59cd9746ff7140fde3923b99bcc4c2cc72443169b2ab2f90a0f03dd842adba400500327de779dc66f3ebd32a81ebe", 0x62, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) 15m22.869551611s ago: executing program 41 (id=417): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0xbc, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0x2}}, [@TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0x7, 0xde, 0x1, 0x1, 0x1, 0x9, 0x1}}, {0x6, 0x2, [0x1000]}}, {{0x1c, 0x1, {0x3, 0x81, 0x8, 0x4027, 0x1, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x8, 0xfffc, 0xffff5029, 0x0, 0xfffffffd, 0x1912fb1a, 0x5}}, {0xe, 0x2, [0xc5, 0xf000, 0x2, 0x132, 0x101]}}, {{0x1c, 0x1, {0x7f, 0x2, 0x200, 0x1, 0x0, 0x2, 0xf5, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0xbc}}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e74657200140001800900"], 0xdc}}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r6, 0x1ff) sendto$inet(r6, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r7 = userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) fcntl$dupfd(r7, 0x0, r7) mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil) 15m18.356636297s ago: executing program 42 (id=430): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0xf8}}, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1}}], 0x1, 0x0, 0x0) 15m0.505352171s ago: executing program 43 (id=473): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"44ae102632ccc6ceccff8da241284338", 0x0, 0x0, {0x80000000, 0xfa}, {0x8, 0x3283}, 0x6, [0x56, 0x800, 0xae2, 0xffffffffffff5995, 0xe66, 0x6, 0xebab, 0x1, 0x7, 0xd, 0xcfd6, 0x4, 0x100000001, 0x0, 0xff, 0x7ff]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000100)={{r0}, r1, 0x0, @unused=[0x8000000000000000, 0x6, 0x81, 0x9], @devid}) (async) timerfd_create(0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000001480)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f0000001180)={0x2a8, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xdc4b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x146f}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd86e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ab95068}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x26}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2248}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}]}]}, 0x2a8}}, 0x40000) (async) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x8000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000001500)=[@mss={0x2, 0xfff}, @window={0x3, 0xa, 0x2}], 0x2) (async) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000001540)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0xfe, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x7, 0x1, 0x3, 0x3e, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x3, 0x4, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xc, 0x7, 0x58}}]}}}]}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x0, 0x9, 0x0, 0x9, 0x20, 0x5}, 0x14c, &(0x7f00000015c0)={0x5, 0xf, 0x14c, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xe, "18133ca8061af263f72f3f79ac516638"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x5, 0x9, 0x4, 0x33}, @ssp_cap={0x1c, 0x10, 0xa, 0xe, 0x4, 0x7f, 0xf00f, 0x86, [0x6000, 0xc0, 0x3f00, 0xc0c0]}, @generic={0x65, 0x10, 0x4, "3afab16a8fdd9f84eb09f8a439947bfe4a2dc11c3cee8147c6b3f6e1c2293b92ae2b9aa02fcf58d3cdcc835d505d8045c6cc22edfb2c9ab9e15914e9a213a35c04755a0fc8c717fb0dae9b58e5b1206c1bb2397069ee8464ed363db11e60a9ca4f5c"}, @generic={0x93, 0x10, 0x0, "3999977a21557ca9d75fb7402793e9df7a392ce4287304463b8a48b5d1d35cc3ca905bd93d182f85a36c8f2f799cc371bed9edeb8e8ca5ce87b795e716de061f881186908591994d0c01d82c0b9ddfe22710557cd0bcfd641179d37ca662d54769bc315ac035c16b569e3aedccdb8f5bb332931409042430cf58207c249615a1c540b509def040140dd4fff699689949"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "8471543ae76451e5e621bae5917e3c4e"}]}, 0x2, [{0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x100a}}, {0x41, &(0x7f0000001780)=@string={0x41, 0x3, "c7fbfcb08c61d9e15309833e35af8842cfac5f20eeaee77b98cef3653b04d8839fa71f06fd8d8ddd6f8ea0aac999c6e1299866258d7f556eaaefc7237ffce8"}}]}) syz_usb_disconnect(r5) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001840)='devices.list\x00', 0x0, 0x0) r7 = socket$kcm(0x29, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000001880)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001900), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000001bc0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b80)={&(0x7f0000001940)={0x234, r9, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x234}, 0x1, 0x0, 0x0, 0x4008004}, 0x404c004) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001c00), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r11, 0xc0c89425, &(0x7f0000002040)={"a93d4391d7078cf29fe5fc77bc0254da", r1, 0x0, {0x8000000000000000, 0x956c}, {0x4, 0x2}, 0x0, [0x6, 0x7, 0x6, 0x2, 0x1ff, 0x633e, 0x782, 0x3, 0x7fffffff, 0x8, 0x4, 0xa7, 0x100, 0xd, 0x6138, 0x1]}) r12 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r12, 0x0, 0x26, &(0x7f0000002140)={@private=0xa010101, @multicast1, @loopback}, 0xc) (async) getsockopt$netlink(r8, 0x10e, 0x4, &(0x7f0000002180)=""/154, &(0x7f0000002240)=0x9a) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000002440)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0xac, r13, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x5, 0x30}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2a21763fa9cacdb914d4709dc2"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a8a5cc3cdd723a37d06b46c2a6"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "6393"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0ca898bd75"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "965d22ec6a"}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "0428d2f33b1ac9073096b965"}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) socket$inet(0x2, 0x800, 0x100) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000002480)={0x1, 0xffff0000, 0x1}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000024c0), 0x1, 0x0) 14m57.001544874s ago: executing program 44 (id=484): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000300), 0x4) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf2514000000"], 0x14}, 0x1, 0x0, 0x0, 0x40c1}, 0x4008840) sendmmsg$unix(r2, &(0x7f0000008000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080}}], 0x1, 0x80) 14m22.778432787s ago: executing program 45 (id=639): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r1, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r1, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0), &(0x7f0000000400)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@rand_addr, 0x0}, &(0x7f0000000400)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0xd0, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x60, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5c, 0x4, "5ebef7e26d864b104a291224c3eb261edaee230c7f49e364ce8a75427aed939e833bcc342c6e1af8f5ffa1f8b37119e0ca1b19faafd2abef6ff2723faffe3d4480d373a48f850474257c804b4deec36080b9af1fdbcb3bfe"}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x840}, 0x4040000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, 0x0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="58f837cab1edd61f31b38e206bbef164000000", @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf250e00000005002a000100000005003700fd00000008003a000100000008003400281d00000800310066b4ffff05002900000000000a000900000000000000000008000600", @ANYRES32=r9, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20000181) sendfile(r8, r2, 0x0, 0xe431) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80000, 0x4) r11 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x9a02, 0x0, 0x90, [0x0, 0x20001130], 0x10d, 0x0, &(0x7f0000001100)=[{}, {}, {}]}, 0x108) (async) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x9a02, 0x0, 0x90, [0x0, 0x20001130], 0x10d, 0x0, &(0x7f0000001100)=[{}, {}, {}]}, 0x108) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r10, 0x800c6613, &(0x7f0000000280)=@v1={0x0, @adiantum, 0x10, @desc4}) 11m47.232135211s ago: executing program 46 (id=1443): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x3c}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000400), 0xffffffffffffffff, 0x400800) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000002c0)={0x1, 0x2}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r0}}, './file1\x00'}) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)={'#! ', './file1', [], 0xa, "4b05ab0c1bb6ea4229f2ef0a753659cfd09738c940c93528151d7bc458f92ba8c49d0353aa8d01c77f2d7672e07ba3e40b3153db2fc3767fb4b2fb4bc1f273328f7d1de8235e3082a25b72bf"}, 0x57) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = socket$isdn(0x22, 0x2, 0x26) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c7ce360863078020abd0010203010902120001000000000904000000ff"], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYRES8=r6], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04002420"], 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r7, 0x0, 0x20, 0xffffffae, &(0x7f0000000200)="5cdd3086ddffff6633c9bbac88a8862600dffd00139fb7a884bdfc14f48788a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x80, 0x2002) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x2, 0x0) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040ef174760000000000001090224000100da88f75b033d2664030002000921000000012205000905810300000c0000"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0xc3072, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f00000000c0), 0x1003) bind$isdn(r6, &(0x7f0000000080), 0x6) 11m24.584385376s ago: executing program 47 (id=1530): r0 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\xfd\x00\x00\x00@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x5) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000101"], 0x1c}], 0x1}, 0x0) (async) fcntl$addseals(r0, 0x409, 0x7) (async) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) (async) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) mkdir(&(0x7f00000000c0)='./control\x00', 0x180) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x3, 0x0, 0x0, 0x0, 0x8}}) (async) rmdir(&(0x7f0000000040)='./control\x00') 11m10.063654691s ago: executing program 48 (id=1593): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee1, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000223000/0x2000)=nil, 0x2000) 10m53.127321986s ago: executing program 49 (id=1673): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@setlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x54}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) shutdown(r0, 0x1) 10m42.202334801s ago: executing program 50 (id=1704): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x486, 0x0, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x26c0, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$UHID_CREATE2(r5, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'geneve0\x00'}}, 0x1e) 10m25.586083355s ago: executing program 51 (id=1770): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, @raw_data=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40000000]}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, 0x0, &(0x7f0000000300)}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000007884d7b3d3cb3605cb01f00755d245", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) unshare(0x22060400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r6}, 0x68) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='afs_make_fs_calli\x00', r7}, 0x18) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fe8000000000000000000000000000aaffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000f8ffffff0000000000000000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003bfff80000000000e00000020000000000000000000000f8ffffffffffffff000000000000000000000000007f000001000000000000000000000000000000006c0000000a080000ffffffff0000000000000000000000000000000004000000400000000000000000000000ff020000000000000000000000000001000000003c0000000a000000ff0100000000000000000000000000010000000000000000000000000000000000000000fc010000000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000001000000000000000000000000000000ac1414aa0000403a2b30546366790000000000002b0000000a000000fe8000000000000000000000000000000000000000000000000000000000000000000000c8c528e2e538245d8cc45edb92d4ad0b7c8febc3b0515bf7dd773a8cea055edc3971f81ccf2a5d12a193a67db7aeb87f2642bb5b732f0099934b6270f8b5a4"], 0x1fc}}, 0x0) 10m22.301977656s ago: executing program 52 (id=1784): openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x40480, 0xaa, 0x2}, 0xfffffffffffffedd) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000140)) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ssrr={0x89, 0xf, 0xce, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1]}, @generic={0x83, 0x2}]}}, {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\x98\x94\x8e|:\xae,.\x14w\x80\x1c1+\x11\xbc\x9c\xd4h|\xce\x9b.\xb9\x9e\"\xa2\x80\x8a\xe5\x8b\xfdV\xf6=\x7f\x00\"\xabY@>9\xb6q\xcb\rM\xafi\x9c\xb8\xec\v\xc8\xa1K\bl6\xd7\x97\xaeG\x01\x02P\xdd\xce\xd5\x8c\x11\x02\xc2'}, {0x20, 'n\x89CD\x8f\xb2\r\t\x90\x15etdevs\x00m\x00\xd0\xaf8\x18\xd5\xaa\xac\fd\xce1\xbd\xbf5,\xa1 \xaak\xb4/\x8c\xe0\x9f\x8fo\x8c\xb9v\xdb\xfa\xfcV\n\xb3y\xf7Y0\"\x84\xad\xdcvc5H\x1e\xd7rS\xa3\x1c\x87\x13K\x84\xba>^\x04\xed\xa3\xb1\xfa\x89R\xb3\xdc\xed\xee\xe5\xbc$\x7f\t\x90O\xf6\x9es\xc5:\x7f\x13Y!\xadv\xc9\xcd\xf2[\xef\xf0\xd8A3\xb4\xbe\x97\x03\x88\xc1<\xc6\x02\x93\x83\xacZ\xa6@2n\x86\xaarl\x04f\xc7\xd1R\xf4\xe3b)+\xd0\x01\'\x86f\xdf}\xac\x8c\x99\x92\x19\xd8\x9c\x9c\x88acO\xf4\t\xf0\xb6\x15\v=\xaf\x05\x06.\x9d\xf7\xb8\xd8-\xbep)\xd7\xc8\xe2\x96\xab\xfbx\x99\xff\xb7\x1c7\xaf\x93H1*\xe5+\xf0~\xa3\x8c\xf53UKzg\xdd\xfej\xa5\x17'}]}, 0x133) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6dcf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40081) 10m18.245228227s ago: executing program 53 (id=1794): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r3, 0x0) setsockopt$inet_int(r2, 0x0, 0xb6775afec21d5ef3, &(0x7f0000000000)=0x80000000, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x74, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x8000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x5603, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x80a0000, 0xc000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10m13.184718882s ago: executing program 54 (id=1802): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x8081) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x10003, 0x0) r2 = socket(0x1, 0x5, 0x3) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf560832f1119c5f4}, {0x0, 0x2}, {0x7, 0xfff2}}}, 0x24}}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e74657200140001800900"], 0xdc}}, 0x90) quotactl$Q_GETNEXTQUOTA(0x2, &(0x7f0000000280)=@md0, 0x0, &(0x7f0000000400)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r5, 0x1ff) sendto$inet(r5, &(0x7f00000001c0)="ab", 0x1, 0xe61e2840a154b0c1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r6 = userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) fcntl$dupfd(r6, 0x0, r6) mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil) 10m6.107282401s ago: executing program 55 (id=1809): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x4c8}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 9m56.7982681s ago: executing program 56 (id=1818): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRESHEX=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r1, 0x0, r1) read$FUSE(r6, &(0x7f000000b800)={0x2020}, 0x2020) write$tun(r6, &(0x7f0000000400)=ANY=[], 0xa2) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000004c0)={&(0x7f00000003c0)=""/238, 0x101c000, 0x0, 0x37f}, 0x20) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x3e, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getxattr(0x0, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0xae000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000040)={0x28, 0x0, r8, 0x100b, &(0x7f0000003140)=""/4107}) 9m53.5768619s ago: executing program 57 (id=1831): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r3, 0xffffffffffffffff, 0x4, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}}, 0x3c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00000000000000070000000c0002800400020000000000000000"], 0x20}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) r6 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000100)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = dup(r10) ioctl$KVM_SET_MSRS(r11, 0xc048aeca, &(0x7f0000000580)=ANY=[@ANYRES16=r7]) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) r12 = request_key(&(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='+\\/\'@&-\x00', 0xfffffffffffffffe) r13 = add_key$user(&(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000940)="530d60c37dc86de35311e28caa2900000000f19a1b2ac48d6b7e3afd79b5432d5c36bf015a757a8d3cfc2aeb7a097a86a4be8e067fbef1f3e3b14517be114b1b3e1cbda79803727fc4cff398cfebbb03aa8e0a338bfc5316140d5f0ff23c7d768ce8e818a6a3eaf72770071f4fe7cecd3c2bda239b0000000000000101449357e4f334154ee459fa286e280968e9d7971c31597113f91c4dc960345c1c7112daf2d664800e3ccc9bffaa68554b7455d451deeee8ddc7cfd66ee7c09df50b597bb5ad2f694351472c449d36cd39b63cfd681666e559d553c55acd49e8507e9c007fddce80f5f671f6a7bdce623f870b2c575b9faca813dfde862e3a69ad4194868e49c6b3cd99909d8dd40ca0343d1db5ee99ff892e85cd855b9718064c2c06366e18", 0x122, r12) r14 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe) r15 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r15, r13, r14}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) 9m25.347360588s ago: executing program 58 (id=1912): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r3 = io_uring_setup(0x23d8, &(0x7f0000000440)={0x0, 0xfffffffe, 0x400, 0x800000}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x1e, 0x20000002, r4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x98, 0x1d0, 0x98, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0xf}}, @common=@set={{0x40}, {{0x0, [0x2, 0x2, 0x4, 0x2, 0x0, 0x2], 0x1, 0x5}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x3, 0xc, [0x3d, 0x27, 0x5, 0xa, 0x27, 0x3c, 0x24, 0xb, 0x1e, 0x14, 0x20, 0x1d, 0x32, 0x39, 0x2a, 0x10], 0x2, 0x3, 0x80000000000}}}, {{@ip={@multicast2, @local, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0xff, 0x1, 0x52}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x0, "96bc", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x98, 0x1d0, 0x98, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0xf}}, @common=@set={{0x40}, {{0x0, [0x2, 0x2, 0x4, 0x2, 0x0, 0x2], 0x1, 0x5}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x3, 0xc, [0x3d, 0x27, 0x5, 0xa, 0x27, 0x3c, 0x24, 0xb, 0x1e, 0x14, 0x20, 0x1d, 0x32, 0x39, 0x2a, 0x10], 0x2, 0x3, 0x80000000000}}}, {{@ip={@multicast2, @local, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0xff, 0x1, 0x52}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x0, "96bc", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) syz_clone3(&(0x7f0000000580)={0x200000400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 9m7.285009842s ago: executing program 59 (id=1977): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="10100000000000008800000008000000bd557120af7a58289b6f26d4e77cb1f23de6e9121f958b254d3ca49f19b55208ef4d661a3b5a9da8197dc8ac8ec14dd5d6138197fb16461478545ad944784ee4da0edac53feb4aa5ef0efd8896623f1307bab0429f5e2e82e7e06c7453ecb948e2f1ceb646a50a2abbef1fad4f9920d4e92cb337039f23f02c7eac2396f3c207e0d5664db75774f3b9d5d2b8ef4bc630c269fc0030d8880d33d5c4602710d9680c5c36419d7888f9ca29e8605ee76a6df51fa07f3112fe578a076a013968797afdf944bbeb9d3876ab186fc3608c29f88203bd7660e1a49847d9cec8f18d29526755a305ccad24e2a190227bed34c89f46792b4b55849f84f5f3693748b0d95cb1c0110dcd9e7d2b79dd4e97954a2656d5e932f8ad1fc4d206191e4257dc50b542acdb0dd3769b9c0c914dcce560c5f72ac6d9ef2003c152ad0bbd4f339ce3558e18b1dcdbce4436fd15fc5475cbba9a3b5fee2f9b2108fc4a678d211e21857eee8c3459904910acff8d3961fff5c5b966e93bf1203573e005da8da9b105fa915a5d4530970e0c38592391b71edd89c5b52a13a75333ddb8a60b1068b8e0e28b3f16a0f2ecb42d8423932be6e4112555e68e293621d0b62b56d8c80542ca84896d08b260b8e54efc4c72f3595271f53bf7983faf198231ec234ca75424f99bda5a71c120adf67c9228bff5ed1e97c58fb79ebb131501b9619803cbbd170fe68eee1ddea62846f99064b33a5ca4eda0271a7a852fba1f7fbaa432caaa6a612d792a92d137bd9f747b2e7cc5bf2af21d178a445d30cadf6b9d6bfc0ac08be5e28baff648e1bb7479b53a0e1242463b7ac5074c294b3f464ae8c4aa67bc08154621e2ad7f9ea9f34aa36c713c759ecf14c265d79e54ef1c6f5ee8a32c531651feb407cc04764bbedd8d5ece871c6bfedbd1a4dcf54146dd23848db3fcd52f6dc164d38ff053939dd9cdc6a494a7cbf7f4e946ef583f501a3614658f087fd39e590746b54570db2bfa721b7685179e639f6db6213fb6ffdcd67b7bf896894c1478d6115de6f6078d75ebc2f60596a0ea2a5d435771f1f83503af68ed201cfef8ffd1eceee0598b9dfb848a816329a4817ddcae8f9d10b9279e8397ceb574c41d689e215e3671ccf2952bd213f52b37945ab07ce80932196238bc54fc45b64c5345846c2d4a2adeefc20d2e8e78f8f553842805db429d665af96fa9a4455bf220982c86195af7eabd71c4c612424cfb9418196121a52dbd6ec651bc8ab39351ee85566e40e471ca8bb97bf0357012b4db49287be1bb247a0d108b991b1dbbb94e5469ea56b9d00f8b14209a890772a1e907fdc3c2bf8b749b99233553c6b2c85076e2757a49e98961c735a19ef107749957bff182a765a54f0cff4ca91f371d99f5facafc51d7c40c152f9e0cb0b466d6da2e002405392ae5451cf7d25ebd7682756974e3495da625b9274394d3042e244ee6601524012942c9525c5286a6f4280aeae460ef55f60724eaf58b2707e6b9595f36600e4ff3fddfb87879681925d26eb5213d08b62896f4617b4aea634e11e3fd232840602b98505b10fa4b8f07dce27345e4816be45fea5e23e400ea499347b2a60c4814166a7715f691bdacae290d43ab335963cd31e9f4cd8249dd856e050f9bcc71af5136282478faf5fcf79667f91fc3c37799f4c24a99ab5d64f633135bb613a1f8175a73d8cb523a7535e562f6aa4360697fbf3f059571c96582dd12dbba14ce3906f9c0afd9cef20758734d5f8cf5f9f22483dd6acdd4c68a36f86b9ad6c03d98b4e891a2e29be2df21283aaebef17899d603b20cc18b7929b56b6bbb59cc239a78dc391eb64b13a7a2872c959ba585ff2d24b5e4c8e26a25099496c00c2416ef32cd839fe38c14741c5f8f6abc1c5615dc69e9a1af7d1008035030b10c932f00eb2c465d4e9b67e95c4de3cfeb0381ccfe261cdbdc7424f01084b89002e3f53a9382e2822cd859c407b1316911dc7d1407ab954a29ebbdf54108d9892bb46573c505ed3ef113389631cbf3723ce6f64f9f144456b3f0f3eb4f7bbf6dd4616129d193636cefdf0650848e5f9a75100b8cb6891e3aea0d9f35094dfec41850701ed74510fb9049041a530734811b9e8699c4bf74b0e54ae0a6e3a29bc940481a7300340f7686eb8f7fd88a6155f08f904d21c8092c2bea0e83c92926fe707d7ded357026e760873e427a2b4de136a2b5adfc3f12dbbda8528840fa471d17420b2b4f3924028ee81988befe8e61bc5dfbdbfc47fc22ac93407b4af78d908ec25680fb2286e0740e3a878a79b9a49556f1d525a55389f122a0950daa3443e40f05ab0fc778782e621a18191b6f9cf1f238ec42b76cd80d54e03f7e601067c91f2b7112e6640dc49105e2c7afbefbc7346b8d09b9676989db7687a715c8179b7d4621e7f06f5550ff7ffac732ef055256cd4688bcf18650efc94fe3cc4006a6bd2521f72e9e14cba8ba4d5f1691aaf772b43d4fc139de7dda278a895916d04e8c4ed7d0ece4edabdb46d73d4b9bba8c03bfb367c37fa821e45086b2ece618699288a8a797a0d57e666043682b20d142d1e6fcac7476bc5929ecc0208d0707f504dbbba6bdefeca9b0b0abfb8e59d41310352faf2ca4f2d654734f802a996521faf6afc38de9dfbd8e7262a485a54b82075b2c84ad2f476bee38f0f2f6351270b9f169b25fc30ad405c9421d3940cfe86a0f32d0c4ac415b998724adafdc7bc107e26bb9c657506422c8fd9e0ecacd84203508dbfb88138bd49a0932f761ca8ff73456ba5017b605f0c4d3d48ae4b41b1c4a454803cb4bc974ef907f7fc3f2e8479160c96a3f1e5fa9b4d101153552e223d22ccd8d79c800889dfb5639a0bc5f5ce579433d002af1b67058567dcb53b644dcedec154397dd9ec69653fcb9701cee2d9146cb2f6e882834d41412865b28741e3f31c6d18be31d9b699167ef3821b2efbe42bc6f06055d4440c7550e23a67b9e9f7b1a6ed4368956934d97579a1c2d843563bea22ade65d34bdae28089f5b2471978cdb915c9cb113b8cca8316c9fff4909caa958fcfa931b21c40d76bb52666eea9c43a81b2278d0a3d65575712f3965e6cf4c63a29752146233c1099d9bce2deb2b5e803e3a59d13f42c9f598fdaa1312b61dcfd21c55b2582ec9cf72180cc5afb0ed908d9a685d17e08cec9c320c85a0cc17cf9aee48d08acee1cb4e42134d41836434d7240e93332117dff720e95e413319b3d5a056b65ab143568f0caeaef33aba78906683d186d1e9466d1fd66c3dd5b6a93965d998dc843020bc6e934b54d3852805e517818a155192d184e96166dd0da9c349d6afb802211e6abd6f03f7f7c9aede02ce8cd99de255daff4536e8c5f081aaf7d6194dfe952e49edce1ebf8e267c40f2eeb8638c0fae91b7e5aefb019a2387b290f7a66ac9bc5e7affca0041267eeb9bc6a523f2347cc7090e20cab99b0e33162d2899897396a684722468b10e79d8f9cc5a170bca13293cf6ca66c9c94a5915507419999772161eb0725de5aa947ec5ab64e1bb8fe0db012ea7eb9bf18ae0da2e9a20bbed8b634d353981fb803d79235083bb8886adebbc68ced9a6f86a76f3b3d8741fddf0120a71770e09c452612f40e9d5d0cdec45f2520a53f4a61ad79cb3b12a352d2b0831c43afc7a8a7340886ee180d8c35ea53584afe208d56b1291223792ed7a7fc50ea7a63a3e798db25d199c13421df7043904f347d7fa78ba451853e4b6432dca18ce13f83cff6e5b97613b59198596ed2cb6d28b72851efec44020099bf1b235e3abd8bb581a485551793a0e156e5bd78d66d3e5d74196c4cfdfd31a74e46ee480f305d27196de66d88f61f20ef325698ec7d86052d3bc50362e89f84f04597e4dbe8e47326b25e71a391940c1daf4021557ca4d074ea79f11d0cd28ef223b43417009443f340cbd59bad26086216eaa9ca32bf8de6f32c4db47c2b77c922439a9ea53ea38273694c0c4f31b4e0566fdcc2d842d2bc9967ec6e1a9189f904ff442b7f1cb319523a53ff9cba1b711b96d04c764f7043a25518968e9a072940190b872c623463dac8f21345558babd6190ae6cf8e953e24f2e1903745d56989d03b2d8082df2509adf4e169f35ddfcb04da074fbf9bee638d435203dcf893a420580781ba6009a8af41655da456b2ec3471f5502b5b901ed823c01213c2f23c90936915edbaf762f99834cb9610cdabf6e39b7dbcbc2f331d64cf1cd60972d4d0327ad875686cf14af3efe9215f7fda60153fcb99fd165e2e87801df740a7e297f01df581b63763a3365c6f4cf5d6bf94441623ab2df3d7722da82445be41cd7e32cc11bdcf758382c91256ece719fbb613074511db372805bf544ee8cb2b02b75ae4e7b79c7c0486c1a2bc35498807b4122faa39dbcbc860dd3da2a878f3274f6923e49508731b358b21d147237107fce09774c7d2ba0b49042f9a87536aadf6c12157b02ada6537e7f02d9451b42ee8f55cd3bfcd40d2827830f40c452f8f4f201db6166742226b13316b10682d7ef779a205a247b7bbd1c265df8b7bfdae3d1fec59f412f46b44aabd814735a2638021e39d936d6183064b1d7316fb43a94c82c5db018bb315ed937785ad6e62e1a79c9fa28f9dba5cde8ef6ef83e07ba2399bd2ca801ba29bb3461a21fe4d26655b6e5e5c52f5d0a4afa1338d179a3bc408a474744bc59bda45fa24c84535f097656baf5216ea0b3b86e5b1b1dadd2db0df91fcebb9378e959aa850e85a057b6c230dd688b82c86f5f6a3cd744a286d3c3bcb12c3ee2d1c979efb8a63aa0a8fded11a9be3727cfba068e9074c481045b5a29a85d6184a4523585653614e67a9d98ab99a64296cc44251a50281b78d55b47214757886d9207b268215ea0f7d60c6609b976d275a0a973b02a2cc733aa847897fa5043a062180ade407ba6a365117b923ef7aee3237e64cd4e20256b0bf729fada1667cb8760f78e8b411d0f6c7478454d28476f0ee41584097547d41138339ae1d5a039946699d44eb9a4535cdb0142eebfd26103a7bbf74592ee3f18ab6f8c4834b164a58ca3de46cc99ee44531a8a42230307af9b93e1517fad1b809c0cae04325bb83dc552e76cfd31159b78dc51f5d95e9cf96bc1d1bc5482902e8125d4003573ff08f2a2c5213196a20e8028151efbef1e2058ec44620d022ecd70e109d2b58b2e8ff7e697a3ff434620bfbc9a9df96b24f724ae3ada53c2c7a6a61346ea05201a6714a03f36237cb40940ac6a2bfaf5452a180596324bd6303a5b03084802d759b753f235cd3e9efe542a52721f46dd7f4116b84dd7f8f0dd5e348d9db7a9fa5c9986ece3c0276540adea768fb816133bd8af987a8ddc15600861667a10be8ecb9135a558aaba7bcabbf0afcdbb4c0a1ba55182c0323771643e40bcf0088df0f1a7c7e267cf5a06385550ad8db6117b878ce5f155a5783c5e18d92b46d7f23bce48fe64cb69ac4693499b05d6982d3c375dfbbe4256652b38cfcf12898e9ddb18b6b4902373cc4964f674480bb9c564d0f943fcc5fe02ab4a5e5f0a6f6c53a848cbc4a88e90e660612833d79c0f04243be2386641b2b1ad16113eb8dc59598ce40e50df33396ff42a7e78d6f0af7597f889c67eed168ad60397cd0d6d966addc70e93f7ce3c7cec8f2e277cacc67f2a9713cdd292aa91cfa349be53facf80cb71c186ac2d83ecef7b7af6e01733fa40c690ce914d0beba04aabe51bcde74073a5338b17b9d92ed3fb7c6e7b1fe0f3343f6514e5cf7561fe265f2498afc34be8ead675b9e2ebf7a76124601c953087e4c5122f8f4b87942decf2e874648ca6c287a8c2812e786f1f614aa25e826e40a17067cb8d35f7bc3866d09df7d00d0c0ab88813c102014960feeeb072abd5c661fb6200660080406b3a0a6d9d12438297e0efad78d94c827f6b57d46fb60a0e3e01e10d34e1ebde5abc5201352fc33ee3c7489efd80aea5b7e6864fc0228b97bc0022aba45ce726236490eb2c8b901ebd2cd493bfe21c597578fe2ffae869db4e9baa000f215f6251adaa8efa55869"], 0x1010}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 8m10.669855953s ago: executing program 60 (id=2199): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) r4 = dup3(r1, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) r5 = openat$audio(0xffffff9c, &(0x7f0000000000), 0x81, 0x0) unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) 7m54.010774708s ago: executing program 61 (id=2291): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 7m40.762466341s ago: executing program 62 (id=2346): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 7m20.977092152s ago: executing program 63 (id=2430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90b24fc600400037a0a0702000e1c82c1372d3e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, 0x0, 0x0) io_setup(0xffffff3b, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x1a103e43) syz_emit_ethernet(0x5e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x4, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}]}}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = gettid() tkill(r4, 0x7) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x3a0, 0x0, 0x1e0, 0xe4, 0x2c0, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xf, 0xf, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff]}}, 0xda84, 0x5, 0xc, 0x8, 0x7fff, 0x2, 'batadv0\x00', 'nr0\x00', {0xff}, {}, 0x0, 0x4}, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0xf}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcee0d63e2737cd7e114985e4a22a38d83f532a79382462498835a6c6aa1"}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffff00, 0x6, 0x9, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x7ff, 0xf, 0x6, 0x6, 0xf840, 0x0, 'vlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x0, 0x58}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3ec) ptrace(0x4207, r4) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000007440)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r7 = socket(0x23, 0x5, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x3c, &(0x7f0000000300)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000400)=0x10) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) getpid() recvmmsg(r7, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/129, 0x81}, 0x40000000}], 0x1, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 6m52.387534795s ago: executing program 64 (id=2588): r0 = landlock_create_ruleset(&(0x7f0000000180)={0xa42, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) r2 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xd, 0x200000015c831, r1, 0x20c4d000) ioctl$SIOCGETVIFCNT(r2, 0x89e0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=@mpls_delroute={0x24, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {0x1c, 0x80, 0x0, 0x9, 0xfd, 0x4, 0xc8, 0x6}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000840) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "de8957e77be2b539dab7ff4089ccef5afc730c4b17bad556887d24d25532c819"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@local, @multicast2, 0x0, "e2efb77af24ce3055db0e168ed7dbd48dd4b09efdc20d8ac8a838dcbd1a2a6e8"}, 0x3c) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000027c0)=0x2, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0x80042103, 0x0) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) 6m51.055409358s ago: executing program 65 (id=2597): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x2, 0xa000) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0xa0363159}}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000080)={0x7, [0x3, 0x1, 0x4], [{0x9, 0x7, 0x1, 0x1, 0x1}, {0x80000000, 0x81, 0x1, 0x0, 0x1}, {0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x81, 0xa2d, 0x0, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x3, 0xd44c00, 0x1, 0x1, 0x1}, {0x4, 0x2, 0x1, 0x1}, {0xe17c, 0x9, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x0, 0x1}, {0xfff, 0xffe00000, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x9a7d, 0x0, 0x1, 0x1}, {0x7, 0x8, 0x1, 0x0, 0x1, 0x1}], 0x8}) r3 = syz_open_dev$vcsn(&(0x7f0000000240), 0x8, 0x129d00) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000280)={@local, @multicast1, @empty}, 0xc) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x100, 0x8, 0x4000006, r6}) 6m40.883637443s ago: executing program 66 (id=2630): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x40}) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, &(0x7f0000000100)={0x2, 0x0, @raw_data}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) (fail_nth: 39) 6m23.984588554s ago: executing program 67 (id=2712): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) ioctl$KVM_NMI(r0, 0xae9a) semop(0x0, &(0x7f000001ac00), 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x466, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000002780)={0x0, 0x0, 0x44, 0x0}) r3 = socket(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e26, 0x3}}, 0x10) recvmmsg(r0, &(0x7f000001ab80)=[{{&(0x7f0000000380)=@l2tp6, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/131, 0x83}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000019640)=""/156, 0x9c}, {&(0x7f0000019700)=""/204, 0xcc}, {&(0x7f0000019800)=""/134, 0x86}, {&(0x7f00000198c0)=""/131, 0x83}], 0x6, &(0x7f0000019980)=""/4096, 0x1000}, 0x6}, {{&(0x7f000001a980)=@xdp, 0x80, &(0x7f000001aa80)=[{&(0x7f000001aa00)=""/105, 0x69}], 0x1, &(0x7f000001aac0)=""/181, 0xb5}, 0x2fff}], 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$binfmt_misc(r5, &(0x7f0000000080), 0x2000011a) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0xfffffffc}}) socket$nl_netfilter(0x10, 0x3, 0xc) 6m23.978485879s ago: executing program 5 (id=2715): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_NMI(r6, 0xae9a) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x8018}, 0x10, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000400)={0x2409, 0x1}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) landlock_restrict_self(r8, 0x0) landlock_restrict_self(r7, 0x0) r9 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) write$UHID_INPUT(r3, &(0x7f0000001980)={0xf, {"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", 0x803}}, 0x1006) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r7, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) 6m20.032207553s ago: executing program 5 (id=2732): mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, r0, 0x500000a, 0x10010, 0xffffffffffffffff, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, r0, 0x1, 0x8010, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="53f6eff268d75de6c71952bf82966946a5c5f210d2e60766e42322aeef059630f29e5418bda676935e262000bdce13fba9ccb00161bcbf9333457e87d004d15b20021e13117af5db", 0x0, 0x48) r2 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="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", 0xfe, 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0x1) r3 = syz_usb_connect$cdc_ecm(0x5, 0x5f, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x3c, 0x20, 0xd6, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0xa4, {{0x9, 0x24, 0x6, 0x0, 0x0, "8408fc96"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x10, 0x9a58, 0x6}, [@obex={0x5, 0x24, 0x15, 0x4d1b}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x7, 0x3e}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8d, 0x40, 0x4}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x2d, 0xdc, 0x67, 0x10, 0x2}, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x2, 0x97}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2001}}]}) syz_usb_ep_write(r3, 0x4, 0xc2, &(0x7f0000000380)="0e8732b5c60e8bf2544d01b5ed0618361b590f089f9912e26fb10efa117a26503be5db7e7806bbc13dc043eaf8324d707451009fece0ae64bd3864e6ae4f5bfc8f49d78b3734038dd9926c4e1d792c0f0cc425f9d2a0e202c7fb19d9a372e24ba30869a66d767473d09b65dcc61c525778fbd8df9088593bd0cff8ab3c65c2620b8f00575fe562d8f05a0734150a1c60d66287c99510268aad215c3415d7a47de9660089a918c3063934cced884b6b67406870d83159bf71d180c1a47b4a6635e661") r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) r5 = signalfd4(r4, &(0x7f0000000500)={[0xc76e]}, 0x8, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000540)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x10001, @local, 0x1}, @in6={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0xffffffff}], 0x48) keyctl$invalidate(0x15, r2) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f00000005c0)=@generic={0x3, 0x100, 0xfffffffffffffff7}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000600)={0x7, 0x9, {0xffffffffffffffff}, {}, 0xffffffff, 0x401}) timer_create(0x3, &(0x7f0000000640)={0x0, 0x7, 0x2, @tid=r6}, &(0x7f0000000680)) write$binfmt_elf64(r5, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0xae, 0x40, 0x2, 0x5, 0x9, 0x2, 0x3, 0x2, 0x382, 0x40, 0x2a9, 0x0, 0xfe01, 0x38, 0x4, 0x2, 0x81, 0xe49}, [{0x2, 0x2, 0x87f3, 0x7, 0x1, 0x8, 0xe22, 0x6}, {0x70000000, 0x9, 0x3, 0xce43, 0x0, 0x100, 0xffffffff}, {0x4, 0x6, 0x2, 0x70eb, 0x1, 0x3, 0xff, 0x9}, {0x5, 0x8, 0x9, 0x1, 0x22e1, 0xe, 0x80000000, 0x5}], "2fee7565eec3e42ca124e0672d42b86cecb7046822ad7e5a4cc510bdcd9c3e281fc34ec5d22e469e332b240b", ['\x00', '\x00', '\x00']}, 0x44c) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000b40)={'wg1\x00', 0x900}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f0000000b80)={0x1, 0x0, 0x100, 0x5, {0x400, 0x2, 0xffff0e81, 0x9}}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r7 = dup(r4) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r8, 0x28, 0x0, &(0x7f0000000c80)=0x9, 0x8) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000cc0)={0x190, 0x8}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000e00)=@multiplanar_userptr={0xf, 0xa, 0x4, 0x0, 0x6, {0x77359400}, {0x1, 0x8, 0x2, 0x2, 0x7, 0x0, "04deba4b"}, 0x29f, 0x2, {&(0x7f0000000d80)=[{0x780, 0x3, {&(0x7f0000000d00)}, 0xe}, {0x800, 0x5, {&(0x7f0000000d40)}, 0x1}]}, 0x9, 0x0, r9}) r10 = add_key(&(0x7f0000000e80)='cifs.idmap\x00', &(0x7f0000000ec0)={'syz', 0x1}, &(0x7f0000000f00)="4adcd6c005ee23a6906f427327dc50e850288191bc02cfd94a05bef3616fe7fda8a4b8eb8f59e41deef9c48d988a6538f2fc2baf3687d061f9f18ecbed11eb332c6afea1015ab4ee03b1e4c21d2cbdd08e8ad07cce5dbc", 0x57, r2) keyctl$set_timeout(0xf, r10, 0x1) syz_usb_ep_write(r3, 0xd, 0x10, &(0x7f0000000f80)="bb22be305a6e168aeec3810540133d47") io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xe, &(0x7f0000001480)={0xfffffffe, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000fc0)=""/82, 0x52}, {&(0x7f0000001040)=""/205, 0xcd}, {&(0x7f0000001140)=""/163, 0xa3}, {&(0x7f0000001200)=""/210, 0xd2}, {&(0x7f0000001300)=""/151, 0x97}], &(0x7f0000001440)=[0x6], 0x5}, 0x20) rt_sigqueueinfo(r6, 0x7, &(0x7f00000014c0)={0x21, 0x2, 0x3}) 6m19.549189095s ago: executing program 1 (id=2733): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030090, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 6m19.470466852s ago: executing program 1 (id=2734): unshare(0x400) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x21a8c0, 0x0) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) 6m18.466738443s ago: executing program 1 (id=2735): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x9, 0xf21, 0x0) mlock(&(0x7f0000bda000/0x4000)=nil, 0x4000) 6m18.466039312s ago: executing program 5 (id=2736): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=ANY=[], 0x58}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000013000100000000000000000010000000", @ANYRES32=0x0, @ANYBLOB="0000000000fdff001400038509005f626f6e6400000014001680100001800c000700fdffffff00"/48], 0x48}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000200)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r5, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000000)) close_range(r5, r5, 0x0) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) 6m17.093221161s ago: executing program 1 (id=2737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_clone(0x881180, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x5) syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201510329fbf04038074045cec60102030109023d000202010000020904020904e20002b22618bb0905010000027c9e09070585e371932d0905070b000009730300"/79], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 6m16.587307105s ago: executing program 5 (id=2738): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000b0000000000000002180000fff0ff000000000008000100ac1414"], 0x30}}, 0x0) 6m16.085633099s ago: executing program 1 (id=2739): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002058041a500000000000010902240001000030000904000001030000000921000000012205030000fd0000"], 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) (async, rerun: 64) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) (rerun: 64) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2, 0x5, 0x80000000000000, 0x4d04}, 0x4}, 0x20, 0x1, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r2, 0x3b70, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x10, 0xff8c}}, 0x24, 0x0) (async, rerun: 64) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) (async, rerun: 32) r4 = socket(0x28, 0x1, 0x0) (rerun: 32) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r4, &(0x7f00000004c0)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) recvmmsg$unix(r4, &(0x7f0000002bc0)=[{{0x0, 0x40002, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3fffffffffffca8, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (rerun: 64) syz_usb_control_io(r7, 0x0, 0x0) (async) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="0010020000001bb1"], 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b", 0x7}], 0x1}, 0x0) (async, rerun: 32) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0105b08, &(0x7f0000000040)) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x3b, 0x107, 0x2, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x00'}]}]}, 0x28}}, 0xc000) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x84, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r10, 0x200}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x54, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0xe9d8f97e04c87a33}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48}, 0x0) (async) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x40, 0x6, 0x7, {0x7, 0x4, "4be68e5e10"}}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x12, 0x80, 0x8, 0x2, 0xa, 0xffb, 0x2}}}, &(0x7f0000000040)={0x84, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x40, 0xb, 0x2, "1847"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m15.748846312s ago: executing program 1 (id=2740): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000"], 0x10b8}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743b, 0x20004000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x4, 0x40000003, r0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000740)={0x0, r1}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket(0x200000000000011, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x80}, 0x20000085) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES64=r3], 0x4bc}, 0x1, 0x0, 0x0, 0x4000840}, 0x24040800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT=r5, @ANYRESHEX=r3, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="7f94d5e2f9729c3f0a0000001c00000000000000004ac54cdb972500000007000000440c00010a2101"], 0x230}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f0000000040)) 5m57.549005138s ago: executing program 68 (id=2727): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x2a020400) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000002200)=0xc0100100) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xa1, &(0x7f0000000000), &(0x7f0000000080)=0x4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000006c0)={0x0, 0xfffd}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000740)={r6, 0x7, 0x800}, 0x8) r7 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200), 0x2, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000380), 0xfffffffffffffff9, 0x44402) r9 = eventfd(0x1ff) io_submit(r2, 0x5, &(0x7f0000000680)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000100)="2e76bdcd020232410b12a529e759e172e2dd938097211b5e2f86cd2771f8c6c579a06a74f8ae490be341f848ecd2ea5175e03b2fd3faace518a3490fecf36ddff02969492dd4bdabf31094c6a8761646637b530b3248032eb15d47ace6ecc50e49550cc907d97a566473f7b9ee8f9dbf96c1ed96ed5dc22cc7c34efc9437ad0a2e7e34fa971f80792fb8851c702d56e7093422d8784fbaaed6770376227a5046e73b3a4000c1e6f280350b884063b6befc6a6c74d762c568a7b556a435db3ecdb7da50f3b5", 0xc5, 0x253, 0x0, 0x2, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x1, r7, &(0x7f0000000240)="9f4af95302469d838fbca24e989ad107b5c47768d30046c4b2e4863c808b829f989277625469c4cb314e0b2fd177a750d2b7a6f00a8b4932782062bd708b9754d886564b068e23f4e678fbf339dc8a138455eb920cbef9a551092cb7ae77114fc46ee4d942bcca008f648930bbcf149c451a2a62ceafae078e41cf228c5926b65dd020741947103eb72d986d1f9768dd0810366b6133e083a64c3b12a21b3b42ce348c2bfebe32bbb6571249418562887f2efded71124fb7fa0d20082ca12faf56a4638176037f94d0a6e6f1e278b6e2501f8b83a452e614bef7a187470e756981356ec7cf9feef3ef32681d", 0xec, 0xff, 0x0, 0x2, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x4, r8, &(0x7f00000003c0)="b808fd26e77e7cc1a09ea3f05146715110cdcbd7ef43a7ccb35d421a68da5e9023ca6e07067c2b90605f9e894bedc201de167c9b6ae6fb42d41a7a283e39ac79b59a2905d5127d0503440cd77e3b2cb2dc44ee0c0ca209b31814b0867f23adabf9efca0c37150ef794851fec30fe3a956cc7901c21f826e059f282ba52e94b663e5bdfc59c49954aff96891b32f89ed559d37cdeaec6ecd9f1b79ba9ecfa820920ba167d695855cdee18663df8abb02c884f7dd6f8449ea0df71167679120c2170011513dc82469d1b7ebb7f97ff69695eee206722a8b7858eef898830da96cd7bcd93c6", 0xe4, 0x4, 0x0, 0x3, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000540)="a569f59e801ca10f205b17d2da2abf65833d2513b8364222432c99d37f822bd9f773874941238fbb77941deb5fbde305060f3e7b5825380131cfc80144c211e54d8917d2e09224d30c4238f7a7a80653e1c3165c51b8cec1a4be387ae12615cfc40d191fc973998e350390b1bd37484e1f87af7d6d555084bb5f1794e9b957c18ab4242b682791a9d6bf35f1f80af17809b62dc807e0cb858ed4b5f60adf47c577ce45c6c408c9c28d0f6e58ce850dc7ba9c5e64be91d93fc98683dcac44ae9b45061ad1e3cf88296f36e8ddb14987dae43cc56eb2ec6d72f868c6dfe5f80ad8a2c3f0", 0xe3, 0x0, 0x0, 0x0, r9}]) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000000000000700000062da9716a2ce996c3e58ec03", @ANYRES32=r12, @ANYBLOB="0c0001800803"], 0x24}}, 0x0) timer_create(0x2, 0x0, &(0x7f00000004c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_delete(r13) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='0\x00'/20, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="05000000030000000000fdffffff000000001000000000000050ee00"], 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 5m55.180747446s ago: executing program 69 (id=2724): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000080)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, &(0x7f0000000140)={0x1fc}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f&', 0x2, 0x11, 0x0, 0x0) 5m54.601815925s ago: executing program 70 (id=2740): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000"], 0x10b8}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743b, 0x20004000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x4, 0x40000003, r0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000740)={0x0, r1}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket(0x200000000000011, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x80}, 0x20000085) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES64=r3], 0x4bc}, 0x1, 0x0, 0x0, 0x4000840}, 0x24040800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT=r5, @ANYRESHEX=r3, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="7f94d5e2f9729c3f0a0000001c00000000000000004ac54cdb972500000007000000440c00010a2101"], 0x230}, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f0000000040)) 5m54.522966382s ago: executing program 71 (id=2738): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000b0000000000000002180000fff0ff000000000008000100ac1414"], 0x30}}, 0x0) 2m2.804875125s ago: executing program 8 (id=2850): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) r1 = open(&(0x7f0000000000)='.\x00', 0x8000, 0x0) fcntl$notify(r1, 0x402, 0x34) fcntl$setsig(r1, 0xa, 0x21) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x36) fcntl$setsig(r2, 0xa, 0x21) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x34) fcntl$setsig(r6, 0xa, 0x21) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x7, 0x6}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r7, 0x0) 2m2.431824141s ago: executing program 8 (id=2854): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x8010, r1, 0x8000000) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f00000002c0)={0x0, 0x0, 0x0, @raw}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m59.671964003s ago: executing program 8 (id=2862): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000d000000"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m58.35254666s ago: executing program 8 (id=2870): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="03000000000201", 0x7}], 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, r4, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) dup3(r1, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0xffff}}]}}) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r7, &(0x7f0000000340), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{}, &(0x7f0000001280), &(0x7f00000012c0)='%pK \x00'}, 0x20) dup3(r6, r2, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$can_j1939(0x1d, 0x2, 0x7) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r11}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x4000}, 0x4c8c0) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r12, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r12, 0xc0045009, &(0x7f0000000040)) 1m49.312556623s ago: executing program 8 (id=2908): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb180000000003000500000000000a0000007f0000010000000000000000010007"], 0x58}, 0x1, 0x7}, 0x0) 1m47.741416789s ago: executing program 8 (id=2912): syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc60100002000a000000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d2000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m46.951746272s ago: executing program 72 (id=2912): syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc60100002000a000000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d2000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m34.275280859s ago: executing program 4 (id=2950): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x9, 0xf21, 0x0) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/200, 0xc8}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/178, 0xb2}, {&(0x7f0000001540)=""/225, 0xe1}], 0x6, 0x7, 0x246f) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x1, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0100000003ece1ea0ad8871461ab0800", @ANYRESDEC, @ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES8], 0x20000600}}, 0x0) mlock(&(0x7f0000bda000/0x4000)=nil, 0x4000) 1m33.215890214s ago: executing program 4 (id=2954): keyctl$clear(0x5, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=',$@\x00', 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m31.018237349s ago: executing program 4 (id=2960): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x1, 0x81}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffff9, 0x1005}, {}, {}, @raw8={"13e661fefa8c7d0d9a4be91e"}}, {0x0, 0x3f, 0x0, 0x0, @tick, {0x10}, {}, @time}, {0x0, 0x0, 0x0, 0x10, @time={0xbf9e}, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x3, 0x0, 0xfe, @time, {0x0, 0x1f}, {}, @quote={{0x1, 0xfd}, 0x6, &(0x7f00000002c0)={0x6, 0x1, 0x8, 0x2, @tick=0x80, {0x9, 0x9b}, {0x8, 0xa4}, @ext={0x78, &(0x7f0000000440)="f6c487deefc77a214976fece882545789e8e424d2d604b19abbeeb0369c5b507f746000e23deba3f888ab153c6f26839fd3f0848d74d7101a56998ee6e101712ec70991c59c56293604a76e8b6122f6bafdfa8a097bc03339ac047351aa50055f4b4171cd3a6f807321807b9f71397494d18e2826f640424"}}}}], 0x8c) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000018c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) fremovexattr(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e110b000000000000d57edc55b4d89b000000"], 0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)='?', 0x1, 0x0, 0x0, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x842, 0x10, 0x20}, 0x18) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="d6180cc44bc2ebf866120147b441f57a9efa341b59bbed0f59e6f89a09c5be9e870b61562cc979582c1e9e9ff3a2b6ed021bcb785ad5892598907bb1dd77e77b52924474e81f07e0d0d541160311c17ec36d65244cac56f00dec228961c0327a25ae216e2c8e764034627a9ae78e92d6c4d119089609f154e721985b2fb5917458", 0x81) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100006001"], 0x48}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', '', [{}, {}, {}, {}, {0x20, 'nl80211\x00'}], 0xa, "d50d3d2af862"}, 0x17) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='vxcan1\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1m30.809427499s ago: executing program 4 (id=2963): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc3, 0x73, 0x9, 0x8, 0xfe9, 0xdb51, 0x79b0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5b, 0x91, 0xba}}]}}]}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="040826bd7000fbdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x100) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x2b, 0x80801, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000002c0)=[@release={0x40046306, 0x2}], 0x44, 0x0, &(0x7f00000001c0)="938f605169e9414585a655ed4b6fc7d09cbb1db34d53abb40685695448b22edb7b5db92086de17d8bce0d89fbcd0960aba022bc17dd1303c179f267543ef88cf417e27b1"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "000000009b993e68", "75e29881592b9fd38bcad042e286f2cd", ')\x00\x000', "578619a280c847dd"}, 0x28) sendfile(r2, r3, &(0x7f0000000100), 0x10001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000543000/0x3000)=nil, &(0x7f00007d8000/0x3000)=nil, &(0x7f00004be000/0x2000)=nil, &(0x7f000024f000/0x1000)=nil, &(0x7f0000929000/0x3000)=nil, &(0x7f0000017000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000896000/0x2000)=nil, &(0x7f00004a0000/0x6000)=nil, &(0x7f00008aa000/0x4000)=nil, 0x0}, 0x68) r4 = getpgid(0x0) syz_pidfd_open(r4, 0x0) 1m30.644882668s ago: executing program 2 (id=2964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000300010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c000280"], 0xec}}, 0x0) 1m30.446076331s ago: executing program 2 (id=2966): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "0c959905"}]}}, 0x0}, 0x0) 1m28.539332417s ago: executing program 2 (id=2975): r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xd, @dev={0xfe, 0x80, '\x00', 0x24}, 0x45}, 0x1c) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000200)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400c01) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0xfed903cee06da070, 0x0, 0x1}, 0x8008}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x13, 0xffffffffffffffff, 0x8000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x41, 0x4000, @fd=r2, 0x101, &(0x7f00000000c0)="55e2ee3b4d0b87a674faa46041bae84b4d86639acc5f2e0a80b8a9763fdaee01f4c12938afe32ef2dcb82eb6c1ac235f7a4c26cf16409b38495ab52ae6cc341fcedfed23c5f7b674a480d859f928ea9cca4c7155189d1c977c69030257ed3cd403b1c099d96479a0f6998bbd722b62a0ef95f18845b1820566bc6fac387a8d63dda7072842cac96ab3b94ebcb155d2a2dffae76f513fe0ce6d214c0368ff78e6193fe5a38d6486bb5df588b31cf5e633d79bf6040a93f4c04fe3c318", 0xbc, 0x14, 0x0, {0x0, r4}}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000004, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f00005a8000/0x1000)=nil, 0x1000, 0x13) syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xd, @dev={0xfe, 0x80, '\x00', 0x24}, 0x45}, 0x1c) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000200)) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400c01) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0xfed903cee06da070, 0x0, 0x1}, 0x8008}) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x13, 0xffffffffffffffff, 0x8000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x41, 0x4000, @fd=r2, 0x101, &(0x7f00000000c0)="55e2ee3b4d0b87a674faa46041bae84b4d86639acc5f2e0a80b8a9763fdaee01f4c12938afe32ef2dcb82eb6c1ac235f7a4c26cf16409b38495ab52ae6cc341fcedfed23c5f7b674a480d859f928ea9cca4c7155189d1c977c69030257ed3cd403b1c099d96479a0f6998bbd722b62a0ef95f18845b1820566bc6fac387a8d63dda7072842cac96ab3b94ebcb155d2a2dffae76f513fe0ce6d214c0368ff78e6193fe5a38d6486bb5df588b31cf5e633d79bf6040a93f4c04fe3c318", 0xbc, 0x14, 0x0, {0x0, r4}}) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000004, 0x12, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00005a8000/0x1000)=nil, 0x1000, 0x13) (async) 1m28.375083392s ago: executing program 4 (id=2976): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000808ac1414aa", @ANYRES64=r0], 0x10) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2007214, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x20020, 0x0) 1m28.182926596s ago: executing program 4 (id=2979): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x0, 0x2, 0x0, 0x101, 'syz0\x00', 0xfffffffc}, 0x6, 0x3, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x301200, 0x0) sendmsg$unix(r2, &(0x7f0000000680)={&(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r3, @ANYRES8=r2], 0x30}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) sendfile(r5, r6, 0x0, 0x8000002b) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f00000001c0)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r7}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000100000000101000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r8, @ANYRES64=r9/1000+60000, @ANYBLOB="0200004001000000010000400e0100000f727def757e4d7eaeb23d32c6a8b03a83fc8a451c10a8d51c9fb4e6af22b2d2fc7e215900c187ec355b7a39faccf15f9cfdd5db981e2aff87467d8d30909104"], 0x80}, 0x1, 0x0, 0x0, 0x40c1}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 1m27.817079474s ago: executing program 2 (id=2981): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f0000000180)='./file0/file0/file0/file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xfea390, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) syz_usb_connect(0x3, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a00000000000009050313000000000003270103"], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="f00000001c00130700000000000000007f000001000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000008000032000000ac1414aa00000000000000000000001de28419d29a31c20aaa643090f416c300001d13db78000000000000000000000003020000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000"], 0xf0}}, 0x0) 1m24.163862997s ago: executing program 2 (id=2986): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x27, &(0x7f0000000100)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0xff03, 0x8, 0x0, r2, 0x0}]) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000040)=""/48, 0x30}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.631505306s ago: executing program 2 (id=2990): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'geneve1\x00', &(0x7f0000000000)=@ethtool_dump={0x3e}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r2], 0x40}}, 0x0) (async) msync(&(0x7f0000952000/0x2000)=nil, 0x2000, 0x8) 1m20.782772988s ago: executing program 73 (id=2990): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'geneve1\x00', &(0x7f0000000000)=@ethtool_dump={0x3e}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r2], 0x40}}, 0x0) (async) msync(&(0x7f0000952000/0x2000)=nil, 0x2000, 0x8) 1m12.952146328s ago: executing program 74 (id=2979): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x0, 0x2, 0x0, 0x101, 'syz0\x00', 0xfffffffc}, 0x6, 0x3, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x301200, 0x0) sendmsg$unix(r2, &(0x7f0000000680)={&(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r3, @ANYRES8=r2], 0x30}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) sendfile(r5, r6, 0x0, 0x8000002b) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f00000001c0)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r7}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000100000000101000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r8, @ANYRES64=r9/1000+60000, @ANYBLOB="0200004001000000010000400e0100000f727def757e4d7eaeb23d32c6a8b03a83fc8a451c10a8d51c9fb4e6af22b2d2fc7e215900c187ec355b7a39faccf15f9cfdd5db981e2aff87467d8d30909104"], 0x80}, 0x1, 0x0, 0x0, 0x40c1}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 43.979495899s ago: executing program 0 (id=3133): r0 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x7f, 0xe7, 0x1, {0x22, 0x9db}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x1, 0x68}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0x80, 0x40}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x3, 0xb, 0x8, 0x10, 0x9}, 0x107, &(0x7f0000000080)={0x5, 0xf, 0x107, 0x5, [@generic={0xd0, 0x10, 0x4, "f548a0967af15d07022165fbaba70cf32d72163fe322ab2670f0d14bc3537abe4020bfa7e6d27059b1fa45114f04fb7ec78bd0bf0c793e141abd51810a3bf1eb95999579792bd9f2f1ebe391555b86fa1aacc251abb10c1fb532133eff16a68c441407c3d9927c2977857d5b055c3a5b0231f0b9fa345cf6d5c58566eb9373349ca1f76a3d36842cee09f810a1b6f3245c1d4b12d6cfb56874eaf51c34ad5b6e31e3d8e86baef44a26e3521f5606c4002eb6660719b06dd097e613da0cfeb61052c9afb4de1924334235d344eb"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "1de0413f8b724c3ed1d789fc457eab49"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "3159789ca4133faa9e28c1aa9a6edd03"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x0, 0x3, 0xffff}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x421}}]}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000240)={0x40, 0x4, 0x49, {0x49, 0x23, "21c081fe0529f822722540e9112e0e00dbcde11d78aadc7f0a0031637a51cc7ebd103ab9dfd25069e5dfb72ef503f1f7d3370919e87f9c0d4ffd17f25f55ca0178b0263a0d6bfb"}}, &(0x7f00000002c0)={0x0, 0x3, 0x63, @string={0x63, 0x3, "88a2d17494a7de50f0752c1503c9fc1664bd54afc0ce7616c5853ad55863f1a46d02e23949651139f81e28663acb09795d7cdc45e0958a057f35f1784f575245475d696b6f3dbc41188cca391e03135517d7ed8d5c5034e0b1d107216040b11419"}}, &(0x7f0000000340)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0x9, "4e24bb6c"}, @main=@item_4={0x3, 0x0, 0xb, "5f116432"}, @global=@item_4={0x3, 0x1, 0x7, "1f2b0f4b"}, @main=@item_012={0x1, 0x0, 0x0, 'K'}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd, 0x10, 0x1, {0x22, 0x2a1}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x0, 0x16, 0xe0, "7ce584cad09426afe41ee6caafe747b80c09217fe1695d53fbed6b12bbbadb6f35112141c98cc4849e0af22040158625783d6f8f5cfd0c5990918aa5869d00665da2f21948591de4fd63981fbc246c9e69e5bec9313076ff5790577cf5bd546294c360773933ab777047c2c51aa7c771dc09e2d40d762c6c117fea6026cb37e92b5abfc6c1179632792b982a8504adba72b20b66fc7599f2698d1a46c18f7bcb8a5875674d5ef70cb127566a15e924cd406178526c698d0d40390439291cc30e2ae95d0f937e1a85ee4840b42cd41c4a08d32001b44b744a70632ee128c59959"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6c}, &(0x7f0000000580)={0x20, 0x1, 0x57, "251619b4d4a475d62919fe55ffb10ee90b1e49a8565d1304332fa244e0bb8f22f2913ec11dc22135f9466452cd3a6e1848bdbe1fc16821ad7a9a860d845ff8876314b4a5a766d750970282180d625a6e02976c029bcb5b"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x2}}) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x10, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x4, 0xed}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x110, 0xe1, 0x7, 0x0, 0x48, 0xd}, 0x119, &(0x7f0000000700)={0x5, 0xf, 0x119, 0x6, [@generic={0xac, 0x10, 0xa, "42f8c1cfbd2436fdcd0c6332a482ce701067de7fce95ce9887f15025503608b52ef9afc004f28e435809a5716d623bbc2be55df79245832fccaa8843f392abd040b928c73e1cea810dd755156ea512d241e7f15fcc147c5144bc97f34af490dc46cb9c10af0b86aa258b565c8cdc71534176217484b15ace59367d93e99b8709b0ba71d25f29771a9a46d80f5f9ce53e8f832bccd318da22fd8d9496d8e9e5d38a82c35d7ab3936318"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xf, 