last executing test programs: 4m35.015577076s ago: executing program 1 (id=220): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9, 0x6d, 0x5c, 0x40, 0x2304, 0x23e, 0xd769, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x37, 0x10, 0xeb}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000040)={0x0, 0x0, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xe2, 0x4f, 0x92, 0x20, 0x93a, 0x2622, 0x7fb3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x26, 0x9d, 0x0, 0x2d, 0x26, 0xe6}}]}}]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000340)="1f94258f0af7844bf26db6f497c748e9d66f040ee0682f0fd1e4617f50659457667ce7a9f45fd94bbdece50173f5262b7cbc989b701a618f83b9073ca1d027eb2b6646c6833140eeb841bd72d42b7a60360fec03287e67684fecd9", 0x5b}], 0x1}}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x5, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x1010, r2, 0x0) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="7213", 0x2}], 0x1, 0x4) pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) r8 = socket$kcm(0x10, 0x3, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$lan78xx(r10, &(0x7f0000000340)={0x14, &(0x7f0000000300)={0x40, 0x6, 0x5, {0x5, 0x21, "f34b2a"}}, &(0x7f00000003c0)={0x0, 0x3, 0x42, @string={0x42, 0x3, "15029d82f3f9b004cbab426e9d830f28715ac62f107c925ad3b0b7a166231e6e5ae8a37c20f4ce3ee64f4c92179cb10692e338ed9a2f2a13c8616711d20ea4e1"}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x0, 0x3, 0x6b, "85a6c29eed2f29075cdbc596c29121f71db003855f4c905914a6bbb2ee4da2bf430f4cd1e96a3e0181d8cf95b8a8318e286cc929bdda74c8470ecf14453647ddf43a53382432205160fcceb44879833172a30ca920e4d88e91006e949373128bd12802a9604283275c0837"}, 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000580)={0xc0, 0xa1, 0x4}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000680)={0xc0, 0xa2, 0x2f, "c67388f1327e04bd924fc5cebd2f87532ff6fa06ccff54454b1a0c61734de84dfe32e0b47880f5eb912f263c3e818c"}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000200)={'erspan0\x00', r11, 0x80a8, 0x40, 0xfffffaa8, 0x7, {{0x24, 0x4, 0x2, 0xf, 0x90, 0x67, 0x0, 0x30, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010100, {[@end, @timestamp_prespec={0x44, 0x2c, 0x39, 0x3, 0x8, [{@multicast1}, {@empty, 0x3}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x65f}, {@broadcast, 0x4}]}, @lsrr={0x83, 0xb, 0xfa, [@private=0xa010102, @broadcast]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x8, 0x3, [{0x7, 0x2}]}, @lsrr={0x83, 0x13, 0xef, [@empty, @broadcast, @multicast2, @loopback]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x80, 0x3, 0xf, [{@multicast1}, {@multicast1, 0x4}, {@private=0xa010100, 0x8000}]}]}}}}}) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000180)) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4m32.658721075s ago: executing program 1 (id=231): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setns(0xffffffffffffffff, 0x20000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0xa}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7d) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0x9, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x40b00) ioctl$BLKREPORTZONE(r7, 0xc0101282, 0x0) 4m29.147426938s ago: executing program 1 (id=245): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="e400000010000104000900000300005b8300020000000000f070bf25817f212930ab51705b9a475544bda96b3b71fd68b5ce", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a30001280110001006272696467655f736c61766500000000180005800500190003000000040018000500010003000000140003006272696467655f736c6176655f300000"], 0x64}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xfff) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000400), 0x35) socket$inet_icmp_raw(0x2, 0x3, 0x1) 4m28.971731252s ago: executing program 1 (id=247): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{}, "5462cea39b7c1140", "c9a3315839c227100427fbb86ae6a41547451cdf2031bd38385f6ba0bf0705a4", "5d3e853f", "33fa4a8f2198c12e"}, 0x38) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cf2"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) fspick(r2, &(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev(r4, &(0x7f0000000880)=[{&(0x7f0000000340)="ec", 0x1}], 0x1) close(0x3) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 4m28.81190591s ago: executing program 1 (id=248): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="b405000099cf000071109b000180000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) r3 = socket(0xf, 0x800, 0x7ffe) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001100)={0x0, 0x9}, &(0x7f00000011c0)=0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x610000, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRESHEX=r6, @ANYBLOB="2c01000000000000803d30303030303030303030303034ffffff303130303030302c757365725ff056d504f41bd81169643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r6, &(0x7f00000050c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r6, &(0x7f0000007100)={0x78, 0x0, r9, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x4, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x80000003, 0x4}}}, 0x78) r10 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b, 0x0, r10}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x36}, &(0x7f0000000500)='./file0\x00', 0x18}) 4m28.225257921s ago: executing program 1 (id=251): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='\a', 0x1}, {0x0}], 0x2, &(0x7f0000001740)=ANY=[@ANYBLOB="300000000000000084000000010000000200000041"], 0x30}, 0x3000000000000000) 4m27.783557835s ago: executing program 32 (id=251): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='\a', 0x1}, {0x0}], 0x2, &(0x7f0000001740)=ANY=[@ANYBLOB="300000000000000084000000010000000200000041"], 0x30}, 0x3000000000000000) 2m44.203600513s ago: executing program 2 (id=577): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a0100000000000c008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 2m43.987623501s ago: executing program 2 (id=580): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x7, 0x1, 0x5, 0x1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x40, 0x200, 0xbc6}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x400, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c041}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x22008000) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd70"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040015) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x80, 0x0, @mcast2={0xff, 0x5}}, 0x1c) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) epoll_create1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc1485544, &(0x7f0000000000)=0x5) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x7e5a82, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 2m43.731206484s ago: executing program 5 (id=584): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x63, 0x8b}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000004d80)=@migrate={0x1090, 0x21, 0x10, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5c, r5}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_auth={0x1037, 0x1, {{'sha512-neon\x00'}, 0x7f78, "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"}}]}, 0x1090}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r2, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de", 0x7f, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6) 2m42.623709815s ago: executing program 2 (id=588): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff6a, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4007}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (fail_nth: 3) 2m42.579878209s ago: executing program 5 (id=589): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x27de, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446982, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000000000000000a74000000060a010400000000000000000a00fffe0900010073797a310000000048000480440001800a00010072616e676500000034000280040004801c000380150001008d40adb76aa7c0a7f23c8588fd2db2dc44000000080001404000000f08000240000000010900020073797a3200000000140000001100010000000000000000000100000a00000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000100)=0x10) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589c", 0xd) (async) r9 = accept4(r6, 0x0, 0x0, 0x80000) sendmsg$alg(r9, 0x0, 0x0) recvmsg$can_raw(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r9) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'dummy0\x00', 0x12f}) 2m40.820783864s ago: executing program 2 (id=594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0x800f32, 0x4) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f00000000c0)) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x14) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r9 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)={0xc}) r10 = dup(r8) write$RDMA_USER_CM_CMD_JOIN_MCAST(r10, 0x0, 0x0) write$yama_ptrace_scope(r10, &(0x7f0000000100)='1\x00', 0x2) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2, 0xfe, 0xe1, 0xc, 0xa, 0x95, 0x40, 0x41, 0xfb, 0x6, 0xc, 0x0, 0x8, 0x2, 0x2, 0x5}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7d, 0x0, 0x20, 0xfffffffffffffffb, 0x800, 0x106e, 0xfffffffffffffffa, 0x2, 0x8000000400007d, 0x0, 0x7, 0x5, 0x8000000000000007, 0x800000000000000, 0x9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m40.671772639s ago: executing program 5 (id=595): socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) syz_usb_connect(0x1, 0x24, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0) 2m40.063117416s ago: executing program 2 (id=597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) read$FUSE(r4, &(0x7f0000003780)={0x2020}, 0x2020) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x6, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x6, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x1, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0xb, 0x5, 0x6, 0x47, 0x3, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0x400bb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000004440)={0x0, 0x1, 0x2, 0x1b, 0x7, &(0x7f0000004040)="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"}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0xffffffcf) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x8, &(0x7f0000000a40)="47aaf63e3722d2a83d6b95a71d14ea166ec1bbec3c5baae7afd00a52a3543b68c1bda7e00de23c816f603aba4d37d816b52752b766b487aad71d38b670f6f3b3cc48ed3a5315da46c08b579ac8e19d569f448837157ea3057dc0648ec5c071b72aac5f9ba0fcf2002c8d131dad49288f1fc6a2cf9d1138215e83e17555d582393941219571a5d2efdf") clock_gettime(0x0, &(0x7f0000003fc0)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000003e80)=[{{&(0x7f0000000300)=@generic, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000b00)=""/230, 0xe6}, {&(0x7f0000000980)=""/133, 0x85}], 0x3, &(0x7f0000000c00)=""/114, 0x72}, 0x8f}, {{&(0x7f0000000c80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000d00)=""/210, 0xd2}, {&(0x7f0000000e00)=""/161, 0xa1}, {&(0x7f0000000ec0)=""/144, 0x90}, {&(0x7f0000000f80)=""/120, 0x78}, {&(0x7f0000001000)=""/82, 0x52}, {&(0x7f0000001080)=""/171, 0xab}, {&(0x7f0000001140)=""/131, 0x83}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x8, &(0x7f0000002280)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000003280)=@xdp, 0x80, &(0x7f0000003800)=[{&(0x7f0000003300)=""/67, 0x43}, {&(0x7f0000003380)=""/220, 0xdc}, {&(0x7f0000003480)=""/237, 0xed}, {&(0x7f00000003c0)=""/42, 0x2a}, {&(0x7f0000003580)=""/123, 0x7b}, {&(0x7f0000003600)=""/117, 0x75}, {0x0}, {&(0x7f0000003780)=""/99, 0x63}], 0x8, &(0x7f0000003880)=""/49, 0x31}, 0x1}, {{&(0x7f00000038c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/94, 0x5e}, {&(0x7f0000003ac0)=""/88, 0x58}], 0x4, &(0x7f0000003bc0)=""/98, 0x62}, 0x5}, {{&(0x7f0000003c40)=@generic, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003cc0)=""/184, 0xb8}], 0x1, &(0x7f0000003dc0)=""/153, 0x99}, 0x1}], 0x5, 0x40000040, &(0x7f0000004000)={r7, r8+60000000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000100)={0x0}) 2m39.835926552s ago: executing program 2 (id=598): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setns(0xffffffffffffffff, 0x20000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0xa}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7d) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0x9, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x40b00) 2m37.467046506s ago: executing program 5 (id=604): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x10) faccessat2(r1, &(0x7f0000000080)='./file0\x00', 0x10, 0x100) (async) futex(&(0x7f000000cffc)=0x6, 0xa, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000340), &(0x7f0000048000)=0x1, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m35.759606154s ago: executing program 5 (id=608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) read$FUSE(r4, &(0x7f0000003780)={0x2020}, 0x2020) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x6, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x6, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x1, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0xb, 0x5, 0x6, 0x47, 0x3, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0x400bb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000004440)={0x0, 0x1, 0x2, 0x1b, 0x7, &(0x7f0000004040)="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"}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0xffffffcf) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x8, &(0x7f0000000a40)="47aaf63e3722d2a83d6b95a71d14ea166ec1bbec3c5baae7afd00a52a3543b68c1bda7e00de23c816f603aba4d37d816b52752b766b487aad71d38b670f6f3b3cc48ed3a5315da46c08b579ac8e19d569f448837157ea3057dc0648ec5c071b72aac5f9ba0fcf2002c8d131dad49288f1fc6a2cf9d1138215e83e17555d582393941219571a5d2efdf") clock_gettime(0x0, &(0x7f0000003fc0)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000003e80)=[{{&(0x7f0000000300)=@generic, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000b00)=""/230, 0xe6}, {&(0x7f0000000980)=""/133, 0x85}], 0x3, &(0x7f0000000c00)=""/114, 0x72}, 0x8f}, {{&(0x7f0000000c80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000d00)=""/210, 0xd2}, {&(0x7f0000000e00)=""/161, 0xa1}, {&(0x7f0000000ec0)=""/144, 0x90}, {&(0x7f0000000f80)=""/120, 0x78}, {&(0x7f0000001000)=""/82, 0x52}, {&(0x7f0000001080)=""/171, 0xab}, {&(0x7f0000001140)=""/131, 0x83}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x8, &(0x7f0000002280)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000003280)=@xdp, 0x80, &(0x7f0000003800)=[{&(0x7f0000003300)=""/67, 0x43}, {&(0x7f0000003380)=""/220, 0xdc}, {&(0x7f0000003480)=""/237, 0xed}, {&(0x7f00000003c0)=""/42, 0x2a}, {&(0x7f0000003580)=""/123, 0x7b}, {&(0x7f0000003600)=""/117, 0x75}, {0x0}, {&(0x7f0000003780)=""/99, 0x63}], 0x8, &(0x7f0000003880)=""/49, 0x31}, 0x1}, {{&(0x7f00000038c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/94, 0x5e}, {&(0x7f0000003ac0)=""/88, 0x58}], 0x4, &(0x7f0000003bc0)=""/98, 0x62}, 0x5}, {{&(0x7f0000003c40)=@generic, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003cc0)=""/184, 0xb8}], 0x1, &(0x7f0000003dc0)=""/153, 0x99}, 0x1}], 0x5, 0x40000040, &(0x7f0000004000)={r7, r8+60000000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000100)={0x0}) 2m35.511394025s ago: executing program 5 (id=609): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setns(0xffffffffffffffff, 0x20000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x30, r3, 0x1, 0x20, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0xa}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7d) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0x9, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x40b00) ioctl$BLKREPORTZONE(r7, 0xc0101282, 0x0) 2m24.803359793s ago: executing program 33 (id=598): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setns(0xffffffffffffffff, 0x20000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0xa}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7d) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0x9, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x40b00) 2m20.253644428s ago: executing program 34 (id=609): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setns(0xffffffffffffffff, 0x20000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x30, r3, 0x1, 0x20, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0xa}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7d) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0x9, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x40b00) ioctl$BLKREPORTZONE(r7, 0xc0101282, 0x0) 2m18.446414436s ago: executing program 3 (id=647): mmap$IORING_OFF_SQ_RING(&(0x7f0000729000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r4, &(0x7f0000001300)='7', 0x1) syz_usb_disconnect(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000008800000240012800c0001006d6163766c616e001400028008000100040000000800090001000000"], 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r9 = socket$inet(0x2, 0xa, 0x20) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2m15.226539411s ago: executing program 3 (id=651): r0 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$ethtool(0x0, r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) semop(0x0, &(0x7f00000001c0)=[{0x3, 0x3, 0x800}, {0x1, 0xbbdd, 0x1000}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x50) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000da4756083b0902a101020102030109021200010000000009040000002a65a800"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7}, 0x60) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$key(0xf, 0x3, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r9, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 2m11.907570486s ago: executing program 3 (id=658): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$snddsp(r1, &(0x7f0000000100)=""/49, 0x31) write$char_usb(r1, &(0x7f0000000040)='p', 0x1) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="704a155790d0d8d740c6df21199e1a38bfb3e63ba2b1678e74d7bf0ce6e436ad3038086fe15058", 0x27}], 0x1, 0x0, 0x0, 0x20008040}, {0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="06c297a3c515e0dc905c63ee7ba506f26ee3f6a85dd132732d91ea5c97cee1035242f2ca513691ade4910cb9af8cad0ee6f6b57adbb219ab8e14645eb058686aab658507245a7adf8f482e4cb97ebdad5e7292b0faa32f663418bc", 0x5b}], 0x1, &(0x7f00000024c0)=[@assoc={0x18, 0x117, 0x4, 0x464}, @iv={0x28, 0x117, 0x2, 0xf, "b664450fc64b60a94a31b85b894e92"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfffffa94}, @op={0x18}], 0x10d0, 0x20000080}, {0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000680)="23d7b8bb1afca0943f7836bcba2090600044", 0x12}, {&(0x7f00000006c0)="0fa9f270e3b2aa118950e94ee5461293b2e51ec0dc94f69a1c8562fffd0b5ad9c54cd78993088002ea9420ff16d5003a4e28a6e0a0deee394a07cb1f39c871f12873d7ee6e45d0d9d177dc480673ac0559d580dcc32743e46d7c3ee9f1273b5f9d135644780909508dff79cdc993b687e2e3f2fb0ff47b18984187460e9f", 0x7e}, {&(0x7f0000000740)="dab7249d7bd6db54baf8aefc8423e450e7c3c6c031d8c90b35c55a1d48bc8b5fc696a1bf983dc6aa3a23089162702cdc1362e967c9205abab70e58ce88adf126bfb0f4a9d88c13565001d3cf6f1fce5f", 0x50}, {&(0x7f00000007c0)="0aefba350849add51fb8a26cb354d06b611f585db55b295579e8cef63643420a0cb9177fd360d626010f1337215e61b56fa8adef481335014c958ca22455f37246dbb8dc6fd808a5b4cc243d9af54ddc92c1c74f3b4c3e8ac3f55804d4bbd5fbf34f0625748140d2918efdb439b528a028aeadcdcc397a727a463a27d06ef4e2b5ef95d8f10909e96dbe49ba624bea387f552c779b3adbfbc1e5db3f4c0fd7af22eccbdcbcfddadf06bfd364f9aec18570455c0e912c", 0xb6}], 0x4, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES32], 0x1c0, 0x40000}], 0x3, 0x40) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000b40)={0x2f, @broadcast, 0x4e24, 0x2, 'sed\x00', 0x518571cd6caa3b71, 0x4, 0x78}, 0x2c) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x2, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0xfffc, 0x0, 0x9, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8002, 0x0, 0xfffc}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x15) sendmsg$NL80211_CMD_DISASSOCIATE(r0, 0x0, 0x2000c894) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000000)={0x9}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x60, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x60}}, 0x0) 2m11.309827551s ago: executing program 0 (id=659): mmap$IORING_OFF_SQ_RING(&(0x7f0000729000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r4, &(0x7f0000001300)='7', 0x1) syz_usb_disconnect(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000008800000240012800c0001006d6163766c616e001400028008000100040000000800090001000000"], 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r9 = socket$inet(0x2, 0xa, 0x20) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2m10.440755782s ago: executing program 3 (id=660): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000004c0)={&(0x7f0000003000)={[{&(0x7f0000000040)="43616b3f391ac969017c81be4fc27b7944282f", 0x13}]}, 0x1, 0x3}, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0xfbffffff, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2m9.815589223s ago: executing program 3 (id=662): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r3}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0xc005) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x10}, 0x20040001) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) 2m5.834552189s ago: executing program 3 (id=665): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setns(0xffffffffffffffff, 0x20000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001ac0)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000040)="dbb3c21480f90ad6bb30da94882a9a73cb650ca9fd3e5c41", 0x18}], 0x1, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r1, r0, r2, r0, r2]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r1]}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r2, r0]}}], 0x100, 0x20000880}}, {{&(0x7f0000001180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000001200)="e1c20886b12c505529adfa8e977269c74f85aab7", 0x14}, {&(0x7f0000001240)="aa97e5b69421336c8c83b1d79a4e29b753023e2d8cb2836192751dfc5c4be081a31412ce6fd29189bb1fd9d721fe08929bd82252b8a24ce74d01cec8fd24ca550563d5adf0a43ae49869bddc6344e05c0cec396d7a9a9b15e4bedff49a722e6d1272525ab8c003255e8bc03c953d32ed9264484849d4cce51f76848a6de07d21930aac8f86544de18e0e193f3d65125a6db0dbca93ac3bf1a80717b557bc99de77e00b0c91d32f7cf1cdce5f592b156f4cf292b8a0f798226d285ab5ffd93f793f9cda73723eb2b563be0c8496c0ed70ae4bf104568c5e8dffb4", 