last executing test programs: 3m16.234206989s ago: executing program 32 (id=2882): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@cpuid={0x64, 0x18, {0x1f}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x80000007, 0x5, 0x3, 0x6, 0x5f7, 0x2, 0x5}]}) set_mempolicy(0x3, &(0x7f0000000280)=0x1, 0x4) (async) r4 = socket$kcm(0x11, 0x2, 0x0) (async, rerun: 32) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m2.30620107s ago: executing program 33 (id=2922): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="a80000000a06010100000000000000000300000508000940000000810900020073797a32000000000900020073797a300000400007800900130073797a3100000000060005404e2200238e4645939905ecaf000800094000000a9d0500150002000000080008400000000a08000b400000000906001a002c0000001800078008000b40000000040c001a006e6c3830323131000900020073797a3100000000100008800c0007"], 0xa8}, 0x1, 0x0, 0x0, 0x24004040}, 0x40000) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000002040)="11050806", 0x4, 0xb11, &(0x7f00000004c0)={0x11, 0x8100, r5, 0x1, 0xfd, 0x6, @broadcast}, 0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r3, 0x1}, &(0x7f0000000080)=0xc) r6 = syz_open_dev$video4linux(&(0x7f0000002300), 0x0, 0x90b43) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0205648, &(0x7f0000000500)={0xf010000, 0x0, {0x100, 0x0, 0x3005, 0x0, 0x0, 0x3, 0x1}}) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@newqdisc={0xf4, 0x24, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xd, 0xd}, {0x6, 0xfff2}, {0xfff2, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x736}, @qdisc_kind_options=@q_red={{0x8}, {0x14, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x7}, @TCA_RED_MAX_P={0x8, 0x3, 0xfd}]}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x800}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x20}, @TCA_FQ_PIE_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6f5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa61, 0x1, 0xfff, 0x7ff, 0x5a}, 0x5, 0x0, 0x4, 0x7, 0x8, 0x1c, 0x10, 0x12, 0x8, 0x2, {0x8, 0xc7ee, 0x0, 0x9, 0x9, 0x2}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x400c4) 2m54.103989528s ago: executing program 34 (id=2950): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x10001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r2, 0x2}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000240)={r2, 0x59}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r9 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000340)={0x4, @pix_mp={0x5, 0x4, 0x50313134, 0x7, 0x1, [{0x1, 0x9}, {0xfff}, {0x1, 0x7}, {0x5, 0x9}, {0x3, 0x1}, {0x7, 0x1000}, {0xa, 0x4}, {0x1, 0x7fff}], 0x3, 0x7, 0x8, 0x2, 0x2}}) 2m19.351569035s ago: executing program 35 (id=3036): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket(0x25, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "b630"}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xb, 0x0, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x0, 0x8, [0xa, 0x25, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x38, 0x21, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x390) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) fsopen(&(0x7f0000000180)='xfs\x00', 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000f140100000080b05b6b902b33901e006973736d0000000084bfab828b71647a34dffcc64e96b07b3f13a742e7c318147d5d2c32d2c6fa3bc77d08032d006b26abff5591b0c054c4f5e6d60bd5cd0800000062660c5d6f3af2041d9bbb8e8ca95f20473bbafabe506ca0fc6b7bb320c072fbd0cf16cd98b79621a7b67042f824d061c58921c3"], 0x1c}, 0x1, 0x0, 0x0, 0x4004015}, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r9, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e22, 0x4000002, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xa}, 0x1c) sendto$inet6(r9, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 2m5.785833124s ago: executing program 6 (id=3110): syz_emit_ethernet(0x331, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x0, 0x0, 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@gettaction={0x24, 0x32, 