0xe, 0x4b}, @generic={0x35, 0x10, 0x4, "391087e0be166e8454994eda43c4ab9c4f65219f26eaf3de077c10a23bad5b3abc18bd43204810214b0aad86903ef95fa4b1"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "43ad5023aa2ccdb7b51753fbac7358ae"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x6, 0x80, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x5b, 0x4, 0x0, 0x7f}]}, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x411}}]}) syz_usb_connect(0x3, 0x6a9, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x40, 0xdc, 0x11, 0x40, 0x3eb, 0x7617, 0xa69b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x697, 0x4, 0x60, 0xbe, 0x10, 0x53, [{{0x9, 0x4, 0x95, 0x3, 0x6, 0xdd, 0x5b, 0x93, 0x9, [], [{{0x9, 0x5, 0x0, 0x8, 0x8, 0x3, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3b, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0x5, 0x2}]}}, {{0x9, 0x5, 0xa, 0x10, 0x60, 0x3, 0x48, 0x63, [@generic={0x2c, 0xb, "59cef1524c3308c15b03314cb4ad8ce6dccf5fff6c2c97c01242816a57b213dfb4febe916576fe0b25f5"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x9, 0x40, 0xc}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0xfb, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x6}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x1e, 0xac, 0xf7}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x2, 0x5, 0xb}}]}}, {{0x9, 0x4, 0x3b, 0x8, 0x2, 0xff, 0xff, 0xff, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0xc5, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x2, 0x6, 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x4}]}, @generic={0x52, 0x8, "28d027a9c532202222614ee13b9144b6c13d4911da5b2be39b71431906a6668cd7946062937f5defeb84a4ae2dbbadb7a66d9619a5d9342e1c5d06cc89086f318a85619739fa9a31dcda09fd8d652e19"}], [{{0x9, 0x5, 0xd, 0x3, 0x400, 0x1, 0xdb, 0x7}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0xfe, 0x2, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x4}]}}]}}, {{0x9, 0x4, 0x18, 0x6, 0xe, 0xff, 0x1, 0x1, 0xf9, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "5e65823e"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x4, 0x2, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x9}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x46, 0x7, 0x3}, @as_header={0x7, 0x24, 0x1, 0x2, 0xff, 0x1001}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x567a, 0x2, "6bc785b4e777342e5b"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0xd8, 0x0, "ddd6"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x4, 0x78, 0x8, "", "9a6b6e"}]}], [{{0x9, 0x5, 0xe, 0x0, 0x8, 0x9, 0x6, 0x6, [@generic={0xe9, 0x22, "2d905c1bdb9d5cf31be7b6490309066efbdcdc8541c4cf3c02da010921ab2a28f357ad08f74ba4730bfc5271058ac7ba79a813f734b07627294ede366a2ece173c9980c303735c1c8173af8386031625a1b10fa05f4550f0c0df6f09c7a1863c367d7204e9d5c9e0feb25bfedfa9bf5b505f000cf6b5d912dbfee6d62264f4cce38aa369ab045cc86207dd2530eea3cb9e2b3c85e5d98def6ab9d98cc1e7daf08ace7eadd42386257797ccee330786483e5253fc7b614baff42512964a29b81aa15fb4aff86e6bafee39b3c87c8478d156faa7df521621bfc854735e1a573ec969f1529bb6b5ea"}, @generic={0xd9, 0x7, "b84232905847223410a76e194d84ccb2ad20eda37f66e42b0749e377645d08daa658d4fdf235807690213745bd158d1175a086623d1d7bbf696ddeb50b07ae10584213719c1c86256894cb6f582057e34f4a7d199476fc8a33ca0838a591424f54c60a676666d5d54d51d93f72fc2f0eb6210de6919f2630207e864c8b2dff7d8fb059990b581362c8b388137c2d112d86f4a326ea4669d77ec34f6873e6df1629ab5079330de938dc03676543a76f92a2571da8023f7b5e8b0a181bcbd8b609c1661d3032a321968b6911bb6b772becf43103955efec4"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0xfa, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x6}, @generic={0x82, 0x7, "2f143c4528e07dbd4dc2c3fe117df6eda4ea2a60ab76ece77fbf07c04e553f3e56ae13acb73efcb137a01fb3a32f0eaedaf7139352f667c799b89c78217a7b3b81ac5148b974014bf8109e36356467eaf85e69826a40205582268ab713c48be27ce522264203c2c8f1350722437c039e0a93fd9228556e6233fb80906d375828"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x36, 0x3, 0x92}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x3, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x4}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x2, 0x2f, 0x9}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0x7, 0x5, 0x9, [@generic={0x4, 0xf, "ec3b"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x7, 0x21, 0xd, [@generic={0x98, 0x33, "af4907e0d23695681bf4c87b347db43ca990dca812f3662aecbb0116140be601e9e94f6b289e669eee151b9f313b51e3155bc27a53ea297bc437d18e783e91f63bb0a315d8cf11b08b971c48b06a8359fa7e187c651c39345d1b6feb441625499c115726f15b0a05471715f10abc5d2a917a527cb756928f25e81a5575b6403af75d2d78afeaa6b7054fe3eaefa499d9e3792d6b36b5"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0xe, 0xa8, 0x8, [@generic={0x73, 0xd, "09496274926ae560c3f641294ab5c8684e225757e764629db0fa410e9de058e16d1d16c637864a6fc77c4e9c6afca546c421d3fe0610ecfeed771a131e23605d46635b033ac941cb415fc9ec4ac474c67fac3bf23b6b79cea96d16cd80e7a4aa48baf9648a0e99f6d4b6653b69b1efbafe"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x101}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x7, 0x9, 0x5}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0xd, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x200}, @generic={0xee, 0x5, "0b5ad601fc6a3a76b5d9fbba176a493277eaed837ad6b81486ed223d717d963cd395f256b39031736a55b4378874b82c9654e870086abc22d605cb3d182496aaa907a7264371605467f7db740adc23d46795359f2da2db0e5de7af481d4dc7707cf3e01a1d4f618e9121211c3daca210d68c17b8b74a8a0e8220f19fd1c8abf1ac79eda4ef7fbf4db262544b92cb396c23be2cb0f3baeeb63b4b69a90fae769fc17ebe9e0f9ec642710da45a7564c01265ef473642fd68b315ef3d0888aa18631e9635ba016e5011eaa144f8877e998147d57e99665cef179256dba0a72b6cd89666caa3699103485b4a0fb6"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x3, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x73}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3bf, 0x5, 0x34, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x8}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0xb, 0x6, 0x2}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x7, 0xa, 0x5}}]}}, {{0x9, 0x4, 0x48, 0x40, 0x1, 0x82, 0xbe, 0x6e, 0x44, [], [{{0x9, 0x5, 0x80, 0x0, 0x200, 0xe, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x4}]}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x201, 0x7, 0x10, 0xa6, 0x20, 0xf9}, 0x1c, &(0x7f0000001000)={0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0xa, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9, 0xa}, @ptm_cap={0x3}]}, 0x2, [{0x80, &(0x7f0000001040)=@string={0x80, 0x3, "54a486d72d96fe7b00518166f08875981eb4863645d6d4e1fe9f91fc4686d79a1e53a84e471d47d943188d50dee4ea6c8c753a822f575fc6277b0121e0b65c2b4b1ac6d668727d041428833009e5523a9e1fd54be5050cea270fc6a0bde1fea441d4627ac26b10a45eae86640aecc58c49ca71f521cea0c41c07174133f0"}}, {0x85, &(0x7f00000010c0)=@string={0x85, 0x3, "dfa126ff7589fc58408332eca6a6d576101cef52b09ed95233abae170cd848d89d669b652a907de8eac5bcd7fc4d94fe8d971fa07b51bace90498398328712552d54c5c77e286dcd4e990732818e3d07f334af06b34c9ae2bc7748ee441a2597d49c8f743cfebeb60a6555ba8dfb02b481428abb30c13e5ea9f1ed8c19d6889ed723af"}}]}) rename(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)='./file0\x00') clock_gettime(0x0, &(0x7f0000006400)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006300)=[{{&(0x7f0000001240)=@phonet, 0x80, &(0x7f0000001640)=[{&(0x7f00000012c0)=""/206, 0xce}, {&(0x7f00000013c0)=""/40, 0x28}, {&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/105, 0x69}, {&(0x7f0000001540)=""/224, 0xe0}], 0x5, &(0x7f00000016c0)=""/185, 0xb9}, 0x2}, {{&(0x7f0000001780)=@qipcrtr, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001800)=""/77, 0x4d}, {&(0x7f0000001880)=""/197, 0xc5}, {&(0x7f0000001980)=""/223, 0xdf}, {&(0x7f0000001a80)=""/28, 0x1c}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/181, 0xb5}, {&(0x7f0000002b80)=""/243, 0xf3}], 0x7, &(0x7f0000002d00)=""/4096, 0x1000}, 0xc234}, {{&(0x7f0000003d00)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/69, 0x45}, {&(0x7f0000004e00)=""/252, 0xfc}, {&(0x7f0000004f00)}, {&(0x7f0000004f40)=""/111, 0x6f}], 0x5}, 0x8}, {{&(0x7f0000005040)=@generic, 0x80, &(0x7f00000052c0)=[{&(0x7f00000050c0)=""/61, 0x3d}, {&(0x7f0000005100)=""/29, 0x1d}, {&(0x7f0000005140)=""/92, 0x5c}, {&(0x7f00000051c0)=""/213, 0xd5}], 0x4, &(0x7f0000005300)=""/4096, 0x1000}, 0x40}], 0x4, 0x2001, &(0x7f0000006440)={r1, r2+60000000}) syz_usb_connect$cdc_ecm(0x0, 0xc5, &(0x7f0000006480)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x1, 0x1, 0x7f, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x1, {{0xb, 0x24, 0x6, 0x0, 0x0, "4a48d0458c61"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x1, 0xe}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xe9, 0x7fc}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x9, 0xf7, 0x46, 0x13f1, 0x6}, @mdlm_detail={0x52, 0x24, 0x13, 0x8, "083862df66a2ddffd903ab16f4c3259317376f77a401ba7a026244a673bacfc5b96d71d1a9cd3c3f5c8a8a2bfb35195e8dbd63269bce24cc38055d6c2db61bcbe8411c7eb45041a5db2a50485deb"}, @country_functional={0xc, 0x24, 0x7, 0x2, 0x40, [0x0, 0x40, 0x9]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xfb, 0x7f, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x3, 0xd}}}}}]}}]}}, &(0x7f0000006640)={0xa, &(0x7f0000006580)={0xa, 0x6, 0x310, 0x1, 0x4, 0x40, 0x40, 0x3}, 0x12, &(0x7f00000065c0)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x4, 0x6}]}, 0x1, [{0x14, &(0x7f0000006600)=@string={0x14, 0x3, "3150aadbf34e0ea948aad60f989727d0f689"}}]}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000006680)) clock_gettime(0x0, &(0x7f0000006700)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000006740)={r4, r5+10000000}) syz_usb_connect$cdc_ncm(0x6, 0x178, &(0x7f0000006780)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x166, 0x2, 0x1, 0x2, 0x20, 0x46, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x21}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xfff8, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0xe}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x1, 0x9b, 0x7}, @acm={0x4, 0x24, 0x2, 0xa}, @country_functional={0xa, 0x24, 0x7, 0xff, 0xfffe, [0x9, 0x4]}, @mdlm_detail={0xed, 0x24, 0x13, 0x8, "fef633bbbbfe1cf0eac1b921312f191fca5a2d9158431f374dc3d8186e3b053a84d616143593aa8594cfda9db02eea5efdc22e345bfed2918c4fb57ee6a2ffee9abf3fe907788d6579864f50c348b4d1267fd7539014d7d87bfe96d7655753eb592d2f312d05d6d14870e967b8e0dccfc797dc77272d78b8c5457720d4560fbc3fb5cb410a1bb06366abf37ee211ec513f5b7b80699d229da56fb994c1978ec0b45a818697bd42c99e29bcd650c7e531964582c142fad3a0082827ad75674604948164dfbfd400620cf4bb5103133b124521946531fdabcb69e981b0c0b820059dbaf6ce541b4ed0b7"}, @mbim_extended={0x8, 0x24, 0x1c, 0xa, 0x9, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x0, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x10, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x27, 0x6, 0x5}}}}}}}]}}, &(0x7f0000006a80)={0xa, &(0x7f0000006900)={0xa, 0x6, 0x110, 0x7, 0xf9, 0x2, 0x40, 0xfb}, 0x19, &(0x7f0000006940)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0x2, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1f, 0x6, 0x9}]}, 0x3, [{0x4, &(0x7f0000006980)=@lang_id={0x4, 0x3, 0x42a}}, {0x6e, &(0x7f00000069c0)=@string={0x6e, 0x3, "af32bbc8448d6925c8147432363c968a8b4adca0cf35932b31635cfab6c094134064ff87c4c69c69ad9a7836e136ef3c0e072e9eb90712cad5215cf815165e1fb0f603177b9c81d7caf0d983fd8ab806b584416e323e4d94809e655bce2ba2c136eb46d4e01619f8f2b398eb"}}, {0x26, &(0x7f0000006a40)=@string={0x26, 0x3, "ad545d366d7dfc7845950e4e77f20d6506cadda7a76eeea4bcb20a68754a98c5684af0c3"}}]}) close_range(r3, r3, 0x0) gettid() syz_io_uring_setup(0x3231, &(0x7f0000006ac0)={0x0, 0x7852, 0x24, 0x2, 0x1fa}, &(0x7f0000006b40), &(0x7f0000006b80)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000006bc0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x8, 0x0, 0x0, 0x0, 0x1}) ioctl$KVM_NMI(r3, 0xae9a) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r7, &(0x7f0000006c00)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '}(,+{\x01%@-'}], 0xa, "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"}, 0x1017) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000007c40)=@sr0, 0xee00, &(0x7f0000007c80)={0x8, 0x1000, 0xa2f7, 0x1, 0x1, 0x3, 0x3, 0xc, 0x7}) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000007d00), 0x2, 0x0) read$FUSE(r8, &(0x7f0000007d40)={0x2020}, 0x2020) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000009d80)={0x9, 0x80, 0x2, 0x8, 0x2, [{0x1f5, 0x6000, 0x4, '\x00', 0x4}, {0x9, 0x95, 0x3, '\x00', 0x2}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000009e40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x8, 0x2, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x80, 0x8e}}]}}}]}}]}}, &(0x7f000000a0c0)={0xa, &(0x7f0000009e80)={0xa, 0x6, 0x200, 0x0, 0xd, 0x4, 0xff, 0x2}, 0x1a, &(0x7f0000009ec0)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x7, 0x7, 0xd61f, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x2, 0x20, 0x9}]}, 0x6, [{0x4, &(0x7f0000009f00)=@lang_id={0x4, 0x3, 0x1409}}, {0x22, &(0x7f0000009f40)=@string={0x22, 0x3, "e9bf5b1ad4d77fc04d43a1ef8abefef5bc17d3ff4e88db71370ba1382ddb048b"}}, {0x4, &(0x7f0000009f80)=@lang_id={0x4, 0x3, 0x412}}, {0x6c, &(0x7f0000009fc0)=@string={0x6c, 0x3, "423873e832f062b80fe4bbd2f261fee1baee2163394fba6a15ad923f85f6cebbe514d8eb44819fe582a5e955449c47c8e9f17114bd41732a069d1afe7731c6463324c32f871ce78463b6551384c8ac703271397ac248de4e5f3b3a6bff4dcebca33361a6901e88e2a587"}}, {0x4, &(0x7f000000a040)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f000000a080)=@lang_id={0x4}}]}) io_setup(0x4, &(0x7f000000a140)=0x0) io_pgetevents(r9, 0x0, 0x1, &(0x7f000000a180)=[{}], &(0x7f000000a1c0), 0x0) syz_usb_connect$cdc_ecm(0x0, 0xa0, &(0x7f000000a200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x1, 0x1, 0x6, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x40, {{0x7, 0x24, 0x6, 0x0, 0x0, "279f"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x2aba, 0x3}, [@mdlm_detail={0x42, 0x24, 0x13, 0x5, "6b8572b41ae904cd5167abcca28cb229ae0d37f8d8f8a5c3cd2ba2824e3dcaa2337c6c38e733bb27cddb57837882e376e85c1c62e8ab9314283f30f2368a"}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x16}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x4, 0x4d}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x7, 0x38}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xe, 0x5, 0x5}}}}}]}}]}}, &(0x7f000000a500)={0xa, &(0x7f000000a2c0)={0xa, 0x6, 0x301, 0xfe, 0x8, 0x4, 0x40, 0x1}, 0x6f, &(0x7f000000a300)={0x5, 0xf, 0x6f, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "67889e9bac4cf27287832653754656c6"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x4, 0x1ef00, 0x5, [0xff3f00, 0xff006f]}, @generic={0x19, 0x10, 0xb, "f52de8a79d2b786b14a54b9d4eef4892a9fa00935a83"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x5d, 0xff00, 0x1, [0xc0f0, 0xc000, 0xff3ff0, 0xff3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x10, 0x4, 0x4}]}, 0x6, [{0x4, &(0x7f000000a380)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f000000a3c0)=@lang_id={0x4, 0x3, 0x816}}, {0x2c, &(0x7f000000a400)=@string={0x2c, 0x3, "0e030abd64397e44b9ede61d69d72195b99a8061f44713dee49e7ea80a30d95d3af4af1dd963bd262caf"}}, {0x4, &(0x7f000000a440)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f000000a480)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f000000a4c0)=@lang_id={0x4, 0x3, 0x83e}}]}) syz_usb_connect$cdc_ncm(0x2, 0xad, &(0x7f000000a580)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x2, 0x1, 0x1, 0x40, 0x32, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "001a"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x9000, 0x7, 0x4}, {0x6, 0x24, 0x1a, 0x6, 0x1}, [@acm={0x4, 0x24, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0x3, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x2}, @mdlm={0x15, 0x24, 0x12, 0xf800}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x9b, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x4, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x36, 0x2}}}}}}}]}}, &(0x7f000000a8c0)={0xa, &(0x7f000000a640)={0xa, 0x6, 0x250, 0x5, 0x6, 0x5, 0xff, 0x6}, 0x2a, &(0x7f000000a680)={0x5, 0xf, 0x2a, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x3, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xc, 0x56}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x40, 0x1, 0x5, 0x7}]}, 0x4, [{0x62, &(0x7f000000a6c0)=@string={0x62, 0x3, "69a62b1c5b6b637d32d440c1f6571b5a7fe71b51122bc4782d8fbc1df5f9051d0b49433f585bf3cef894984db405fe47aedd963eca962e118843b60c0b1293d25ac03df1821cc35d8f56d14153493438450d383069d9acb8ae2fd1df301eb2b1"}}, {0xc5, &(0x7f000000a740)=@string={0xc5, 0x3, "93cb60d3e31e5b50f998d969601f8699233eb0ebffb05245c5e45339cc7556d2f5b8610194b93d38d28734fcbb7ccc30ce54244d20813b043ac62eab21b3794be9793fa325e2d082f09d888d3cf28f10688cbdfa41202708dcc519a61a22c39db05b39ff93f9a0742f6250fa93c46958866043e083285f34c2106f23cf6e101138ade9a6d864e68d5b402c106b89497801a767b14fea1dffea62b69b9b42b1ab7fe2de07dc659dfa53974f95950514139aec19f9a11e2f688f9003397f454965ade198"}}, {0x4, &(0x7f000000a840)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f000000a880)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f000000a940)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x79, 0x1844, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0xd1, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x51c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x40, 0x6, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x8}}]}}}]}}]}}, &(0x7f000000aac0)={0xa, &(0x7f000000a980)={0xa, 0x6, 0x310, 0x5, 0x1, 0x8, 0xff, 0x9}, 0x4c, &(0x7f000000a9c0)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x41, "3fd7b504a8c27bd8845c54488b6da581"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x4, 0x43, 0xfffd}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x10, 0x0, 0x361}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x1, 0x4, 0x4, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "c581fcb821da3de06d233fafe3947dfe"}]}, 0x2, [{0x4, &(0x7f000000aa40)=@lang_id={0x4, 0x3, 0xc09}}, {0xa, &(0x7f000000aa80)=@string={0xa, 0x3, "81daaee558cbee3e"}}]}) 40.811719957s ago: executing program 0 (id=3144): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022f508"], 0x0}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000100)={0x80, 0x7fffffff, 0xc8, 0xd, 0xe85, 0x800}) 40.16806141s ago: executing program 6 (id=3148): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc66", 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chroot(&(0x7f0000000840)='./file1\x00') getcwd(&(0x7f0000000000)=""/157, 0x9d) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r2, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044815}, 0x8000) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x71, 0x2, 0x6, 0x10, 0x3}, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 37.968425583s ago: executing program 6 (id=3152): pipe(&(0x7f0000000500)={0xffffffffffffffff}) readv(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 37.622569143s ago: executing program 0 (id=3153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 37.42812826s ago: executing program 3 (id=3154): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40200000000000061114c000000000085000000a40000009500000005007586285866cbd92f204f00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x6, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x30) setrlimit(0x2, &(0x7f0000000040)={0x0, 0x2400000}) mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) 36.896713912s ago: executing program 7 (id=3155): socket$kcm(0x21, 0x2, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000001040), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000001000)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) linkat(r3, &(0x7f00000000c0)='./file0\x00', r3, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000002100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c00000014000180080003000100000008000100", @ANYRES32=r4, @ANYRES64=r4], 0x28}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f000000bdc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f0000002140)=ANY=[@ANYBLOB="2c00f8632b4affbbcddd0c5ee692a09f40899b3742a8e5269218167e7dc80f27ecd6c9059972474708f7470a72929eb00f72ccf7ef1153dc24e2f5d955a387f7f3e34efe8a9baa15a86843efd89477e8d0b1f1a116634c4bf3", @ANYRES16=r7, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r8, @ANYBLOB="1000508004000600050002000d000000"], 0x2c}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000020c0)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRESOCT=r7, @ANYRES16=r5, @ANYRES8=r8, @ANYRES64=r5, @ANYRES8=r5, @ANYRES16=0x0]) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="1baeac1e45c5343f027f69395a94c3759904e8b7afe445ea5a14d289f00489d25033eb2e8f0911d34cee8f465a5fa841780ce5782600348889cb1d684616288e739f49c07cfb63cbf96c0cdc78b00461a2793b1b87ad8612056a17b250ad47c0271212023fcc0583e44966a9aeb8801c66cf0e25637384cc48a9f16e50027c8b9f80ff179dbc77c068c83e451d43a8a80b760ff9da5b25cece9ac0214461bc93b3f47db2d1e47ca7ec1461f0f3", 0xad}], 0x1) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0x208e24b) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r11, &(0x7f0000000080)={0x2020}, 0x2020) 36.507919465s ago: executing program 9 (id=3156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a3000000000f4000000030a09080000000000000000010000000900030073797a32000000002c0004800800024017bef2e408000a4000000003080002401c791e7108000240423930ce08000140000000030900010073797a3000"], 0x128}}, 0x0) 36.251582379s ago: executing program 9 (id=3157): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000000)=""/23, &(0x7f0000000240)=0x17) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x811, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}}, 0x0) 35.978749561s ago: executing program 9 (id=3158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070020000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002"], 0xec}}, 0x0) 35.768422428s ago: executing program 3 (id=3159): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f00000000c0)=""/44, 0x2c) getdents(r0, &(0x7f0000000040)=""/44, 0x2c) 35.715531434s ago: executing program 9 (id=3160): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000001440)={0x0, 0x87e, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000500)={0x80, 0xa44, 0x0, 0x0, 0xfffffffffffffe77, 0xffffffffffffff56}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000197b"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x20, 0x0, 0x16, {0x16, 0xf, "17e13ff51297edf304396efaffffff7f00001e00"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 35.549333334s ago: executing program 3 (id=3161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync_file_range(0xffffffffffffffff, 0x7f, 0x7be6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000bc0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xbf, 0x6, 0x8, 0x10, 0x5}, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="050f40c958a1100b"]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x2e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 35.234833178s ago: executing program 0 (id=3162): r0 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_gfeatures}) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_set_self_attr(0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000002980)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20faffffff000000840000000200000003000b820500000008000000", @ANYRES32=0x0], 0x20}], 0x1, 0x20000850) socket$caif_stream(0x25, 0x1, 0x2) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_gfeatures}) (async) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204"], 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) lsm_set_self_attr(0x0, 0x0, 0x0, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet_sctp(r1, &(0x7f0000002980)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20faffffff000000840000000200000003000b820500000008000000", @ANYRES32=0x0], 0x20}], 0x1, 0x20000850) (async) 34.808534726s ago: executing program 0 (id=3163): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) 34.432115084s ago: executing program 7 (id=3164): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @generic="5c028e"]}, 0x24}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) splice(r0, &(0x7f0000000000)=0x7f9af8dd, r1, &(0x7f0000000040)=0x7, 0x5, 0xc) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 34.221985462s ago: executing program 6 (id=3165): socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000de05a9460000000000000018310000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000002a000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x15, &(0x7f0000000380)=@raw=[@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x15, &(0x7f0000000380)=@raw=[@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0x174}, {0x80000006}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0x174}, {0x80000006}]}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0x5, 0x81, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r4}, 0x38) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000071116a00000000008510000002000000850000000000000095000000004000009500a50500000000a7664ace88f3284baf71dcbb2b4b93597f6140cc51c69be1716632ceda93db3759730d8e75e39d0f2a4a632779f37ed3533b810aaac5bc2342fdad4195d0b33262e612a44586bb43760f4c160300fd2f7b56aeccce810dd780f165418b21064d5fb25009b49ab193b379af3a629249cf112993c3938e0ef5a93fee"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000071116a00000000008510000002000000850000000000000095000000004000009500a50500000000a7664ace88f3284baf71dcbb2b4b93597f6140cc51c69be1716632ceda93db3759730d8e75e39d0f2a4a632779f37ed3533b810aaac5bc2342fdad4195d0b33262e612a44586bb43760f4c160300fd2f7b56aeccce810dd780f165418b21064d5fb25009b49ab193b379af3a629249cf112993c3938e0ef5a93fee"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) (async) sendmmsg$alg(r5, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r5, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905"], 0x0) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905"], 0x0) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 33.525632077s ago: executing program 7 (id=3166): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x11, 0x6, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SG_BLKSECTGET(r5, 0x1267, &(0x7f00000000c0)) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000b4f9010400feb8000000000000000500000a08000240000000020c00044000000001000000010c000440000000000000000508ea014000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x20004800) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 33.471535693s ago: executing program 6 (id=3167): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x1, 0xffffffff, 0x10, 0x0, 0x18, "b16f6ff1923cfbcb854b3e0d5bed8f7e736cee"}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 33.189263022s ago: executing program 3 (id=3168): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r2 = syz_io_uring_setup(0x24f7, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000740)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/96, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000440)) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}], 0x10}, 0x41) 32.765816318s ago: executing program 3 (id=3169): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0437c5000000000001090227000100000000090400000103000000092100004001220500090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 32.41697278s ago: executing program 9 (id=3170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x44, r2, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffe0000}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000bfde01800e0100006574603a74756e6c838a993c8b51c12e76892a8c206e14bf7000944615cb13cdd98278f126674ed60cc70cef9893d57f45c80a0e450eeb4dc3aa4c4b60aaf780f2fe3184d525e99fd3faca26b93afcbea51fbd632fa0dc721c98352e11572c195fc13725563ea0d7afef7b8e"], 0x28}}, 0x24000890) 31.211694231s ago: executing program 9 (id=3171): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r1, 0x1, 0x2, 0x0, &(0x7f0000000140)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x21c, 0x0, 0x11, 0x148, 0xf4, 0x10, 0x1ac, 0x2a8, 0x2a8, 0x1ac, 0x2a8, 0xac, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x10, 0x70, 0xd0, 0x1c}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x3, 0x5, 0x6, 0x6, 0x2], 0x4, 0x4}, {0x4, [0x1, 0x4, 0x6, 0x6, 0x0, 0x4], 0x2, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3e, 0xefa, 0x2, '\x00', {0x7f}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x278) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="2800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000006e90025c0f0003000000c3935d007cebb8bca8ff0fb0c31889d159a000c74b5a285af09faf0363b2d4321299806823da4003fa59f7ac47b8619be7e680beab5402e538e19b2be3f39e962289f834523c14962045282e4a223c9bfb4246590dd1da4b97651103daa11de2b4f7e10d116db4a1ed1ca9170d000000000000004007246e67d9cd91178dd60c94e5e194e12200"/165], 0x28}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f00000000c0)=""/44, 0x2c) getdents(r3, &(0x7f0000000040)=""/44, 0x2c) syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12234e344004b5202c04051eb4be22341875a83200000001090212"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x22010, r2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x3, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x40}}], 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioprio_set$uid(0x3, 0xee01, 0x4004) 31.137544927s ago: executing program 6 (id=3172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r4, &(0x7f000000b800)={0x2020, 0x0, 0x0}, 0xe80) dup3(r2, r4, 0x0) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfffffe14) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000f80)={0x48}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000000}, 0xc4b31f6ce846701f) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000000), 0x4) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r11, 0x706, 0x0) r12 = syz_pidfd_open(r10, 0x0) ioctl$EXT4_IOC_MIGRATE(r12, 0xff04) recvmmsg(r8, &(0x7f0000001140), 0x700, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xffffffffffffff79, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYBLOB="f3493b5e8b70b91517cd02dd52eb7fec2621676b4597fd37052402aa81f36a9a8dbb9d583b7561bedf16ef6b97f8e26789ecd07f0038b1c74f7c9c3d7729380025668f28200ceb92f52bc849c650a1ea116d0f1a377295856b53b62683390ce64103c6ab83ee52bfd0261437c8fb29ad3d250821b001cec1ebf9790cce56d64569005bf8e85cd1eac79a10cf62569d5eb7e5d6e33bfe4238bf12d7b939a46f24313c51588a8b74820c65810d3b555810d58eb2e6c57f8790f52a77a7bebfc9b4920e838ffdea193245a1a558e3f5a3"], 0x194}, 0x1, 0x0, 0x0, 0x90}, 0x20008004) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140b00001000010000000000000000000000000a5c000000060a0b04000014000000000002000000300004802c000180090001007866726d000000001c0002800800014000000000050003000000000008000240010000060900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) listen(r0, 0x1) 30.909890277s ago: executing program 0 (id=3173): prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0xfffffffffffffffd}, 0x0) r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) r1 = gettid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000001980)={0x0, @llc={0x1a, 0x21d, 0x3, 0x7, 0x1, 0xc}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x2}}, @llc={0x1a, 0x339, 0x10, 0x6c, 0x6, 0x0, @multicast}, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x5, 0x2}) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r3 = socket(0x28, 0x3, 0xffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000080)={0x6, 'veth0\x00', {0x3ff}, 0x3ff}) socket$kcm(0x29, 0x2, 0x0) 29.79171779s ago: executing program 7 (id=3174): socket$kcm(0x21, 