0xda}, {&(0x7f0000001340)="3e0d66b21ab0404f124a7f8461ae4a6049bbf55edb002c923beff0902e453f6bb4b8dbff1e3a75aa32958d2fc40d1e0812a9604c3532d810e9c504584241774373c3d30a2bea1d7685e2bb8022ae303ff248da7c452707f3dd16c69448076f6433ee3e11cdb7dd601ad168b6321f3505d6a0b641b8516629cb90fb4c5003794b42d20bff36aa7ecd91686fe1b5c5f878785a0f35cad6469dc81cafdc", 0x9c}, {&(0x7f0000001400)="2988f3db", 0x4}, {&(0x7f0000001440)="0f715b61e322eeadaee46145b0d6bd22d3f7a6a3d07c3464b2228a2764b37570edc4c6d032fa1cdf07d59a1d8969583eb264d52f5381e1a52155edcdeb6cd834d0d53be0df835b43601306672e400b0f319673b2f886b59fe08d09b92ee9370363ab4a7dab708959d3f3653d745c77e8475190a6f82b4e00b80ce1fdb6ca9c198dd1c1ef644fafd055e5567307773994b5f7a51d8fe1adbfd8dae9834f9bbf630020ef40abe23e6793dc8a062e4d77f8571b10b42491f6971786bc358e6561047ee084832ba757508e2091834367bfc84674d28399b73cddd6bd69b14a4e266fe5875d381d7ffe279ec7", 0xea}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78, 0x14}}, {{&(0x7f0000001780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001800)="3bec9d689e2f70c2a54871fb8fbc3a379bd31cfd0061072d9efbe95132a88c550b", 0x21}, {&(0x7f0000001840)="2e0740bd2d1781c8985592e3", 0xc}], 0x2, &(0x7f0000001a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0xc0}}], 0x3, 0x240040c8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) flock(r6, 0x6) mprotect(&(0x7f0000096000/0x4000)=nil, 0x4000, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x30, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0xa}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) sendto$inet6(r7, &(0x7f00000002c0)='G', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0xfffffffc}, 0x52) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7d) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0x9, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x20000000) 2m3.409979496s ago: executing program 0 (id=668): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800451f001c00680000000290780a010100ac1414aa160090780a0c0102"], 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r5, 0x47be, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f000012a000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x4, 0x60}) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040c91) shutdown(r0, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$packet(0x11, 0x2, 0x300) 2m1.432642215s ago: executing program 0 (id=676): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6e) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020}, 0x2020) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r3, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000002280), &(0x7f00000022c0)=@v3={0x3000000, [{0x1, 0x7}, {0x5, 0x3}], r5}, 0x18, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r7 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8000000, 0x3, 0x2a0, 0x148, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x24, {0x8e1}}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2fc) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m58.448756569s ago: executing program 0 (id=683): r0 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x2, 0x3, 0xff) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) write$binfmt_misc(r2, &(0x7f0000000740)="df44a1b1697d58e8e0000000000000000000000091fce4b98fc871b76dbad911e8e3eac480b34629a7c66ccef63762df9419c1e685212af6a2322493", 0x3c) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="00103d0000003d24e0c30532e0d5230e7d4ba57c568d34937fdaddd93ca9ee926bf917979f9b6eae18a61c937c8316485d8f5728"], &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x401, 0xf40, 0x0, 0x2, 0x3ff, 0x0, 0x4, 0x6, 0x2, 0x0, 0x9, 0x80}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x80000000}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000240)={0x20, 0x31, 0x4c, {0x4c, 0x31, "43263f72b69d71b8736705bf2cec8e942e981cb3b1251d70e41c8f5605bbec947edddf76120c2eab36dba180bbba1da4a650c70015824d20f7fd091a212798d26a362a7a326243d16a8d"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="20136000000077e4f29d9efadf860e4d9c45a6639996c18bda6292afc1fa9d7c7bda100ffb49347e805dd022a749b1e3c974d274907d1998e36be100e4fc42c82ed28b324a3cfe7ef15f144a8522ad13ce07edbc8972c24a213db758660fc1b18b46d05fb196"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000056d000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x40859) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0xb) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000000)={0x40, 0xb, 0x27, "049de30a5046cb395065ac38f0dc6e09cb4a0c2012bc7a0b6480aadf6cb255cbe51a49a194d988"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) 1m54.407756899s ago: executing program 0 (id=690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r0}, 0x18) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x71, 0x7, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8001], 0x2, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m54.020354665s ago: executing program 0 (id=691): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setns(0xffffffffffffffff, 0x20000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001e00), 0x1598, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf253900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8820000280050007000200000014000300d80300000300040000b505000100040b"], 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {r8, r9}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7d) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0x9, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r10, 0x1276, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x40b00) 1m50.33079509s ago: executing program 35 (id=665): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setns(0xffffffffffffffff, 0x20000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001ac0)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000040)="dbb3c21480f90ad6bb30da94882a9a73cb650ca9fd3e5c41", 0x18}], 0x1, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r1, r0, r2, r0, r2]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r1]}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r2, r0]}}], 0x100, 0x20000880}}, {{&(0x7f0000001180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000001200)="e1c20886b12c505529adfa8e977269c74f85aab7", 0x14}, {&(0x7f0000001240)="aa97e5b69421336c8c83b1d79a4e29b753023e2d8cb2836192751dfc5c4be081a31412ce6fd29189bb1fd9d721fe08929bd82252b8a24ce74d01cec8fd24ca550563d5adf0a43ae49869bddc6344e05c0cec396d7a9a9b15e4bedff49a722e6d1272525ab8c003255e8bc03c953d32ed9264484849d4cce51f76848a6de07d21930aac8f86544de18e0e193f3d65125a6db0dbca93ac3bf1a80717b557bc99de77e00b0c91d32f7cf1cdce5f592b156f4cf292b8a0f798226d285ab5ffd93f793f9cda73723eb2b563be0c8496c0ed70ae4bf104568c5e8dffb4", 0xda}, {&(0x7f0000001340)="3e0d66b21ab0404f124a7f8461ae4a6049bbf55edb002c923beff0902e453f6bb4b8dbff1e3a75aa32958d2fc40d1e0812a9604c3532d810e9c504584241774373c3d30a2bea1d7685e2bb8022ae303ff248da7c452707f3dd16c69448076f6433ee3e11cdb7dd601ad168b6321f3505d6a0b641b8516629cb90fb4c5003794b42d20bff36aa7ecd91686fe1b5c5f878785a0f35cad6469dc81cafdc", 0x9c}, {&(0x7f0000001400)="2988f3db", 0x4}, {&(0x7f0000001440)="0f715b61e322eeadaee46145b0d6bd22d3f7a6a3d07c3464b2228a2764b37570edc4c6d032fa1cdf07d59a1d8969583eb264d52f5381e1a52155edcdeb6cd834d0d53be0df835b43601306672e400b0f319673b2f886b59fe08d09b92ee9370363ab4a7dab708959d3f3653d745c77e8475190a6f82b4e00b80ce1fdb6ca9c198dd1c1ef644fafd055e5567307773994b5f7a51d8fe1adbfd8dae9834f9bbf630020ef40abe23e6793dc8a062e4d77f8571b10b42491f6971786bc358e6561047ee084832ba757508e2091834367bfc84674d28399b73cddd6bd69b14a4e266fe5875d381d7ffe279ec7", 0xea}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78, 0x14}}, {{&(0x7f0000001780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001800)="3bec9d689e2f70c2a54871fb8fbc3a379bd31cfd0061072d9efbe95132a88c550b", 0x21}, {&(0x7f0000001840)="2e0740bd2d1781c8985592e3", 0xc}], 0x2, &(0x7f0000001a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0xc0}}], 0x3, 0x240040c8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) flock(r6, 0x6) mprotect(&(0x7f0000096000/0x4000)=nil, 0x4000, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x30, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0xa}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) sendto$inet6(r7, &(0x7f00000002c0)='G', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0xfffffffc}, 0x52) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7d) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0x9, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x20000000) 1m38.715194184s ago: executing program 36 (id=691): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setns(0xffffffffffffffff, 0x20000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001e00), 0x1598, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf253900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8820000280050007000200000014000300d80300000300040000b505000100040b"], 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {r8, r9}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7d) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0x9, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r10, 0x1276, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x40b00) 14.614803089s ago: executing program 4 (id=929): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="280000000400000000000000000000f501000000000000002002"], 0x28) 14.511501492s ago: executing program 4 (id=930): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x80, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x8, @time, {}, {}, @quote}], 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/139, 0xfdef) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) io_uring_setup(0x2c23, &(0x7f0000000000)={0x0, 0xf0e6, 0x2, 0x4, 0xf0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) 13.206346589s ago: executing program 4 (id=932): syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="6c0200001700010000000000000000007f00000100000000000000000000000000006c0000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000044010500ffffffff000000000000000000000000000004d53c0000000a00000000000000000000000000000000000001053500000200ac00030000000100000009000000e0000001000000000000000080000000000004d43c0000000a00000000000000000000000000ffffe00000020435000002020600000000000100000000000000fe80000000000000000000000000003c000004d56c0000000a000000ac1414bb0000000000"], 0x26c}}, 0x0) 12.236844226s ago: executing program 9 (id=934): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) (async) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) alarm(0x1000000) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f00000000c0)=""/50, 0x32) (async) getdents(r4, &(0x7f00000000c0)=""/50, 0x32) getdents(r4, 0xfffffffffffffffd, 0xbb) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1}) (async) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r5, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x8000, 0x2}) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) 12.232712314s ago: executing program 8 (id=935): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x80, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x8, @time, {}, {}, @quote}], 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) read$char_usb(r3, &(0x7f0000000080)=""/139, 0xfdef) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) io_uring_setup(0x2c23, &(0x7f0000000000)={0x0, 0xf0e6, 0x2, 0x4, 0xf0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) 10.740224016s ago: executing program 8 (id=938): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446982, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "8d40adb76aa7c0a7f23c8588fd2db2dc44"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589c", 0xd) r5 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r5, 0x0, 0x0) recvmsg$can_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'dummy0\x00', 0x12f}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xef}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) 9.680253255s ago: executing program 7 (id=941): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x700, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x2000, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) 9.575813281s ago: executing program 7 (id=942): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x80, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x8, @time, {}, {}, @quote}], 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) read$char_usb(r3, &(0x7f0000000080)=""/139, 0xfdef) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) io_uring_setup(0x2c23, &(0x7f0000000000)={0x0, 0xf0e6, 0x2, 0x4, 0xf0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) 8.947581615s ago: executing program 9 (id=943): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket(0x1, 0x803, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087f9, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0x5fa, 0x4004085, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000f40)=0xde, 0x4) 8.871465254s ago: executing program 9 (id=944): mmap$IORING_OFF_SQ_RING(&(0x7f0000729000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r4, &(0x7f0000001300)='7', 0x1) syz_usb_disconnect(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000008800000240012800c0001006d6163766c616e001400028008000100040000000800090001000000"], 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = socket(0x27, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r9 = socket$inet(0x2, 0xa, 0x20) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 8.00716077s ago: executing program 7 (id=945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000200)="66b9800000c00f326635010000000f30b8fb058ec0d9f0660fc77706660f38800a260f23a5360fc7350f01c50f9dcff2aa", 0x31}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="59f51da77d9f7b00"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000003c0)='cpuset.cpus\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000004000070100ddfffffbdbdf25047c0000040000000c00018008001600ac14142cb2505d9ce717eae7fd9ad082397a79b3ba4c68c2b80e8c039f173f3d"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r6 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup2(r7, r7) sendmmsg$unix(r8, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1c0000000000000011007a1fbd000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002"], 0x60}}], 0x1, 0x80) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='-'], 0x27) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r3}}, './cgroup/../file0\x00'}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000100)={0x1000, 0x4000}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, &(0x7f00000002c0), &(0x7f0000000080)=0x4) syz_usb_connect(0x3, 0x51, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c09}}, {0x48, &(0x7f00000001c0)=ANY=[@ANYBLOB="4803db1853edf84f54add219ff91f52b623eb73c81e2ef5eda17410cb773901c577ad3366ddca77bc18df624dec548e823611056caafa7cf0167e2b85f9b52af6883e268b06c3568"]}]}) io_uring_setup(0x5f9d, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r10) 8.006433829s ago: executing program 4 (id=946): socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffff9, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000190001002bbd7000ffdbdf25802090000004000500000000080002"], 0x24}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000004) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20044054) 7.503498198s ago: executing program 8 (id=948): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r3, 0x0, 0x0, 0x36) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) setpgid(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r7 = syz_io_uring_setup(0x49b, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd=r6, 0xa, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r7, 0x3513, 0x217, 0xa1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) tkill(r10, 0x2f) tkill(r10, 0x22) ptrace$peeksig(0x4209, r10, &(0x7f0000000140)={0x9}, &(0x7f0000000000)) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x188, 0x194, 0x194, 0x188, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x74020000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0xf, {0x2}}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00', {}, {}, 0x11, 0x0, 0x44}, 0x88010000, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4, 0x3}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x5, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 6.140328512s ago: executing program 6 (id=950): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) (rerun: 64) socket(0x10, 0x3, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) (async, rerun: 32) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async, rerun: 32) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) (async) r6 = syz_io_uring_setup(0x9d8, &(0x7f0000000080)={0x0, 0x2fe4, 0x10100, 0x3, 0x231, 0x0, r2}, &(0x7f0000000100), 0x0) io_uring_enter(r6, 0x4d10, 0x2, 0x2, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r5, 0x1, 0x0) fchdir(r7) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) (async) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) openat$ptp0(0xffffffffffffff9c, 0x0, 0x111201, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) r8 = io_uring_setup(0x1be, &(0x7f0000000180)={0x0, 0xa884, 0x8888a0cdbdd042a6, 0x1}) io_uring_enter(r8, 0x445f, 0xeaca, 0x43, 0x0, 0x0) (async) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc4c85513, &(0x7f0000000280)={{0x8, 0x4, 0x7, 0x9750}, 0x1, [0xb, 0x7f, 0x2, 0x8000000000000001, 0x4, 0x5, 0x6, 0x2, 0x9e92, 0x7, 0xfff, 0x8000000000000000, 0x235c2611, 0xff, 0x600000000000000, 0xb, 0x4, 0xa, 0x7, 0xfffffffffffffffd, 0xa86f, 0x2, 0x0, 0x9, 0xce6, 0xe, 0x1, 0x8, 0x8, 0x2, 0x1, 0x5, 0xf9b, 0x100000000, 0x4, 0x6a, 0x8, 0x6, 0x9, 0x1, 0x7, 0xfffffffffffffff8, 0x7, 0xbc5, 0x5, 0x2, 0x9, 0x80000000, 0x0, 0xfffffffffffffff9, 0x6, 0x4, 0x0, 0x4, 0x1, 0x8, 0x1, 0x100000001, 0x8f, 0x0, 0xffffffffffffffff, 0x7, 0x1, 0x1000007, 0x3, 0x7fffffffffffffff, 0x81, 0x0, 0x8, 0x7ee0, 0x0, 0x7f, 0x3, 0x4, 0xffffffffffffffff, 0x5, 0x6, 0x2, 0x5, 0xfffffffffffffff7, 0x1, 0x6, 0x2e, 0x4, 0x0, 0x1, 0xac95, 0x6, 0xd085, 0xfffffffffffffffd, 0x5, 0xcc21, 0x8001, 0x0, 0xb, 0xd6a, 0x7, 0x6, 0xfffffffffffffffe, 0x1, 0x7, 0x40, 0x9, 0x7, 0x7, 0x5, 0x5, 0x101, 0x3, 0x7ee, 0x59, 0x5, 0x0, 0x5, 0x1, 0x7, 0x6, 0x5, 0x9, 0xc98c, 0x8, 0x0, 0x5, 0x1, 0x0, 0x8e94, 0x5000000, 0x7]}) close_range(r8, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r10) syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 6.031670295s ago: executing program 8 (id=951): openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1", 0x4}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x1, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x4}, 0x2, 0x99f499b4b67a323b}, {0x3, 0x3, {0x2, 0xff}, {0x0, 0x0, 0x3}, 0xfe, 0x2}], 0x40) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) waitid(0x1, r5, 0x0, 0x8000000a, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000400)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff0000000000007fffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x6e2f, 0x11f9, 0xfff8}, 0x4c, [0x8, 0x8, 0xfffffff7, 0x7f, 0x5, 0x9, 0x7fffffff, 0x0, 0x46, 0x838, 0xffffff0c, 0x3, 0x101, 0x9, 0x2, 0x4, 0x3, 0x4, 0x7ff, 0x2, 0x0, 0x800, 0x6, 0x6, 0x5, 0x10001, 0x7, 0x4, 0x77, 0x8000, 0x7, 0xd, 0x401, 0x7, 0x8, 0xc68b, 0x200, 0xff, 0x1, 0x0, 0x7fffffff, 0x0, 0x59e6, 0x101, 0x2, 0xdb, 0x1, 0xe, 0x9, 0xf, 0x4, 0x1, 0xffffffff, 0x800, 0x7f, 0x9, 0x6, 0x23c2, 0x0, 0xc10d, 0x7, 0x8, 0x2, 0x3], [0x2, 0xc, 0xff, 0x7, 0xa, 0x9, 0x1000, 0x100, 0x3, 0x6, 0x8009, 0x2, 0x4, 0x7, 0x2c85, 0xf77, 0x60, 0xb, 0x1, 0x8, 0x71e4, 0x1, 0x10000, 0x3, 0x9f3, 0x800, 0x0, 0xe842, 0xff6, 0xca, 0x9, 0x7, 0x7, 0x6, 0xa, 0x6, 0xc7, 0x2ff, 0xf, 0x1, 0x550, 0x2, 0x3, 0xb, 0x80000001, 0x0, 0x3d, 0x13d, 0x101, 0x9, 0x10001, 0x9f, 0xe2d9, 0x783, 0x5, 0x0, 0x4, 0x8, 0x3460, 0xffff, 0x8a42, 0x4000, 0x100, 0x1], [0x62e2adfb, 0x9f57, 0x4, 0x3, 0x9e, 0x8, 0x1, 0xfffffff7, 0x1, 0x2, 0x4, 0x4, 0x6, 0x4800000, 0x0, 0x9, 0x7, 0x9, 0x5, 0x5, 0x80000001, 0x7, 0xffff8000, 0x8, 0x3, 0x6, 0x10001, 0xfff, 0x0, 0x8, 0xffff2f9e, 0x9, 0x6, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0x3, 0x690bd85f, 0x7, 0x3, 0x9, 0x200, 0xb3, 0xcf, 0x2, 0x6, 0x0, 0x7fff, 0xc8, 0x8, 0x2, 0x5, 0x100, 0x7ff, 0x2, 0x5, 0x6, 0x4, 0x5, 0xa0, 0x1, 0x7825], [0x3, 0x0, 0x4, 0x6, 0x2, 0xf, 0x5, 0xfffffffd, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x7, 0x7fffffff, 0x3, 0x2, 0x7, 0x9, 0x5, 0x5, 0x2, 0xffffff7f, 0x0, 0x1, 0x5, 0x8, 0xc6d9, 0x631, 0x3ff, 0x4, 0x1, 0x4, 0x5, 0xe, 0xffff, 0x2, 0x7ff, 0x6, 0x10, 0x6, 0x1, 0x6, 0x80000000, 0x3, 0x3, 0x10000, 0x9, 0x2, 0x2, 0x6, 0x2004, 0x3, 0x2, 0x8001, 0x0, 0x5, 0xb9, 0x101, 0x400, 0x22, 0x2, 0x75, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 5.427964651s ago: executing program 4 (id=952): syz_emit_ethernet(0x26, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000003ffffffff460700e008000000bacf15c431d31f7dd442187678f254873ef3c71e369d9359b5d25efb502fb92a7c227f3714fd3203e8b280ba9d935554b2462c80c383d74320aa1392385acb59445360f54faff1c3a18858e0739f18d3330aa6d08200"/115], 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000240)={0x0, 0x0, {0x5, 0x0, 0x4, 0x10000}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x20, 0x80, 0x3ff, 0x3, {{0x2f, 0x4, 0x2, 0x2, 0xbc, 0x67, 0x0, 0xfc, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@ssrr={0x89, 0x13, 0x54, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty]}, @timestamp={0x44, 0x14, 0x66, 0x0, 0x5, [0xfffffff0, 0x5, 0x2, 0x2]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x82, [@empty]}, @end, @cipso={0x86, 0x41, 0x3, [{0x7, 0x9, "e562aa2b44584c"}, {0x1, 0x12, "8f585cd273398e16d10e2f63daa0d27a"}, {0x7, 0x10, "6f1fad56307158b8ff9bcf761414"}, {0x0, 0x4, "e833"}, {0x1, 0xc, "8d525c8eea0f27411c39"}]}, @cipso={0x86, 0x32, 0x1, [{0x7, 0xe, "d0dbee6476da6bb04f83e11e"}, {0x2, 0xe, "b1f5301c6ecb19d9d4a1f4ea"}, {0x6, 0x10, "d333ae552d9e2236f8ba13a698a3"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r2, 0x4, 0x5, 0x6, 0x8, 0x44, @private2, @private1, 0xff60, 0x20, 0xa0d, 0x2}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x9, 