0x6dd711a25f4cb68b, 0x2004, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c080) getgid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x5, 0x0, 0xfffffffc}, 0x2c) r2 = syz_open_dev$media(&(0x7f0000000280), 0x0, 0x4080) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000400)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d270005000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000010060000005dea000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r4}, 0x38) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) r5 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x48, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) keyctl$chown(0x4, r5, r6, 0x0) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0x78) 2m3.545284514s ago: executing program 36 (id=3113): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000580)={0x8000fe, 0x7fff, 0x6, 0xfffffffb, 0x1, 0x8001}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="c6ce814f4d452ead87d14c0b6f367d4efa3b50e4804bc42241733f12598a08f423bbb4e968e5bf4b3c4c408b7c05d7df3566f1fa01f4d602d3bc8afcc8ed428fd384993080a5ff4a43bc477e9056326aed51c9f408f2ed887d730c490ed6071b90f16b98592bea24bfbb212dfc1ac44075ab4bb088afa07d8c96fc12efc0607a3296cd3cbeb281831877e2fae7cb5c852670a1728464dcddd1ad892f5b17ec8b46c0bc06ebc08de873529aeddc0bec6aad42f7e8e86743cc2ec92395be3610d121a719cc30bb1a2135ac552ccdbac1080fc54de05fe1d21589e19c3f2a7fea33ff6616feb4d427df1c39", 0xea}, {&(0x7f0000000200)="a53d7d88e5833556abb9592c4167a09a184f566fcde0ce665ad8ee41f3d00b755f02", 0x22}, {&(0x7f0000000240)="ed218e85551ceb075cf2fe0613a89741efa06022df654e7dd6c04ae42a72a6cee865af67f7296dcacc56ce2275713fd6a4e9b0f309429b214cc695eb0b14be033b10f4a8d69def299aa9f431d324e98f3248b67745c3a829cd9375d0c59e7b5972263ac561b50f21f124757dfdb2cc4a2b3b0ea1e345be4953169775bc33a23c1a896091981141ab7475540151f412da06ac32fa623beac9c7adddd13a2404d3f70be304435384a9f5c4774ca1b9edce912595b4bc90e0c024512edcaf78904354c222304cc7118c448d0bc6d780faff3675f8e8b9ce79d703440776ce48b01dc60bc5656249", 0xe6}], 0x3) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000380)=ANY=[@ANYRES8=r1], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x63660000) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x20058011) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 2m2.388695537s ago: executing program 6 (id=3117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000bc0)={'ipvlan1\x00', &(0x7f0000000b80)=@ethtool_link_settings={0x4c, 0x2, 0x3, 0x0, 0x7, 0x8, 0x42, 0x9, 0x80, 0x4, [0x0, 0x80000001, 0x81, 0xffff0000, 0xe00, 0x1, 0x81, 0x9]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20000040) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r6, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x814) 2m0.584044643s ago: executing program 6 (id=3118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000bc0)={"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"}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m57.304090054s ago: executing program 6 (id=3122): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x400, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x5, 0xb}, {0x6, 0xfff4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20000091) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, &(0x7f0000000200)="0f20e035200000000f22e066b842000f00d8b805000000b9a00000000f21c13e0f070fde460b0f0130670f01c2f2360f217ab9e90200000f32", 0x39}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1m56.108197314s ago: executing program 6 (id=3126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x181202) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xbcb, 0x0, 0x8}]}) r3 = socket(0x3, 0x2, 0x800006) setsockopt(r3, 0xe41, 0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 1m55.47983725s ago: executing program 6 (id=3127): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0xf) syz_open_dev$usbfs(0x0, 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea, 