0x2, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000001040), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000001000)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) linkat(r3, &(0x7f00000000c0)='./file0\x00', r3, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000002100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c00000014000180080003000100000008000100", @ANYRES32=r4, @ANYRES64=r4], 0x28}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f000000bdc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f0000002140)=ANY=[@ANYBLOB="2c00f8632b4affbbcddd0c5ee692a09f40899b3742a8e5269218167e7dc80f27ecd6c9059972474708f7470a72929eb00f72ccf7ef1153dc24e2f5d955a387f7f3e34efe8a9baa15a86843efd89477e8d0b1f1a116634c4bf3", @ANYRES16=r7, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r8, @ANYBLOB="1000508004000600050002000d000000"], 0x2c}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000020c0)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRESOCT=r7, @ANYRES16=r5, @ANYRES8=r8, @ANYRES64=r5, @ANYRES8=r5, @ANYRES16=0x0]) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="1baeac1e45c5343f027f69395a94c3759904e8b7afe445ea5a14d289f00489d25033eb2e8f0911d34cee8f465a5fa841780ce5782600348889cb1d684616288e739f49c07cfb63cbf96c0cdc78b00461a2793b1b87ad8612056a17b250ad47c0271212023fcc0583e44966a9aeb8801c66cf0e25637384cc48a9f16e50027c8b9f80ff179dbc77c068c83e451d43a8a80b760ff9da5b25cece9ac0214461bc93b3f47db2d1e47ca7ec1461f0f3", 0xad}], 0x1) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r10, &(0x7f0000000080)={0x2020}, 0x2020) 29.395092662s ago: executing program 6 (id=3175): pipe(&(0x7f0000000500)={0xffffffffffffffff}) readv(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 29.198757032s ago: executing program 3 (id=3176): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000400)={0xd, 0x723e, 0x1, 'queue0\x00'}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r3, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x2, 0x8000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 28.703039793s ago: executing program 7 (id=3177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xd2, &(0x7f0000000180), &(0x7f0000000080)=0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8080000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af04, &(0x7f0000000200)) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 27.456533614s ago: executing program 7 (id=3178): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaae130aeaaba3086dd606410a60f510e8000000000000000000000ffffffffffffff02000000000000000000000000000184"], 0x0) 2.456729437s ago: executing program 75 (id=3176): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000400)={0xd, 0x723e, 0x1, 'queue0\x00'}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r3, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x2, 0x8000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 689.918862ms ago: executing program 76 (id=3171): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r1, 0x1, 0x2, 0x0, &(0x7f0000000140)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x21c, 0x0, 0x11, 0x148, 0xf4, 0x10, 0x1ac, 0x2a8, 0x2a8, 0x1ac, 0x2a8, 0xac, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x10, 0x70, 0xd0, 0x1c}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x3, 0x5, 0x6, 0x6, 0x2], 0x4, 0x4}, {0x4, [0x1, 0x4, 0x6, 0x6, 0x0, 0x4], 0x2, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3e, 0xefa, 0x2, '\x00', {0x7f}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x278) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="2800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000006e90025c0f0003000000c3935d007cebb8bca8ff0fb0c31889d159a000c74b5a285af09faf0363b2d4321299806823da4003fa59f7ac47b8619be7e680beab5402e538e19b2be3f39e962289f834523c14962045282e4a223c9bfb4246590dd1da4b97651103daa11de2b4f7e10d116db4a1ed1ca9170d000000000000004007246e67d9cd91178dd60c94e5e194e12200"/165], 0x28}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f00000000c0)=""/44, 0x2c) getdents(r3, &(0x7f0000000040)=""/44, 0x2c) syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12234e344004b5202c04051eb4be22341875a83200000001090212"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x22010, r2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x3, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x40}}], 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioprio_set$uid(0x3, 0xee01, 0x4004) 334.340983ms ago: executing program 77 (id=3178): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaae130aeaaba3086dd606410a60f510e8000000000000000000000ffffffffffffff02000000000000000000000000000184"], 0x0) 55.770657ms ago: executing program 78 (id=3173): prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0xfffffffffffffffd}, 0x0) r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) r1 = gettid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000001980)={0x0, @llc={0x1a, 0x21d, 0x3, 0x7, 0x1, 0xc}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x2}}, @llc={0x1a, 0x339, 0x10, 0x6c, 0x6, 0x0, @multicast}, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x5, 0x2}) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r3 = socket(0x28, 0x3, 0xffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000080)={0x6, 'veth0\x00', {0x3ff}, 0x3ff}) socket$kcm(0x29, 0x2, 0x0) 0s ago: executing program 79 (id=3175): pipe(&(0x7f0000000500)={0xffffffffffffffff}) readv(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) kernel console output (not intermixed with test programs): usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.436139][ T5378] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1009.444665][ T5378] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1009.454226][ T5378] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1009.464009][ T5378] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1009.512196][ T7620] usb 5-1: config 0 descriptor?? [ 1009.527093][T10038] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1009.546418][ T7619] usb 10-1: new high-speed USB device number 127 using dummy_hcd [ 1009.661640][ T1116] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.722311][ T7619] usb 10-1: Using ep0 maxpacket: 32 [ 1009.747753][ T7619] usb 10-1: config 6 has an invalid interface number: 34 but max is 3 [ 1009.756051][ T7619] usb 10-1: config 6 has an invalid interface number: 239 but max is 3 [ 1009.763784][T10077] team0: entered promiscuous mode [ 1009.776341][ T7619] usb 10-1: config 6 has an invalid interface number: 217 but max is 3 [ 1009.784967][ T7619] usb 10-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 1009.794273][T10077] team_slave_0: entered promiscuous mode [ 1009.811366][T10077] team_slave_1: entered promiscuous mode [ 1009.811511][ T7619] usb 10-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 1009.837029][T10077] batadv1: entered promiscuous mode [ 1009.843506][ T7619] usb 10-1: config 6 has an invalid interface number: 242 but max is 3 [ 1009.933666][ T7619] usb 10-1: config 6 has no interface number 0 [ 1009.945970][ T7619] usb 10-1: config 6 has no interface number 1 [ 1009.986384][T10077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2916'. [ 1009.994692][ T7619] usb 10-1: config 6 has no interface number 2 [ 1010.028419][ T7620] plantronics 0003:047F:FFFF.0031: unknown main item tag 0xd [ 1010.038839][ T7619] usb 10-1: config 6 has no interface number 3 [ 1010.068215][ T7620] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 1010.080792][ T7619] usb 10-1: config 6 interface 34 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1010.134366][ T7619] usb 10-1: config 6 interface 239 altsetting 9 endpoint 0xE has an invalid bInterval 248, changing to 11 [ 1010.148521][ T7620] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1010.177065][ T7619] usb 10-1: config 6 interface 239 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 1023 [ 1010.216370][ T7619] usb 10-1: config 6 interface 239 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1010.254969][ T7619] usb 10-1: config 6 interface 239 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 1010.294322][ T7619] usb 10-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 1010.307484][ T7620] usb 5-1: USB disconnect, device number 49 [ 1010.395298][ T7619] usb 10-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 1010.487277][ T7619] usb 10-1: config 6 interface 217 altsetting 2 endpoint 0x8 has invalid maxpacket 1040, setting to 1024 [ 1010.566307][ T7619] usb 10-1: config 6 interface 217 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1010.586412][ T7619] usb 10-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 1010.605201][ T7619] usb 10-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 1010.616512][ T1116] bridge_slave_1: left allmulticast mode [ 1010.635192][ T1116] bridge_slave_1: left promiscuous mode [ 1010.648106][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.658531][ T7619] usb 10-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1010.678284][ T7619] usb 10-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 1010.679863][ T1116] bridge_slave_0: left allmulticast mode [ 1010.696966][ T7619] usb 10-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1010.714861][ T7619] usb 10-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1010.733353][ T1116] bridge_slave_0: left promiscuous mode [ 1010.742145][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.760499][ T7619] usb 10-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 1010.790160][ T7619] usb 10-1: config 6 interface 242 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 1010.822378][ T7619] usb 10-1: config 6 interface 242 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 1010.876429][ T7619] usb 10-1: config 6 interface 242 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 1010.917952][ T7619] usb 10-1: config 6 interface 242 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1010.945267][ T7619] usb 10-1: config 6 interface 242 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1010.970540][ T7619] usb 10-1: config 6 interface 34 has no altsetting 0 [ 1011.000408][ T7619] usb 10-1: config 6 interface 239 has no altsetting 0 [ 1011.014760][ T7619] usb 10-1: config 6 interface 217 has no altsetting 0 [ 1011.025430][ T7619] usb 10-1: config 6 interface 242 has no altsetting 0 [ 1011.042860][ T7619] usb 10-1: New USB device found, idVendor=1199, idProduct=683d, bcdDevice= 4.60 [ 1011.055283][ T7619] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.096503][ T7619] usb 10-1: Product: syz [ 1011.125009][ T7619] usb 10-1: Manufacturer: Ї [ 1011.138661][ T7619] usb 10-1: SerialNumber: syz [ 1011.368080][ T7619] sierra 10-1:6.34: Sierra USB modem converter detected [ 1011.398357][ T7619] usb 10-1: Sierra USB modem converter now attached to ttyUSB0 [ 1011.419147][ T7619] sierra 10-1:6.239: Sierra USB modem converter detected [ 1011.449566][ T7619] usb 10-1: Sierra USB modem converter now attached to ttyUSB1 [ 1011.477325][ T7619] usb 10-1: Sierra USB modem converter now attached to ttyUSB2 [ 1011.502368][ T7619] sierra 10-1:6.217: Sierra USB modem converter detected [ 1011.526912][ T7619] usb 10-1: Sierra USB modem converter now attached to ttyUSB3 [ 1011.536526][ T5378] Bluetooth: hci3: command tx timeout [ 1011.556532][ T7619] usb 10-1: Sierra USB modem converter now attached to ttyUSB4 [ 1011.573691][ T7619] sierra 10-1:6.242: Sierra USB modem converter detected [ 1011.608435][ T7619] usb 10-1: Sierra USB modem converter now attached to ttyUSB5 [ 1011.636675][ T7619] usb 10-1: USB disconnect, device number 127 [ 1011.645999][ T7619] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1011.657038][ T7619] sierra 10-1:6.34: device disconnected [ 1011.669486][ T7619] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1011.684195][ T7619] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 1011.695945][ T7619] sierra 10-1:6.239: device disconnected [ 1011.729407][ T7619] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 1011.745360][ T7619] sierra ttyUSB4: Sierra USB modem converter now disconnected from ttyUSB4 [ 1011.755833][ T7619] sierra 10-1:6.217: device disconnected [ 1011.777786][ T7619] sierra ttyUSB5: Sierra USB modem converter now disconnected from ttyUSB5 [ 1011.817200][ T7619] sierra 10-1:6.242: device disconnected [ 1011.871731][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.903835][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.929118][ T1116] bond0 (unregistering): Released all slaves [ 1011.948457][T10070] team0: left promiscuous mode [ 1011.953288][T10070] team_slave_0: left promiscuous mode [ 1011.961685][T10070] team_slave_1: left promiscuous mode [ 1011.974418][T10070] batadv1: left promiscuous mode [ 1012.065176][T10066] chnl_net:caif_netlink_parms(): no params data found [ 1012.663595][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2924'. [ 1012.995329][T10066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.002653][T10066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.010775][T10066] bridge_slave_0: entered allmulticast mode [ 1013.018190][T10066] bridge_slave_0: entered promiscuous mode [ 1013.027659][T10066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.034834][T10066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.042959][T10066] bridge_slave_1: entered allmulticast mode [ 1013.054283][T10066] bridge_slave_1: entered promiscuous mode [ 1013.177350][ T1116] hsr_slave_0: left promiscuous mode [ 1013.198032][ T1116] hsr_slave_1: left promiscuous mode [ 1013.213412][ T7619] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1013.224670][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.252994][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.277924][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.295754][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.373670][ T1116] veth1_macvtap: left promiscuous mode [ 1013.384194][ T1116] veth0_macvtap: left promiscuous mode [ 1013.390224][ T7619] usb 3-1: Using ep0 maxpacket: 32 [ 1013.396908][ T1116] veth1_vlan: left promiscuous mode [ 1013.402428][ T1116] veth0_vlan: left promiscuous mode [ 1013.405028][ T7620] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1013.448445][ T7619] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1013.460539][ T7619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1013.472020][ T7619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1013.483546][ T7619] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1013.493029][ T7619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.504340][ T7619] usb 3-1: config 0 descriptor?? [ 1013.511475][T10406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1013.521044][ T7619] hub 3-1:0.0: USB hub found [ 1013.535911][T10467] openvswitch: netlink: Flow key attr not present in new flow. [ 1013.616416][ T5378] Bluetooth: hci3: command tx timeout [ 1013.690386][ T7620] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1013.704478][ T7620] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1013.730939][ T7619] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1013.754523][ T7619] usbhid 3-1:0.0: can't add hid device: -71 [ 1013.763520][ T7619] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1013.783732][ T7620] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1013.822875][ T7620] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1013.846298][ T5836] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1013.857670][ T7619] usb 3-1: USB disconnect, device number 43 [ 1013.895497][ T7620] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1013.922578][ T7620] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.954461][ T7620] usb 10-1: config 0 descriptor?? [ 1013.978212][T10452] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1014.548606][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 1014.558577][ T7620] plantronics 0003:047F:FFFF.0032: unknown main item tag 0xd [ 1014.568690][ T7620] plantronics 0003:047F:FFFF.0032: No inputs registered, leaving [ 1014.585502][ T5836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.619219][ T7620] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1014.647652][ T5836] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 1014.658319][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.667483][ T5836] usb 5-1: Product: syz [ 1014.671691][ T5836] usb 5-1: Manufacturer: syz [ 1014.676394][ T5836] usb 5-1: SerialNumber: syz [ 1014.705236][ T5836] usb 5-1: config 0 descriptor?? [ 1014.818307][ T5892] usb 10-1: USB disconnect, device number 2 [ 1015.399165][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 1015.559027][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 1015.696538][ T5378] Bluetooth: hci3: command tx timeout [ 1016.871452][T10553] snd_dummy snd_dummy.0: control 2:0:257:syz0:-4 is already present [ 1017.453318][T10066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.501445][T10066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.777350][ T5378] Bluetooth: hci3: command tx timeout [ 1017.875792][T10066] team0: Port device team_slave_0 added [ 1017.918586][T10066] team0: Port device team_slave_1 added [ 1017.985570][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1017.985594][ T29] audit: type=1326 audit(1730149072.923:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10613 comm="syz.7.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e06d7e719 code=0x7ffc0000 [ 1018.014478][ T29] audit: type=1326 audit(1730149072.923:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10613 comm="syz.7.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e06d7e719 code=0x7ffc0000 [ 1018.038557][ T29] audit: type=1326 audit(1730149072.923:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10613 comm="syz.7.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e06d7e719 code=0x7ffc0000 [ 1018.061194][ T29] audit: type=1326 audit(1730149072.923:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10613 comm="syz.7.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e06d7e719 code=0x7ffc0000 [ 1018.084240][ T29] audit: type=1326 audit(1730149072.923:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10613 comm="syz.7.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e06d7e719 code=0x7ffc0000 [ 1018.107027][ T29] audit: type=1326 audit(1730149072.923:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10613 comm="syz.7.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e06d7e719 code=0x7ffc0000 [ 1018.129709][ T29] audit: type=1326 audit(1730149072.923:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10613 comm="syz.7.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e06d7e719 code=0x7ffc0000 [ 1018.152535][ T29] audit: type=1326 audit(1730149072.923:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10613 comm="syz.7.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e06d7e719 code=0x7ffc0000 [ 1018.175388][ T29] audit: type=1326 audit(1730149072.923:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10613 comm="syz.7.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e06d7e719 code=0x7ffc0000 [ 1018.198416][ T29] audit: type=1326 audit(1730149072.923:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10613 comm="syz.7.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e06d7e719 code=0x7ffc0000 [ 1018.386120][T10066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.434831][T10066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.493742][T10066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.515838][T10066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.523262][T10066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.563062][T10066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.716794][ T5892] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1018.868185][ T5892] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1018.883624][T10066] hsr_slave_0: entered promiscuous mode [ 1018.900604][ T5892] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1018.946474][ T5892] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1018.985956][ T5892] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1019.006637][T10066] hsr_slave_1: entered promiscuous mode [ 1019.050622][ T5892] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1019.079950][T10066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1019.104533][ T5892] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.113362][T10066] Cannot create hsr debugfs directory [ 1019.162150][ T5892] usb 10-1: config 0 descriptor?? [ 1019.187157][T10654] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1019.607471][ T5892] plantronics 0003:047F:FFFF.0033: unknown main item tag 0xd [ 1019.627986][ T5892] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 1019.661702][ T5892] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1019.706625][ T5836] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1019.868123][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 1019.916106][ T5892] usb 10-1: USB disconnect, device number 3 [ 1019.921252][ T5836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.932427][ T5836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1019.941843][ T5836] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1020.067508][ T5836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1020.077423][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.086049][ T5836] usb 3-1: Product: syz [ 1020.090389][ T5836] usb 3-1: Manufacturer: syz [ 1020.095049][ T5836] usb 3-1: SerialNumber: syz [ 1020.104130][ T5836] usb 3-1: selecting invalid altsetting 1 [ 1020.321189][ T5836] cdc_ncm 3-1:1.0: bind() failure [ 1020.336104][ T5836] usb 3-1: USB disconnect, device number 44 [ 1020.461971][ T7620] usb 5-1: USB disconnect, device number 50 [ 1020.567873][T10066] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1020.579566][T10066] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1020.590376][T10066] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1020.593910][T10880] snd_dummy snd_dummy.0: control 2:0:257:syz0:-4 is already present [ 1020.609066][T10066] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1020.790499][T10066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.810295][T10066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.830684][T13418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.837895][T13418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.874797][T13418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.882036][T13418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.139714][T10066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1021.161174][T10066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1021.282336][T10066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.402870][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2952'. [ 1021.783412][T10066] veth0_vlan: entered promiscuous mode [ 1021.841089][T10066] veth1_vlan: entered promiscuous mode [ 1022.029082][T10066] veth0_macvtap: entered promiscuous mode [ 1022.082565][T10066] veth1_macvtap: entered promiscuous mode [ 1022.188959][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.241354][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.264678][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.275794][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.285840][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.296522][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.306806][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.317683][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.332897][T10066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.356435][ T7620] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1022.391687][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.445548][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.484306][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.514672][ T7620] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1022.516400][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.524120][ T7620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.561248][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.592503][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.608516][ T7620] usb 5-1: config 0 descriptor?? [ 1022.622187][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.654825][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.699369][T10066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.701614][T10959] FAULT_INJECTION: forcing a failure. [ 1022.701614][T10959] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.777442][T10959] CPU: 0 UID: 0 PID: 10959 Comm: syz.9.2953 Not tainted 6.12.0-rc5-syzkaller #0 [ 1022.777680][T10066] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.786531][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1022.786561][T10959] Call Trace: [ 1022.786572][T10959] [ 1022.786583][T10959] dump_stack_lvl+0x241/0x360 [ 1022.786620][T10959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1022.805623][T10066] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.808665][T10959] ? __pfx__printk+0x10/0x10 [ 1022.808699][T10959] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 1022.815604][T10066] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.816329][T10959] ? __pfx___might_resched+0x10/0x10 [ 1022.816370][T10959] should_fail_ex+0x3b0/0x4e0 [ 1022.821658][T10066] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.830247][T10959] ? __anon_vma_prepare+0xc4/0x4a0 [ 1022.830280][T10959] should_failslab+0xac/0x100 [ 1022.830308][T10959] ? __anon_vma_prepare+0xc4/0x4a0 [ 1022.830329][T10959] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1022.830361][T10959] __anon_vma_prepare+0xc4/0x4a0 [ 1022.830391][T10959] handle_pte_fault+0x5361/0x6800 [ 1022.830416][T10959] ? mark_lock+0x9a/0x360 [ 1022.830443][T10959] ? __lock_acquire+0x1384/0x2050 [ 1022.830482][T10959] ? mark_lock+0x9a/0x360 [ 1022.830507][T10959] ? __pfx_handle_pte_fault+0x10/0x10 [ 1022.830532][T10959] ? __lock_acquire+0x1384/0x2050 [ 1022.830593][T10959] ? __pfx_lock_acquire+0x10/0x10 [ 1022.830630][T10959] ? do_raw_spin_lock+0x14f/0x370 [ 1022.830670][T10959] handle_mm_fault+0x1106/0x1bb0 [ 1022.830731][T10959] ? __pfx_handle_mm_fault+0x10/0x10 [ 1022.830763][T10959] ? follow_page_pte+0x9cc/0x2010 [ 1022.947979][T10959] ? __pfx_find_vma+0x10/0x10 [ 1022.952690][T10959] ? vma_is_secretmem+0xd/0x50 [ 1022.957475][T10959] ? check_vma_flags+0x52b/0x5a0 [ 1022.962450][T10959] __get_user_pages+0x1c82/0x49e0 [ 1022.967555][T10959] ? __pfx___get_user_pages+0x10/0x10 [ 1022.972950][T10959] ? __pfx_mt_find+0x10/0x10 [ 1022.977572][T10959] populate_vma_page_range+0x264/0x330 [ 1022.983057][T10959] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1022.989065][T10959] ? apply_vma_lock_flags+0x42a/0x510 [ 1022.994475][T10959] __mm_populate+0x27a/0x460 [ 1022.999123][T10959] ? __pfx___mm_populate+0x10/0x10 [ 1023.004296][T10959] do_mlock+0x61f/0x7e0 [ 1023.008471][T10959] ? __fget_files+0x3f3/0x470 [ 1023.013169][T10959] ? __pfx_do_mlock+0x10/0x10 [ 1023.017930][T10959] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1023.023957][T10959] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1023.030310][T10959] ? do_syscall_64+0x100/0x230 [ 1023.035097][T10959] __x64_sys_mlock+0x60/0x70 [ 1023.039793][T10959] do_syscall_64+0xf3/0x230 [ 1023.044314][T10959] ? clear_bhb_loop+0x35/0x90 [ 1023.049013][T10959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.054929][T10959] RIP: 0033:0x7f23f077e719 [ 1023.059361][T10959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.079122][T10959] RSP: 002b:00007f23f1624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1023.087566][T10959] RAX: ffffffffffffffda RBX: 00007f23f0935f80 RCX: 00007f23f077e719 [ 1023.095561][T10959] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020bda000 [ 1023.103559][T10959] RBP: 00007f23f1624090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.111548][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.119536][T10959] R13: 0000000000000000 R14: 00007f23f0935f80 R15: 00007f23f0a5fa28 [ 1023.127538][T10959] [ 1023.397747][ T7620] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 1023.406323][ T7620] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1023.466363][ T7620] [drm:udl_init] *ERROR* Selecting channel failed [ 1023.488451][ T7620] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1023.495205][ T7620] [drm] Initialized udl on minor 2 [ 1023.567293][ T7620] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1023.576875][ T7620] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1023.633118][ T5836] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1023.642350][ T5836] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1023.650555][ T5836] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1023.679755][ T7620] usb 5-1: USB disconnect, device number 51 [ 1023.802825][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.803484][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.818787][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.850841][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.331453][T11064] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2959'. [ 1024.341971][T11064] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2959'. [ 1024.780304][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'. [ 1024.968538][T11094] snd_dummy snd_dummy.0: control 2:0:257:syz0:-4 is already present [ 1024.986328][ T7619] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1025.075660][T11098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.144003][T11098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.160849][ T7619] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=79.b0 [ 1025.208718][ T7619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.265501][ T7619] usb 5-1: config 0 descriptor?? [ 1025.309487][ T7619] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 1025.353609][ T7619] dvb-usb: bulk message failed: -22 (2/0) [ 1025.369413][ T46] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1025.417494][ T7619] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1025.507830][ T7619] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 1025.581572][ T7619] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 1025.717319][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 1025.724066][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.735101][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.766893][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2969'. [ 1025.775793][T11124] openvswitch: netlink: Actions may not be safe on all matching packets [ 1025.811864][ T46] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 1025.832518][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.874608][ T46] usb 3-1: config 0 descriptor?? [ 1025.971932][ T5892] usb 5-1: USB disconnect, device number 52 [ 1026.151899][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 1026.174166][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1026.209170][ T46] usb 3-1: USB disconnect, device number 45 [ 1026.647943][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2973'. [ 1027.246889][T11224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2977'. [ 1027.596358][ T5836] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1027.741177][ T5836] usb 10-1: device descriptor read/64, error -71 [ 1027.966138][T11257] ucma_write: process 156 (syz.2.2981) changed security contexts after opening file descriptor, this is not allowed. [ 1028.009374][ T5836] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1028.167048][ T5836] usb 10-1: device descriptor read/64, error -71 [ 1028.216533][ T969] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1028.306921][ T5836] usb usb10-port1: attempt