0x0) syz_usb_connect(0x1, 0x56, &(0x7f0000000100)=ANY=[@ANYRESDEC=r3], 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 4.753549547s ago: executing program 6 (id=953): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fcntl$setpipe(r0, 0x407, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) write(r9, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "8e426d2034fba240abe5e7d4621ca3762f91ac342b4b2df8f2ca7df37f37b254", "8eca08d354b0700e4e8b5198ce24168f3a9857de390e074045445fd55b28265a", "62fff53f20a17a4ddfd02137eb586d99841d2c2646de2f13808fb860120761d5", "357db8a5cae02691a58ce40ac7bb94a2018cf852edafdfcb4dfbe87c8b3a39f1", "f7f4549076701d9afbd7af12e151f8eaa1f2e8698ee645b3f85524156057b6d1", "4799a15cf1c7112fc129540d", 0x9, 0x1, 0xb, 0x7fffffff, 0x1}}) (async) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2, {0x1}}, 0x18) (async) sendmsg$inet(r2, &(0x7f00000008c0)={0x0, 0xfffffffffffffdd9, &(0x7f0000000880)=[{0x0}, {&(0x7f00000001c0)="8af83b23ee04bd38a02ff31b9da5eb4eafbe22da02e0c1e1f6442dc5a7d86340b59ca0d0a956f39516a16c284689252e", 0x7}], 0x2}, 0x490) 4.659720876s ago: executing program 9 (id=954): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000010"], 0xfdef) 4.47636574s ago: executing program 7 (id=955): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 4.130264645s ago: executing program 6 (id=956): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x80, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x8, @time, {}, {}, @quote}], 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/139, 0xfdef) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) io_uring_setup(0x2c23, &(0x7f0000000000)={0x0, 0xf0e6, 0x2, 0x4, 0xf0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) 3.806453247s ago: executing program 8 (id=957): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0xa8e81) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4e02) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x3, 0x0, 'queue0\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000000c0)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000040)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}, {{&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, 0x0}}], 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) r7 = syz_io_uring_setup(0x65e4, &(0x7f00000000c0)={0x0, 0xce24, 0x2000, 0x1, 0x261}, &(0x7f0000000340)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r7, 0x6f4d, 0xb29d, 0x43, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e80)={0x0, 0x1c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000140)={0x3, 0xffff, 0x46, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 3.475436232s ago: executing program 9 (id=958): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446982, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "8d40adb76aa7c0a7f23c8588fd2db2dc44"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589c", 0xd) r5 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r5, 0x0, 0x0) recvmsg$can_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'dummy0\x00', 0x12f}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x300}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) 3.428567458s ago: executing program 6 (id=959): setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x6, 0x10, 0x1, 0x5}, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b94b740ac0545023a0a0102030109021200010400000009041c0000004a0200"], 0x0) r0 = gettid() r1 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x874fd42a7836ef6b, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0xe1a, &(0x7f0000000240)={0x0, 0xf803, 0x10100, 0x0, 0x229, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4004, 0x0, 0x0, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x614282) read(r9, &(0x7f0000000200)=""/202, 0xca) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)={0x0, 0xd, 0x1a}) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x22, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r10, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r10, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) socket(0xa, 0x5, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}]}, &(0x7f00000002c0)=0x10) 2.104097102s ago: executing program 4 (id=960): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0xc2d0, 0x10000, 0x4001f, 0x105}, &(0x7f0000003000)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x229) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f0000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000ec0)="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", 0x402, r4}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r4}, 0x38) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x4000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7, 0x0, 0x0, 0x4200}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x40001043, r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) splice(r9, 0x0, r6, 0x0, 0x5, 0x0) r12 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_S_EXT_CTRLS(r12, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xfe46ac0cad8edeb8, 0x8000, '\x00', @ptr=0x20001102}}) write$binfmt_misc(r10, &(0x7f00000000c0), 0xfdef) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 2.019648749s ago: executing program 7 (id=961): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup2(r2, r4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000140)={r5, 0x2}, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xfffffff0, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, 0x0}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/psched\x00') preadv(r8, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r9 = inotify_init1(0x800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) inotify_rm_watch(r9, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.699307285s ago: executing program 9 (id=962): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x503301) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r3, &(0x7f0000002200)={0x50, 0x0, r4, {0x7, 0x27, 0x2, 0x1dd880, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r3, &(0x7f0000000100)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004340)="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", 0x2000, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) close_range(0xffffffffffffffff, r2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0x4}) r7 = syz_open_procfs(0x0, 0x0) setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0xfffffffffffffecc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000ff08000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r5, 0xffffffffffffffff, 0x0) 1.220768741s ago: executing program 8 (id=963): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x25, 0x6, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_eeprom={0xb, 0x4, 0x9, 0x8c, "50f45187683cbb534482348aa75ae3a576b8f7927f93b84b854c11d3164b2daaf187ce4b97049e6e202a9c3ef7e711b41f8dcae019285ae689a5fda5dde65f3cbe614243f2ae3af6ef63a1e48e8b831619606bc1fdddee34f8cf5e7dd9bd92f68ae3c31592632bc88717e2a72a57d6a9667f41ef089aa5ec1e0f218ea8497f3d1072a5cfa9b72c82045cf3ca"}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(0xffffffffffffffff, &(0x7f00000003c0)=@x25, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000002010500000000000600000002000008e892f22dd8452698b8f2be32275935ce9af0b7e4c175fe1f688dcd5bf00245037463092561854a579074cc0892d97d4e2c65aa6b1e3a71abc92102daf279"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r9 = dup(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) read$snddsp(r9, &(0x7f0000000100)=""/44, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x0) 255.530159ms ago: executing program 7 (id=964): lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0x7, 0xb, 0x1, 0x6, 0x0}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={r3, @in={{0x2, 0x4e23, @loopback}}}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a86feffff110001ca0399f3e70a0a0f97b9330000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0xd, &(0x7f0000000500)=0x0) io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r7, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x30002, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000340)={0x3, [0x0, 0x0, 0x0]}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) recvmmsg(r9, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}, 0x52f4}], 0x1, 0x122, 0x0) 254.707317ms ago: executing program 6 (id=965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10, 0x71}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x8011) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x57, 0xf}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040841}, 0x20000800) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x57, 0xf}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040841}, 0x20000800) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x218600, 0x6d) (async) r2 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x218600, 0x6d) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000280)={0x40000000, 0x100, "aacf99f25e367a875e76e15ba38bf7b43d120af0f52d64f71a4c95e814fcc0a4", 0x5, 0x9, 0x4, 0x8, 0x7fffffff, 0x6, 0x9, 0x4, [0x5, 0x7ee, 0x10, 0x9]}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe8, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd4, 0x3, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xcc, 0x2, "995707db8f80aa89e9f04e3e59a48f739540a7251dee7a48c2f3e92dda407779890305bedf24eb69ad35cfccd8e607231221f5399484dc48fe9ffa4fd6dee300af22e86037359dffeeafffb0b5489c9e8251366fdc5f15c913d26fd3e3e5def2a6664c7d501e1690fd7b79695d4b099f827095ba152c5a709c53337e938105ade3635fd797126b7732a5186bac643180a39bbb35e414187eb8cd57ac0d859156edcf83903a3a894dac744fc007acf568f5df7f682aeec5a891aebe5bff7b7c3ebb27bff1d82d8d74"}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x43f5a7cbb4ee770) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x20002) ioctl$KDMKTONE(r2, 0x4b30, 0x2) (async) ioctl$KDMKTONE(r2, 0x4b30, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x50, &(0x7f00000005c0)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x50, &(0x7f00000005c0)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000600)={{0x0, 0x9, 0x7fff, 0x1, 0x400, 0x7, 0xc000000000000000, 0x6, 0x4, 0xd66a, 0x9, 0x3, 0x4, 0x7, 0x7ff}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000600)={{0x0, 0x9, 0x7fff, 0x1, 0x400, 0x7, 0xc000000000000000, 0x6, 0x4, 0xd66a, 0x9, 0x3, 0x4, 0x7, 0x7ff}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000680)={{r4, 0x8, 0x4, 0x0, 0xa47, 0x2, 0x9, 0x7f, 0x1, 0x1ff, 0x101, 0x6, 0x2988, 0x4, 0x890}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000680)={{r4, 0x8, 0x4, 0x0, 0xa47, 0x2, 0x9, 0x7f, 0x1, 0x1ff, 0x101, 0x6, 0x2988, 0x4, 0x890}}) r5 = syz_open_dev$loop(&(0x7f0000001680), 0x2, 0x44002) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f00000016c0)) (async) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f00000016c0)) read$FUSE(r2, &(0x7f0000001700)={0x2020, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000003740)={{0x1, 0x1, 0x18, r5, {0x0, 0xee01}}, './file0\x00'}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000003780)={0xb8, 0x0, r6, [{{0x0, 0x1, 0x9, 0x0, 0x9, 0xe, {0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x2, 0x3, 0x55d, 0xfffff4f1, 0x0, 0x2000, 0x5, r8, 0xee00, 0x3, 0x4}}, {0x5, 0x5, 0x9, 0x9, '\'\'@)-}\\\xb5#'}}]}, 0xb8) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000003840)={0x8, {{0xa, 0x4e24, 0x1, @empty, 0x3}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000003840)={0x8, {{0xa, 0x4e24, 0x1, @empty, 0x3}}}, 0x88) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000003900)={0xc0, 0x0, 0x13000}) openat2$dir(0xffffffffffffff9c, &(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)={0x22000, 0x10, 0x5}, 0x18) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)={0x22000, 0x10, 0x5}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000003a00), 0x60002, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000003a40)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x80000000}}) write$khugepaged_scan(r0, &(0x7f0000003a80), 0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000003ac0)={0x9, 0x10, 0x1, 'queue1\x00', 0x2}) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000003b80)={0x2, {0x2, 0xefe2, 0x7, 0x3, 0xaac, 0xf}}) (async) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000003b80)={0x2, {0x2, 0xefe2, 0x7, 0x3, 0xaac, 0xf}}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003c00), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000003cc0)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)={0x3c, r9, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x888c1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003d40)={&(0x7f0000003d00)='xen_mc_entry_alloc\x00', r5}, 0x18) 0s ago: executing program 6 (id=966): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x2}}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x0, 0x0, 0x3, 0x9, 0x8, 0x0, 0x400}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB], 0xb8}}, 0x20000081) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) close(r5) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r7 = socket$inet6(0xa, 0x3, 0x3a) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2060c0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) kernel console output (not intermixed with test programs): =0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 272.345158][ T981] usb 1-1: Manufacturer: syz [ 272.350149][ T981] usb 1-1: SerialNumber: syz [ 272.374757][ T981] usb 1-1: config 0 descriptor?? [ 272.399109][ T981] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 272.420141][ T30] audit: type=1326 audit(1762869998.267:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 272.442975][ T981] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 272.489889][ T30] audit: type=1326 audit(1762869998.267:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 272.558907][ T8581] loop6: detected capacity change from 0 to 524288000 [ 272.601760][ T30] audit: type=1326 audit(1762869998.267:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9bf578df10 code=0x7ffc0000 [ 272.640354][ T8587] loop6: detected capacity change from 524288000 to 0 [ 272.642415][ T8581] ldm_validate_partition_table(): Disk read failed. [ 272.675065][ T8581] Dev loop6: unable to read RDB block 0 [ 272.687396][ T8581] loop6: unable to read partition table [ 272.727555][ T30] audit: type=1326 audit(1762869998.267:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 272.756814][ T8581] loop6: partition table beyond EOD, truncated [ 272.770371][ T8581] loop_reread_partitions: partition scan of loop6 (‰u0AŠ°Ë ) failed (rc=-5) [ 272.809749][ T5920] usb 4-1: USB disconnect, device number 21 [ 273.005410][ T981] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 273.006267][ T8586] chnl_net:caif_netlink_parms(): no params data found [ 273.012392][ T981] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 273.038964][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 273.189371][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 273.208109][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 273.238262][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 273.255214][ T10] usb 5-1: can't read configurations, error -61 [ 273.299475][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 273.307235][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.326003][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.373836][ T8586] bridge_slave_0: entered allmulticast mode [ 273.402418][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 273.416357][ T8586] bridge_slave_0: entered promiscuous mode [ 273.451551][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.474740][ T8586] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.495119][ T8586] bridge_slave_1: entered allmulticast mode [ 273.525381][ T8586] bridge_slave_1: entered promiscuous mode [ 273.590708][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 273.628956][ T981] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 273.639286][ T981] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 273.647012][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 273.647211][ T981] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 273.670457][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 273.693671][ T10] usb 5-1: can't read configurations, error -61 [ 273.704893][ T981] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 273.722734][ T10] usb usb5-port1: attempt power cycle [ 273.788811][ T5845] Bluetooth: hci5: command tx timeout [ 273.805248][ T8586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.860252][ T8586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.003062][ T8586] team0: Port device team_slave_0 added [ 274.030808][ T8586] team0: Port device team_slave_1 added [ 274.038995][ T5929] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 274.108893][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 274.131137][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.138847][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.145380][ T981] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 274.198947][ T981] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 274.206668][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 274.219721][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 274.227870][ T8586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.240468][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 274.248078][ T10] usb 5-1: can't read configurations, error -61 [ 274.249621][ T5929] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 274.257540][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.273416][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.303897][ T8586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.304169][ T981] usb 1-1: USB disconnect, device number 35 [ 274.337966][ T5929] usb 4-1: config 1 has no interface number 0 [ 274.362275][ T5929] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 274.379045][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 274.387714][ T5929] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 274.401467][ T5929] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 274.414171][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 274.415888][ T5929] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 274.429209][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.434684][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 274.437483][ T5929] usb 4-1: Product: syz [ 274.468761][ T5929] usb 4-1: Manufacturer: syz [ 274.473504][ T5929] usb 4-1: SerialNumber: syz [ 274.474775][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 274.487448][ T8586] hsr_slave_0: entered promiscuous mode [ 274.495786][ T10] usb 5-1: can't read configurations, error -61 [ 274.503810][ T8586] hsr_slave_1: entered promiscuous mode [ 274.505477][ T8605] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 274.519184][ T10] usb usb5-port1: unable to enumerate USB device [ 274.526888][ T8586] debugfs: 'hsr0' already exists in 'hsr' [ 274.548958][ T8586] Cannot create hsr debugfs directory [ 274.795828][ T8605] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 274.827281][ T8605] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/file1 [ 275.582339][ T8615] FAULT_INJECTION: forcing a failure. [ 275.582339][ T8615] name failslab, interval 1, probability 0, space 0, times 0 [ 275.749283][ T8586] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.849681][ T8615] CPU: 0 UID: 0 PID: 8615 Comm: syz.0.643 Not tainted syzkaller #0 PREEMPT(full) [ 275.849708][ T8615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.849718][ T8615] Call Trace: [ 275.849725][ T8615] [ 275.849733][ T8615] dump_stack_lvl+0x189/0x250 [ 275.849762][ T8615] ? __pfx____ratelimit+0x10/0x10 [ 275.849806][ T8615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.849828][ T8615] ? __pfx__printk+0x10/0x10 [ 275.849851][ T8615] ? __pfx___might_resched+0x10/0x10 [ 275.849873][ T8615] should_fail_ex+0x414/0x560 [ 275.849903][ T8615] should_failslab+0xa8/0x100 [ 275.849922][ T8615] __kmalloc_noprof+0xcb/0x7f0 [ 275.849944][ T8615] ? process_vm_rw+0x33e/0xaf0 [ 275.849965][ T8615] ? iovec_from_user+0x1ba/0x250 [ 275.849989][ T8615] process_vm_rw+0x33e/0xaf0 [ 275.850021][ T8615] ? __pfx_process_vm_rw+0x10/0x10 [ 275.850040][ T8615] ? rcu_read_lock_any_held+0xb3/0x120 [ 275.850061][ T8615] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 275.850084][ T8615] ? vfs_write+0x956/0xb30 [ 275.850124][ T8615] ? __pfx_vfs_write+0x10/0x10 [ 275.850173][ T8615] ? ksys_write+0x22a/0x250 [ 275.850197][ T8615] ? __pfx_ksys_write+0x10/0x10 [ 275.850222][ T8615] __x64_sys_process_vm_readv+0xe0/0x100 [ 275.850248][ T8615] do_syscall_64+0xfa/0xfa0 [ 275.850270][ T8615] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.850292][ T8615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.850309][ T8615] ? clear_bhb_loop+0x60/0xb0 [ 275.850330][ T8615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.850346][ T8615] RIP: 0033:0x7f47dfb8f6c9 [ 275.850364][ T8615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.850378][ T8615] RSP: 002b:00007f47e0a43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 275.850397][ T8615] RAX: ffffffffffffffda RBX: 00007f47dfde6090 RCX: 00007f47dfb8f6c9 [ 275.850409][ T8615] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000001e2 [ 275.850420][ T8615] RBP: 00007f47e0a43090 R08: 0000000000000286 R09: 0000000000000000 [ 275.850431][ T8615] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 275.850442][ T8615] R13: 00007f47dfde6128 R14: 00007f47dfde6090 R15: 00007f47dff0fa28 [ 275.850471][ T8615] [ 275.868855][ T5845] Bluetooth: hci5: command tx timeout [ 276.153997][ T8586] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.208242][ T8586] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.265633][ T8586] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.513757][ T8586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.551495][ T8586] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.633308][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.640498][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.723683][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.730932][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.887395][ T8635] fuse: Bad value for 'fd' [ 277.000217][ T8586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.271941][ T8586] veth0_vlan: entered promiscuous mode [ 277.281567][ T5929] usb 4-1: Error in usbnet_get_endpoints (-71) [ 277.370449][ T8586] veth1_vlan: entered promiscuous mode [ 277.390293][ T5929] usb 4-1: USB disconnect, device number 22 [ 277.512112][ T8586] veth0_macvtap: entered promiscuous mode [ 277.572095][ T8586] veth1_macvtap: entered promiscuous mode [ 277.627301][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.662660][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.672752][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.695273][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.707726][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.715950][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.804867][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.090849][ T8644] netlink: 'syz.3.647': attribute type 4 has an invalid length. [ 278.140930][ T8643] netlink: 'syz.3.647': attribute type 4 has an invalid length. [ 278.188739][ T5845] Bluetooth: hci5: command tx timeout [ 278.438103][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.680971][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.869391][ T147] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.157880][ T147] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.231375][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.272833][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.328829][ T981] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 279.577743][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.596150][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.808887][ T981] usb 5-1: device descriptor read/64, error -71 [ 279.815390][ T5845] Bluetooth: hci6: command tx timeout [ 280.059708][ T981] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 280.146134][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.258906][ T5845] Bluetooth: hci5: command tx timeout [ 280.307374][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.368900][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 280.389169][ T981] usb 5-1: descriptor type invalid, skip [ 280.395969][ T981] usb 5-1: config 0 has no interfaces? [ 280.411596][ T981] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 280.431486][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.464574][ T981] usb 5-1: Product: syz [ 280.471117][ T981] usb 5-1: Manufacturer: syz [ 280.479367][ T981] usb 5-1: SerialNumber: syz [ 280.503695][ T981] usb 5-1: config 0 descriptor?? [ 280.722596][ T5918] usb 5-1: USB disconnect, device number 37 [ 280.822792][ T8641] chnl_net:caif_netlink_parms(): no params data found [ 281.040110][ T981] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 281.198795][ T43] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 281.218978][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 281.232480][ T981] usb 4-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 2.01 [ 281.299471][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.428781][ T981] usb 4-1: Product: syz [ 281.441952][ T981] usb 4-1: Manufacturer: syz [ 281.447735][ T43] usb 7-1: config 0 has no interfaces? [ 281.455782][ T43] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 281.468538][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.469372][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.528763][ T43] usb 7-1: Product: syz [ 281.543327][ T981] usb 4-1: SerialNumber: syz [ 281.586982][ T43] usb 7-1: Manufacturer: syz [ 281.616491][ T981] usb 4-1: config 0 descriptor?? [ 281.621617][ T43] usb 7-1: SerialNumber: syz [ 281.652802][ T43] usb 7-1: config 0 descriptor?? [ 281.858844][ T5845] Bluetooth: hci6: command tx timeout [ 281.875344][ T8660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.949220][ T8660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.049774][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 282.281402][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.345901][ T8641] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.587764][ T8641] bridge_slave_0: entered allmulticast mode [ 282.693740][ T8641] bridge_slave_0: entered promiscuous mode [ 282.884060][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.918945][ T8641] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.939009][ T8641] bridge_slave_1: entered allmulticast mode [ 282.947376][ T8641] bridge_slave_1: entered promiscuous mode [ 283.041894][ T10] usb 4-1: USB disconnect, device number 23 [ 283.177938][ T8641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.307117][ T8641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.733870][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 283.733885][ T30] audit: type=1326 audit(1762870010.177:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 283.838407][ T981] usb 7-1: USB disconnect, device number 2 [ 283.873877][ T30] audit: type=1326 audit(1762870010.207:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f800e18de17 code=0x7ffc0000 [ 283.938958][ T5845] Bluetooth: hci6: command tx timeout [ 284.091394][ T30] audit: type=1326 audit(1762870010.207:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 284.171016][ T30] audit: type=1326 audit(1762870010.217:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 284.197193][ T8641] team0: Port device team_slave_0 added [ 284.205998][ T8641] team0: Port device team_slave_1 added [ 284.328224][ T8702] fuse: Bad value for 'fd' [ 284.522969][ T30] audit: type=1326 audit(1762870010.217:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 284.575511][ T30] audit: type=1326 audit(1762870010.217:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 284.608597][ T8641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.627047][ T30] audit: type=1326 audit(1762870010.217:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 284.690955][ T8641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.698860][ T30] audit: type=1326 audit(1762870010.237:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 284.972337][ T30] audit: type=1326 audit(1762870010.237:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 285.008746][ T8641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.056254][ T30] audit: type=1326 audit(1762870010.247:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 285.138753][ T8641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.207493][ T8641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.358905][ T8641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.670506][ T8706] loop2: detected capacity change from 0 to 7 [ 285.710047][ T8706] Dev loop2: unable to read RDB block 7 [ 285.720511][ T8706] loop2: unable to read partition table [ 285.770345][ T8641] hsr_slave_0: entered promiscuous mode [ 285.779340][ T8706] loop2: partition table beyond EOD, truncated [ 285.798317][ T8641] hsr_slave_1: entered promiscuous mode [ 285.805883][ T8706] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 285.832023][ T8641] debugfs: 'hsr0' already exists in 'hsr' [ 285.837807][ T8641] Cannot create hsr debugfs directory [ 286.018908][ T5845] Bluetooth: hci6: command tx timeout [ 286.502146][ T8711] netlink: 'syz.0.659': attribute type 4 has an invalid length. [ 286.778872][ T5918] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 286.889769][ T8725] netlink: 'syz.0.659': attribute type 4 has an invalid length. [ 287.048062][ T5918] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 287.078138][ T8728] netlink: 'syz.4.664': attribute type 2 has an invalid length. [ 287.105450][ T5918] usb 4-1: config 0 has no interface number 0 [ 287.138160][ T5918] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 287.211555][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.236340][ T5918] usb 4-1: Product: syz [ 287.266192][ T5918] usb 4-1: Manufacturer: syz [ 287.536387][ T5918] usb 4-1: SerialNumber: syz [ 287.554136][ T5918] usb 4-1: config 0 descriptor?? [ 288.700822][ T8641] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 288.995011][ T8641] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 289.137421][ T8641] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 289.254698][ T8641] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 289.674603][ T5918] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 289.706585][ T5918] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 289.749124][ T5918] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 289.840132][ T5918] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 289.959625][ T5918] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 289.998817][ T5918] usb 4-1: USB disconnect, device number 24 [ 290.101800][ T5918] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 290.138230][ T8641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.149725][ T5918] keyspan 4-1:0.133: device disconnected [ 290.228199][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 290.228216][ T30] audit: type=1326 audit(1762870016.657:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 290.253271][ T8641] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.277844][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.285149][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.326499][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.333653][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.544456][ T30] audit: type=1326 audit(1762870016.657:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 290.605725][ T8641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.786901][ T30] audit: type=1326 audit(1762870016.667:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 290.909390][ T30] audit: type=1326 audit(1762870016.667:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 290.994616][ T30] audit: type=1326 audit(1762870016.667:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 291.046962][ T30] audit: type=1326 audit(1762870016.667:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 291.085688][ T30] audit: type=1326 audit(1762870016.667:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 291.109667][ T30] audit: type=1326 audit(1762870016.667:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 291.139397][ T30] audit: type=1326 audit(1762870016.667:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 291.141065][ T8641] veth0_vlan: entered promiscuous mode [ 291.200044][ T30] audit: type=1326 audit(1762870016.667:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578f6c9 code=0x7ffc0000 [ 291.505698][ T8641] veth1_vlan: entered promiscuous mode [ 291.577627][ T8641] veth0_macvtap: entered promiscuous mode [ 291.627309][ T8641] veth1_macvtap: entered promiscuous mode [ 291.688366][ T8641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.744469][ T8641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.776368][ T1094] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.796066][ T1094] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.855014][ T1094] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.864229][ T1094] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.961440][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.987300][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.127977][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.195967][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.988930][ T8780] Cannot find set identified by id 3 to match [ 294.949733][ T8790] fuse: Bad value for 'fd' [ 295.063252][ T8792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.729841][ T8798] netlink: 'syz.7.678': attribute type 4 has an invalid length. [ 295.745683][ T8798] netlink: 'syz.7.678': attribute type 4 has an invalid length. [ 297.178830][ T5904] IPVS: starting estimator thread 0... [ 297.220896][ T8815] input: syz1 as /devices/virtual/input/input21 [ 297.412562][ T8813] IPVS: using max 32 ests per chain, 76800 per kthread [ 297.525374][ T8810] binder: 8805:8810 ioctl c0306201 0 returned -14 [ 297.868816][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 298.059265][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 298.075323][ T10] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 298.105644][ T10] usb 1-1: config 0 has no interface number 0 [ 298.125891][ T10] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 298.162410][ T10] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 298.207706][ T10] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 298.229199][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.257069][ T10] usb 1-1: Product: syz [ 298.268744][ T10] usb 1-1: Manufacturer: syz [ 298.288886][ T10] usb 1-1: SerialNumber: syz [ 298.329465][ T10] usb 1-1: config 0 descriptor?? [ 298.353432][ T8818] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 298.378951][ T8818] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 298.770115][ T8818] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 298.777429][ T8818] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 298.895033][ T8825] netlink: 16 bytes leftover after parsing attributes in process `syz.6.685'. [ 299.552567][ T10] asix 1-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0xe4 [ 299.645346][ T8810] syz.4.681 (8810): drop_caches: 2 [ 300.124967][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.686'. [ 300.269319][ T8838] Cannot find set identified by id 3 to match [ 301.121496][ T8845] netlink: 16 bytes leftover after parsing attributes in process `syz.6.689'. [ 301.130669][ T8845] netlink: 'syz.6.689': attribute type 13 has an invalid length. [ 301.256350][ T8845] netlink: 20 bytes leftover after parsing attributes in process `syz.6.689'. [ 301.400783][ T24] usb 1-1: USB disconnect, device number 36 [ 301.460503][ T8845] bond1: entered promiscuous mode [ 302.041330][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 302.041344][ T30] audit: type=1326 audit(1762870028.457:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dfb8f6c9 code=0x7ffc0000 [ 302.069558][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.226175][ T30] audit: type=1326 audit(1762870028.457:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dfb8f6c9 code=0x7ffc0000 [ 302.598815][ T30] audit: type=1326 audit(1762870028.737:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f47dfb8f6c9 code=0x7ffc0000 [ 302.621045][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.727913][ T30] audit: type=1326 audit(1762870028.737:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dfb8f6c9 code=0x7ffc0000 [ 302.796785][ T30] audit: type=1326 audit(1762870028.737:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dfb8f6c9 code=0x7ffc0000 [ 302.936475][ T8863] fuse: Bad value for 'fd' [ 303.183365][ T30] audit: type=1326 audit(1762870028.737:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dfb8f6c9 code=0x7ffc0000 [ 303.205565][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.562394][ T30] audit: type=1326 audit(1762870028.737:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dfb8f6c9 code=0x7ffc0000 [ 303.584753][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.732807][ T30] audit: type=1326 audit(1762870028.747:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47dfb8f6c9 code=0x7ffc0000 [ 303.754957][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.825710][ T30] audit: type=1326 audit(1762870028.747:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dfb8f6c9 code=0x7ffc0000 [ 303.909034][ T30] audit: type=1326 audit(1762870028.747:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f47dfb8f6c9 code=0x7ffc0000 [ 304.747148][ T5904] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 305.105377][ T8883] netlink: 16 bytes leftover after parsing attributes in process `syz.6.698'. [ 305.160682][ T5904] usb 8-1: unable to get BOS descriptor or descriptor too short [ 305.172332][ T5904] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1471, setting to 1024 [ 305.189033][ T5904] usb 8-1: config 1 interface 1 has no altsetting 0 [ 305.212048][ T5904] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.234419][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.255079][ T5904] usb 8-1: Product: syz [ 305.266186][ T5904] usb 8-1: Manufacturer: syz [ 305.301730][ T5904] usb 8-1: SerialNumber: syz [ 305.591159][ T8870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.626032][ T8870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.647856][ T8886] netlink: 'syz.4.697': attribute type 4 has an invalid length. [ 306.320025][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.407987][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.422858][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.456069][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.476254][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.428271][ T8890] chnl_net:caif_netlink_parms(): no params data found [ 308.053750][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.061257][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.077740][ T8890] bridge_slave_0: entered allmulticast mode [ 308.102656][ T8890] bridge_slave_0: entered promiscuous mode [ 308.140114][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.325823][ T5904] usb 8-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 308.351547][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.379029][ T8890] bridge_slave_1: entered allmulticast mode [ 308.417122][ T8890] bridge_slave_1: entered promiscuous mode [ 308.459048][ T5904] usb 8-1: 2:1 : unsupported sample bitwidth 8 in 255 bytes [ 308.567224][ T5904] usb 8-1: USB disconnect, device number 2 [ 308.578899][ T52] Bluetooth: hci7: command tx timeout [ 308.785858][ T8890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.820310][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.892705][ T8890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.018918][ T5904] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 309.180385][ T8890] team0: Port device team_slave_0 added [ 309.187968][ T8890] team0: Port device team_slave_1 added [ 309.195479][ T5904] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 309.232004][ T5904] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 309.249028][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 309.277130][ T5904] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 309.324699][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.345074][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.373743][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.424822][ T8890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.426255][ T8912] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 309.438063][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.469083][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 309.473070][ T8912] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 309.511832][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.530785][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 309.560945][ T5904] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 309.569631][ T8890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.575217][ T10] usb 5-1: config 1 has an invalid interface number: 125 but max is 0 [ 309.626307][ T10] usb 5-1: config 1 has no interface number 0 [ 309.679832][ T10] usb 5-1: config 1 interface 125 has no altsetting 0 [ 309.722246][ T10] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=3c.51 [ 309.748513][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.820750][ T10] usb 5-1: Product: syz [ 309.825876][ T10] usb 5-1: Manufacturer: syz [ 309.876407][ T5920] usb 8-1: USB disconnect, device number 3 [ 309.882896][ T10] usb 5-1: SerialNumber: syz [ 309.984988][ T8890] hsr_slave_0: entered promiscuous mode [ 310.013934][ T8890] hsr_slave_1: entered promiscuous mode [ 310.045421][ T8890] debugfs: 'hsr0' already exists in 'hsr' [ 310.068901][ T8890] Cannot create hsr debugfs directory [ 310.659023][ T52] Bluetooth: hci7: command tx timeout [ 310.683908][ T10] qmi_wwan 5-1:1.125: probe with driver qmi_wwan failed with error -22 [ 310.714784][ T10] usb 5-1: USB disconnect, device number 38 [ 311.075669][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 311.075687][ T30] audit: type=1326 audit(1762870037.477:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.7.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fb8f6c9 code=0x7ffc0000 [ 311.104250][ T30] audit: type=1326 audit(1762870037.487:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.7.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f982fb8f6c9 code=0x7ffc0000 [ 311.140019][ T30] audit: type=1326 audit(1762870037.487:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.7.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fb8f6c9 code=0x7ffc0000 [ 311.191768][ T30] audit: type=1326 audit(1762870037.487:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.7.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f982fb8f6c9 code=0x7ffc0000 [ 311.240469][ T8890] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 311.296480][ T30] audit: type=1326 audit(1762870037.487:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.7.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fb8f6c9 code=0x7ffc0000 [ 311.348013][ T8890] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 311.458158][ T8890] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 311.470574][ T30] audit: type=1326 audit(1762870037.487:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.7.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fb8f6c9 code=0x7ffc0000 [ 311.554657][ T8890] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 311.749714][ T30] audit: type=1326 audit(1762870037.487:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.7.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f982fb8f6c9 code=0x7ffc0000 [ 311.808828][ T30] audit: type=1326 audit(1762870037.487:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.7.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fb8f6c9 code=0x7ffc0000 [ 311.904489][ T30] audit: type=1326 audit(1762870037.497:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.7.