0x0, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000880)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x00\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000004100018000000000e4ffffffffffffff0e0001002a2d5c255b2a215d2d000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000830}, 0x0) epoll_create1(0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, @in6={0xa, 0x4e21, 0xb2f9, @local, 0x5}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x25, &(0x7f0000001500)={r7, @in={{0x2, 0x4e22, @empty}}, 0xfffe}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010017000000000a140000001100010000000001000000000300000ae02f2e18c0b99ca5b5273ab2d5ce9d71c0cb7c61180a884a63f60210596168abb6f2c53ea3ed714cf8db0857"], 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_io_uring_setup(0x187, &(0x7f00000006c0)={0x0, 0x8020c98e, 0x8, 0x2, 0x2e4}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000600), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x230, 0x278, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x8000004, 0x0, 0x20, 0x2, 0x1, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@unspec=@quota={{0x38}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'wg0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) 1m49.207138402s ago: executing program 8 (id=3142): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r0, {0x7, 0x29, 0xfffffffe, 0x60000, 0x0, 0x40, 0x2, 0xfffffff9, 0x0, 0x0, 0x80, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r1, r2, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003440)={0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003480)=0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x3, 0x3, 0x8, 0x0, 0x80, {0x5, 0x80000000000, 0x1, 0xfffffffffffffffa, 0x16f, 0xdbf, 0x10, 0x0, 0x0, 0x8000, 0x2, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x6, 0x801001a, 0x76d, 0xfffe, 0xf, 0x0, 0x0, 0x0, 0x41}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x4, {0x2, 0x100000000000, 0x6, 0x0, 0x4, 0x3881fffc, {0x5, 0xfff, 0x47ffff, 0x0, 0x3, 0x20000000, 0xb, 0x0, 0x10000, 0x8000, 0x80000000, r7, r8, 0x2, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$video(&(0x7f00000034c0), 0x2, 0x40c040) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000007c0)="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", 0x1000}], 0x1, &(0x7f0000001b40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50, 0x4000004}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001bc0)="4d335c076b762d3c620477881ad3e3daf22f864f1ceb8d421642df6f56657394f9f71a655e56cd52b6f2ce5988358cb1422592873ebae1", 0x37}, {&(0x7f0000001c00)="cff5d6bd4f5e31e14bf3c1f821c4e3d4f2bc41e26bd1673d25d1e205e5cddd9d0eb2ad2c58355b05af408960337ac9ff8db6a852f693caa359fff22838cc61978a16501069af162d8c379e9618f938590db72e681d6a1baa", 0x58}, {&(0x7f0000001c80)="51272ef4883763066b662f59bb04731234f3e9dc460119742ec3b5c4f38ffe1e30e976ee3d728e4c55f2d260e8c99f8ca4e108444561c73a1f5904d1b4b3ecba7bac8dc45f428ba7e40f2221247f55a5c634b52889e0aa0aa0b04377a0a5b4e1e4c0ac1bc04aecbfc37eaeaaa390a8c310550b8058970cab2b14dce033e3acadfc568eac8c98a39663607e3d066b145e50f34012982b4f97", 0x98}, {&(0x7f0000001d40)="2381909000626be29a02ac953e85b59a7e65c9c81d759e97ba89811299c3da444291d44cd3403496a207cf22a78c84859384633bf959870dadeb2346114fddcc2c8653a358847f4725bdb26cb7b1f1d814bf986388c4fbd569688e28ff8b55fa5d1d72251073f47e622f207c9a0a4a3fe96e9421117436f5fe8824c5ab21c66f8b71570c67ea6fe07ea352d667901190786f7642247fa0891fb052f9ab9c59f13010ee3af81ae3a1a4ba7046af141d24b461ac751914378205d854b3cc152ac9d341ecabb4b7cc3acf1707", 0xcb}, {&(0x7f0000001e40)="fe3216880cdad19030337fd3d20aae9a916f6f6dcd5128b038d33ceb58cce6548e16a2fd59f57504e220069f6d6aeab8d52ddeda8df15f89b603457baeabd29ceba7f09815bccbcb74c0c5efe28399f4f87e31897d3e6425507debf7f795ede6fb28779f983fc2017d979a1a90eaf58b6777b51ad37f27879c9d508c5a79ac84e4d6c346ebb2fa25d6353af4163aa2436233fda746d61d6a1ffa2e385e64e54eea86dca910341e3238d85355ec615f05dbb27d0f3f7626f74114930d3ad2f2035621753a", 