power cycle [ 1028.326408][ T5893] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1028.389160][ T969] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.412935][ T969] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1028.495572][ T969] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1028.539638][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.550458][ T5893] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 1028.586309][ T969] usb 4-1: Product: ꓎ᔽ䚒﬘åŒï• [ 1028.592108][ T969] usb 4-1: Manufacturer: à  [ 1028.596884][ T5893] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 1028.605093][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.632528][ T969] usb 4-1: SerialNumber: ä°Š [ 1028.672798][ T5893] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1028.696430][ T5836] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1028.707154][ T5893] usb 3-1: config 0 has no interface number 0 [ 1028.713357][ T5893] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1028.757971][ T5836] usb 10-1: device descriptor read/8, error -71 [ 1028.786598][ T5893] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1028.816382][ T5893] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1028.856378][ T5893] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.878263][ T969] usb 4-1: USB disconnect, device number 91 [ 1028.919019][ T5893] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1028.955820][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.001667][ T5893] usb 3-1: config 0 descriptor?? [ 1029.026549][ T5836] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1029.060811][ T5893] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1029.071232][ T5836] usb 10-1: device descriptor read/8, error -71 [ 1029.213810][ T5836] usb usb10-port1: unable to enumerate USB device [ 1029.297534][T11257] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2981'. [ 1029.618853][ T5893] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 1029.641987][ T5893] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1029.666368][ T5893] usb 3-1: MIDIStreaming interface descriptor not found [ 1030.296619][ T5891] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1030.478067][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.494415][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.541089][ T5891] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1030.560857][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.604139][ T5891] usb 4-1: config 0 descriptor?? [ 1031.038616][ T5891] arvo 0003:1E7D:30D4.0034: unknown main item tag 0x0 [ 1031.065361][T11341] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1031.107344][ T5891] arvo 0003:1E7D:30D4.0034: unknown main item tag 0x0 [ 1031.138797][ T5891] arvo 0003:1E7D:30D4.0034: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 1031.293630][ T5891] arvo 0003:1E7D:30D4.0034: couldn't init struct arvo_device [ 1031.374805][ T5891] arvo 0003:1E7D:30D4.0034: couldn't install keyboard [ 1031.404911][ T5891] arvo 0003:1E7D:30D4.0034: probe with driver arvo failed with error -71 [ 1031.773699][ T5891] usb 4-1: USB disconnect, device number 92 [ 1033.441143][ T5893] usb 3-1: USB disconnect, device number 46 [ 1033.737942][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1033.807454][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1034.492190][ T1116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.178052][ T1116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.968846][ T1116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.260452][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 1036.476660][ T5891] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1036.570287][ T1116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.638514][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 1036.685137][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.727429][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.810643][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1036.826803][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1036.835483][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1036.844010][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1036.851572][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1036.865635][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1036.874411][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1036.883565][ T5891] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1036.893473][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.114704][ T5891] usb 4-1: config 0 descriptor?? [ 1037.328343][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2998'. [ 1037.381090][T11501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.515470][T11501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.594197][ T1116] bridge_slave_1: left allmulticast mode [ 1037.620830][ T1116] bridge_slave_1: left promiscuous mode [ 1037.670275][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.680865][ T5891] usbhid 4-1:0.0: can't add hid device: -71 [ 1037.725555][ T1116] bridge_slave_0: left allmulticast mode [ 1037.727676][ T5891] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1037.761389][ T1116] bridge_slave_0: left promiscuous mode [ 1037.784185][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.795388][ T5891] usb 4-1: USB disconnect, device number 93 [ 1038.031568][T11565] xt_policy: output policy not valid in PREROUTING and INPUT [ 1038.186413][ T5891] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1038.357939][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1038.379258][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 1038.429274][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1038.449042][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1038.493991][ T5891] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 1038.523091][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1038.543588][ T5891] usb 4-1: SerialNumber: syz [ 1038.565238][ T5891] usb 4-1: config 0 descriptor?? [ 1038.590059][T11549] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1038.611326][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 1038.625686][ T5891] port100 4-1:0.0: NFC: Could not get supported command types [ 1038.814018][T11549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.838907][T11549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.861830][T11549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.894349][T11549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.976389][ T5841] Bluetooth: hci2: command tx timeout [ 1039.016901][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.023077][ T5893] usb 4-1: USB disconnect, device number 94 [ 1039.098633][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.187540][ T1116] bond0 (unregistering): Released all slaves [ 1039.218284][ T1116] bond1 (unregistering): Released all slaves [ 1039.277531][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3000'. [ 1039.306768][T11564] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1039.420616][ T1116] REæ6G: left promiscuous mode [ 1040.220779][T11474] chnl_net:caif_netlink_parms(): no params data found [ 1040.382518][ T1116] hsr_slave_0: left promiscuous mode [ 1040.483052][T11730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3007'. [ 1040.504409][ T1116] hsr_slave_1: left promiscuous mode [ 1040.524863][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.546789][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.588073][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.598914][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.701306][ T1116] veth1_macvtap: left promiscuous mode [ 1040.720895][ T1116] veth0_macvtap: left promiscuous mode [ 1040.735215][ T1116] veth1_vlan: left promiscuous mode [ 1040.747958][ T1116] veth0_vlan: left promiscuous mode [ 1040.876362][ T5892] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1040.983328][T11750] kvm_pr_unimpl_wrmsr: 9 callbacks suppressed [ 1040.983359][T11750] kvm: kvm [11749]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5100000800 [ 1041.030608][T11750] kvm: kvm [11749]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xd200000000 [ 1041.051697][ T5892] usb 10-1: Using ep0 maxpacket: 16 [ 1041.057418][ T5841] Bluetooth: hci2: command tx timeout [ 1041.075204][ T5892] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.118569][ T5892] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1041.146927][ T5892] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1041.157935][ T1116] team0 (unregistering): Port device batadv1 removed [ 1041.162017][ T5892] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1041.185004][ T5892] usb 10-1: Manufacturer: syz [ 1041.202799][ T5892] usb 10-1: config 0 descriptor?? [ 1041.910787][T11762] program syz.3.3011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1041.946975][T11762] sg_write: data in/out 1060422945/121 bytes for SCSI command 0x8f-- guessing data in; [ 1041.946975][T11762] program syz.3.3011 not setting count and/or reply_len properly [ 1042.773199][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 1042.842087][ T5378] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1042.852040][ T5378] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1042.861204][ T5378] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1042.869680][ T5378] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1042.879344][ T5378] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1042.886844][ T5378] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1042.975764][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 1043.155322][ T5378] Bluetooth: hci2: command tx timeout [ 1043.286508][ T969] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1043.449787][ T969] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1043.477679][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1043.500784][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1043.515972][ T969] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1043.536900][ T969] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1043.546112][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.569689][ T969] usb 4-1: config 0 descriptor?? [ 1043.575499][T11782] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1043.755655][T11738] netlink: 'syz.9.3009': attribute type 21 has an invalid length. [ 1043.763839][T11738] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3009'. [ 1043.776684][T11738] netlink: 'syz.9.3009': attribute type 4 has an invalid length. [ 1043.784688][T11738] netlink: 'syz.9.3009': attribute type 3 has an invalid length. [ 1043.804859][T11738] netlink: 3 bytes leftover after parsing attributes in process `syz.9.3009'. [ 1043.935019][T11474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.953301][T11474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.962995][T11474] bridge_slave_0: entered allmulticast mode [ 1043.971194][T11474] bridge_slave_0: entered promiscuous mode [ 1043.980381][T11474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.988847][T11474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.007087][T11474] bridge_slave_1: entered allmulticast mode [ 1044.021106][T11474] bridge_slave_1: entered promiscuous mode [ 1044.023547][ T5892] usb 10-1: USB disconnect, device number 8 [ 1044.032049][ T969] plantronics 0003:047F:FFFF.0035: unknown main item tag 0xd [ 1044.053403][ T969] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 1044.123326][ T969] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1044.197572][T11474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.247460][T11474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.337820][ T7620] usb 4-1: USB disconnect, device number 95 [ 1044.425673][T11474] team0: Port device team_slave_0 added [ 1044.460678][T11474] team0: Port device team_slave_1 added [ 1044.704519][T11474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.711576][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.738431][T11474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.752486][T11474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.760003][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.786509][T11474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.893364][T11474] hsr_slave_0: entered promiscuous mode [ 1044.918217][T11474] hsr_slave_1: entered promiscuous mode [ 1044.961488][T11474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1044.984704][ T5378] Bluetooth: hci1: command tx timeout [ 1045.002407][T11474] Cannot create hsr debugfs directory [ 1045.089025][T11778] chnl_net:caif_netlink_parms(): no params data found [ 1045.218483][ T5378] Bluetooth: hci2: command tx timeout [ 1045.334525][T11778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.342968][T11778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.350659][T11778] bridge_slave_0: entered allmulticast mode [ 1045.359046][T11778] bridge_slave_0: entered promiscuous mode [ 1045.372367][T11778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.383203][T11778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.391276][T11778] bridge_slave_1: entered allmulticast mode [ 1045.399736][T11778] bridge_slave_1: entered promiscuous mode [ 1045.460016][ T969] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1045.481552][T11778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.512357][T11778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.616451][ T969] usb 10-1: Using ep0 maxpacket: 8 [ 1045.628228][T11778] team0: Port device team_slave_0 added [ 1045.631721][T12110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.659971][T11778] team0: Port device team_slave_1 added [ 1045.667577][T12110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.694277][T12110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.733556][T12110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.757180][T11778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.764880][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.809315][T11778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.015482][T11778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.050438][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.083591][T11778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.591356][T11778] hsr_slave_0: entered promiscuous mode [ 1046.619773][T11778] hsr_slave_1: entered promiscuous mode [ 1046.636625][T11778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1046.651185][T11778] Cannot create hsr debugfs directory [ 1046.661894][T12357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3020'. [ 1046.982219][ T969] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1047.003579][ T969] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1047.025436][ T969] usb 10-1: can't read configurations, error -71 [ 1047.067151][ T5378] Bluetooth: hci1: command tx timeout [ 1047.095607][T12455] ip6gre0: entered promiscuous mode [ 1047.101809][T12455] vlan2: entered promiscuous mode [ 1047.109009][T12455] ip6gre0: left promiscuous mode [ 1047.260222][ T5892] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1047.305541][T11474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1047.424913][T11474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1047.431904][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 1047.445606][ T5892] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.471940][T11474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1047.479470][ T5892] usb 4-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0x26, changing to 0x6 [ 1047.504083][T11474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1047.515890][ T5892] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x6 has invalid maxpacket 8200, setting to 1024 [ 1047.535865][ T5892] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1047.556833][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1047.563615][ T5892] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1047.573894][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.612198][ T5892] usb 4-1: config 0 descriptor?? [ 1048.041184][ T5892] hid-thrustmaster 0003:044F:B65D.0036: unknown main item tag 0x0 [ 1048.060394][ T5892] hid-thrustmaster 0003:044F:B65D.0036: unknown main item tag 0x0 [ 1048.070773][ T5892] hid-thrustmaster 0003:044F:B65D.0036: unknown main item tag 0x0 [ 1048.082258][ T5892] hid-thrustmaster 0003:044F:B65D.0036: unknown main item tag 0x0 [ 1048.091130][ T5892] hid-thrustmaster 0003:044F:B65D.0036: unknown main item tag 0x0 [ 1048.141036][ T5892] hid-thrustmaster 0003:044F:B65D.0036: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 1048.181125][ T5892] hid-thrustmaster 0003:044F:B65D.0036: setup data couldn't be sent [ 1048.188071][T12555] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3028'. [ 1048.243724][T11474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.322661][T11474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.368565][ T4940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.375787][ T4940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.390961][T12564] loop2: detected capacity change from 0 to 7 [ 1048.404644][T12564] Dev loop2: unable to read RDB block 7 [ 1048.412639][T12564] loop2: unable to read partition table [ 1048.427151][ T4940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.434288][ T4940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.455023][T12564] loop2: partition table beyond EOD, truncated [ 1048.462232][T12564] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1048.663808][T11778] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1048.695447][T11778] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1048.720470][T11778] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1048.759573][T11778] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1048.784397][T11474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.922893][T11474] veth0_vlan: entered promiscuous mode [ 1048.968505][T11474] veth1_vlan: entered promiscuous mode [ 1048.998718][T11778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.036596][T11778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.094748][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.101968][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.129130][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.136318][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.144695][ T5378] Bluetooth: hci1: command tx timeout [ 1049.161929][T11474] veth0_macvtap: entered promiscuous mode [ 1049.187386][T11474] veth1_macvtap: entered promiscuous mode [ 1049.224221][T11474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.249892][T11474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.265028][T11474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.287578][T11474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.306596][T11474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.318003][T11474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.336451][T11474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.348055][T11474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.364087][T11474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.410450][T11474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.422631][T11474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.433860][T11474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.445391][T11474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.457907][T11474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.470578][T11474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.480761][T11474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.491300][T11474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.502995][T11474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.555326][T11474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.564383][T11474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.575191][T11474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.584175][T11474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.602018][T12579] netlink: 666 bytes leftover after parsing attributes in process `syz.9.3029'. [ 1049.714164][T11778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.765356][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.793270][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.845136][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.860619][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.880456][T11778] veth0_vlan: entered promiscuous mode [ 1049.915333][T11778] veth1_vlan: entered promiscuous mode [ 1050.005621][T11778] veth0_macvtap: entered promiscuous mode [ 1050.007274][T12591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2991'. [ 1050.034369][T11778] veth1_macvtap: entered promiscuous mode [ 1050.055031][ C1] hid-thrustmaster 0003:044F:B65D.0036: URB to get model id failed with error -71 [ 1050.055422][ T5836] usb 4-1: USB disconnect, device number 96 [ 1050.095802][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.130634][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.150599][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.180891][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.224543][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.267170][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.285802][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.317875][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.344687][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.378756][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.396501][T12615] FAULT_INJECTION: forcing a failure. [ 1050.396501][T12615] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1050.424268][T11778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.456428][T12615] CPU: 1 UID: 0 PID: 12615 Comm: syz.0.3033 Not tainted 6.12.0-rc5-syzkaller #0 [ 1050.465531][T12615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1050.465821][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.475601][T12615] Call Trace: [ 1050.475620][T12615] [ 1050.475632][T12615] dump_stack_lvl+0x241/0x360 [ 1050.475668][T12615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1050.475695][T12615] ? __pfx__printk+0x10/0x10 [ 1050.475739][T12615] should_fail_ex+0x3b0/0x4e0 [ 1050.475767][T12615] prepare_alloc_pages+0x1da/0x5b0 [ 1050.475802][T12615] __alloc_pages_noprof+0x16f/0x710 [ 1050.475831][T12615] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1050.501851][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.502418][T12615] ? _copy_from_iter+0x29a/0x1e70 [ 1050.526733][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.527723][T12615] ? __mutex_lock+0x2ef/0xd70 [ 1050.557783][T12615] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1050.564177][T12615] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1050.569699][T12615] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1050.575191][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.575706][T12615] ? page_copy_sane+0x46/0x260 [ 1050.590323][T12615] ? alloc_pages_noprof+0xef/0x170 [ 1050.595489][T12615] pipe_write+0x652/0x1a30 [ 1050.599976][T12615] ? __pfx_pipe_write+0x10/0x10 [ 1050.604864][T12615] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1050.610978][T12615] ? bpf_lsm_file_permission+0x9/0x10 [ 1050.616385][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.616383][T12615] ? security_file_permission+0x74/0x280 [ 1050.616420][T12615] vfs_write+0xaeb/0xd30 [ 1050.636736][T12615] ? __pfx_pipe_write+0x10/0x10 [ 1050.641621][T12615] ? __pfx_vfs_write+0x10/0x10 [ 1050.646413][T12615] ? do_sys_openat2+0x17a/0x1d0 [ 1050.651296][T12615] ? __pfx_do_sys_openat2+0x10/0x10 [ 1050.656551][T12615] ? fdget_pos+0x19a/0x320 [ 1050.661012][T12615] ksys_write+0x183/0x2b0 [ 1050.665388][T12615] ? __pfx_ksys_write+0x10/0x10 [ 1050.670253][T12615] ? do_syscall_64+0x100/0x230 [ 1050.675033][T12615] ? do_syscall_64+0xb6/0x230 [ 1050.679741][T12615] do_syscall_64+0xf3/0x230 [ 1050.684273][T12615] ? clear_bhb_loop+0x35/0x90 [ 1050.688966][T12615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.694883][T12615] RIP: 0033:0x7f3f4e57e719 [ 1050.699317][T12615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.718935][T12615] RSP: 002b:00007f3f4f2de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1050.727394][T12615] RAX: ffffffffffffffda RBX: 00007f3f4e735f80 RCX: 00007f3f4e57e719 [ 1050.735394][T12615] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000000 [ 1050.743409][T12615] RBP: 00007f3f4f2de090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.751411][T12615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1050.759408][T12615] R13: 0000000000000000 R14: 00007f3f4e735f80 R15: 00007f3f4e85fa28 [ 1050.767408][T12615] [ 1050.786311][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.840440][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.884665][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.955139][T11778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.980975][T11778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.012921][T11778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.046351][ T5836] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1051.135449][T11778] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.170738][T11778] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.192465][T11778] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.216586][ T5378] Bluetooth: hci1: command tx timeout [ 1051.239478][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.250284][ T5836] usb 4-1: config 0 has no interfaces? [ 1051.256051][T11778] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.298937][ T5836] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1051.326709][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.381119][ T5836] usb 4-1: Product: syz [ 1051.436109][ T5836] usb 4-1: Manufacturer: syz [ 1051.462873][ T5836] usb 4-1: SerialNumber: syz [ 1051.487246][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.514294][ T5836] usb 4-1: config 0 descriptor?? [ 1051.542377][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.623327][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.638820][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.105952][ T46] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1052.287971][ T46] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1052.297791][ T46] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 1052.318457][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1052.352991][ T46] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1052.377798][ T46] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 1052.441950][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1052.462843][ T46] usb 7-1: SerialNumber: syz [ 1052.482365][ T46] usb 7-1: config 0 descriptor?? [ 1052.493915][T12662] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1052.505790][ T46] port100 7-1:0.0: NFC: Could not get supported command types [ 1052.616406][ T5844] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1052.710876][T12662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.728894][T12662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.752420][T12662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.790407][T12662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.821374][ T5844] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.842297][ T5844] usb 10-1: config 0 has no interfaces? [ 1052.865862][ T5844] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1052.876123][ T5844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.889274][ T5844] usb 10-1: Product: syz [ 1052.907820][ T5844] usb 10-1: Manufacturer: syz [ 1052.941351][ T5844] usb 10-1: SerialNumber: syz [ 1052.985161][ T5844] usb 10-1: config 0 descriptor?? [ 1052.993553][ T5836] usb 7-1: USB disconnect, device number 20 [ 1053.460214][T12679] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 1053.467284][T12679] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1053.531663][T12679] vhci_hcd vhci_hcd.0: Device attached [ 1053.776660][ T5844] usb 51-1: new high-speed USB device number 4 using vhci_hcd [ 1053.961696][T12723] ip6gre0: entered promiscuous mode [ 1053.973453][T12723] vlan2: entered promiscuous mode [ 1054.011142][T12723] ip6gre0: left promiscuous mode [ 1054.244565][T12736] Cannot find add_set index 0 as target [ 1054.278673][ T5892] usb 4-1: USB disconnect, device number 97 [ 1054.520900][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1054.532758][T12761] FAULT_INJECTION: forcing a failure. [ 1054.532758][T12761] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1054.633521][T12761] CPU: 0 UID: 0 PID: 12761 Comm: syz.6.3044 Not tainted 6.12.0-rc5-syzkaller #0 [ 1054.642617][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1054.652682][T12761] Call Trace: [ 1054.655966][T12761] [ 1054.658902][T12761] dump_stack_lvl+0x241/0x360 [ 1054.663598][T12761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1054.668805][T12761] ? __pfx__printk+0x10/0x10 [ 1054.673419][T12761] should_fail_ex+0x3b0/0x4e0 [ 1054.678114][T12761] prepare_alloc_pages+0x1da/0x5b0 [ 1054.683240][T12761] __alloc_pages_noprof+0x16f/0x710 [ 1054.688455][T12761] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1054.694184][T12761] ? _copy_from_iter+0x29a/0x1e70 [ 1054.699233][T12761] ? __mutex_lock+0x2ef/0xd70 [ 1054.703947][T12761] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1054.710299][T12761] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1054.715775][T12761] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1054.721766][T12761] ? page_copy_sane+0x46/0x260 [ 1054.726548][T12761] ? alloc_pages_noprof+0xef/0x170 [ 1054.731672][T12761] pipe_write+0x652/0x1a30 [ 1054.736123][T12761] ? __pfx_pipe_write+0x10/0x10 [ 1054.740989][T12761] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1054.747087][T12761] ? bpf_lsm_file_permission+0x9/0x10 [ 1054.752478][T12761] ? security_file_permission+0x74/0x280 [ 1054.758136][T12761] vfs_write+0xaeb/0xd30 [ 1054.762398][T12761] ? __pfx_pipe_write+0x10/0x10 [ 1054.767261][T12761] ? __pfx_vfs_write+0x10/0x10 [ 1054.772039][T12761] ? do_sys_openat2+0x17a/0x1d0 [ 1054.776907][T12761] ? __pfx_do_sys_openat2+0x10/0x10 [ 1054.782130][T12761] ? fdget_pos+0x19a/0x320 [ 1054.786560][T12761] ksys_write+0x183/0x2b0 [ 1054.790904][T12761] ? __pfx_ksys_write+0x10/0x10 [ 1054.795779][T12761] ? do_syscall_64+0x100/0x230 [ 1054.800572][T12761] ? do_syscall_64+0xb6/0x230 [ 1054.805279][T12761] do_syscall_64+0xf3/0x230 [ 1054.809798][T12761] ? clear_bhb_loop+0x35/0x90 [ 1054.814494][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.820404][T12761] RIP: 0033:0x7f531477e719 [ 1054.824864][T12761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.844484][T12761] RSP: 002b:00007f53154cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1054.852918][T12761] RAX: ffffffffffffffda RBX: 00007f5314935f80 RCX: 00007f531477e719 [ 1054.860901][T12761] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000000 [ 1054.868881][T12761] RBP: 00007f53154cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.876858][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1054.884833][T12761] R13: 0000000000000000 R14: 00007f5314935f80 R15: 00007f5314a5fa28 [ 1054.892845][T12761] [ 1054.976925][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.983508][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.079397][T12771] syz_tun: entered promiscuous mode [ 1055.094563][T12771] vlan2: entered promiscuous mode [ 1055.141202][T12771] syz_tun: left promiscuous mode [ 1055.204352][T12709] vhci_hcd: connection reset by peer [ 1055.220718][ T4940] vhci_hcd: stop threads [ 1055.225035][ T4940] vhci_hcd: release socket [ 1055.255091][ T4940] vhci_hcd: disconnect device [ 1055.300463][T12785] SET target dimension over the limit! [ 1055.326572][ T5892] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1055.486405][ T5892] usb 4-1: device descriptor read/64, error -71 [ 1055.726344][ T5892] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 1055.886357][ T5892] usb 4-1: device descriptor read/64, error -71 [ 1056.009784][ T5892] usb usb4-port1: attempt power cycle [ 1056.043127][T12816] FAULT_INJECTION: forcing a failure. [ 1056.043127][T12816] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.087703][T12816] CPU: 0 UID: 0 PID: 12816 Comm: syz.0.3052 Not tainted 6.12.0-rc5-syzkaller #0 [ 1056.096795][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1056.106884][T12816] Call Trace: [ 1056.110198][T12816] [ 1056.113159][T12816] dump_stack_lvl+0x241/0x360 [ 1056.117877][T12816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1056.123122][T12816] ? __pfx__printk+0x10/0x10 [ 1056.127753][T12816] ? ref_tracker_alloc+0x332/0x490 [ 1056.132908][T12816] should_fail_ex+0x3b0/0x4e0 [ 1056.137627][T12816] ? skb_clone+0x20c/0x390 [ 1056.142087][T12816] should_failslab+0xac/0x100 [ 1056.146813][T12816] ? skb_clone+0x20c/0x390 [ 1056.151273][T12816] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1056.156719][T12816] skb_clone+0x20c/0x390 [ 1056.161045][T12816] __netlink_deliver_tap+0x3cc/0x7c0 [ 1056.166398][T12816] ? netlink_deliver_tap+0x2e/0x1b0 [ 1056.171642][T12816] netlink_deliver_tap+0x19d/0x1b0 [ 1056.176811][T12816] netlink_unicast+0x7c4/0x990 [ 1056.181639][T12816] ? __pfx_netlink_unicast+0x10/0x10 [ 1056.187104][T12816] ? __virt_addr_valid+0x183/0x530 [ 1056.192259][T12816] ? __check_object_size+0x48e/0x900 [ 1056.197607][T12816] netlink_sendmsg+0x8e4/0xcb0 [ 1056.202435][T12816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1056.207774][T12816] ? aa_sock_msg_perm+0x91/0x160 [ 1056.212781][T12816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1056.218109][T12816] __sock_sendmsg+0x221/0x270 [ 1056.222843][T12816] ____sys_sendmsg+0x52a/0x7e0 [ 1056.227673][T12816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1056.233026][T12816] __sys_sendmsg+0x292/0x380 [ 1056.237673][T12816] ? __pfx___sys_sendmsg+0x10/0x10 [ 1056.242837][T12816] ? __pfx_vfs_write+0x10/0x10 [ 1056.247688][T12816] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1056.254069][T12816] ? do_syscall_64+0x100/0x230 [ 1056.258877][T12816] ? do_syscall_64+0xb6/0x230 [ 1056.263606][T12816] do_syscall_64+0xf3/0x230 [ 1056.268162][T12816] ? clear_bhb_loop+0x35/0x90 [ 1056.272887][T12816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.278831][T12816] RIP: 0033:0x7f3f4e57e719 [ 1056.283289][T12816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.302948][T12816] RSP: 002b:00007f3f4f2de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1056.311411][T12816] RAX: ffffffffffffffda RBX: 00007f3f4e735f80 RCX: 00007f3f4e57e719 [ 1056.319427][T12816] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000003 [ 1056.327434][T12816] RBP: 00007f3f4f2de090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.335532][T12816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.343541][T12816] R13: 0000000000000000 R14: 00007f3f4e735f80 R15: 00007f3f4e85fa28 [ 1056.351569][T12816] [ 1056.399698][ T46] usb 10-1: USB disconnect, device number 11 [ 1056.436071][ T5892] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1056.509739][ T5892] usb 4-1: device descriptor read/8, error -71 [ 1056.722740][T12837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3055'. [ 1056.770768][ T5892] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1056.878134][ T5892] usb 4-1: device descriptor read/8, error -71 [ 1056.987205][ T5892] usb usb4-port1: unable to enumerate USB device [ 1057.023151][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3056'. [ 1057.326436][ T5892] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1057.507191][ T5892] usb 10-1: Using ep0 maxpacket: 32 [ 1057.599977][ T5892] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.636841][ T5892] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.647747][T12862] FAULT_INJECTION: forcing a failure. [ 1057.647747][T12862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1057.672170][ T5892] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1057.676000][T12866] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1057.693514][T12862] CPU: 1 UID: 0 PID: 12862 Comm: syz.6.3059 Not tainted 6.12.0-rc5-syzkaller #0 [ 1057.693543][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1057.693558][T12862] Call Trace: [ 1057.693568][T12862] [ 1057.693578][T12862] dump_stack_lvl+0x241/0x360 [ 1057.693611][T12862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1057.693637][T12862] ? __pfx__printk+0x10/0x10 [ 1057.693672][T12862] should_fail_ex+0x3b0/0x4e0 [ 1057.693699][T12862] prepare_alloc_pages+0x1da/0x5b0 [ 1057.693731][T12862] __alloc_pages_noprof+0x16f/0x710 [ 1057.748589][T12862] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1057.754350][T12862] ? _copy_from_iter+0x29a/0x1e70 [ 1057.759422][T12862] ? __mutex_lock+0x2ef/0xd70 [ 1057.764325][T12862] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1057.769847][T12862] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1057.775873][T12862] ? page_copy_sane+0x46/0x260 [ 1057.780706][T12862] ? alloc_pages_noprof+0xef/0x170 [ 1057.785859][T12862] pipe_write+0x652/0x1a30 [ 1057.790344][T12862] ? __pfx_pipe_write+0x10/0x10 [ 1057.795269][T12862] ? common_file_perm+0x1a6/0x210 [ 1057.800344][T12862] ? bpf_lsm_file_permission+0x9/0x10 [ 1057.805755][T12862] ? security_file_permission+0x74/0x280 [ 1057.811436][T12862] vfs_write+0xaeb/0xd30 [ 1057.815739][T12862] ? __pfx_pipe_write+0x10/0x10 [ 1057.820635][T12862] ? __pfx_vfs_write+0x10/0x10 [ 1057.825447][T12862] ? do_sys_openat2+0x17a/0x1d0 [ 1057.830349][T12862] ? __pfx_do_sys_openat2+0x10/0x10 [ 1057.835610][T12862] ? fdget_pos+0x19a/0x320 [ 1057.840058][T12862] ksys_write+0x183/0x2b0 [ 1057.844396][T12862] ? __pfx_ksys_write+0x10/0x10 [ 1057.849251][T12862] ? do_syscall_64+0x100/0x230 [ 1057.854033][T12862] ? do_syscall_64+0xb6/0x230 [ 1057.858738][T12862] do_syscall_64+0xf3/0x230 [ 1057.863258][T12862] ? clear_bhb_loop+0x35/0x90 [ 1057.867948][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.873850][T12862] RIP: 0033:0x7f531477e719 [ 1057.878270][T12862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1057.897920][T12862] RSP: 002b:00007f53154cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1057.906355][T12862] RAX: ffffffffffffffda RBX: 00007f5314935f80 RCX: 00007f531477e719 [ 1057.914361][T12862] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000000 [ 1057.922344][T12862] RBP: 00007f53154cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.930328][T12862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1057.938307][T12862] R13: 0000000000000000 R14: 00007f5314935f80 R15: 00007f5314a5fa28 [ 1057.946293][T12862] [ 1057.951153][ T5892] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1057.961866][ T5892] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.986870][ T5892] usb 10-1: config 0 descriptor?? [ 1058.269709][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3062'. [ 1058.455076][ T5892] usbhid 10-1:0.0: can't add hid device: -71 [ 1058.461911][ T5892] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1058.479989][ T5892] usb 10-1: USB disconnect, device number 12 [ 1058.896380][ T5844] vhci_hcd: vhci_device speed not set [ 1059.766560][T28505] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1059.929936][T28505] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.961457][T28505] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1060.009220][T28505] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1060.036682][T28505] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1060.056979][T28505] usb 10-1: SerialNumber: syz [ 1060.132005][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3070'. [ 1060.323344][T28505] usb 10-1: 0:2 : does not exist [ 1060.332946][T28505] usb 10-1: unit 5: unexpected type 0x0a [ 1060.374469][T28505] usb 10-1: USB disconnect, device number 13 [ 1060.432212][ T8616] udevd[8616]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1060.596414][ T969] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1060.727662][ T5893] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1060.773978][ T969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.787961][ T969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.802089][ T969] usb 7-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1060.811824][ T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.822950][ T969] usb 7-1: config 0 descriptor?? [ 1060.917043][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 1060.925542][ T5893] usb 4-1: config 6 has an invalid interface number: 34 but max is 3 [ 1060.946027][ T5893] usb 4-1: config 6 has an invalid interface number: 239 but max is 3 [ 1060.960239][ T5893] usb 4-1: config 6 has an invalid interface number: 217 but max is 3 [ 1060.968545][ T5893] usb 4-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 1060.977395][ T5893] usb 4-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 1060.986147][ T5893] usb 4-1: config 6 has an invalid interface number: 242 but max is 3 [ 1060.995540][ T5893] usb 4-1: config 6 has no interface number 0 [ 1061.002531][ T5893] usb 4-1: config 6 has no interface number 1 [ 1061.009153][ T5893] usb 4-1: config 6 has no interface number 2 [ 1061.015340][ T5893] usb 4-1: config 6 has no interface number 3 [ 1061.029566][ T5893] usb 4-1: config 6 interface 34 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1061.050889][ T5893] usb 4-1: config 6 interface 239 altsetting 9 endpoint 0xE has an invalid bInterval 248, changing to 11 [ 1061.064991][ T5893] usb 4-1: config 6 interface 239 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 1023 [ 1061.075913][ T5893] usb 4-1: config 6 interface 239 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1061.087746][ T5893] usb 4-1: config 6 interface 239 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 1061.099162][ T5893] usb 4-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 1061.110362][ T5893] usb 4-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 1061.121525][ T5893] usb 4-1: config 6 interface 217 altsetting 2 endpoint 0x8 has invalid maxpacket 1040, setting to 1024 [ 1061.133431][ T5893] usb 4-1: config 6 interface 217 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1061.147423][ T5893] usb 4-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 1061.158592][ T5893] usb 4-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 1061.175716][ T5893] usb 4-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1061.186974][ T5893] usb 4-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 1061.198246][ T5893] usb 4-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1061.209391][ T5893] usb 4-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1061.220845][ T5893] usb 4-1: config 6 interface 217 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 1061.232636][ T5893] usb 4-1: config 6 interface 242 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 1061.254899][ T5893] usb 4-1: config 6 interface 242 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 1061.273607][ T969] usbhid 7-1:0.0: can't add hid device: -71 [ 1061.286543][ T969] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1061.295225][ T5893] usb 4-1: config 6 interface 242 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 1061.317245][ T969] usb 7-1: USB disconnect, device number 21 [ 1061.345931][ T5893] usb 4-1: config 6 interface 242 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1061.364310][ T5893] usb 4-1: config 6 interface 242 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1061.376941][ T5893] usb 4-1: config 6 interface 34 has no altsetting 0 [ 1061.384755][ T5893] usb 4-1: config 6 interface 239 has no altsetting 0 [ 1061.400822][ T5893] usb 4-1: config 6 interface 217 has no altsetting 0 [ 1061.409305][ T5893] usb 4-1: config 6 interface 242 has no altsetting 0 [ 1061.424172][ T5893] usb 4-1: New USB device found, idVendor=1199, idProduct=683d, bcdDevice= 4.60 [ 1061.434770][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.451232][ T5893] usb 4-1: Product: syz [ 1061.455574][ T5893] usb 4-1: Manufacturer: Ї [ 1061.492839][ T5893] usb 4-1: SerialNumber: syz [ 1061.735654][ T5893] sierra 4-1:6.34: Sierra USB modem converter detected [ 1061.765605][ T5893] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1061.792355][ T5893] sierra 4-1:6.239: Sierra USB modem converter detected [ 1061.832008][ T5893] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 1061.865294][ T5893] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 1061.904772][ T5893] sierra 4-1:6.217: Sierra USB modem converter detected [ 1061.922471][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3080'. [ 1061.939036][ T5893] usb 4-1: Sierra USB modem converter now attached to ttyUSB3 [ 1061.976593][ T5893] usb 4-1: Sierra USB modem converter now attached to ttyUSB4 [ 1062.023893][ T5893] sierra 4-1:6.242: Sierra USB modem converter detected [ 1062.067693][ T5893] usb 4-1: Sierra USB modem converter now attached to ttyUSB5 [ 1062.112204][ T5893] usb 4-1: USB disconnect, device number 102 [ 1062.164967][ T5893] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1062.209901][ T5893] sierra 4-1:6.34: device disconnected [ 1062.267946][ T5893] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1062.309579][ T5893] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 1062.338666][ T5893] sierra 4-1:6.239: device disconnected [ 1062.375370][ T5893] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 1062.398959][ T5893] sierra ttyUSB4: Sierra USB modem converter now disconnected from ttyUSB4 [ 1062.408264][ T5893] sierra 4-1:6.217: device disconnected [ 1062.425277][ T5893] sierra ttyUSB5: Sierra USB modem converter now disconnected from ttyUSB5 [ 1062.435262][ T5893] sierra 4-1:6.242: device disconnected [ 1062.837693][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3086'. [ 1062.863288][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3086'. [ 1062.888542][T13219] bridge0: port 3(erspan0) entered blocking state [ 1062.895332][T13219] bridge0: port 3(erspan0) entered disabled state [ 1062.902935][T13219] erspan0: entered allmulticast mode [ 1062.910205][T13219] erspan0: entered promiscuous mode [ 1062.917289][ T5893] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1062.921266][T13219] bridge0: port 3(erspan0) entered blocking state [ 1062.931713][T13219] bridge0: port 3(erspan0) entered forwarding state [ 1063.088588][ T5893] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.112215][ T5893] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.130196][ T5893] usb 10-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 1063.141018][ T5893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.158304][ T5893] usb 10-1: config 0 descriptor?? [ 1063.500800][T13281] loop2: detected capacity change from 0 to 7 [ 1063.520599][T13281] Dev loop2: unable to read RDB block 7 [ 1063.530686][T13281] loop2: unable to read partition table [ 1063.540930][T13281] loop2: partition table beyond EOD, truncated [ 1063.552125][T13281] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1063.575446][ T5893] hid (null): report_id 2627125327 is invalid [ 1063.599632][ T5893] wacom 0003:056A:009F.0037: report_id 2627125327 is invalid [ 1063.612259][ T5893] wacom 0003:056A:009F.0037: item 0 4 1 8 parsing failed [ 1063.630556][ T5893] wacom 0003:056A:009F.0037: parse failed [ 1063.636619][ T5895] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1063.645876][ T5893] wacom 0003:056A:009F.0037: probe with driver wacom failed with error -22 [ 1063.849449][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.885055][ T5895] usb 7-1: config index 0 descriptor too short (expected 39, got 36) [ 1063.893471][ T5895] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.911415][ T5895] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1063.955819][ T5895] usb 7-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 1063.975130][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.001972][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.045345][ T5895] usb 7-1: config 0 descriptor?? [ 1064.071171][ T5895] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1064.092618][ T5895] usb 10-1: USB disconnect, device number 14 [ 1064.184985][T13336] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3094'. [ 1064.303395][T13342] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3095'. [ 1064.553788][T13359] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3098'. [ 1064.626329][ T5895] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1064.806405][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 1064.813725][ T5895] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1064.823965][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.845500][ T5895] usb 4-1: config 0 descriptor?? [ 1065.588449][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3103'. [ 1065.853262][T13420] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3105'. [ 1066.119702][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3108'. [ 1066.139193][T13430] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3108'. [ 1066.462968][ T5836] usb 7-1: USB disconnect, device number 22 [ 1066.819015][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3113'. [ 1066.977295][ T5378] Bluetooth: hci0: command 0x0406 tx timeout [ 1067.156520][T13525] program syz.7.3115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1067.212136][T13525] sg_write: data in/out 1060422945/121 bytes for SCSI command 0x8f-- guessing data in; [ 1067.212136][T13525] program syz.7.3115 not setting count and/or reply_len properly [ 1067.503696][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1067.514113][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 1067.570668][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1067.581025][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffc3 [ 1067.937614][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1068.353371][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 1068.398291][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5) [ 1068.443893][ T5895] asix 4-1:0.0: probe with driver asix failed with error -5 [ 1068.492459][ T5895] usb 4-1: USB disconnect, device number 103 [ 1069.188872][T13558] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3119'. [ 1069.327630][ T5892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1069.396466][ T5892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1069.526525][ T5892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1069.587789][ T5844] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1069.667420][ T5892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1069.757450][ T5892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1069.807448][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1069.836593][ T5892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1069.852185][T13617] i2c i2c-0: Invalid block write size 252 [ 1069.916818][ T5892] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1069.987383][ T5836] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1070.130021][T13636] program syz.3.3128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1070.140156][T13636] sg_write: data in/out 1060422945/121 bytes for SCSI command 0x8f-- guessing data in; [ 1070.140156][T13636] program syz.3.3128 not setting count and/or reply_len properly [ 1070.166594][ T5895] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1070.340452][ T5895] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1070.372398][ T5895] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1070.393731][ T5895] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1070.418240][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.446335][ T5895] usb 10-1: Product: syz [ 1070.462499][ T5895] usb 10-1: Manufacturer: syz [ 1070.484527][ T5895] usb 10-1: SerialNumber: syz [ 1070.484838][T13651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3129'. [ 1070.720345][T13617] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1071.116493][ T5836] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1071.159795][T13617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.184075][T13617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.296776][T28505] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1071.328902][ T5836] usb 7-1: config 0 has no interfaces? [ 1071.347691][ T5836] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1071.366321][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.376664][ T5836] usb 7-1: Product: syz [ 1071.394514][ T5836] usb 7-1: Manufacturer: syz [ 1071.402094][T13617] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1071.409908][ T5836] usb 7-1: SerialNumber: syz [ 1071.419372][ T5836] usb 7-1: config 0 descriptor?? [ 1071.466882][T28505] usb 4-1: Using ep0 maxpacket: 8 [ 1071.485602][T28505] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1071.502175][T28505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.510848][T28505] usb 4-1: Product: syz [ 1071.515055][T28505] usb 4-1: Manufacturer: syz [ 1071.523222][T28505] usb 4-1: SerialNumber: syz [ 1071.538073][T28505] usb 4-1: config 0 descriptor?? [ 1071.625408][ T5895] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1071.633617][ T5895] cdc_ncm 10-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1071.649979][ T5895] cdc_ncm 10-1:1.0: setting rx_max = 2048 [ 1071.665713][ T5836] usb 7-1: USB disconnect, device number 23 [ 1071.746531][T28505] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1071.833037][ T5895] cdc_ncm 10-1:1.0: setting tx_max = 88 [ 1071.864069][ T5895] cdc_ncm 10-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1071.888362][ T5895] usb 10-1: USB disconnect, device number 15 [ 1071.912463][ T5895] cdc_ncm 10-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 1072.096953][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 1072.541495][T13766] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3137'. [ 1072.838388][ T46] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1072.996437][ T46] usb 10-1: Using ep0 maxpacket: 32 [ 1073.003841][ T46] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.014626][ T46] usb 10-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0x26, changing to 0x6 [ 1073.035943][ T46] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x6 has invalid maxpacket 8200, setting to 1024 [ 1073.066329][ T46] usb 10-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1073.093251][ T46] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1073.113905][ T46] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1073.123985][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.139032][ T46] usb 10-1: config 0 descriptor?? [ 1073.187653][T28505] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1073.204896][T28505] usb 4-1: USB disconnect, device number 104 [ 1073.486471][ T5844] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1073.561754][ T46] hid-thrustmaster 0003:044F:B65D.0038: unknown main item tag 0x0 [ 1073.592852][ T46] hid-thrustmaster 0003:044F:B65D.0038: unknown main item tag 0x0 [ 1073.606761][ T46] hid-thrustmaster 0003:044F:B65D.0038: unknown main item tag 0x0 [ 1073.624207][ T46] hid-thrustmaster 0003:044F:B65D.0038: unknown main item tag 0x0 [ 1073.635028][ T46] hid-thrustmaster 0003:044F:B65D.0038: unknown main item tag 0x0 [ 1073.653411][T13817] program syz.7.3142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1073.656765][ T5844] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1073.663180][T13817] sg_write: data in/out 1060422945/121 bytes for SCSI command 0x8f-- guessing data in; [ 1073.663180][T13817] program syz.7.3142 not setting count and/or reply_len properly [ 1073.678805][ T46] hid-thrustmaster 0003:044F:B65D.0038: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.9-1/input0 [ 1073.710611][ T5844] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 1073.723833][ T5844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1073.746425][ T46] hid-thrustmaster 0003:044F:B65D.0038: setup data couldn't be sent [ 1073.755245][ T5844] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1073.806636][ T5844] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 1073.824908][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1073.861996][ T5844] usb 7-1: SerialNumber: syz [ 1073.894344][ T5844] usb 7-1: config 0 descriptor?? [ 1073.915431][T13796] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1073.944311][ T5844] port100 7-1:0.0: NFC: Could not get supported command types [ 1074.196325][T28505] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1074.204168][T13796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.229637][T13796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.248619][T13796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.279746][T13796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.366315][T28505] usb 4-1: Using ep0 maxpacket: 16 [ 1074.391625][T28505] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 1074.400956][T28505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.420229][T28505] usb 4-1: Product: syz [ 1074.433475][T28505] usb 4-1: Manufacturer: syz [ 1074.459739][T28505] usb 4-1: SerialNumber: syz [ 1074.487139][T28505] usb 4-1: config 0 descriptor?? [ 1074.509606][ T46] usb 7-1: USB disconnect, device number 24 [ 1074.531230][T28505] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 1074.800453][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3143'. [ 1074.829585][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3145'. [ 1074.839036][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3145'. [ 1074.957808][T28505] pwc: Warning: more than 1 configuration available. [ 1074.977261][T28505] pwc: Failed to set LED on/off time (-71) [ 1074.986024][T28505] pwc: send_video_command error -71 [ 1075.006780][T28505] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1075.033363][T28505] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1075.061163][T28505] usb 4-1: USB disconnect, device number 105 [ 1075.476502][ T7620] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1075.608843][ C1] hid-thrustmaster 0003:044F:B65D.0038: URB to get model id failed with error -71 [ 1075.626715][ T5844] usb 10-1: USB disconnect, device number 16 [ 1075.647393][ T7620] usb 7-1: Using ep0 maxpacket: 8 [ 1075.668694][ T7620] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1075.686219][ T7620] usb 7-1: config 179 has no interface number 0 [ 1075.692626][ T7620] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1075.724738][ T7620] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1075.785900][ T7620] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1075.800210][ T7620] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1075.818206][ T7620] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1075.846672][ T7620] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1075.862551][ T7620] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.907621][T13906] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1076.006331][ T5836] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1076.194214][ T7620] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input91 [ 1076.229329][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.243643][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.266449][ T5836] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 1076.275701][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.328458][ T5836] usb 4-1: config 0 descriptor?? [ 1076.598604][ T7619] usb 7-1: USB disconnect, device number 25 [ 1076.598681][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1076.612960][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1076.975597][T13943] xt_CT: No such helper "pptp" [ 1077.149990][ T5836] usbhid 4-1:0.0: can't add hid device: -71 [ 1077.202457][ T5836] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1077.263704][ T5836] usb 4-1: USB disconnect, device number 106 [ 1078.929224][T14046] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3156'. [ 1079.395083][T14054] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3158'. [ 1079.418580][T14054] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3158'. [ 1080.022506][ T7619] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 1080.262319][ T7619] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1080.324509][ T7619] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.371405][ T7619] usb 10-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1080.416446][ T7619] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.461782][ T7619] usb 10-1: config 0 descriptor?? [ 1080.923982][ T7619] aquacomputer_d5next 0003:0C70:F0BD.0039: unknown main item tag 0xe [ 1080.954325][ T7619] aquacomputer_d5next 0003:0C70:F0BD.0039: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.9-1/input0 [ 1081.175540][ T7619] usb 10-1: USB disconnect, device number 18 [ 1081.526999][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3164'. [ 1082.002241][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3166'. [ 1082.076330][T14126] bridge_slave_1: left allmulticast mode [ 1082.106515][T14126] bridge_slave_1: left promiscuous mode [ 1082.143289][T14126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.216114][T14126] bridge_slave_0: left allmulticast mode [ 1082.238723][T14126] bridge_slave_0: left promiscuous mode [ 1082.261839][T14126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.894441][ T5895] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1083.038270][T14142] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3170'. [ 1083.087984][ T5895] usb 4-1: config index 0 descriptor too short (expected 39, got 36) [ 1083.105570][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.117014][ T5895] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 1083.133810][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.147697][ T5895] usb 4-1: config 0 descriptor?? [ 1083.171177][ T5895] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1083.863835][T14125] team_slave_0: entered promiscuous mode [ 1083.869936][T14125] team_slave_1: entered promiscuous mode [ 1083.925100][T14125] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1085.952151][ T5836] usb 4-1: USB disconnect, device number 107 [ 1085.992714][ T7619] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1086.218044][T14180] program syz.7.3174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1086.369196][ T7619] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.465239][ T7619] usb 10-1: config 0 has no interfaces? [ 1086.586849][ T7619] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1086.648539][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3176'. [ 1086.676263][ T7619] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.765364][ T7619] usb 10-1: Product: syz [ 1086.801910][ T7619] usb 10-1: Manufacturer: syz [ 1086.858295][ T7619] usb 10-1: SerialNumber: syz [ 1086.982782][ T7619] usb 10-1: config 0 descriptor?? [ 1087.135848][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1114.250301][ T7619] usb 10-1: USB disconnect, device number 19 [ 1116.126704][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.135361][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.414757][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1116.436666][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1116.445783][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1116.457028][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1116.467262][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1116.474994][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1116.603055][ T5378] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1116.617075][ T5378] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1116.638590][ T5378] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1116.669773][ T5378] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1116.678011][ T5378] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1116.687545][ T5378] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1116.893601][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1116.906256][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1116.914742][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1116.922924][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1116.934198][ T5841] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1116.945646][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1117.158866][ T5378] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1117.176394][ T5378] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1117.185383][ T5378] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1117.193784][ T5378] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1117.206781][ T5378] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1117.216323][ T5378] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1117.322934][ T5841] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1117.343201][ T5841] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1117.354199][ T5841] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1117.386494][ T5841] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1117.394182][ T5841] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1117.402246][ T5841] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1118.586860][ T5841] Bluetooth: hci5: command tx timeout [ 1118.792979][T14283] chnl_net:caif_netlink_parms(): no params data found [ 1118.816830][ T5841] Bluetooth: hci6: command tx timeout [ 1118.890932][T14289] chnl_net:caif_netlink_parms(): no params data found [ 1118.996292][ T5841] Bluetooth: hci7: command tx timeout [ 1119.296547][ T5841] Bluetooth: hci8: command tx timeout [ 1119.456607][ T5841] Bluetooth: hci9: command tx timeout [ 1120.777428][ T5841] Bluetooth: hci5: command tx timeout [ 1120.906200][ T5841] Bluetooth: hci6: command tx timeout [ 1121.099292][ T5841] Bluetooth: hci7: command tx timeout [ 1121.387519][ T5841] Bluetooth: hci8: command tx timeout [ 1121.566274][ T5841] Bluetooth: hci9: command tx timeout [ 1121.836816][T14337] chnl_net:caif_netlink_parms(): no params data found [ 1122.247167][T14337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.254350][T14337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.291379][T14337] bridge_slave_0: entered allmulticast mode [ 1122.307533][T14337] bridge_slave_0: entered promiscuous mode [ 1122.350235][T14337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.366352][T14337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.377042][T14337] bridge_slave_1: entered allmulticast mode [ 1122.406327][T14337] bridge_slave_1: entered promiscuous mode [ 1122.517225][T14337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.543613][T14337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.658997][T14337] team0: Port device team_slave_0 added [ 1122.689821][T14337] team0: Port device team_slave_1 added [ 1122.765421][T14337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.776389][T14337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1122.818947][ T5841] Bluetooth: hci5: command tx timeout [ 1122.837296][T14337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.862496][T14337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.877694][T14337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1122.922661][T14337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.989934][ T5841] Bluetooth: hci6: command tx timeout [ 1123.052311][T14337] hsr_slave_0: entered promiscuous mode [ 1123.070644][T14337] hsr_slave_1: entered promiscuous mode [ 1123.090291][T14337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1123.107584][T14337] Cannot create hsr debugfs directory [ 1123.137045][ T5841] Bluetooth: hci7: command tx timeout [ 1123.456615][ T5841] Bluetooth: hci8: command tx timeout [ 1123.616609][ T5841] Bluetooth: hci9: command tx timeout [ 1124.896383][ T5841] Bluetooth: hci5: command tx timeout [ 1125.056414][ T5841] Bluetooth: hci6: command tx timeout [ 1125.225256][T14337] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.237012][ T5841] Bluetooth: hci7: command tx timeout [ 1125.536583][ T5841] Bluetooth: hci8: command tx timeout [ 1125.696560][ T5841] Bluetooth: hci9: command tx timeout [ 1125.791800][T14327] chnl_net:caif_netlink_parms(): no params data found [ 1125.824103][T14304] chnl_net:caif_netlink_parms(): no params data found [ 1177.543442][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.551725][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.446936][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1178.497234][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1178.513214][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1178.521469][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1178.529797][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1178.539557][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1178.602292][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1178.614285][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1178.630990][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1178.639398][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1178.647178][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1178.654571][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1178.969956][ T5444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1178.987801][ T5444] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1178.995943][ T5444] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1179.006577][ T5444] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1179.014272][ T5444] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1179.025118][ T5444] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1179.093164][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1179.105509][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1179.114813][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1179.125463][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1179.134775][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1179.143315][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1179.193636][T15781] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1179.203367][T15781] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1179.213211][T15781] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1179.221513][T15781] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1179.246988][T15781] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1179.261855][T15781] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1198.097068][ T5444] Bluetooth: hci0: command tx timeout [ 1198.176546][ T5444] Bluetooth: hci4: command tx timeout [ 1198.183694][ T5840] Bluetooth: hci10: command tx timeout [ 1198.256564][ T5840] Bluetooth: hci1: command tx timeout [ 1198.263479][ T5840] Bluetooth: hci3: command tx timeout [ 1200.176405][ T5840] Bluetooth: hci0: command tx timeout [ 1200.256751][ T5444] Bluetooth: hci4: command tx timeout [ 1200.263945][ T5840] Bluetooth: hci10: command tx timeout [ 1200.336454][ T5444] Bluetooth: hci1: command tx timeout [ 1200.343549][ T5840] Bluetooth: hci3: command tx timeout [ 1200.743045][T14283] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 1200.758407][T14289] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 1202.256728][ T5840] Bluetooth: hci0: command tx timeout [ 1202.336616][ T5840] Bluetooth: hci10: command tx timeout [ 1202.342212][ T5444] Bluetooth: hci4: command tx timeout [ 1202.416480][ T5444] Bluetooth: hci3: command tx timeout [ 1202.421968][ T5444] Bluetooth: hci1: command tx timeout [ 1204.336382][ T5444] Bluetooth: hci0: command tx timeout [ 1204.416959][ T5840] Bluetooth: hci10: command tx timeout [ 1204.422558][ T5444] Bluetooth: hci4: command tx timeout [ 1204.496440][ T5840] Bluetooth: hci3: command tx timeout [ 1204.503358][ T5444] Bluetooth: hci1: command tx timeout [ 1212.087198][T14337] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.187085][T15131] chnl_net:caif_netlink_parms(): no params data found [ 1213.416094][T15131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.446232][T15131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.453543][T15131] bridge_slave_0: entered allmulticast mode [ 1213.477687][T15131] bridge_slave_0: entered promiscuous mode [ 1213.487648][T15131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.494765][T15131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.517050][T15131] bridge_slave_1: entered allmulticast mode [ 1213.524495][T15131] bridge_slave_1: entered promiscuous mode [ 1213.634726][T15131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.672904][T15131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.764033][T15131] team0: Port device team_slave_0 added [ 1213.798462][T15131] team0: Port device team_slave_1 added [ 1213.905235][T15131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.936187][T15131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.976322][T15131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.006287][T15131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.013277][T15131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.063202][T15131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.220899][T15131] hsr_slave_0: entered promiscuous mode [ 1214.258505][T15131] hsr_slave_1: entered promiscuous mode [ 1214.280637][T15131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1214.301014][T15131] Cannot create hsr debugfs directory [ 1237.956415][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1237.989350][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1238.037055][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1238.061486][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1238.069367][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1238.092803][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1238.363999][ T5444] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1238.407922][ T5444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1238.418568][ T5444] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1238.427011][ T5444] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1238.435093][ T5444] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1238.442814][ T5444] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1238.990826][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.009537][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.144566][T15781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1239.157866][T15781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1239.170573][T15781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1239.179002][T15781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1239.189115][T15781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1239.196502][T15781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1239.837668][T15781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1239.849311][T15781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1239.860648][T15781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1239.872757][T15781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1239.880690][T15781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1239.888509][T15781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1239.928703][T15585] chnl_net:caif_netlink_parms(): no params data found [ 1239.987959][T15781] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1239.999172][T15781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1240.009001][T15781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1240.017770][T15781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1240.025435][T15781] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1240.046334][T15781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1240.186413][T15781] Bluetooth: hci2: command tx timeout [ 1240.292214][T15585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.307826][T15585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.315147][T15585] bridge_slave_0: entered allmulticast mode [ 1240.342221][T15585] bridge_slave_0: entered promiscuous mode [ 1240.366736][T15585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.373872][T15585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.401890][T15585] bridge_slave_1: entered allmulticast mode [ 1240.417464][T15585] bridge_slave_1: entered promiscuous mode [ 1240.493211][T15585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.503792][T15781] Bluetooth: hci5: command tx timeout [ 1240.539730][T15585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.689913][T15585] team0: Port device team_slave_0 added [ 1240.714397][T15585] team0: Port device team_slave_1 added [ 1240.812605][T15585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.836385][T15585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.895480][T15585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.924933][T15585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.940248][T15585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.994168][T15585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.056999][T15781] Bluetooth: hci9: command 0x0406 tx timeout [ 1241.187250][T15585] hsr_slave_0: entered promiscuous mode [ 1241.199522][T15585] hsr_slave_1: entered promiscuous mode [ 1241.228706][T15585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1241.236734][T15585] Cannot create hsr debugfs directory [ 1241.296828][ T5840] Bluetooth: hci1: command tx timeout [ 1241.945031][ T5840] Bluetooth: hci3: command tx timeout [ 1242.096757][ T5840] Bluetooth: hci6: command tx timeout [ 1242.256386][ T5840] Bluetooth: hci2: command tx timeout [ 1242.576494][ T5840] Bluetooth: hci5: command tx timeout [ 1243.376374][ T5840] Bluetooth: hci1: command tx timeout [ 1244.016428][ T5840] Bluetooth: hci3: command tx timeout [ 1244.176946][ T5840] Bluetooth: hci6: command tx timeout [ 1244.336226][ T5840] Bluetooth: hci2: command tx timeout [ 1244.656733][ T5840] Bluetooth: hci5: command tx timeout [ 1245.456583][ T5840] Bluetooth: hci1: command tx timeout [ 1246.096706][ T5840] Bluetooth: hci3: command tx timeout [ 1246.256927][ T5840] Bluetooth: hci6: command tx timeout [ 1246.416523][ T5840] Bluetooth: hci2: command tx timeout [ 1246.746717][ T5840] Bluetooth: hci5: command tx timeout [ 1247.536563][ T5840] Bluetooth: hci1: command tx timeout [ 1248.176443][ T5840] Bluetooth: hci3: command tx timeout [ 1248.336882][ T5840] Bluetooth: hci6: command tx timeout [ 1300.375680][T15781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1300.393240][T15781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1300.409893][T15781] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1300.422328][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.428870][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.463813][T15781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1300.476687][T15781] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1300.484320][T15781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1300.877852][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1300.889690][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1300.899660][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1300.917076][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1300.924959][ T5840] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1300.933142][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1301.026416][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1301.037303][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1301.045423][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1301.055917][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1301.067987][ T5840] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1301.078874][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1301.145671][ T5840] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1301.158901][ T5840] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1301.170555][ T5840] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1301.179077][ T5840] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1301.196438][ T5840] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1301.203854][ T5840] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1301.379275][T15781] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1301.397198][T15781] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1301.407002][T15781] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1301.426475][T15781] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1301.436619][T15781] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1301.445237][T15781] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1302.576455][T15781] Bluetooth: hci7: command tx timeout [ 1303.056603][T15781] Bluetooth: hci8: command tx timeout [ 1303.136864][T15781] Bluetooth: hci11: command tx timeout [ 1303.296485][T15781] Bluetooth: hci12: command tx timeout [ 1303.536559][T15781] Bluetooth: hci13: command tx timeout [ 1304.656664][T15781] Bluetooth: hci7: command tx timeout [ 1305.147018][T15781] Bluetooth: hci8: command tx timeout [ 1305.226536][T15781] Bluetooth: hci11: command tx timeout [ 1305.376366][T15781] Bluetooth: hci12: command tx timeout [ 1305.626609][T15781] Bluetooth: hci13: command tx timeout [ 1306.736517][T15781] Bluetooth: hci7: command tx timeout [ 1307.216601][T15781] Bluetooth: hci8: command tx timeout [ 1307.296507][T15781] Bluetooth: hci11: command tx timeout [ 1307.456258][T15781] Bluetooth: hci12: command tx timeout [ 1307.696614][T15781] Bluetooth: hci13: command tx timeout [ 1308.816476][T15781] Bluetooth: hci7: command tx timeout [ 1309.296473][T15781] Bluetooth: hci8: command tx timeout [ 1309.376332][ T5840] Bluetooth: hci11: command tx timeout [ 1309.546537][T15781] Bluetooth: hci12: command tx timeout [ 1309.776686][T15781] Bluetooth: hci13: command tx timeout [ 1322.987610][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 1322.993700][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 1323.002635][ T5840] Bluetooth: hci10: command 0x0406 tx timeout [ 1358.027093][ T30] INFO: task kworker/0:2:969 blocked for more than 143 seconds. [ 1358.034820][ T30] Not tainted 6.12.0-rc5-syzkaller #0 [ 1358.076177][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1358.113343][ T30] task:kworker/0:2 state:D stack:17784 pid:969 tgid:969 ppid:2 flags:0x00004000 [ 1358.179392][ T30] Workqueue: events switchdev_deferred_process_work [ 1358.222045][ T30] Call Trace: [ 1358.225407][ T30] [ 1358.266258][ T30] __schedule+0x18af/0x4bd0 [ 1358.270936][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1358.276004][ T30] ? schedule+0x90/0x320 [ 1358.339575][ T30] ? __pfx___schedule+0x10/0x10 [ 1358.344525][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1358.395611][ T30] ? __pfx_lock_release+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1358.438624][ T30] ? kick_pool+0x1bd/0x620 [ 1358.443228][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1358.496130][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1358.501415][ T30] ? schedule+0x90/0x320 [ 1358.505719][ T30] schedule+0x14b/0x320 [ 1358.606280][ T30] schedule_preempt_disabled+0x13/0x30 [ 1358.687825][ T30] __mutex_lock+0x6a7/0xd70 [ 1358.692512][ T30] ? __mutex_lock+0x52a/0xd70 [ 1358.746325][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 1358.752573][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1358.817676][ T30] ? process_scheduled_works+0x976/0x1850 [ 1358.823583][ T30] switchdev_deferred_process_work+0xe/0x20 [ 1358.880408][ T30] process_scheduled_works+0xa63/0x1850 [ 1358.906181][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1358.912267][ T30] ? assign_work+0x364/0x3d0 [ 1358.946134][ T30] worker_thread+0x870/0xd30 [ 1358.950917][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1359.001911][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1359.038667][ T30] kthread+0x2f0/0x390 [ 1359.042850][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1359.106301][ T30] ? __pfx_kthread+0x10/0x10 [ 1359.110976][ T30] ret_from_fork+0x4b/0x80 [ 1359.115440][ T30] ? __pfx_kthread+0x10/0x10 [ 1359.176883][ T30] ret_from_fork_asm+0x1a/0x30 [ 1359.181852][ T30] [ 1359.210507][ T30] INFO: task kworker/u8:8:1159 blocked for more than 144 seconds. [ 1359.245020][ T30] Not tainted 6.12.0-rc5-syzkaller #0 [ 1359.276091][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1359.284911][ T30] task:kworker/u8:8 state:D stack:20472 pid:1159 tgid:1159 ppid:2 flags:0x00004000 [ 1359.354189][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 1359.386269][ T30] Call Trace: [ 1359.389620][ T30] [ 1359.392587][ T30] __schedule+0x18af/0x4bd0 [ 1359.431973][ T30] ? __pfx___schedule+0x10/0x10 [ 1359.451684][ T30] ? __pfx_lock_release+0x10/0x10 [ 1359.467315][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1359.472863][ T30] ? kthread_data+0x52/0xd0 [ 1359.506116][ T30] ? schedule+0x90/0x320 [ 1359.515495][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1359.536404][ T30] ? schedule+0x90/0x320 [ 1359.540904][ T30] schedule+0x14b/0x320 [ 1359.545110][ T30] schedule_preempt_disabled+0x13/0x30 [ 1359.581247][ T30] __mutex_lock+0x6a7/0xd70 [ 1359.585845][ T30] ? __mutex_lock+0x52a/0xd70 [ 1359.615067][ T30] ? addrconf_verify_work+0x19/0x30 [ 1359.626109][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1359.631202][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1359.662547][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1359.696663][ T30] ? process_scheduled_works+0x976/0x1850 [ 1359.702486][ T30] addrconf_verify_work+0x19/0x30 [ 1359.724301][ T30] process_scheduled_works+0xa63/0x1850 [ 1359.744065][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1359.766104][ T30] ? assign_work+0x364/0x3d0 [ 1359.770799][ T30] worker_thread+0x870/0xd30 [ 1359.775452][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1359.821979][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1359.841590][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1359.853832][ T30] kthread+0x2f0/0x390 [ 1359.862489][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1359.886090][ T30] ? __pfx_kthread+0x10/0x10 [ 1359.890761][ T30] ret_from_fork+0x4b/0x80 [ 1359.895232][ T30] ? __pfx_kthread+0x10/0x10 [ 1359.931184][ T30] ret_from_fork_asm+0x1a/0x30 [ 1359.946105][ T30] [ 1359.962489][ T30] INFO: task dhcpcd:5507 blocked for more than 145 seconds. [ 1359.977008][ T30] Not tainted 6.12.0-rc5-syzkaller #0 [ 1359.982957][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1360.016273][ T30] task:dhcpcd state:D stack:20096 pid:5507 tgid:5507 ppid:5506 flags:0x00000002 [ 1360.036182][ T30] Call Trace: [ 1360.039532][ T30] [ 1360.042503][ T30] __schedule+0x18af/0x4bd0 [ 1360.065889][ T30] ? __pfx___schedule+0x10/0x10 [ 1360.076111][ T30] ? __pfx_lock_release+0x10/0x10 [ 1360.081224][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1360.096950][ T30] ? schedule+0x90/0x320 [ 1360.101267][ T30] schedule+0x14b/0x320 [ 1360.105473][ T30] schedule_preempt_disabled+0x13/0x30 [ 1360.136207][ T30] __mutex_lock+0x6a7/0xd70 [ 1360.140804][ T30] ? __mutex_lock+0x52a/0xd70 [ 1360.145531][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1360.171892][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1360.186109][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1360.191138][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1360.206096][ T30] ? __lock_acquire+0x1384/0x2050 [ 1360.211206][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1360.228209][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1360.233052][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1360.256614][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1360.262018][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1360.277938][ T30] netlink_unicast+0x7f6/0x990 [ 1360.282796][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1360.306075][ T30] ? __virt_addr_valid+0x183/0x530 [ 1360.311268][ T30] ? __check_object_size+0x48e/0x900 [ 1360.326140][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 1360.330988][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1360.354881][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 1360.368470][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1360.373833][ T30] __sock_sendmsg+0x221/0x270 [ 1360.386108][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 1360.390947][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1360.411157][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1360.426900][ T30] __sys_sendmsg+0x292/0x380 [ 1360.431572][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1360.446091][ T30] ? netlink_bind+0xaeb/0xc90 [ 1360.450856][ T30] ? __pfx___sys_bind+0x10/0x10 [ 1360.463321][ T30] ? fd_install+0x35c/0x5d0 [ 1360.486315][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1360.492747][ T30] ? do_syscall_64+0x100/0x230 [ 1360.506283][ T30] ? do_syscall_64+0xb6/0x230 [ 1360.517366][ T30] do_syscall_64+0xf3/0x230 [ 1360.521953][ T30] ? clear_bhb_loop+0x35/0x90 [ 1360.537240][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.543203][ T30] RIP: 0033:0x7f8ee1216a4b [ 1360.565616][ T30] RSP: 002b:00007ffc882c6c88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1360.583956][ T30] RAX: ffffffffffffffda RBX: 00007f8ee113e6c0 RCX: 00007f8ee1216a4b [ 1360.613789][ T30] RDX: 0000000000000000 RSI: 00007ffc882dae38 RDI: 0000000000000023 [ 1360.634182][ T30] RBP: 0000000000000023 R08: 0000000000000000 R09: 00007ffc882dae38 [ 1360.656531][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 1360.672510][ T30] R13: 00007ffc882dae38 R14: 0000000000000044 R15: 0000000000000001 [ 1360.689138][ T30] [ 1360.693927][ T30] INFO: task kworker/u8:1:14249 blocked for more than 146 seconds. [ 1360.737186][ T30] Not tainted 6.12.0-rc5-syzkaller #0 [ 1360.743148][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1360.773995][ T30] task:kworker/u8:1 state:D stack:22880 pid:14249 tgid:14249 ppid:2 flags:0x00004000 [ 1360.792603][ T30] Workqueue: netns cleanup_net [ 1360.805838][ T30] Call Trace: [ 1360.809654][ T30] [ 1360.812660][ T30] __schedule+0x18af/0x4bd0 [ 1360.829743][ T30] ? __pfx___schedule+0x10/0x10 [ 1360.834896][ T30] ? __pfx_lock_release+0x10/0x10 [ 1360.856249][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1360.861794][ T30] ? kthread_data+0x52/0xd0 [ 1360.876085][ T30] ? schedule+0x90/0x320 [ 1360.880390][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1360.885549][ T30] ? schedule+0x90/0x320 [ 1360.906093][ T30] schedule+0x14b/0x320 [ 1360.910336][ T30] schedule_preempt_disabled+0x13/0x30 [ 1360.915836][ T30] __mutex_lock+0x6a7/0xd70 [ 1360.940113][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1360.945401][ T30] ? __mutex_lock+0x52a/0xd70 [ 1360.967997][ T30] ? nsim_destroy+0x71/0x5c0 [ 1360.972688][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1360.991278][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 1361.006292][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1361.011206][ T30] ? simple_release_fs+0x9c/0xd0 [ 1361.028184][ T30] nsim_destroy+0x71/0x5c0 [ 1361.032693][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 1361.051239][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 1361.066117][ T30] nsim_dev_reload_down+0x98/0xd0 [ 1361.076441][ T30] devlink_reload+0x18b/0x870 [ 1361.081185][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 1361.103602][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 1361.116372][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1361.122447][ T30] ? class_remove_file_ns+0x121/0x160 [ 1361.142460][ T30] cleanup_net+0x615/0xcc0 [ 1361.160800][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1361.165833][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1361.186263][ T30] ? process_scheduled_works+0x976/0x1850 [ 1361.192062][ T30] process_scheduled_works+0xa63/0x1850 [ 1361.214767][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1361.221077][ T30] ? assign_work+0x364/0x3d0 [ 1361.225904][ T30] worker_thread+0x870/0xd30 [ 1361.236120][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1361.242085][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1361.264825][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1361.286228][ T30] kthread+0x2f0/0x390 [ 1361.290368][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1361.295528][ T30] ? __pfx_kthread+0x10/0x10 [ 1361.316093][ T30] ret_from_fork+0x4b/0x80 [ 1361.321024][ T30] ? __pfx_kthread+0x10/0x10 [ 1361.325674][ T30] ret_from_fork_asm+0x1a/0x30 [ 1361.342874][ T30] [ 1361.350312][ T30] INFO: task syz-executor:14304 blocked for more than 146 seconds. [ 1361.372654][ T30] Not tainted 6.12.0-rc5-syzkaller #0 [ 1361.397302][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1361.416267][ T30] task:syz-executor state:D stack:21728 pid:14304 tgid:14304 ppid:1 flags:0x00004006 [ 1361.437446][ T30] Call Trace: [ 1361.440780][ T30] [ 1361.443751][ T30] __schedule+0x18af/0x4bd0 [ 1361.462441][ T30] ? __pfx___schedule+0x10/0x10 [ 1361.476204][ T30] ? __pfx_lock_release+0x10/0x10 [ 1361.486364][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1361.491893][ T30] ? schedule+0x90/0x320 [ 1361.516558][ T30] schedule+0x14b/0x320 [ 1361.520790][ T30] schedule_preempt_disabled+0x13/0x30 [ 1361.534452][ T30] __mutex_lock+0x6a7/0xd70 [ 1361.546188][ T30] ? __mutex_lock+0x52a/0xd70 [ 1361.550928][ T30] ? tun_chr_close+0x3b/0x1b0 [ 1361.555648][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1361.576945][ T30] ? __pfx_call_rcu+0x10/0x10 [ 1361.596094][ T30] tun_chr_close+0x3b/0x1b0 [ 1361.600668][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1361.605824][ T30] __fput+0x23f/0x880 [ 1361.629235][ T30] task_work_run+0x24f/0x310 [ 1361.633903][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1361.646094][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1361.651274][ T30] ? do_exit+0xa2a/0x28e0 [ 1361.655640][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1361.678125][ T30] ? do_exit+0xa2a/0x28e0 [ 1361.684655][ T30] do_exit+0xa2f/0x28e0 [ 1361.704854][ T30] ? __pfx_do_exit+0x10/0x10 [ 1361.715921][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1361.745138][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1361.759455][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1361.765856][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1361.776114][ T30] do_group_exit+0x207/0x2c0 [ 1361.780771][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1361.804467][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1361.819266][ T30] get_signal+0x16a3/0x1740 [ 1361.823871][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1361.837162][ T30] ? __pfx_get_signal+0x10/0x10 [ 1361.842098][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1361.878672][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.885021][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.896400][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1361.902632][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1361.925024][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1361.936108][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1361.941733][ T30] do_syscall_64+0x100/0x230 [ 1361.967026][ T30] ? clear_bhb_loop+0x35/0x90 [ 1361.971787][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.986247][ T30] RIP: 0033:0x7f1e799805ac [ 1362.006283][ T30] RSP: 002b:00007f1e79c5f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1362.014858][ T30] RAX: 000000000000003c RBX: 00007f1e7a664620 RCX: 00007f1e799805ac [ 1362.036871][ T30] RDX: 000000000000003c RSI: 00007f1e7a664670 RDI: 0000000000000003 [ 1362.044909][ T30] RBP: 0000000000000000 R08: 00007f1e79c5f704 R09: 000000000000000c [ 1362.074750][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1362.091634][ T30] R13: 0000000000000000 R14: 00007f1e7a664670 R15: 0000000000000000 [ 1362.116323][ T30] [ 1362.119586][ T30] INFO: task syz-executor:14327 blocked for more than 147 seconds. [ 1362.136246][ T30] Not tainted 6.12.0-rc5-syzkaller #0 [ 1362.146375][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1362.157456][ T30] task:syz-executor state:D stack:21696 pid:14327 tgid:14327 ppid:1 flags:0x00004006 [ 1362.186088][ T30] Call Trace: [ 1362.189425][ T30] [ 1362.192389][ T30] __schedule+0x18af/0x4bd0 [ 1362.215543][ T30] ? __pfx___schedule+0x10/0x10 [ 1362.226381][ T30] ? __pfx_lock_release+0x10/0x10 [ 1362.231583][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1362.256898][ T30] ? schedule+0x90/0x320 [ 1362.261217][ T30] schedule+0x14b/0x320 [ 1362.265412][ T30] synchronize_rcu_expedited+0x684/0x830 [ 1362.289799][ T30] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1362.307007][ T30] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1362.312380][ T30] ? __pfx___might_resched+0x10/0x10 [ 1362.331786][ T30] ? __mutex_lock+0x9ab/0xd70 [ 1362.337170][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1362.343306][ T30] __tun_detach+0xa42/0x1600 [ 1362.365927][ T30] tun_chr_close+0x105/0x1b0 [ 1362.371171][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1362.386383][ T30] __fput+0x23f/0x880 [ 1362.390473][ T30] task_work_run+0x24f/0x310 [ 1362.395098][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1362.426102][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1362.431299][ T30] ? do_exit+0xa2a/0x28e0 [ 1362.435661][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1362.456091][ T30] ? do_exit+0xa2a/0x28e0 [ 1362.460496][ T30] do_exit+0xa2f/0x28e0 [ 1362.464696][ T30] ? __pfx_do_exit+0x10/0x10 [ 1362.484243][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1362.496086][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1362.516403][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1362.536130][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1362.541317][ T30] do_group_exit+0x207/0x2c0 [ 1362.545945][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1362.566301][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1362.571580][ T30] get_signal+0x16a3/0x1740 [ 1362.587462][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1362.592560][ T30] ? __pfx_get_signal+0x10/0x10 [ 1362.608503][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1362.614120][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1362.636851][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1362.642924][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1362.664604][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1362.676088][ T30] do_syscall_64+0x100/0x230 [ 1362.680750][ T30] ? clear_bhb_loop+0x35/0x90 [ 1362.685470][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.710271][ T30] RIP: 0033:0x7f3d171805ac [ 1362.714839][ T30] RSP: 002b:00007f3d1745f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1362.745356][ T30] RAX: 000000000000003c RBX: 00007f3d17e64620 RCX: 00007f3d171805ac [ 1362.764581][ T30] RDX: 000000000000003c RSI: 00007f3d17e64670 RDI: 0000000000000003 [ 1362.776089][ T30] RBP: 0000000000000000 R08: 00007f3d1745f704 R09: 000000000000000c [ 1362.784115][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1362.812902][ T30] R13: 0000000000000000 R14: 00007f3d17e64670 R15: 0000000000000000 [ 1362.826341][ T30] [ 1362.836667][ T30] INFO: task syz-executor:14337 blocked for more than 148 seconds. [ 1362.860573][ T30] Not tainted 6.12.0-rc5-syzkaller #0 [ 1362.876300][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1362.885021][ T30] task:syz-executor state:D stack:21568 pid:14337 tgid:14337 ppid:1 flags:0x00004006 [ 1362.913144][ T30] Call Trace: [ 1362.927013][ T30] [ 1362.930096][ T30] __schedule+0x18af/0x4bd0 [ 1362.935108][ T30] ? __pfx___schedule+0x10/0x10 [ 1362.956314][ T30] ? __pfx_lock_release+0x10/0x10 [ 1362.961450][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1362.976484][ T30] ? schedule+0x90/0x320 [ 1362.980793][ T30] schedule+0x14b/0x320 [ 1362.984992][ T30] schedule_preempt_disabled+0x13/0x30 [ 1363.006401][ T30] __mutex_lock+0x6a7/0xd70 [ 1363.010985][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1363.033420][ T30] ? __mutex_lock+0x52a/0xd70 [ 1363.040632][ T30] ? nsim_destroy+0x71/0x5c0 [ 1363.045330][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1363.066286][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 1363.071764][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1363.096132][ T30] ? simple_release_fs+0x9c/0xd0 [ 1363.101154][ T30] nsim_destroy+0x71/0x5c0 [ 1363.105640][ T30] ? nsim_dev_reload_destroy+0x28a/0x490 [ 1363.125446][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 1363.136118][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 1363.149347][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1363.154715][ T30] nsim_drv_remove+0x58/0x160 [ 1363.175573][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 1363.182326][ T30] bus_remove_device+0x34f/0x420 [ 1363.198047][ T30] device_del+0x57a/0x9b0 [ 1363.202468][ T30] ? __pfx_device_del+0x10/0x10 [ 1363.216610][ T30] device_unregister+0x20/0xc0 [ 1363.230262][ T30] del_device_store+0x363/0x480 [ 1363.235198][ T30] ? __pfx_del_device_store+0x10/0x10 [ 1363.246093][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 1363.251014][ T30] ? bus_attr_store+0x4f/0xb0 [ 1363.255736][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1363.283160][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 1363.296120][ T30] vfs_write+0xaeb/0xd30 [ 1363.300459][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1363.322898][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1363.336466][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 1363.341391][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1363.358097][ T30] ? fdget_pos+0x265/0x320 [ 1363.362585][ T30] ksys_write+0x183/0x2b0 [ 1363.376443][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1363.381349][ T30] ? do_syscall_64+0x100/0x230 [ 1363.398772][ T30] ? do_syscall_64+0xb6/0x230 [ 1363.403521][ T30] do_syscall_64+0xf3/0x230 [ 1363.425045][ T30] ? clear_bhb_loop+0x35/0x90 [ 1363.436105][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.448073][ T30] RIP: 0033:0x7f2f7677d1ff [ 1363.452552][ T30] RSP: 002b:00007f2f76a5f220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1363.476316][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f2f7677d1ff [ 1363.484392][ T30] RDX: 0000000000000001 RSI: 00007f2f76a5f270 RDI: 0000000000000005 [ 1363.513011][ T30] RBP: 00007f2f767f2446 R08: 0000000000000000 R09: 00007f2f76a5f077 [ 1363.532225][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1363.556398][ T30] R13: 00007f2f76a5f270 R14: 00007f2f77464620 R15: 0000000000000003 [ 1363.564555][ T30] [ 1363.576332][ T30] INFO: task syz-executor:15131 blocked for more than 148 seconds. [ 1363.584323][ T30] Not tainted 6.12.0-rc5-syzkaller #0 [ 1363.606336][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1363.626087][ T30] task:syz-executor state:D stack:21728 pid:15131 tgid:15131 ppid:1 flags:0x00000004 [ 1363.656282][ T30] Call Trace: [ 1363.659715][ T30] [ 1363.662694][ T30] __schedule+0x18af/0x4bd0 [ 1363.681103][ T30] ? __pfx___schedule+0x10/0x10 [ 1363.686021][ T30] ? __pfx_lock_release+0x10/0x10 [ 1363.707218][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1363.712751][ T30] ? schedule+0x90/0x320 [ 1363.732372][ T30] schedule+0x14b/0x320 [ 1363.737830][ T30] schedule_preempt_disabled+0x13/0x30 [ 1363.743336][ T30] __mutex_lock+0x6a7/0xd70 [ 1363.766214][ T30] ? __mutex_lock+0x52a/0xd70 [ 1363.770989][ T30] ? del_device_store+0xfc/0x480 [ 1363.775975][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1363.796869][ T30] del_device_store+0xfc/0x480 [ 1363.801720][ T30] ? __pfx_del_device_store+0x10/0x10 [ 1363.816481][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 1363.821445][ T30] ? bus_attr_store+0x4f/0xb0 [ 1363.842615][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1363.848428][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 1363.853772][ T30] vfs_write+0xaeb/0xd30 [ 1363.879217][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1363.885099][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1363.904395][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 1363.925917][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1363.938333][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 1363.944495][ T30] ? fdget_pos+0x265/0x320 [ 1363.959754][ T5379] Bluetooth: hci5: command 0x0406 tx timeout [ 1363.965868][ T5379] Bluetooth: hci2: command 0x0406 tx timeout [ 1363.973971][ T5379] Bluetooth: hci1: command 0x0406 tx timeout [ 1363.980121][ T5379] Bluetooth: hci3: command 0x0406 tx timeout [ 1363.986315][ T5379] Bluetooth: hci6: command 0x0406 tx timeout [ 1364.017230][ T30] ksys_write+0x183/0x2b0 [ 1364.021647][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1364.044483][ T30] ? do_syscall_64+0x100/0x230 [ 1364.056089][ T30] ? do_syscall_64+0xb6/0x230 [ 1364.060839][ T30] do_syscall_64+0xf3/0x230 [ 1364.065379][ T30] ? clear_bhb_loop+0x35/0x90 [ 1364.086374][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.092351][ T30] RIP: 0033:0x7fb90917d1ff [ 1364.110212][ T30] RSP: 002b:00007fb90945f220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1364.136347][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb90917d1ff [ 1364.152383][ T30] RDX: 0000000000000001 RSI: 00007fb90945f270 RDI: 0000000000000005 [ 1364.171109][ T30] RBP: 00007fb9091f2446 R08: 0000000000000000 R09: 00007fb90945f077 [ 1364.186415][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1364.194447][ T30] R13: 00007fb90945f270 R14: 00007fb909e64620 R15: 0000000000000003 [ 1364.226105][ T30] [ 1364.235275][ T30] INFO: task syz-executor:15148 blocked for more than 149 seconds. [ 1364.274721][ T30] Not tainted 6.12.0-rc5-syzkaller #0 [ 1364.296361][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1364.305098][ T30] task:syz-executor state:D stack:26496 pid:15148 tgid:15148 ppid:1 flags:0x00004004 [ 1364.336401][ T30] Call Trace: [ 1364.339742][ T30] [ 1364.342707][ T30] __schedule+0x18af/0x4bd0 [ 1364.364086][ T30] ? __pfx___schedule+0x10/0x10 [ 1364.377195][ T30] ? __pfx_lock_release+0x10/0x10 [ 1364.382308][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1364.396454][ T30] ? schedule+0x90/0x320 [ 1364.400764][ T30] schedule+0x14b/0x320 [ 1364.404956][ T30] schedule_preempt_disabled+0x13/0x30 [ 1364.440192][ T30] __mutex_lock+0x6a7/0xd70 [ 1364.444789][ T30] ? __mutex_lock+0x52a/0xd70 [ 1364.466108][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 1364.471825][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1364.479633][ T30] ? read_word_at_a_time+0xe/0x20 [ 1364.484730][ T30] ? sized_strscpy+0x8d/0x220 [ 1364.503299][ T30] ip_tunnel_init_net+0x20e/0x720 [ 1364.516089][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1364.521703][ T30] ? ops_init+0x75/0x590 [ 1364.525994][ T30] ops_init+0x31e/0x590 [ 1364.552462][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 1364.566089][ T30] setup_net+0x287/0x9e0 [ 1364.570411][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1364.586159][ T30] ? __pfx_setup_net+0x10/0x10 [ 1364.591032][ T30] copy_net_ns+0x33f/0x570 [ 1364.595504][ T30] create_new_namespaces+0x425/0x7b0 [ 1364.616284][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1364.622087][ T30] ksys_unshare+0x57d/0xa70 [ 1364.637968][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1364.643094][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1364.671555][ T30] ? do_syscall_64+0x100/0x230 [ 1364.679982][ T30] __x64_sys_unshare+0x38/0x40 [ 1364.684897][ T30] do_syscall_64+0xf3/0x230 [ 1364.705345][ T30] ? clear_bhb_loop+0x35/0x90 [ 1364.710733][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.727163][ T30] RIP: 0033:0x7f432677ff17 [ 1364.731640][ T30] RSP: 002b:00007f4326a5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1364.756736][ T30] RAX: ffffffffffffffda RBX: 00007f43267f2b1d RCX: 00007f432677ff17 [ 1364.764778][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1364.790450][ T30] RBP: 0000000000000000 R08: 00007f4327467d60 R09: 0000000000000000 [ 1364.808134][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 1364.826110][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1364.834161][ T30] [ 1364.852562][ T30] [ 1364.852562][ T30] Showing all locks held in the system: [ 1364.887391][ T30] 2 locks held by ksoftirqd/1/24: [ 1364.892507][ T30] 1 lock held by khungtaskd/30: [ 1364.916408][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1364.936889][ T30] 2 locks held by kworker/u8:5/789: [ 1364.942147][ T30] 3 locks held by kworker/0:2/969: [ 1364.961087][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1364.984636][ T30] #1: ffffc90003fdfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1365.016537][ T30] #2: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1365.036090][ T30] 3 locks held by kworker/u8:8/1159: [ 1365.041479][ T30] #0: ffff88814cfec148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1365.076211][ T30] #1: ffffc900047d7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1365.106348][ T30] #2: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1365.115975][ T30] 1 lock held by dhcpcd/5507: [ 1365.139047][ T30] #0: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1365.156098][ T30] 2 locks held by getty/5596: [ 1365.160822][ T30] #0: ffff88803124b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1365.190485][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1365.212414][ T30] 6 locks held by kworker/u9:3/5840: [ 1365.226085][ T30] #0: ffff88806a284148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1365.256739][ T30] #1: ffffc90003877d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1365.285156][ T30] #2: ffff888066350d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1365.301029][ T30] #3: ffff888066350078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1365.325043][ T30] #4: ffffffff8fe3fba8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 1365.340965][ T30] #5: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1365.365950][ T30] 5 locks held by kworker/u9:8/5851: [ 1365.380708][ T30] #0: ffff888059a5f148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1365.401871][ T30] #1: ffffc90003e47d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1365.423948][ T30] #2: ffff88805f45cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1365.441738][ T30] #3: ffff88805f45c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1365.461451][ T30] #4: ffffffff8fe3fba8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 1365.487265][ T30] 3 locks held by kworker/u8:10/13418: [ 1365.493104][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1365.516267][ T30] #1: ffffc9000c3cfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1365.541363][ T30] #2: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1365.556084][ T30] 5 locks held by kworker/u9:0/15781: [ 1365.561515][ T30] #0: ffff88803ac18948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1365.593691][ T30] #1: ffffc9001100fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1365.626370][ T30] #2: ffff888043a04d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1365.646302][ T30] #3: ffff888043a04078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1365.667092][ T30] #4: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1365.693675][ T30] 3 locks held by kworker/u8:11/22845: [ 1365.716096][ T30] 6 locks held by kworker/u8:1/14249: [ 1365.721533][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1365.747889][ T30] #1: ffffc9000becfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1365.772629][ T30] #2: ffffffff8fcc6750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1365.796390][ T30] #3: ffff88803d10e0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 1365.826317][ T30] #4: ffff88803d10f250 (&devlink->lock_key#43){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 1365.846309][ T30] #5: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1365.855334][ T30] 1 lock held by syz-executor/14304: [ 1365.875839][ T30] #0: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1365.893605][ T30] 2 locks held by syz-executor/14327: [ 1365.910161][ T30] #0: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1365.934997][ T30] #1: ffffffff8e7d1d90 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 1365.956119][ T30] 7 locks held by syz-executor/14337: [ 1365.961553][ T30] #0: ffff888035226420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 1365.985171][ T30] #1: ffff888031d6f488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1366.003700][ T30] #2: ffff8881443672d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1366.023403][ T30] #3: ffffffff8f571128 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1366.054905][ T30] #4: ffff88805eecf0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1366.073747][ T30] #5: ffff888042b20250 (&devlink->lock_key#42){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1366.094697][ T30] #6: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1366.116386][ T30] 4 locks held by syz-executor/15131: [ 1366.121898][ T30] #0: ffff888035226420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 1366.148511][ T30] #1: ffff88807e428488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1366.173419][ T30] #2: ffff8881443672d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1366.196345][ T30] #3: ffffffff8f571128 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1366.220985][ T30] 2 locks held by syz-executor/15148: [ 1366.242421][ T30] #0: ffffffff8fcc6750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1366.266099][ T30] #1: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 1366.275711][ T30] 2 locks held by syz-executor/15149: [ 1366.306277][ T30] #0: ffffffff8fcc6750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1366.315820][ T30] #1: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 1366.336633][ T30] 2 locks held by syz-executor/15555: [ 1366.342074][ T30] #0: ffffffff8fcc6750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1366.376228][ T30] #1: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1366.403788][ T30] 4 locks held by syz-executor/15585: [ 1366.409548][ T30] #0: ffff888035226420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 1366.435139][ T30] #1: ffff88803479c488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1366.452306][ T30] #2: ffff8881443672d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1366.472791][ T30] #3: ffffffff8f571128 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1366.497444][ T30] 2 locks held by syz-executor/15620: [ 1366.502897][ T30] #0: ffffffff8fcc6750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1366.535970][ T30] #1: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1366.556150][ T30] 2 locks held by syz-executor/15706: [ 1366.561594][ T30] #0: ffffffff8fcc6750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1366.588099][ T30] #1: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1366.616337][ T30] 2 locks held by syz-executor/15723: [ 1366.621787][ T30] #0: ffffffff8fcc6750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1366.647390][ T30] #1: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1366.674891][ T30] 2 locks held by syz-executor/15935: [ 1366.680957][ T30] #0: ffffffff8fcc6750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1366.706150][ T30] #1: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1366.735291][ T30] 2 locks held by syz-executor/15945: [ 1366.746124][ T30] #0: ffffffff8fcc6750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1366.755672][ T30] #1: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1366.783024][ T30] 2 locks held by syz-executor/15954: [ 1366.797214][ T30] #0: ffffffff8fcc6750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1366.820302][ T30] #1: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1366.846439][ T30] 2 locks held by syz-executor/15957: [ 1366.851879][ T30] #0: ffffffff8fcc6750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1366.875031][ T30] #1: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1366.892158][ T30] 2 locks held by syz-executor/15967: [ 1366.907241][ T30] #0: ffffffff8fcc6750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1366.936332][ T30] #1: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1366.964545][ T30] [ 1366.967883][ T30] ============================================= [ 1366.967883][ T30] [ 1367.016255][ T30] NMI backtrace for cpu 0 [ 1367.020739][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller #0 [ 1367.029534][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1367.039619][ T30] Call Trace: [ 1367.042924][ T30] [ 1367.045878][ T30] dump_stack_lvl+0x241/0x360 [ 1367.050750][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1367.055998][ T30] ? __pfx__printk+0x10/0x10 [ 1367.060644][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1367.065627][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1367.071129][ T30] ? _printk+0xd5/0x120 [ 1367.075316][ T30] ? __pfx__printk+0x10/0x10 [ 1367.079938][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1367.084831][ T30] ? __pfx__printk+0x10/0x10 [ 1367.089461][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1367.094529][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1367.100554][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1367.106579][ T30] watchdog+0xff4/0x1040 [ 1367.110870][ T30] ? watchdog+0x1ea/0x1040 [ 1367.115335][ T30] ? __pfx_watchdog+0x10/0x10 [ 1367.120065][ T30] kthread+0x2f0/0x390 [ 1367.124195][ T30] ? __pfx_watchdog+0x10/0x10 [ 1367.128923][ T30] ? __pfx_kthread+0x10/0x10 [ 1367.133563][ T30] ret_from_fork+0x4b/0x80 [ 1367.138025][ T30] ? __pfx_kthread+0x10/0x10 [ 1367.142662][ T30] ret_from_fork_asm+0x1a/0x30 [ 1367.147475][ T30] [ 1367.152099][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1367.158031][ C1] NMI backtrace for cpu 1 [ 1367.158045][ C1] CPU: 1 UID: 0 PID: 5892 Comm: kworker/1:6 Not tainted 6.12.0-rc5-syzkaller #0 [ 1367.158070][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1367.158082][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 1367.158114][ C1] RIP: 0010:memset_orig+0x75/0xb0 [ 1367.158137][ C1] Code: 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 <48> 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c [ 1367.158152][ C1] RSP: 0018:ffffc90000a17528 EFLAGS: 00000202 [ 1367.158166][ C1] RAX: 0000000000000000 RBX: ffffc90000a17638 RCX: 0000000000000001 [ 1367.158196][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000a17650 [ 1367.158209][ C1] RBP: dffffc0000000000 R08: ffffc90000a1765f R09: 0000000000000000 [ 1367.158222][ C1] R10: ffffc90000a17650 R11: fffff52000142ecc R12: ffffc90000a19000 [ 1367.158236][ C1] R13: ffffc90000a17600 R14: ffffffff8a2170c4 R15: ffffc90000a17650 [ 1367.158250][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1367.158266][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1367.158279][ C1] CR2: 000000002007b030 CR3: 000000000e734000 CR4: 00000000003526f0 [ 1367.158295][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1367.158307][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1367.158319][ C1] Call Trace: [ 1367.158326][ C1] [ 1367.158334][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1367.158359][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1367.158387][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1367.158410][ C1] ? nmi_handle+0x2a/0x5a0 [ 1367.158435][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1367.158459][ C1] ? nmi_handle+0x14f/0x5a0 [ 1367.158476][ C1] ? nmi_handle+0x2a/0x5a0 [ 1367.158495][ C1] ? memset_orig+0x75/0xb0 [ 1367.158515][ C1] ? default_do_nmi+0x63/0x160 [ 1367.158540][ C1] ? exc_nmi+0x123/0x1f0 [ 1367.158563][ C1] ? end_repeat_nmi+0xf/0x53 [ 1367.158583][ C1] ? NF_HOOK+0x3a4/0x450 [ 1367.158609][ C1] ? memset_orig+0x75/0xb0 [ 1367.158630][ C1] ? memset_orig+0x75/0xb0 [ 1367.158651][ C1] ? memset_orig+0x75/0xb0 [ 1367.158672][ C1] [ 1367.158678][ C1] [ 1367.158684][ C1] unwind_next_frame+0xcfb/0x22d0 [ 1367.158715][ C1] ? NF_HOOK+0x29e/0x450 [ 1367.158738][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1367.158761][ C1] arch_stack_walk+0x11c/0x150 [ 1367.158782][ C1] ? NF_HOOK+0x3a4/0x450 [ 1367.158806][ C1] stack_trace_save+0x118/0x1d0 [ 1367.158825][ C1] ? __asan_memset+0x23/0x50 [ 1367.158852][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1367.158876][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1367.158903][ C1] kasan_save_track+0x3f/0x80 [ 1367.158920][ C1] ? kasan_save_track+0x3f/0x80 [ 1367.158936][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 1367.158954][ C1] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 1367.158978][ C1] ? ref_tracker_alloc+0x14b/0x490 [ 1367.158996][ C1] ? dst_init+0xee/0x490 [ 1367.159014][ C1] ? dst_alloc+0x14f/0x190 [ 1367.159042][ C1] ? ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 1367.159065][ C1] ? ip_route_output_key_hash+0x193/0x2b0 [ 1367.159081][ C1] ? ip_route_output_flow+0x29/0x140 [ 1367.159104][ C1] ? ip_route_me_harder+0x80d/0x1300 [ 1367.159127][ C1] ? synproxy_send_tcp+0x356/0x6c0 [ 1367.159151][ C1] ? synproxy_send_client_synack+0x8b8/0xf30 [ 1367.159175][ C1] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 1367.159191][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 1367.159207][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 1367.159223][ C1] ? nft_do_chain_inet+0x418/0x6b0 [ 1367.159239][ C1] ? nf_hook_slow+0xc3/0x220 [ 1367.159261][ C1] ? NF_HOOK+0x29e/0x450 [ 1367.159297][ C1] __kasan_kmalloc+0x98/0xb0 [ 1367.159315][ C1] ? ref_tracker_alloc+0x14b/0x490 [ 1367.159333][ C1] __kmalloc_cache_noprof+0x19c/0x2c0 [ 1367.159357][ C1] ref_tracker_alloc+0x14b/0x490 [ 1367.159376][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1367.159404][ C1] dst_init+0xee/0x490 [ 1367.159419][ C1] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 1367.159443][ C1] dst_alloc+0x14f/0x190 [ 1367.159462][ C1] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 1367.159485][ C1] ip_route_output_key_hash+0x193/0x2b0 [ 1367.159502][ C1] ? ip_route_output_key_hash+0xdf/0x2b0 [ 1367.159519][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1367.159537][ C1] ? __pfx_lock_release+0x10/0x10 [ 1367.159561][ C1] ? kthread+0x2f0/0x390 [ 1367.159580][ C1] ip_route_output_flow+0x29/0x140 [ 1367.159606][ C1] ip_route_me_harder+0x80d/0x1300 [ 1367.159634][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1367.159659][ C1] ? trace_kmalloc+0x1f/0xd0 [ 1367.159679][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 1367.159711][ C1] synproxy_send_tcp+0x356/0x6c0 [ 1367.159739][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 1367.159770][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1367.159796][ C1] ? synproxy_pernet+0x45/0x270 [ 1367.159814][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 1367.159833][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1367.159852][ C1] ? nf_ip_checksum+0x13a/0x500 [ 1367.159870][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 1367.159890][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1367.159905][ C1] ? validate_chain+0x11e/0x5920 [ 1367.159926][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1367.159948][ C1] nft_do_chain+0x4ad/0x1da0 [ 1367.159972][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1367.159987][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 1367.160021][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1367.160042][ C1] nft_do_chain_inet+0x418/0x6b0 [ 1367.160064][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1367.160080][ C1] ? ipt_do_table+0x312/0x1860 [ 1367.160104][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1367.160120][ C1] nf_hook_slow+0xc3/0x220 [ 1367.160143][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1367.160165][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1367.160186][ C1] NF_HOOK+0x29e/0x450 [ 1367.160207][ C1] ? NF_HOOK+0x9a/0x450 [ 1367.160226][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1367.160247][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1367.160271][ C1] ? ip_rcv_finish+0x406/0x560 [ 1367.160292][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1367.160314][ C1] NF_HOOK+0x3a4/0x450 [ 1367.160335][ C1] ? NF_HOOK+0x9a/0x450 [ 1367.160355][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1367.160374][ C1] ? ip_rcv_core+0x801/0xd10 [ 1367.160395][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1367.160420][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1367.160440][ C1] __netif_receive_skb+0x2bf/0x650 [ 1367.160464][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1367.160488][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 1367.160509][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1367.160534][ C1] ? __pfx_lock_release+0x10/0x10 [ 1367.160558][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1367.160579][ C1] process_backlog+0x662/0x15b0 [ 1367.160605][ C1] ? process_backlog+0x33b/0x15b0 [ 1367.160632][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1367.160656][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1367.160681][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1367.160707][ C1] __napi_poll+0xcb/0x490 [ 1367.160730][ C1] net_rx_action+0x89b/0x1240 [ 1367.160763][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1367.160787][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 1367.160826][ C1] handle_softirqs+0x2c5/0x980 [ 1367.160849][ C1] ? do_softirq+0x11b/0x1e0 [ 1367.160872][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1367.160895][ C1] ? rcu_is_watching+0x15/0xb0 [ 1367.160914][ C1] do_softirq+0x11b/0x1e0 [ 1367.160934][ C1] [ 1367.160939][ C1] [ 1367.160945][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1367.160966][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1367.160990][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1367.161013][ C1] ? rcu_is_watching+0x15/0xb0 [ 1367.161032][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1367.161058][ C1] ? wg_packet_decrypt_worker+0xcde/0xd80 [ 1367.161083][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1367.161106][ C1] ? wg_packet_decrypt_worker+0x8b3/0xd80 [ 1367.161132][ C1] wg_packet_decrypt_worker+0xcde/0xd80 [ 1367.161164][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 1367.161221][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1367.161247][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1367.161275][ C1] ? process_scheduled_works+0x976/0x1850 [ 1367.161298][ C1] process_scheduled_works+0xa63/0x1850 [ 1367.161333][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1367.161360][ C1] ? assign_work+0x364/0x3d0 [ 1367.161386][ C1] worker_thread+0x870/0xd30 [ 1367.161412][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1367.161447][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1367.161475][ C1] ? __pfx_worker_thread+0x10/0x10