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f982fb8f6c9 code=0x7ffc0000 [ 311.987429][ T30] audit: type=1326 audit(1762870037.497:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.7.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982fb8f6c9 code=0x7ffc0000 [ 312.009796][ T5890] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 312.158870][ T5890] usb 7-1: Using ep0 maxpacket: 8 [ 312.170129][ T5890] usb 7-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 312.187514][ T5890] usb 7-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 312.218929][ T5890] usb 7-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 312.248835][ T5890] usb 7-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 312.296264][ T5890] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 312.313664][ T8949] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[8949] [ 312.348898][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.367281][ T5890] usb 7-1: Product: syz [ 312.377592][ T5890] usb 7-1: Manufacturer: syz [ 312.405103][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 312.414331][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 312.434550][ T5890] usb 7-1: SerialNumber: syz [ 312.506642][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.645539][ T5890] hso 7-1:6.0: Can't find BULK OUT endpoint [ 312.733740][ T8890] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.758835][ T52] Bluetooth: hci7: command tx timeout [ 312.801140][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.808364][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.939503][ T8944] bond2: entered promiscuous mode [ 312.944993][ T8944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.961845][ T5904] usb 7-1: USB disconnect, device number 3 [ 313.012107][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.019269][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.465522][ T8890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.705023][ T8959] fuse: Bad value for 'group_id' [ 313.755783][ T8959] fuse: Bad value for 'group_id' [ 314.008560][ T8890] veth0_vlan: entered promiscuous mode [ 314.057535][ T8890] veth1_vlan: entered promiscuous mode [ 314.273260][ T8963] netlink: 'syz.6.713': attribute type 4 has an invalid length. [ 314.594553][ T8890] veth0_macvtap: entered promiscuous mode [ 314.762831][ T8890] veth1_macvtap: entered promiscuous mode [ 314.819519][ T52] Bluetooth: hci7: command tx timeout [ 314.965553][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.977159][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.040803][ T1094] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.052266][ T1094] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.310939][ T1094] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.807668][ T8976] netlink: 16 bytes leftover after parsing attributes in process `syz.7.716'. [ 315.817055][ T8976] netlink: 36 bytes leftover after parsing attributes in process `syz.7.716'. [ 316.078917][ T8976] bond1: entered promiscuous mode [ 316.113197][ T75] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.386288][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.428504][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.701381][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.712337][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.858925][ T8988] misc userio: The device must be registered before sending interrupts [ 317.045820][ T8991] Cannot find set identified by id 3 to match [ 317.159168][ T43] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 317.304059][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.310803][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.331162][ T43] usb 5-1: No LPM exit latency info found, disabling LPM. [ 317.341588][ T43] usb 5-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 317.359524][ T43] usb 5-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 317.427762][ T43] usb 5-1: config 1 interface 0 has no altsetting 0 [ 317.475051][ T43] usb 5-1: string descriptor 0 read error: -22 [ 317.484763][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 317.522797][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.567083][ T8988] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 317.601703][ T8988] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 317.914822][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.718'. [ 318.238208][ T5845] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 318.330480][ T5845] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 318.344708][ T5845] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 318.361482][ T5845] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 318.370168][ T5845] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 319.184241][ T9008] ptrace attach of "./syz-executor exec"[8890] was attempted by "./syz-executor exec"[9008] [ 319.266033][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.8.720'. [ 319.275230][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.8.720'. [ 319.597821][ T9002] chnl_net:caif_netlink_parms(): no params data found [ 319.719096][ T43] usb 5-1: USB disconnect, device number 39 [ 320.112195][ T9020] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20001 [ 320.425007][ T5845] Bluetooth: hci8: command tx timeout [ 321.038977][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.046172][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.077696][ T9002] bridge_slave_0: entered allmulticast mode [ 321.180320][ T9002] bridge_slave_0: entered promiscuous mode [ 321.260772][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.282377][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.303278][ T9031] loop2: detected capacity change from 0 to 7 [ 321.322377][ T9002] bridge_slave_1: entered allmulticast mode [ 321.348962][ T9031] Dev loop2: unable to read RDB block 7 [ 321.359356][ T9002] bridge_slave_1: entered promiscuous mode [ 321.389512][ T9031] loop2: unable to read partition table [ 321.437677][ T9031] loop2: partition table beyond EOD, truncated [ 321.489014][ T9031] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 321.552604][ T9033] tipc: Started in network mode [ 321.557532][ T9033] tipc: Node identity e2c6cc6257af, cluster identity 4711 [ 321.565154][ T9033] tipc: Enabled bearer , priority 0 [ 321.579509][ T9034] syzkaller0: entered promiscuous mode [ 321.585029][ T9034] syzkaller0: entered allmulticast mode [ 321.851557][ T9002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.005821][ T9043] loop9: detected capacity change from 0 to 7 [ 322.118034][ T9045] netlink: 'syz.4.729': attribute type 10 has an invalid length. [ 322.126598][ T9043] Dev loop9: unable to read RDB block 7 [ 322.132544][ T9043] loop9: unable to read partition table [ 322.150682][ T9043] loop9: partition table beyond EOD, truncated [ 322.159008][ T9043] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 322.300188][ T9032] tipc: Resetting bearer [ 322.439781][ T9002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.544241][ T5845] Bluetooth: hci8: command tx timeout [ 322.680417][ T10] tipc: Node number set to 3043609698 [ 322.978551][ T9029] tipc: Resetting bearer [ 323.006569][ T9029] tipc: Disabling bearer [ 323.263090][ T9002] team0: Port device team_slave_0 added [ 323.463863][ T9055] netlink: 'syz.6.730': attribute type 4 has an invalid length. [ 323.530747][ T9002] team0: Port device team_slave_1 added [ 324.119811][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.161267][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.187201][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.389193][ T9002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.559560][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.566547][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.614057][ T5845] Bluetooth: hci8: command tx timeout [ 324.659322][ T9002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.166986][ T9002] hsr_slave_0: entered promiscuous mode [ 325.253391][ T9002] hsr_slave_1: entered promiscuous mode [ 325.316778][ T9002] debugfs: 'hsr0' already exists in 'hsr' [ 325.343255][ T9002] Cannot create hsr debugfs directory [ 325.948899][ T5890] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 326.172423][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 326.195085][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 326.230289][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 326.330107][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.363606][ T5890] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 326.375933][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.432959][ T5890] usb 5-1: Product: syz [ 326.453850][ T5890] usb 5-1: Manufacturer: syz [ 326.483623][ T5890] usb 5-1: SerialNumber: syz [ 326.635065][ T5890] usb 5-1: config 0 descriptor?? [ 326.661683][ T9075] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 326.708933][ T43] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 326.759000][ T5845] Bluetooth: hci8: command tx timeout [ 326.910328][ T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.936511][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.966898][ T43] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 327.098815][ T5890] rc_core: IR keymap rc-imon-rsc not found [ 327.114336][ T9081] usb usb8: usbfs: process 9081 (syz.4.735) did not claim interface 4 before use [ 327.288863][ T5890] Registered IR keymap rc-empty [ 327.315354][ T5890] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 327.464259][ T43] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.475505][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.498737][ T43] usb 7-1: Product: ဌ [ 327.502966][ T43] usb 7-1: Manufacturer: †[ 327.517850][ T43] usb 7-1: SerialNumber: ꒹岓뜙딺矉ឧ誯㥑猛ᜄ㣉㜞޲栩㙇厯ã½â½¬ç½‘掹Ᶎᎌ찆â±îˆ™é«ï•—匡Ῠ෕ⵉî¤áŸ˜èƒ²ç° ë–¿á ’ᮭ뀛爆ด眪ো㎭ [ 327.582645][ T5890] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 327.658789][ T9002] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 327.691323][ T9083] loop2: detected capacity change from 0 to 7 [ 327.765812][ T6298] Dev loop2: unable to read RDB block 7 [ 327.769057][ T9002] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 327.962425][ T43] usb 7-1: 0:2 : does not exist [ 327.985450][ T9002] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 328.002545][ T6298] loop2: unable to read partition table [ 328.029853][ T6298] loop2: partition table beyond EOD, truncated [ 328.093589][ T43] usb 7-1: USB disconnect, device number 4 [ 328.305270][ T9002] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 328.409242][ T9083] Dev loop2: unable to read RDB block 7 [ 328.414899][ T9083] loop2: unable to read partition table [ 328.510478][ T9083] loop2: partition table beyond EOD, truncated [ 328.535209][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.584054][ T9083] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 329.813853][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.937213][ T9002] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.958845][ T9097] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20001 [ 330.032880][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.040138][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.129242][ T10] usb 5-1: USB disconnect, device number 40 [ 330.280028][ T9102] fuse: Bad value for 'fd' [ 330.558524][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.565714][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.818625][ T9106] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 330.825372][ T9106] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 330.892985][ T9106] vhci_hcd vhci_hcd.0: Device attached [ 331.076983][ T9108] vhci_hcd: connection closed [ 331.093104][ T9002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.104809][ T1106] vhci_hcd: stop threads [ 331.135496][ T1106] vhci_hcd: release socket [ 331.178815][ T1106] vhci_hcd: disconnect device [ 331.360514][ T9002] veth0_vlan: entered promiscuous mode [ 331.452847][ T9002] veth1_vlan: entered promiscuous mode [ 331.591350][ T9002] veth0_macvtap: entered promiscuous mode [ 331.641224][ T9002] veth1_macvtap: entered promiscuous mode [ 331.796796][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.022845][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.319553][ T1094] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.338663][ T1094] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.369143][ T5918] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 332.510294][ T9124] netlink: 'syz.6.745': attribute type 4 has an invalid length. [ 332.573102][ T1094] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.598903][ T1094] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.692403][ T5918] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 332.708837][ T5918] usb 5-1: config 0 has an invalid interface number: 5 but max is 2 [ 332.828912][ T5918] usb 5-1: config 0 has no interface number 0 [ 332.835227][ T5918] usb 5-1: config 0 has no interface number 1 [ 332.878860][ T5918] usb 5-1: too many endpoints for config 0 interface 5 altsetting 255: 255, using maximum allowed: 30 [ 332.951180][ T5918] usb 5-1: config 0 interface 5 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 333.037816][ T5918] usb 5-1: config 0 interface 5 has no altsetting 0 [ 333.113475][ T5918] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 333.114277][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.164683][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.241621][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.265858][ T5918] usb 5-1: config 0 descriptor?? [ 333.343797][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.368248][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.379433][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.7.747'. [ 333.702106][ T147] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.745878][ T147] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.930619][ T147] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.959742][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.003301][ T147] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.250468][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.443058][ T5918] usb 5-1: Could not set interface, error -71 [ 334.516414][ T5918] usb 5-1: selecting invalid altsetting 0 [ 334.540785][ T5918] usb 5-1: Could not set interface, error -22 [ 334.591965][ T5918] usb 5-1: USB disconnect, device number 41 [ 335.579502][ T9145] loop2: detected capacity change from 0 to 7 [ 335.685131][ T9145] Dev loop2: unable to read RDB block 7 [ 335.751160][ T9145] loop2: unable to read partition table [ 335.878805][ T5918] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 336.061465][ T9145] loop2: partition table beyond EOD, truncated [ 336.114425][ T9145] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 336.361691][ T5918] usb 10-1: device descriptor read/64, error -71 [ 336.639200][ T5918] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 336.756403][ T9153] fuse: Bad value for 'fd' [ 336.835248][ T5918] usb 10-1: device descriptor read/64, error -71 [ 337.039464][ T5918] usb usb10-port1: attempt power cycle [ 337.438830][ T5918] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 337.740482][ T5918] usb 10-1: device descriptor read/8, error -71 [ 338.249647][ T5918] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 338.271460][ T5918] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.271479][ T5918] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 338.271489][ T5918] usb 10-1: config 1 has no interface number 0 [ 338.271511][ T5918] usb 10-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.273659][ T5918] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.273679][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.273689][ T5918] usb 10-1: Product: syz [ 338.273697][ T5918] usb 10-1: Manufacturer: syz [ 338.273705][ T5918] usb 10-1: SerialNumber: syz [ 338.354580][ T5918] cdc_ncm 10-1:1.1: NCM or ECM functional descriptors missing [ 338.354611][ T5918] cdc_ncm 10-1:1.1: bind() failure [ 338.673129][ T1213] usb 10-1: USB disconnect, device number 5 [ 339.141569][ T9184] macsec1: entered promiscuous mode [ 340.257721][ T9192] netlink: 'syz.9.761': attribute type 4 has an invalid length. [ 341.164942][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 341.572160][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 341.711134][ T9213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.729335][ T5904] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 341.908788][ T5918] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 341.952639][ T5904] usb 9-1: Using ep0 maxpacket: 8 [ 342.129127][ T5904] usb 9-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 342.144915][ T5918] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 342.186206][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.216624][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.290359][ T5918] usb 5-1: config 0 descriptor?? [ 342.295430][ T5904] usb 9-1: Product: syz [ 342.300921][ T5904] usb 9-1: Manufacturer: syz [ 342.307897][ T5904] usb 9-1: SerialNumber: syz [ 342.314535][ T5918] pwc: Philips SPC 900NC USB webcam detected. [ 342.323930][ T5904] usb 9-1: config 0 descriptor?? [ 342.333733][ T5904] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 342.717484][ T9213] bond1: option min_links: invalid value (18446744073709551610) [ 342.782831][ T9213] bond1: option min_links: allowed values 0 - 2147483647 [ 342.826680][ T5918] pwc: send_video_command error -71 [ 342.861336][ T5918] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 342.945200][ T5904] gspca_vc032x: reg_r err -71 [ 342.954607][ T5904] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 342.989649][ T5918] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 343.005334][ T5904] usb 9-1: USB disconnect, device number 2 [ 343.081697][ T5918] usb 5-1: USB disconnect, device number 43 [ 343.471614][ T9228] cgroup: fork rejected by pids controller in /syz7 [ 344.607540][ T9354] Cannot find set identified by id 3 to match [ 344.873320][ T1162] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.914000][ T1162] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.950662][ T9357] netlink: 'syz.8.780': attribute type 4 has an invalid length. [ 345.124842][ T9361] netlink: 'syz.6.782': attribute type 2 has an invalid length. [ 345.301535][ T1162] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.500559][ T1162] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.667329][ T1162] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.767500][ T1162] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.095689][ T1162] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.245544][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 346.301942][ T1162] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.316013][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 346.324571][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 346.332710][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 346.340603][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 348.093816][ T1162] bridge_slave_1: left allmulticast mode [ 348.129678][ T1162] bridge_slave_1: left promiscuous mode [ 348.135566][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.152598][ T1162] bridge_slave_0: left allmulticast mode [ 348.158388][ T1162] bridge_slave_0: left promiscuous mode [ 348.166929][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.188984][ T5920] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 348.419100][ T52] Bluetooth: hci6: command tx timeout [ 348.709417][ T5920] usb 10-1: Using ep0 maxpacket: 8 [ 348.727932][ T5920] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 348.809364][ T5920] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.829888][ T5920] usb 10-1: Product: syz [ 348.837600][ T5920] usb 10-1: Manufacturer: syz [ 348.856326][ T5920] usb 10-1: SerialNumber: syz [ 348.888946][ T5920] usb 10-1: config 0 descriptor?? [ 348.925928][ T5920] gspca_main: sq930x-2.14.0 probing 2770:930c [ 349.719942][ T5920] gspca_sq930x: ucbus_write failed -71 [ 349.939407][ T5920] gspca_sq930x: Sensor ov9630 not yet treated [ 349.945953][ T5920] sq930x 10-1:0.0: probe with driver sq930x failed with error -22 [ 349.981217][ T5920] usb 10-1: USB disconnect, device number 6 [ 350.509041][ T52] Bluetooth: hci6: command tx timeout [ 350.932113][ T9424] netlink: 'syz.4.800': attribute type 1 has an invalid length. [ 350.943475][ T9424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.388036][ T9428] netlink: 'syz.4.801': attribute type 2 has an invalid length. [ 351.547195][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.742098][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.773728][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.8.804'. [ 351.802254][ T1162] bond0 (unregistering): Released all slaves [ 351.825266][ T1162] bond1 (unregistering): Released all slaves [ 351.865625][ T9440] loop3: detected capacity change from 0 to 7 [ 351.887516][ T9440] Dev loop3: unable to read RDB block 7 [ 351.915073][ T9440] loop3: unable to read partition table [ 351.947921][ T9440] loop3: partition table beyond EOD, truncated [ 352.043788][ T9440] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 352.381722][ T1162] tipc: Left network mode [ 352.578891][ T52] Bluetooth: hci6: command tx timeout [ 352.723128][ T9368] chnl_net:caif_netlink_parms(): no params data found [ 352.868878][ T43] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 353.028817][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 353.161125][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 353.179969][ T43] usb 5-1: config 246 has an invalid interface number: 144 but max is 0 [ 353.209612][ T43] usb 5-1: config 246 has no interface number 0 [ 353.216021][ T43] usb 5-1: config 246 interface 144 has no altsetting 0 [ 353.238563][ T1162] hsr_slave_0: left promiscuous mode [ 353.266859][ T43] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=c6.3d [ 353.282808][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.295575][ T1162] hsr_slave_1: left promiscuous mode [ 353.315825][ T43] usb 5-1: Product: syz [ 353.327107][ T43] usb 5-1: Manufacturer: syz [ 353.337136][ T43] usb 5-1: SerialNumber: syz [ 353.345366][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.380666][ T43] r8152-cfgselector 5-1: Unknown version 0x0000 [ 353.437992][ T8446] syz.2.598: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 353.464255][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.563177][ T8446] CPU: 1 UID: 0 PID: 8446 Comm: syz.2.598 Not tainted syzkaller #0 PREEMPT(full) [ 353.563204][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 353.563224][ T8446] Call Trace: [ 353.563232][ T8446] [ 353.563240][ T8446] dump_stack_lvl+0x189/0x250 [ 353.563272][ T8446] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.563298][ T8446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.563341][ T8446] warn_alloc+0x214/0x310 [ 353.563375][ T8446] ? __pfx_warn_alloc+0x10/0x10 [ 353.563409][ T8446] ? __get_vm_area_node+0x28f/0x300 [ 353.563435][ T8446] ? relay_open_buf+0x215/0xe50 [ 353.563463][ T8446] __vmalloc_node_range_noprof+0x690/0x12d0 [ 353.563515][ T8446] ? alloc_pages_mpol+0x3cd/0x4a0 [ 353.563536][ T8446] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 353.563566][ T8446] ? rcu_is_watching+0x15/0xb0 [ 353.563587][ T8446] ? relay_open_buf+0x215/0xe50 [ 353.563611][ T8446] __kvmalloc_node_noprof+0x674/0x910 [ 353.563637][ T8446] ? relay_open_buf+0x215/0xe50 [ 353.563660][ T8446] ? trace_kmalloc+0x1f/0xd0 [ 353.563685][ T8446] ? relay_open_buf+0x17f/0xe50 [ 353.563715][ T8446] relay_open_buf+0x215/0xe50 [ 353.563762][ T8446] relay_open+0x427/0x920 [ 353.563793][ T8446] do_blk_trace_setup+0x561/0x980 [ 353.563824][ T8446] blk_trace_setup+0x116/0x1f0 [ 353.563851][ T8446] ? __pfx_blk_trace_setup+0x10/0x10 [ 353.563892][ T8446] sg_ioctl+0xaf3/0x2230 [ 353.563921][ T8446] ? __pfx_sg_ioctl+0x10/0x10 [ 353.563944][ T8446] ? __fget_files+0x2a/0x420 [ 353.563967][ T8446] ? __fget_files+0x3a0/0x420 [ 353.563983][ T8446] ? __fget_files+0x2a/0x420 [ 353.564004][ T8446] ? bpf_lsm_file_ioctl+0x9/0x20 [ 353.564024][ T8446] ? __pfx_sg_ioctl+0x10/0x10 [ 353.564044][ T8446] __se_sys_ioctl+0xfc/0x170 [ 353.564071][ T8446] do_syscall_64+0xfa/0xfa0 [ 353.564098][ T8446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.564115][ T8446] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 353.564133][ T8446] ? clear_bhb_loop+0x60/0xb0 [ 353.564156][ T8446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.564180][ T8446] RIP: 0033:0x7fd0cf78f6c9 [ 353.564203][ T8446] Code: Unable to access opcode bytes at 0x7fd0cf78f69f. [ 353.564212][ T8446] RSP: 002b:00007fd0d0563038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.564233][ T8446] RAX: ffffffffffffffda RBX: 00007fd0cf9e6180 RCX: 00007fd0cf78f6c9 [ 353.564245][ T8446] RDX: 0000200000000b40 RSI: 00000000c0481273 RDI: 0000000000000009 [ 353.564256][ T8446] RBP: 00007fd0cf811f91 R08: 0000000000000000 R09: 0000000000000000 [ 353.564267][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.564278][ T8446] R13: 00007fd0cf9e6218 R14: 00007fd0cf9e6180 R15: 00007fd0cfb0fa28 [ 353.564311][ T8446] [ 353.564441][ T8446] Mem-Info: [ 353.840182][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.847583][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.935554][ T1162] veth1_macvtap: left promiscuous mode [ 353.945769][ T43] r8152-cfgselector 5-1: USB disconnect, device number 44 [ 353.971574][ T1162] veth0_macvtap: left promiscuous mode [ 353.990134][ T1162] veth1_vlan: left promiscuous mode [ 353.996840][ T1162] veth0_vlan: left promiscuous mode [ 354.042303][ T8446] active_anon:6683 inactive_anon:37 isolated_anon:0 [ 354.042303][ T8446] active_file:8367 inactive_file:316 isolated_file:0 [ 354.042303][ T8446] unevictable:768 dirty:206 writeback:0 [ 354.042303][ T8446] slab_reclaimable:7745 slab_unreclaimable:112229 [ 354.042303][ T8446] mapped:61926 shmem:3651 pagetables:4153 [ 354.042303][ T8446] sec_pagetables:0 bounce:0 [ 354.042303][ T8446] kernel_misc_reclaimable:0 [ 354.042303][ T8446] free:97623 free_pcp:30099 free_cma:0 [ 354.151199][ T8446] Node 0 active_anon:0kB inactive_anon:144kB active_file:20kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:164388kB dirty:60kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12624kB pagetables:5008kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 354.251637][ T8446] Node 1 active_anon:26632kB inactive_anon:4kB active_file:33448kB inactive_file:1052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83216kB dirty:764kB writeback:0kB shmem:13068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:2112kB pagetables:11504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 354.354524][ T8446] Node 0 DMA free:10216kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:12kB free_cma:0kB [ 354.473673][ T8446] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 354.486262][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 354.486278][ T30] audit: type=1326 audit(1762870080.927:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.8.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b778f6c9 code=0x7ffc0000 [ 354.550905][ T30] audit: type=1326 audit(1762870080.957:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.8.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b778f6c9 code=0x7ffc0000 [ 354.577279][ T8446] Node 0 DMA32 free:41764kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:144kB active_file:20kB inactive_file:212kB unevictable:1536kB writepending:60kB zspages:0kB present:3129332kB managed:2565164kB mlocked:0kB bounce:0kB free_pcp:14444kB local_pcp:8696kB free_cma:0kB [ 354.598875][ T30] audit: type=1326 audit(1762870080.957:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.8.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb0b778f6c9 code=0x7ffc0000 [ 354.649950][ T8446] lowmem_reserve[]: 0 0 0 0 0 [ 354.654951][ T8446] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.686413][ T52] Bluetooth: hci6: command tx timeout [ 354.692005][ T8446] lowmem_reserve[]: 0 0 0 0 0 [ 354.696747][ T8446] Node 1 Normal free:339280kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22932kB inactive_anon:4kB active_file:33448kB inactive_file:1052kB unevictable:1536kB writepending:764kB zspages:5324kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:109748kB local_pcp:16328kB free_cma:0kB [ 354.749878][ T30] audit: type=1326 audit(1762870080.957:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.8.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b778f6c9 code=0x7ffc0000 [ 354.768854][ T8446] lowmem_reserve[]: 0 0 0 0 0 [ 354.783044][ T30] audit: type=1326 audit(1762870080.957:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.8.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b778f6c9 code=0x7ffc0000 [ 354.808213][ T8446] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10216kB [ 354.817862][ T30] audit: type=1326 audit(1762870080.957:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.8.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb0b778f6c9 code=0x7ffc0000 [ 354.847153][ T30] audit: type=1326 audit(1762870080.987:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.8.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b778f6c9 code=0x7ffc0000 [ 354.869846][ T8446] Node 0 DMA32: 15*4kB (UE) 47*8kB (ME) 45*16kB (UME) 67*32kB (ME) 53*64kB (ME) 28*128kB (ME) 25*256kB (M) 19*512kB (M) 7*1024kB (M) 4*2048kB (M) 0*4096kB = 41764kB [ 354.870962][ T30] audit: type=1326 audit(1762870080.987:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.8.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b778f6c9 code=0x7ffc0000 [ 354.915962][ T30] audit: type=1326 audit(1762870080.987:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.8.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb0b778f6c9 code=0x7ffc0000 [ 354.939239][ T8446] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 354.948540][ T30] audit: type=1326 audit(1762870080.987:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.8.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b778f6c9 code=0x7ffc0000 [ 354.987432][ T8446] Node 1 Normal: 0*4kB 2*8kB (ME) 160*16kB (UM) 232*32kB (M) 207*64kB (UM) 131*128kB (UME) 69*256kB (M) 16*512kB (UME) 9*1024kB (UME) 1*2048kB (E) 64*4096kB (M) = 339280kB [ 355.017278][ T8446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.033836][ T8446] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.064313][ T8446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.074399][ T8446] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.087381][ T8446] 13447 total pagecache pages [ 355.094088][ T8446] 1107 pages in swap cache [ 355.098569][ T8446] Free swap = 89340kB [ 355.112673][ T8446] Total swap = 124996kB [ 355.116998][ T8446] 2097051 pages RAM [ 355.122075][ T8446] 0 pages HighMem/MovableOnly [ 355.130696][ T8446] 424118 pages reserved [ 355.136124][ T8446] 0 pages cma reserved [ 355.494172][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 355.660488][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 357.114408][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.143183][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.280591][ T9368] bridge_slave_0: entered allmulticast mode [ 357.285636][ T43] IPVS: starting estimator thread 0... [ 357.341762][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.8.809'. [ 357.351613][ T9368] bridge_slave_0: entered promiscuous mode [ 357.407375][ T9483] netlink: 36 bytes leftover after parsing attributes in process `syz.8.809'. [ 357.409838][ T9482] IPVS: using max 36 ests per chain, 86400 per kthread [ 357.425644][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.466571][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.505024][ T9368] bridge_slave_1: entered allmulticast mode [ 357.558449][ T9368] bridge_slave_1: entered promiscuous mode [ 357.570554][ C1] sd 0:0:1:0: [sda] tag#1350 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 357.581044][ C1] sd 0:0:1:0: [sda] tag#1350 CDB: Read(6) 08 00 00 00 03 44 [ 357.992969][ T9368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.392377][ T9490] bridge_slave_0: left allmulticast mode [ 358.590236][ T9490] bridge_slave_0: left promiscuous mode [ 358.596116][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.864318][ T9490] bridge_slave_1: left allmulticast mode [ 358.909554][ T9505] netlink: 9 bytes leftover after parsing attributes in process `syz.6.814'. [ 358.919914][ T9490] bridge_slave_1: left promiscuous mode [ 358.953371][ T9505] netlink: 9 bytes leftover after parsing attributes in process `syz.6.814'. [ 358.981955][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.084814][ T9490] bond0: (slave bond_slave_0): Releasing backup interface [ 359.258322][ T9490] bond0: (slave bond_slave_1): Releasing backup interface [ 359.393545][ T9490] team0: Port device team_slave_0 removed [ 359.499193][ T9490] team0: Port device team_slave_1 removed [ 359.515176][ T9490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.556400][ T9490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.644004][ T9490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.702990][ T9490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.074803][ T9490] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 360.270889][ T9368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.720692][ T9368] team0: Port device team_slave_0 added [ 360.781461][ T9368] team0: Port device team_slave_1 added [ 360.928895][ T981] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 361.128816][ T981] usb 7-1: Using ep0 maxpacket: 32 [ 361.149894][ T981] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 361.194791][ T981] usb 7-1: config 0 has no interface number 0 [ 361.221442][ T981] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 361.239274][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.246895][ T9530] loop2: detected capacity change from 0 to 7 [ 361.268617][ T9530] Dev loop2: unable to read RDB block 7 [ 361.280771][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.320461][ T9530] loop2: unable to read partition table [ 361.351661][ T9530] loop2: partition table beyond EOD, truncated [ 361.370469][ T9530] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 361.389181][ T981] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 361.408812][ T9368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.449340][ T981] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 361.542214][ T981] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 361.588797][ T5929] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 361.600775][ T981] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 361.658863][ T981] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 361.789258][ T5929] usb 9-1: device descriptor read/64, error -71 [ 361.801384][ T981] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 361.853117][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.874739][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.902204][ T981] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 361.938889][ T981] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 361.972331][ T981] usb 7-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.037267][ T9368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.065924][ T5929] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 362.152950][ T981] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 362.178796][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.207547][ T981] usb 7-1: Product: syz [ 362.212101][ T981] usb 7-1: Manufacturer: syz [ 362.216769][ T981] usb 7-1: SerialNumber: syz [ 362.228920][ T5929] usb 9-1: device descriptor read/64, error -71 [ 362.259361][ T981] usb 7-1: config 0 descriptor?? [ 362.279187][ T9521] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 362.299053][ T9521] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 362.311157][ T981] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 362.341353][ T981] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 362.355743][ T5929] usb usb9-port1: attempt power cycle [ 362.576424][ T981] scsi host1: microtekX6 [ 362.718890][ T5929] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 362.820967][ T5929] usb 9-1: device descriptor read/8, error -71 [ 362.828173][ T9368] hsr_slave_0: entered promiscuous mode [ 362.868935][ T9368] hsr_slave_1: entered promiscuous mode [ 362.884971][ T9368] debugfs: 'hsr0' already exists in 'hsr' [ 362.897725][ T9368] Cannot create hsr debugfs directory [ 363.088919][ T5929] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 363.142892][ T5929] usb 9-1: device descriptor read/8, error -71 [ 363.271344][ T5929] usb usb9-port1: unable to enumerate USB device [ 363.676000][ T9442] usb 7-1: USB disconnect, device number 5 [ 365.229932][ T5970] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 365.299083][ T9442] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 365.431720][ T5970] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 365.441039][ T5970] usb 9-1: config 0 has no interface number 0 [ 365.448864][ T9442] usb 7-1: Using ep0 maxpacket: 8 [ 365.464409][ T9442] usb 7-1: too many configurations: 101, using maximum allowed: 8 [ 365.473695][ T5970] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 365.547141][ T5970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.591534][ T9442] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 365.607767][ T9442] usb 7-1: can't read configurations, error -61 [ 365.623452][ T5970] usb 9-1: config 0 descriptor?? [ 365.663174][ T5970] usb 9-1: selecting invalid altsetting 1 [ 365.687493][ T5970] dvb_ttusb_budget: ttusb_init_controller: error [ 365.707671][ T5970] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 365.779340][ T9442] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 365.871456][ T9572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.906257][ T9572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.989573][ T9442] usb 7-1: Using ep0 maxpacket: 8 [ 366.040400][ T5970] DVB: Unable to find symbol cx22700_attach() [ 366.079054][ T9442] usb 7-1: too many configurations: 101, using maximum allowed: 8 [ 366.150637][ T9442] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 366.191600][ T9442] usb 7-1: can't read configurations, error -61 [ 366.224606][ T9442] usb usb7-port1: attempt power cycle [ 366.297885][ T5970] DVB: Unable to find symbol tda10046_attach() [ 366.305083][ T5970] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 366.368132][ T9368] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 366.411904][ T5929] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 366.476026][ T9368] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 366.515434][ T9368] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 366.556382][ T9368] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 366.589409][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 366.591213][ T9442] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 366.604524][ T5929] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 50, using maximum allowed: 30 [ 366.631071][ T5929] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 8192, setting to 1024 [ 366.690327][ T5929] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 366.707959][ T9442] usb 7-1: Using ep0 maxpacket: 8 [ 366.729819][ T9442] usb 7-1: too many configurations: 101, using maximum allowed: 8 [ 366.735541][ T5929] usb 5-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 50 [ 366.783761][ T9442] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 366.812253][ T5929] usb 5-1: config 0 interface 0 has no altsetting 0 [ 366.828812][ T9442] usb 7-1: can't read configurations, error -61 [ 366.854482][ T5929] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 366.937160][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.984929][ T5929] usb 5-1: Product: syz [ 367.004677][ T5929] usb 5-1: Manufacturer: syz [ 367.019414][ T5929] usb 5-1: SerialNumber: syz [ 367.044304][ T5929] usb 5-1: config 0 descriptor?? [ 367.054334][ T9368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.118192][ T9368] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.181988][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.189225][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.351884][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.359124][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.475460][ T5929] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 367.667088][ T9613] FAULT_INJECTION: forcing a failure. [ 367.667088][ T9613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.752497][ T9613] CPU: 0 UID: 0 PID: 9613 Comm: syz.6.832 Not tainted syzkaller #0 PREEMPT(full) [ 367.752524][ T9613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.752534][ T9613] Call Trace: [ 367.752541][ T9613] [ 367.752549][ T9613] dump_stack_lvl+0x189/0x250 [ 367.752575][ T9613] ? __pfx____ratelimit+0x10/0x10 [ 367.752598][ T9613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.752620][ T9613] ? __pfx__printk+0x10/0x10 [ 367.752639][ T9613] ? fs_reclaim_acquire+0x7d/0x100 [ 367.752663][ T9613] should_fail_ex+0x414/0x560 [ 367.752692][ T9613] prepare_alloc_pages+0x213/0x610 [ 367.752716][ T9613] __alloc_frozen_pages_noprof+0x123/0x370 [ 367.752739][ T9613] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.752779][ T9613] alloc_pages_bulk_noprof+0x560/0x710 [ 367.752799][ T9613] ? trace_kmalloc+0x1f/0xd0 [ 367.752819][ T9613] ? copy_splice_read+0x143/0xa50 [ 367.752847][ T9613] copy_splice_read+0x173/0xa50 [ 367.752882][ T9613] ? __pfx_copy_splice_read+0x10/0x10 [ 367.752907][ T9613] ? look_up_lock_class+0x74/0x170 [ 367.752932][ T9613] ? register_lock_class+0x51/0x320 [ 367.752952][ T9613] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 367.752982][ T9613] ? alloc_pipe_info+0x374/0x4d0 [ 367.753005][ T9613] ? __pfx_copy_splice_read+0x10/0x10 [ 367.753026][ T9613] splice_direct_to_actor+0x4a9/0xcc0 [ 367.753067][ T9613] ? __pfx_direct_splice_actor+0x10/0x10 [ 367.753091][ T9613] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 367.753124][ T9613] do_splice_direct+0x181/0x270 [ 367.753151][ T9613] ? __pfx_do_splice_direct+0x10/0x10 [ 367.753176][ T9613] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 367.753199][ T9613] ? rw_verify_area+0x255/0x4d0 [ 367.753224][ T9613] do_sendfile+0x4da/0x7e0 [ 367.753251][ T9613] ? __pfx_do_sendfile+0x10/0x10 [ 367.753281][ T9613] __se_sys_sendfile64+0xd9/0x190 [ 367.753302][ T9613] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 367.753322][ T9613] ? do_syscall_64+0xbe/0xfa0 [ 367.753346][ T9613] do_syscall_64+0xfa/0xfa0 [ 367.753368][ T9613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.753384][ T9613] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 367.753402][ T9613] ? clear_bhb_loop+0x60/0xb0 [ 367.753421][ T9613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.753442][ T9613] RIP: 0033:0x7f2a18d8f6c9 [ 367.753458][ T9613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.753473][ T9613] RSP: 002b:00007f2a19bbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 367.753491][ T9613] RAX: ffffffffffffffda RBX: 00007f2a18fe5fa0 RCX: 00007f2a18d8f6c9 [ 367.753504][ T9613] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 367.753516][ T9613] RBP: 00007f2a19bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 367.753527][ T9613] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 367.753537][ T9613] R13: 00007f2a18fe6038 R14: 00007f2a18fe5fa0 R15: 00007f2a1910fa28 [ 367.753566][ T9613] [ 368.414212][ T5970] usb 9-1: USB disconnect, device number 7 [ 368.554180][ T9442] usb 5-1: USB disconnect, device number 45 [ 368.665107][ T9618] ptrace attach of "./syz-executor exec"[9002] was attempted by "./syz-executor exec"[9618] [ 368.735650][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.9.833'. [ 368.750426][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.9.833'. [ 368.848970][ T9368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.098053][ T9629] FAULT_INJECTION: forcing a failure. [ 369.098053][ T9629] name failslab, interval 1, probability 0, space 0, times 0 [ 369.111776][ T9629] CPU: 0 UID: 0 PID: 9629 Comm: syz.6.835 Not tainted syzkaller #0 PREEMPT(full) [ 369.111802][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.111812][ T9629] Call Trace: [ 369.111819][ T9629] [ 369.111827][ T9629] dump_stack_lvl+0x189/0x250 [ 369.111854][ T9629] ? __pfx____ratelimit+0x10/0x10 [ 369.111876][ T9629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.111899][ T9629] ? __pfx__printk+0x10/0x10 [ 369.111918][ T9629] ? __pfx___might_resched+0x10/0x10 [ 369.111936][ T9629] ? fs_reclaim_acquire+0x7d/0x100 [ 369.111957][ T9629] should_fail_ex+0x414/0x560 [ 369.111986][ T9629] should_failslab+0xa8/0x100 [ 369.112005][ T9629] __kmalloc_cache_noprof+0x6f/0x6f0 [ 369.112028][ T9629] ? io_uring_alloc_task_context+0xa0/0x570 [ 369.112046][ T9629] ? __might_fault+0xb0/0x130 [ 369.112071][ T9629] io_uring_alloc_task_context+0xa0/0x570 [ 369.112087][ T9629] ? __lock_acquire+0xab9/0xd20 [ 369.112104][ T9629] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 369.112130][ T9629] __io_uring_add_tctx_node+0x33e/0x4e0 [ 369.112217][ T9629] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 369.112237][ T9629] ? __fget_files+0x2a/0x420 [ 369.112255][ T9629] ? __fget_files+0x2a/0x420 [ 369.112272][ T9629] __io_uring_add_tctx_node_from_submit+0x91/0x120 [ 369.112297][ T9629] __se_sys_io_uring_enter+0x24fc/0x2b20 [ 369.112335][ T9629] ? trace_sched_exit_tp+0x36/0x110 [ 369.112358][ T9629] ? __schedule+0x17ae/0x4cc0 [ 369.112381][ T9629] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 369.112422][ T9629] ? __pfx___schedule+0x10/0x10 [ 369.112439][ T9629] ? fput+0xa0/0xd0 [ 369.112456][ T9629] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 369.112474][ T9629] ? ksys_write+0x22a/0x250 [ 369.112503][ T9629] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 369.112528][ T9629] do_syscall_64+0xfa/0xfa0 [ 369.112551][ T9629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.112566][ T9629] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 369.112580][ T9629] ? clear_bhb_loop+0x60/0xb0 [ 369.112597][ T9629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.112613][ T9629] RIP: 0033:0x7f2a18d8f6c9 [ 369.112631][ T9629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.112645][ T9629] RSP: 002b:00007f2a16ef1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 369.112665][ T9629] RAX: ffffffffffffffda RBX: 00007f2a18fe6180 RCX: 00007f2a18d8f6c9 [ 369.112678][ T9629] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 369.112689][ T9629] RBP: 00007f2a16ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 369.112701][ T9629] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 369.112711][ T9629] R13: 00007f2a18fe6218 R14: 00007f2a18fe6180 R15: 00007f2a1910fa28 [ 369.112739][ T9629] [ 369.515293][ T1213] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 369.693468][ T9368] veth0_vlan: entered promiscuous mode [ 369.710215][ T1213] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 369.738955][ T1213] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.768951][ T9368] veth1_vlan: entered promiscuous mode [ 369.779201][ T1213] usb 9-1: Product: syz [ 369.783413][ T1213] usb 9-1: Manufacturer: syz [ 369.841936][ T1213] usb 9-1: SerialNumber: syz [ 369.881487][ T1213] usb 9-1: config 0 descriptor?? [ 369.949718][ T9368] veth0_macvtap: entered promiscuous mode [ 370.004577][ T9368] veth1_macvtap: entered promiscuous mode [ 370.124013][ T1213] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 370.166762][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.215278][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.318121][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.437433][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.509266][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.611058][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.072861][ T6269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.137820][ T6269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.324025][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.421857][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.798564][ T1213] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 371.855422][ T1213] usb 9-1: USB disconnect, device number 8 [ 371.937586][ T9661] netlink: 48 bytes leftover after parsing attributes in process `syz.7.781'. [ 372.811670][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.845'. [ 373.000537][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.842'. [ 373.111625][ T9683] loop3: detected capacity change from 0 to 7 [ 373.161216][ T9683] Dev loop3: unable to read RDB block 7 [ 373.227638][ T9683] loop3: unable to read partition table [ 373.306007][ T9683] loop3: partition table beyond EOD, truncated [ 373.336876][ T9683] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 373.877201][ T9687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.945313][ T9695] misc userio: The device must be registered before sending interrupts [ 374.209011][ T43] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 374.473337][ T43] usb 9-1: No LPM exit latency info found, disabling LPM. [ 374.514226][ T43] usb 9-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 374.586565][ T43] usb 9-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 374.915821][ T43] usb 9-1: config 1 interface 0 has no altsetting 0 [ 375.125788][ T43] usb 9-1: string descriptor 0 read error: -22 [ 375.156726][ T43] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 375.199614][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.291493][ T9695] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 375.308245][ T9695] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 375.567068][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.8.848'. [ 376.189603][ T1213] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 376.346810][ T9737] team_slave_0: entered promiscuous mode [ 376.352850][ T9737] team_slave_1: entered promiscuous mode [ 376.363492][ T1213] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.396131][ T1213] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.455182][ T1213] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 376.479044][ T9737] vlan2: entered promiscuous mode [ 376.488302][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.512738][ T9737] team0: entered promiscuous mode [ 376.726328][ T1213] usb 5-1: usb_control_msg returned -32 [ 376.734422][ T1213] usbtmc 5-1:16.0: can't read capabilities [ 376.948474][ T5929] usb 9-1: USB disconnect, device number 9 [ 377.081794][ T9747] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -32 [ 377.810695][ T9760] netlink: 'syz.6.861': attribute type 4 has an invalid length. [ 377.933368][ T9768] netlink: 'syz.6.861': attribute type 4 has an invalid length. [ 378.353091][ T9778] netlink: 'syz.7.863': attribute type 1 has an invalid length. [ 378.553624][ T9781] gretap1: entered promiscuous mode [ 378.750886][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.759726][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.984824][ T5929] usb 5-1: USB disconnect, device number 46 [ 379.431774][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'. [ 379.496521][ T9806] loop3: detected capacity change from 0 to 7 [ 379.731630][ T9806] Dev loop3: unable to read RDB block 7 [ 379.786945][ T9806] loop3: unable to read partition table [ 379.870335][ T9806] loop3: partition table beyond EOD, truncated [ 379.925514][ T9806] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 380.893800][ T9824] vlan2: entered promiscuous mode [ 380.919297][ T9824] team0: entered promiscuous mode [ 381.170403][ T9831] netlink: 'syz.8.871': attribute type 2 has an invalid length. [ 381.228541][ T9831] : entered promiscuous mode [ 381.627217][ T52] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 382.868506][ T9864] netlink: 'syz.9.877': attribute type 2 has an invalid length. [ 382.911371][ T9863] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.000047][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.238387][ T9864] : entered promiscuous mode [ 384.067772][ T9882] syz.8.880 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 384.133730][ T9877] Cannot find set identified by id 3 to match [ 385.478926][ T9896] netlink: 'syz.4.882': attribute type 4 has an invalid length. [ 385.487447][ T9896] netlink: 'syz.4.882': attribute type 4 has an invalid length. [ 386.130996][ T9903] binder: 9902:9903 ioctl c0306201 0 returned -14 [ 386.598531][ T9899] ptrace attach of "./syz-executor exec"[9002] was attempted by "./syz-executor exec"[9899] [ 386.708856][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.885'. [ 386.766179][ T9919] loop3: detected capacity change from 0 to 7 [ 386.773989][ T9919] Dev loop3: unable to read RDB block 7 [ 386.780732][ T9919] loop3: unable to read partition table [ 386.787473][ T9919] loop3: partition table beyond EOD, truncated [ 386.876771][ T9919] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 387.194420][ T9924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.233489][ T9924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.390072][ T1213] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 388.763716][ T9932] Cannot find set identified by id 3 to match [ 388.979926][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.534178][ T9935] loop2: detected capacity change from 0 to 7 [ 389.584908][ T9935] Dev loop2: unable to read RDB block 7 [ 389.628965][ T9935] loop2: unable to read partition table [ 389.672493][ T9935] loop2: partition table beyond EOD, truncated [ 389.705902][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.9.892'. [ 389.719822][ T9940] netlink: 36 bytes leftover after parsing attributes in process `syz.9.892'. [ 389.740059][ T9935] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 390.186484][ T9942] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 390.251405][ T9942] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 390.256407][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.7.896'. [ 390.321764][ T9949] netlink: 132 bytes leftover after parsing attributes in process `syz.4.894'. [ 390.348561][ T9944] netlink: 132 bytes leftover after parsing attributes in process `syz.4.894'. [ 390.817771][ T9942] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 390.889048][ T9955] Cannot find set identified by id 3 to match [ 390.975911][ T9963] netlink: 16 bytes leftover after parsing attributes in process `syz.8.898'. [ 390.986134][ T9963] netlink: 36 bytes leftover after parsing attributes in process `syz.8.898'. [ 391.455369][ T9963] bond1: entered promiscuous mode [ 391.950678][ T9966] netlink: 16 bytes leftover after parsing attributes in process `syz.7.899'. [ 392.798877][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 392.837994][ T9978] netlink: 'syz.6.901': attribute type 4 has an invalid length. [ 392.975423][ T9987] netlink: 'syz.6.901': attribute type 4 has an invalid length. [ 393.010787][ T5891] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 393.048847][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 393.055287][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.064552][ T9984] netlink: 192 bytes leftover after parsing attributes in process `syz.8.904'. [ 393.087324][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 393.116995][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.242915][ T9] usb 5-1: config 0 descriptor?? [ 393.436375][ T5891] usb 8-1: config 0 has an invalid interface number: 217 but max is 0 [ 393.444801][ T5891] usb 8-1: config 0 has no interface number 0 [ 393.456489][ T5891] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 393.473309][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.490198][ T5891] usb 8-1: Product: syz [ 393.497990][ T5891] usb 8-1: Manufacturer: syz [ 393.507246][ T5891] usb 8-1: SerialNumber: syz [ 393.560092][ T5891] usb 8-1: config 0 descriptor?? [ 393.669523][ T5891] hub 8-1:0.217: bad descriptor, ignoring hub [ 393.675676][ T5891] hub 8-1:0.217: probe with driver hub failed with error -5 [ 393.822139][ T9993] vlan2: entered promiscuous mode [ 393.874505][ T5891] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 393.913690][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 393.952636][ T5891] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 393.971582][ T5891] usb 8-1: media controller created [ 394.042420][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 394.075812][ T9980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.087197][ T9980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.215872][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.249841][ T5891] DVB: Unable to find symbol dib7000p_attach() [ 394.257367][ T5891] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 394.269953][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.293956][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 394.340579][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 394.362004][ T9980] netlink: 'syz.7.903': attribute type 11 has an invalid length. [ 394.395240][ T9] usb 5-1: USB disconnect, device number 47 [ 394.472486][ T9980] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.903'. [ 394.518823][ T5891] rc_core: IR keymap rc-dib0700-rc5 not found [ 394.525826][ T5891] Registered IR keymap rc-empty [ 394.531856][ T5891] dvb-usb: could not initialize remote control. [ 394.540516][ T5891] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 394.789476][ T5891] usb 8-1: USB disconnect, device number 4 [ 394.798936][ T9] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 394.961693][ T5891] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 395.000600][ T9] usb 5-1: config 2 has an invalid interface number: 211 but max is 0 [ 395.023521][ T9] usb 5-1: config 2 has no interface number 0 [ 395.067260][ T9] usb 5-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 395.262584][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.9.910'. [ 395.277255][ T9] usb 5-1: config 2 interface 211 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.450985][T10013] ip6gre1: entered promiscuous mode [ 395.495436][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 395.505110][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.529177][T10013] ip6gre1: entered allmulticast mode [ 395.589599][ T9] usb 5-1: Product: syz [ 395.601983][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 395.612261][ T9] usb 5-1: Manufacturer: syz [ 395.619319][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 395.638956][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 395.909446][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 395.949687][ T9] usb 5-1: SerialNumber: syz [ 396.245313][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 396.261715][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 396.289697][T10001] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 396.321385][ T9] em28xx 5-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 396.331286][ T9] em28xx 5-1:2.211: Device initialization failed. [ 396.337788][ T9] em28xx 5-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 396.348574][T10021] Cannot find set identified by id 3 to match [ 396.507261][ T9] usb 5-1: USB disconnect, device number 48 [ 397.069668][T10024] netlink: 16 bytes leftover after parsing attributes in process `syz.9.913'. [ 398.460884][ T5891] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 398.589876][T10052] ptrace attach of "./syz-executor exec"[8586] was attempted by "./syz-executor exec"[10052] [ 398.752612][ T5891] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 398.761007][ T5891] usb 5-1: config 0 has no interface number 0 [ 398.834543][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.915'. [ 398.843590][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.915'. [ 398.856205][ T5891] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 398.885096][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.899065][ T5891] usb 5-1: Product: syz [ 398.904540][ T5891] usb 5-1: Manufacturer: syz [ 398.916432][ T5891] usb 5-1: SerialNumber: syz [ 398.943619][ T5891] usb 5-1: config 0 descriptor?? [ 398.975719][ T5891] hub 5-1:0.217: bad descriptor, ignoring hub [ 399.129338][ T5891] hub 5-1:0.217: probe with driver hub failed with error -5 [ 399.232547][ T5891] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 399.286936][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 399.369352][ T5891] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 399.378001][ T5891] usb 5-1: media controller created [ 399.391157][T10055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.409446][T10055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.640794][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.685478][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.699011][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.860975][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.871024][T10067] netlink: 'syz.9.922': attribute type 4 has an invalid length. [ 399.922085][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.8.923'. [ 399.954671][T10066] netlink: 'syz.4.921': attribute type 11 has an invalid length. [ 399.962623][T10066] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.921'. [ 400.050005][T10067] netlink: 'syz.9.922': attribute type 4 has an invalid length. [ 400.074261][ T5891] DVB: Unable to find symbol dib7000p_attach() [ 400.088402][ T5891] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 400.133898][T10070] ip6gre1: entered promiscuous mode [ 400.171960][T10070] ip6gre1: entered allmulticast mode [ 400.308366][ T1094] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.326414][ T1094] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.334244][ T5929] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.668821][ T5891] rc_core: IR keymap rc-dib0700-rc5 not found [ 400.694634][ T5891] Registered IR keymap rc-empty [ 400.717946][ T5891] dvb-usb: could not initialize remote control. [ 400.734870][ T5891] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 400.807064][ T5891] usb 5-1: USB disconnect, device number 49 [ 401.033285][ T5891] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 401.068841][ T5970] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 401.108974][ T24] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 401.239363][ T5970] usb 9-1: config 0 has an invalid interface number: 217 but max is 0 [ 401.259319][ T5970] usb 9-1: config 0 has no interface number 0 [ 401.275518][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 401.286328][ T5970] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 401.308912][ T5970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.327172][ T5970] usb 9-1: Product: syz [ 401.338445][ T5970] usb 9-1: Manufacturer: syz [ 401.343458][ T43] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 401.350457][ T5970] usb 9-1: SerialNumber: syz [ 401.388664][ T5970] usb 9-1: config 0 descriptor?? [ 401.404532][ T5970] hub 9-1:0.217: bad descriptor, ignoring hub [ 401.428320][ T5970] hub 9-1:0.217: probe with driver hub failed with error -5 [ 401.467524][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.477543][ T24] usb 7-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 401.519611][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.537499][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.544063][T10091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.930'. [ 401.608638][ T5970] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 401.609417][ T24] usb 7-1: config 0 descriptor?? [ 401.647429][ T5970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 401.671044][ T5970] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 401.696113][ T5970] usb 9-1: media controller created [ 401.720222][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 401.727779][ T43] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 401.747228][ T43] usb 8-1: config 0 has no interface number 0 [ 401.787489][ T43] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 401.806262][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.819304][T10076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.828094][T10076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.836022][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.846538][ T43] usb 8-1: Product: syz [ 401.884374][ T43] usb 8-1: Manufacturer: syz [ 401.969434][ T43] usb 8-1: SerialNumber: syz [ 402.014410][ T5970] DVB: Unable to find symbol dib7000p_attach() [ 402.032385][ T5970] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 402.109304][ T43] usb 8-1: config 0 descriptor?? [ 402.140824][T10078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.176371][ T43] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 402.181410][T10078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.201361][T10076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.211943][ T5970] rc_core: IR keymap rc-dib0700-rc5 not found [ 402.219283][T10076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.221089][ T5970] Registered IR keymap rc-empty [ 402.238319][ T5970] dvb-usb: could not initialize remote control. [ 402.272791][T10078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.285654][T10078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.317396][ T5970] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 402.417090][T10076] netlink: 'syz.8.925': attribute type 11 has an invalid length. [ 402.453756][T10076] netlink: 199828 bytes leftover after parsing attributes in process `syz.8.925'. [ 402.529781][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 402.536388][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 402.693221][ T24] usb 7-1: USB disconnect, device number 10 [ 402.768992][ T5970] usb 9-1: USB disconnect, device number 11 [ 403.091170][ T5970] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 403.308890][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.933'. [ 403.371040][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 403.371058][ T30] audit: type=1326 audit(1762870129.727:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10107 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a18d8f6c9 code=0x7ffc0000 [ 403.440953][ T30] audit: type=1326 audit(1762870129.727:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10107 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a18d8f6c9 code=0x7ffc0000 [ 403.672143][ T30] audit: type=1326 audit(1762870129.727:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10107 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2a18d8f6c9 code=0x7ffc0000 [ 403.784341][ T30] audit: type=1326 audit(1762870129.727:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10107 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a18d8f6c9 code=0x7ffc0000 [ 403.806874][ T30] audit: type=1326 audit(1762870129.727:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10107 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2a18d8e17f code=0x7ffc0000 [ 403.830543][ T30] audit: type=1326 audit(1762870129.727:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10107 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a18d8f6c9 code=0x7ffc0000 [ 403.853176][ T30] audit: type=1326 audit(1762870129.737:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10107 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f2a18d8f6c9 code=0x7ffc0000 [ 403.875809][ T30] audit: type=1326 audit(1762870129.737:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10107 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a18d8f6c9 code=0x7ffc0000 [ 403.905713][ T30] audit: type=1326 audit(1762870129.737:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10107 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f2a18d8f6c9 code=0x7ffc0000 [ 403.938518][ T30] audit: type=1326 audit(1762870129.737:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10107 comm="syz.6.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a18d8f6c9 code=0x7ffc0000 [ 404.308615][T10117] netlink: 16 bytes leftover after parsing attributes in process `syz.8.935'. [ 404.342862][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.492238][ T43] usb 8-1: qt2_attach - failed to power on unit: -71 [ 404.554141][ T43] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 404.751485][ T43] usb 8-1: USB disconnect, device number 5 [ 406.650149][T10148] netlink: 16 bytes leftover after parsing attributes in process `syz.7.942'. [ 407.538956][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.654893][T10156] netlink: 'syz.9.944': attribute type 4 has an invalid length. [ 407.710298][T10157] netlink: 'syz.9.944': attribute type 4 has an invalid length. [ 408.289507][T10165] openvswitch: netlink: ct_state flags 2c1414ac unsupported [ 408.717608][T10173] Cannot find set identified by id 3 to match [ 409.119242][ T43] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 409.336687][ T43] usb 8-1: device descriptor read/64, error -71 [ 409.598800][ T43] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 409.758843][ T43] usb 8-1: device descriptor read/64, error -71 [ 409.921195][ T43] usb usb8-port1: attempt power cycle [ 410.419994][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.8.951'. [ 410.498923][ T43] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 410.579119][ T43] usb 8-1: device descriptor read/8, error -71 [ 410.649544][T10191] loop3: detected capacity change from 0 to 7 [ 410.678481][T10191] Dev loop3: unable to read RDB block 7 [ 410.684459][T10191] loop3: unable to read partition table [ 410.694447][T10191] loop3: partition table beyond EOD, truncated [ 410.711714][T10191] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 410.809805][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 410.809817][ T30] audit: type=1326 audit(1762870137.237:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 410.858999][ T43] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 410.958346][ T43] usb 8-1: device descriptor read/8, error -71 [ 411.038789][ T9442] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 411.051223][ T30] audit: type=1326 audit(1762870137.237:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 411.090617][ T43] usb usb8-port1: unable to enumerate USB device [ 411.219425][ T9442] usb 5-1: device descriptor read/64, error -71 [ 411.260136][ T30] audit: type=1326 audit(1762870137.237:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 411.437482][ T30] audit: type=1326 audit(1762870137.237:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 411.473808][ T9442] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 411.547405][ T30] audit: type=1326 audit(1762870137.237:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800e18f6c9 code=0x7ffc0000 [ 411.573097][ T30] audit: type=1326 audit(1762870137.247:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f800e18df10 code=0x7ffc0000 [ 411.595800][ T30] audit: type=1326 audit(1762870137.247:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f800e18f2cb code=0x7ffc0000 [ 411.649049][ T9442] usb 5-1: device descriptor read/64, error -71 [ 411.662226][ T30] audit: type=1326 audit(1762870137.247:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f800e18f2cb code=0x7ffc0000 [ 411.688938][ T30] audit: type=1326 audit(1762870137.247:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f800e18f2cb code=0x7ffc0000 [ 411.715213][ T30] audit: type=1326 audit(1762870137.247:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f800e18f2cb code=0x7ffc0000 [ 411.765618][ T9442] usb usb5-port1: attempt power cycle [ 411.809095][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 411.990495][ T24] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 412.022473][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.031890][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 412.054292][ T24] usb 8-1: SerialNumber: syz [ 412.120714][ T9442] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 412.156469][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.6.956'. [ 412.170152][ T9442] usb 5-1: device descriptor read/8, error -71 [ 412.588918][ T9442] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 412.668931][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 412.689605][ T24] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 412.746265][ T9442] usb 5-1: device descriptor read/8, error -71 [ 412.788831][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 412.902164][ T9442] usb usb5-port1: unable to enumerate USB device [ 412.991733][ T9] usb 7-1: config 4 has an invalid interface number: 28 but max is 0 [ 413.030558][ T9] usb 7-1: config 4 has no interface number 0 [ 413.087803][ T24] usb 8-1: USB disconnect, device number 10 [ 413.094994][ T24] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 413.111561][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 413.129886][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.231078][ T9] usb 7-1: Product: syz [ 413.235364][ T9] usb 7-1: Manufacturer: syz [ 413.255566][ T9] usb 7-1: SerialNumber: syz [ 413.570372][T10226] program syz.6.959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.228062][T10239] netlink: 'syz.4.960': attribute type 2 has an invalid length. [ 415.580426][ T24] usb 7-1: USB disconnect, device number 11 [ 415.938535][T10267] netlink: 64 bytes leftover after parsing attributes in process `syz.7.964'. [ 417.159515][ T31] INFO: task syz.2.598:8448 blocked for more than 143 seconds. [ 417.176966][ T31] Not tainted syzkaller #0 [ 417.203521][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.241200][ T31] task:syz.2.598 state:D stack:28904 pid:8448 tgid:8441 ppid:5851 task_flags:0x400040 flags:0x00080002 [ 417.595806][ T31] Call Trace: [ 417.610878][ T31] [ 417.797518][ T31] __schedule+0x1798/0x4cc0 [ 418.078995][ T31] ? __pfx___schedule+0x10/0x10 [ 418.085548][ T31] ? schedule+0x91/0x360 [ 418.111252][ T31] schedule+0x165/0x360 [ 418.115481][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.122114][ T31] __mutex_lock+0x7e6/0x1350 [ 418.126850][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.231522][ T31] ? blk_trace_remove+0x20/0x40 [ 418.276624][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.290643][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 418.304344][ T31] ? css_rstat_updated+0x23a/0x4f0 [ 418.318497][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 418.340161][ T31] blk_trace_remove+0x20/0x40 [ 418.351572][ T31] sg_ioctl+0x47b/0x2230 [ 418.362854][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 418.380137][ T31] ? __fget_files+0x2a/0x420 [ 418.392647][ T31] ? __fget_files+0x3a0/0x420 [ 418.404485][ T31] ? __fget_files+0x2a/0x420 [ 418.416547][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 418.434308][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 418.453870][ T31] __se_sys_ioctl+0xfc/0x170 [ 418.466787][ T31] do_syscall_64+0xfa/0xfa0 [ 418.482744][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.497164][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.512471][ T31] ? clear_bhb_loop+0x60/0xb0 [ 418.525652][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.540868][ T31] RIP: 0033:0x7fd0cf78f6c9 [ 418.558054][ T31] RSP: 002b:00007fd0cd1f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.582107][ T31] RAX: ffffffffffffffda RBX: 00007fd0cf9e6360 RCX: 00007fd0cf78f6c9 [ 418.601484][ T31] RDX: 0000000020000000 RSI: 0000000000001276 RDI: 0000000000000009 [ 418.621820][ T31] RBP: 00007fd0cf811f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.640100][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.666739][ T31] R13: 00007fd0cf9e63f8 R14: 00007fd0cf9e6360 R15: 00007fd0cfb0fa28 [ 418.697070][ T31] [ 418.701846][ T31] INFO: task syz.5.609:8496 blocked for more than 144 seconds. [ 418.720094][ T31] Not tainted syzkaller #0 [ 418.740800][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.760218][ T31] task:syz.5.609 state:D stack:25560 pid:8496 tgid:8492 ppid:6905 task_flags:0x400140 flags:0x00080002 [ 418.795619][ T31] Call Trace: [ 418.802887][ T31] [ 418.809221][ T31] __schedule+0x1798/0x4cc0 [ 418.818396][ T31] ? __pfx___schedule+0x10/0x10 [ 418.828771][ T31] ? schedule+0x91/0x360 [ 418.838889][ T31] schedule+0x165/0x360 [ 418.847546][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.858661][ T31] __mutex_lock+0x7e6/0x1350 [ 418.868895][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.882057][ T31] ? blk_trace_setup+0xfb/0x1f0 [ 418.913279][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.926094][ T31] blk_trace_setup+0xfb/0x1f0 [ 418.945813][ T31] ? __pfx_blk_trace_setup+0x10/0x10 [ 418.951652][ T31] sg_ioctl+0xaf3/0x2230 [ 418.956374][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 418.961460][ T31] ? __fget_files+0x2a/0x420 [ 418.966088][ T31] ? __fget_files+0x3a0/0x420 [ 418.971888][ T31] ? __fget_files+0x2a/0x420 [ 418.976999][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 418.986517][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 418.999796][ T31] __se_sys_ioctl+0xfc/0x170 [ 419.036823][ T31] do_syscall_64+0xfa/0xfa0 [ 419.042201][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.052029][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 419.058392][ T31] ? clear_bhb_loop+0x60/0xb0 [ 419.064016][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.070414][ T31] RIP: 0033:0x7fd26d18f6c9 [ 419.075279][ T31] RSP: 002b:00007fd26aff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.086828][ T31] RAX: ffffffffffffffda RBX: 00007fd26d3e6270 RCX: 00007fd26d18f6c9 [ 419.095209][ T31] RDX: 0000200000000b40 RSI: 00000000c0481273 RDI: 0000000000000008 [ 419.103387][ T31] RBP: 00007fd26d211f91 R08: 0000000000000000 R09: 0000000000000000 [ 419.111534][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.119731][ T31] R13: 00007fd26d3e6308 R14: 00007fd26d3e6270 R15: 00007fd26d50fa28 [ 419.128574][ T31] [ 419.137507][ T31] INFO: task syz.5.609:8497 blocked for more than 145 seconds. [ 419.153400][ T31] Not tainted syzkaller #0 [ 419.169224][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.177990][ T31] task:syz.5.609 state:D stack:28904 pid:8497 tgid:8492 ppid:6905 task_flags:0x400040 flags:0x00080002 [ 419.198215][ T31] Call Trace: [ 419.201620][ T31] [ 419.204961][ T31] __schedule+0x1798/0x4cc0 [ 419.210785][ T31] ? __pfx___schedule+0x10/0x10 [ 419.215665][ T31] ? schedule+0x91/0x360 [ 419.229954][ T31] schedule+0x165/0x360 [ 419.236835][ T31] schedule_preempt_disabled+0x13/0x30 [ 419.259760][ T31] __mutex_lock+0x7e6/0x1350 [ 419.265332][ T31] ? __mutex_lock+0x5bb/0x1350 [ 419.277533][ T31] ? blk_trace_remove+0x20/0x40 [ 419.339181][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 419.357198][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 419.379492][ T31] ? css_rstat_updated+0x23a/0x4f0 [ 419.384681][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 419.391878][ T31] blk_trace_remove+0x20/0x40 [ 419.396623][ T31] sg_ioctl+0x47b/0x2230 [ 419.401287][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 419.407998][ T31] ? __fget_files+0x2a/0x420 [ 419.415446][ T31] ? __fget_files+0x3a0/0x420 [ 419.421374][ T31] ? __fget_files+0x2a/0x420 [ 419.427614][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 419.434258][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 419.440161][ T31] __se_sys_ioctl+0xfc/0x170 [ 419.446955][ T31] do_syscall_64+0xfa/0xfa0 [ 419.452673][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.458057][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.474905][ T31] ? clear_bhb_loop+0x60/0xb0 [ 419.481561][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.488172][ T31] RIP: 0033:0x7fd26d18f6c9 [ 419.496858][ T31] RSP: 002b:00007fd26abd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.507843][ T31] RAX: ffffffffffffffda RBX: 00007fd26d3e6360 RCX: 00007fd26d18f6c9 [ 419.516891][ T31] RDX: 0000000020000000 RSI: 0000000000001276 RDI: 0000000000000008 [ 419.526067][ T31] RBP: 00007fd26d211f91 R08: 0000000000000000 R09: 0000000000000000 [ 419.534175][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.542587][ T31] R13: 00007fd26d3e63f8 R14: 00007fd26d3e6360 R15: 00007fd26d50fa28 [ 419.550653][ T31] [ 419.556629][ T31] [ 419.556629][ T31] Showing all locks held in the system: [ 419.589371][ T31] 1 lock held by khungtaskd/31: [ 419.616352][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 419.642966][ T31] 2 locks held by getty/5592: [ 419.648524][ T31] #0: ffff88803000b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 419.666069][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 419.676408][ T31] 2 locks held by udevd/5846: [ 419.681628][ T31] 3 locks held by syz.2.598/8446: [ 419.686671][ T31] 1 lock held by syz.2.598/8448: [ 419.694567][ T31] #0: ffff8881437c3a38 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 419.716423][ T31] 1 lock held by syz.5.609/8496: [ 419.721509][ T31] #0: ffff8881437c3a38 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfb/0x1f0 [ 419.731364][ T31] 1 lock held by syz.5.609/8497: [ 419.736291][ T31] #0: ffff8881437c3a38 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 419.751186][ T31] 1 lock held by syz.3.665/8740: [ 419.756189][ T31] #0: ffff8881437c3a38 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfb/0x1f0 [ 419.766939][ T31] 1 lock held by syz.3.665/8741: [ 419.772475][ T31] #0: ffff8881437c3a38 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 419.785826][ T31] 1 lock held by syz.0.691/8856: [ 419.794140][ T31] #0: ffff8881437c3a38 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfb/0x1f0 [ 419.807700][ T31] 1 lock held by syz.0.691/8857: [ 419.812935][ T31] #0: ffff8881437c3a38 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 419.823081][ T31] [ 419.825893][ T31] ============================================= [ 419.825893][ T31] [ 419.835732][ T31] NMI backtrace for cpu 0 [ 419.835749][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 419.835768][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.835777][ T31] Call Trace: [ 419.835784][ T31] [ 419.835791][ T31] dump_stack_lvl+0x189/0x250 [ 419.835820][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.835840][ T31] ? __pfx__printk+0x10/0x10 [ 419.835868][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 419.835891][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 419.835911][ T31] ? __pfx__printk+0x10/0x10 [ 419.835933][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 419.835960][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 419.835982][ T31] watchdog+0xf60/0xfa0 [ 419.836005][ T31] ? watchdog+0x1e2/0xfa0 [ 419.836027][ T31] kthread+0x711/0x8a0 [ 419.836052][ T31] ? __pfx_watchdog+0x10/0x10 [ 419.836067][ T31] ? __pfx_kthread+0x10/0x10 [ 419.836088][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.836109][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.836130][ T31] ? __pfx_kthread+0x10/0x10 [ 419.836152][ T31] ret_from_fork+0x4bc/0x870 [ 419.836172][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 419.836196][ T31] ? __switch_to_asm+0x39/0x70 [ 419.836210][ T31] ? __switch_to_asm+0x33/0x70 [ 419.836222][ T31] ? __pfx_kthread+0x10/0x10 [ 419.836244][ T31] ret_from_fork_asm+0x1a/0x30 [ 419.836275][ T31] [ 419.836283][ T31] Sending NMI from CPU 0 to CPUs 1: [ 419.987493][ C1] NMI backtrace for cpu 1 [ 419.987520][ C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 419.987537][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.987547][ C1] Workqueue: events_unbound toggle_allocation_gate [ 419.987568][ C1] RIP: 0010:__text_poke+0x169/0xa10 [ 419.987588][ C1] Code: 00 48 8b 1d d9 77 2a 0c 4c 89 e7 e8 51 80 0d 00 49 89 c7 49 c1 ef 06 49 83 e7 c0 49 01 df 4d 89 fe 49 c1 ee 03 43 80 3c 2e 00 <74> 08 4c 89 ff e8 fd dc bd 00 49 8b 1f 48 c7 c7 ff ff ff ff 48 89 [ 419.987601][ C1] RSP: 0018:ffffc90000ac76a0 EFLAGS: 00000246 [ 419.987613][ C1] RAX: 00000000021a4b2b RBX: ffffea0000000000 RCX: ffff88801d2d1e40 [ 419.987624][ C1] RDX: 0000000000000000 RSI: 00000000021a4b2b RDI: 000000001fffffff [ 419.987634][ C1] RBP: ffffc90000ac77f0 R08: ffff88801a064063 R09: 1ffff1100340c80c [ 419.987646][ C1] R10: dffffc0000000000 R11: ffffed100340c80d R12: ffffffff821a4b2b [ 419.987657][ C1] R13: dffffc0000000000 R14: 1ffffd4000010d20 R15: ffffea0000086900 [ 419.987668][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 419.987680][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.987690][ C1] CR2: 00007f2a18fb12f8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 419.987704][ C1] Call Trace: [ 419.987710][ C1] [ 419.987721][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 419.987739][ C1] ? kmem_cache_alloc_node_noprof+0x8a/0x710 [ 419.987757][ C1] ? __pfx___text_poke+0x10/0x10 [ 419.987773][ C1] ? rcu_is_watching+0x15/0xb0 [ 419.987789][ C1] ? trace_contention_end+0x39/0x120 [ 419.987812][ C1] smp_text_poke_batch_finish+0xd0f/0x1130 [ 419.987836][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 419.987856][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 419.987881][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 419.987901][ C1] static_key_disable_cpuslocked+0xc5/0x1b0 [ 419.987922][ C1] static_key_disable+0x1a/0x20 [ 419.987940][ C1] toggle_allocation_gate+0x1a1/0x240 [ 419.987953][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 419.987967][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 419.987988][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 419.988004][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 419.988019][ C1] process_scheduled_works+0xae1/0x17b0 [ 419.988046][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 419.988068][ C1] worker_thread+0x8a0/0xda0 [ 419.988094][ C1] kthread+0x711/0x8a0 [ 419.988112][ C1] ? __pfx_worker_thread+0x10/0x10 [ 419.988126][ C1] ? __pfx_kthread+0x10/0x10 [ 419.988144][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.988162][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.988178][ C1] ? __pfx_kthread+0x10/0x10 [ 419.988196][ C1] ret_from_fork+0x4bc/0x870 [ 419.988211][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 419.988228][ C1] ? __switch_to_asm+0x39/0x70 [ 419.988240][ C1] ? __switch_to_asm+0x33/0x70 [ 419.988252][ C1] ? __pfx_kthread+0x10/0x10 [ 419.988269][ C1] ret_from_fork_asm+0x1a/0x30 [ 419.988289][ C1] [ 420.285164][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.899419][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.295091][ T75] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.375421][ T75] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.456737][ T75] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.516529][ T75] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.653963][ T75] bridge_slave_1: left allmulticast mode [ 423.660186][ T75] bridge_slave_1: left promiscuous mode [ 423.667649][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.682233][ T75] bridge_slave_0: left allmulticast mode [ 423.688033][ T75] bridge_slave_0: left promiscuous mode [ 423.702382][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.115992][ T75] bond3 (unregistering): (slave bridge1): Releasing active interface [ 424.335601][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.349729][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.359741][ T75] bond0 (unregistering): Released all slaves [ 424.504910][ T75] bond1 (unregistering): Released all slaves [ 424.522043][ T75] bond2 (unregistering): Released all slaves [ 424.534673][ T75] bond3 (unregistering): Released all slaves [ 424.609193][ T75] : left promiscuous mode [ 424.819938][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.915678][ T75] hsr_slave_0: left promiscuous mode [ 424.923752][ T75] hsr_slave_1: left promiscuous mode [ 424.931858][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.939445][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.947536][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.955110][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.980978][ T75] veth1_macvtap: left promiscuous mode [ 424.986709][ T75] veth0_macvtap: left promiscuous mode [ 424.992582][ T75] veth1_vlan: left promiscuous mode [ 424.998110][ T75] veth0_vlan: left promiscuous mode [ 425.558059][ T75] team0 (unregistering): Port device team_slave_1 removed [ 425.610298][ T75] team0 (unregistering): Port device team_slave_0 removed [ 426.402469][ T75] IPVS: stop unused estimator thread 0... [ 426.524664][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.620292][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.692301][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.780058][ T75] team0: Port device netdevsim0 removed [ 426.788426][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.009240][ T75] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.100114][ T75] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0