0xc4}, {&(0x7f0000001f40)="9a6439e00b5afb295e23db33d16f696b5c4c0120aac7a309144b701fbd478dd110131bfbb1719eafcc7f38cebdb044c741422b0b3c3c5b1e33458384d8b4ffe0a8a1a881d1317ccfe47ac226a5872a0abb061f70f1621f60a16cf158380c59f609b97d199db392eb40585fca", 0x6c}, {&(0x7f0000001fc0)="702191a680482b144efadaf6525d3032b7943edf", 0x14}, {&(0x7f0000002000)="b94c82df6247954df7a18b78908010dca14717a2a222c131404fb930d1d58204a2c002c3db5c", 0x26}, {&(0x7f0000002040)="3b188f2a2333bd264e5609a47d212f32d01ac8ae367bdbf201ac4f075854d7ec1466077137e78954c057dee099c66f644bbb01da83af4bf728c0932c18b0f5e47553c8dbe022", 0x46}], 0x9, 0x0, 0x0, 0x8004}}, {{&(0x7f0000002180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000002200)="0a65ece28af6927811ac1a36389bcc35f82e6731b569afd2c62f5f0fa98d92e25800c68f764b1c2e0ca9fa0c68a763dfc2b9fe3641b43002e77ce5a3d0f5dce41be95089204cd3a7980de074f2329de8abaaab4425cfc3eb0dbbba929d0246730573d9aa5d3789e462a609640dc177cb0329a8a3967fd4fcf72979c3ad383e08e5e983ce0df795c6477d4bb5f5eb546f1f87d1bff764531b8a3bd887120fef1359f1888d6dbd2e4eeaf64f1865d8b650c14a1d3995ca909ea8df2483e77f0b128fbb861e0d2ae427ae8fec533fa06d11a2b78926cd611a6a2349b8d50f6a", 0xde}, {&(0x7f0000002300)="899c39ecd17b4538de23e90accb0efb7e5f2ea63f5700d6d1f555b408a0a5f71c16c4c557b5b2fffd005a793c9937ad92f3b211c7e0dcc1a550e4e33e0e1a352624e6260eec813b71519e5eb529ec6018b399fe2cb377e8d1284ac8978e6da05b9fb12c94fef02f4ebd307180aa6bc51b64e89692ca7ced0f730bba8c4a1065407f6ac65cf9667f522072ab15a4ad4451687f5a60fa928932e254133ca72bc93446bd4aed2bb2f1b2b6efc4885ed3de88e8b2c4fdf2812952bf70edc9a727f79da8df030e9c6727b2ba8cadf4b1c490962aa06a6", 0xd4}, {&(0x7f0000002400)="3a2b4eaee3bbc1cac1e2dcc4b9ddf5a5eca2b91ad545b03dc923f966ac34509d74306f4f9bd5ed65b32e3019a6de3dbbb13bec5af7d19b58558dba6e0f6fd51d053ba1fe456518f62bd0741d0e96b3975bc328fad862b93c308b891b82d1574e31ab200dffe8a1808f3f37ad590308628d7134efe7fa4f46ef0e6328e60f39bf3b78a846fd9c47823b5453147f0443cb6c719df3e269c220aab3beea137fa23b23c5bb56afe0e8b0213d99d880fca4b87aeb2d695775f99935bb39ab1614a25c", 0xc0}, {&(0x7f00000024c0)="b1b7433da3d50ba5fd40c23db6d18d3b8ee996aa3475917bad88ded4a2ac00ce3ff2246a08273917ab782386c11f75a0ea40", 0x32}], 0x4, 0x0, 0x0, 0x40015}}, {{&(0x7f0000002540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002980)=[{&(0x7f00000025c0)="705a87c4f3698672438dd9edce66666753144d95274cf2075e41fa971abfe6643bf0440cec84ed287efaf9c8f78ac3fe6ae7e4f549dd1b272b3dbec014555306d7fcb6d941490909e79f345b767f46107ae47448f7b6aa974566f805", 0x5c}, {&(0x7f0000002640)="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", 0xff}, {&(0x7f0000002740)="2a213d6cf11d56cb96046c354c6d9b359ad2ac7168330ce34c2e2067989f3e14f55654b18afa58bfd07f5bad3f5da7192ba5b7cfdc4a4d4dbd876d7313bca5403729f9c06b3282e4bdbce14e2c366c37c1c3ea0017", 0x55}, {&(0x7f00000027c0)="5ff0562f4279205b997e075b5eac04a9d39e64d21af738ba4bd8459282232a8c0c44ad3c664a1d2dc9f01b63ac5bb7c49eb3048f49d6b6c8324903f9584e427d7bd86d42e5b988bea97bb59260cbe89925b3f21f29e718b4dcbbcf0fdd411877549e2a103c1b6e5ad1178cac840cc5131aa16af5e87c55d25749796f3a5df1656d48730664fd0e3b82cb99e3062d3511e6189babb3e422ca08a9ecd064fc22f2216e653b7cbf74914a5dbae042905150c0ca13876497ed30a3", 0xb9}, {&(0x7f0000002880)="5ef97c98c62e1f2c1cb1a88b7aa7be315f90b106dd1526ab2b960a26f9eaa032cdb226957d9093b0004634a4cf04e700d9e532ec8119feedba233689b58020b06a0278e9ddc299ff4e8ce3d93005fb04651d1a2b288b9c9b7686d31f5abd4e94a4aea665fe453cc334cd0be6464b3f73d1392e1b9ebc2e6f0945c809f7fdd23263bfc1257441bf2dfc98", 0x8a}, {&(0x7f0000002940)="f42961580ea5d04639e7f77b4602c1d7f67738b0fa65c7c17f25a35948ea6ebe1beade", 0x23}], 0x6, &(0x7f0000001800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000a1313cbb02c7f4910863b701d4ba7701efede560b72824efdc87b7208d72b44fe9051231d953229c6e9d37f2f1224766c02012f0f200a6898e830166381a3cfbeaf91e78b7ba025cf3d130c5e0488cc2caaa82f8884b760f000000000000c2d9099dfd3e6c5f4694", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x60, 0x80}}, {{&(0x7f0000002d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002dc0)="a0e1ac787d0c180632cbabf9dc534a7fad3c4bf732a1ff928cb915c264d015f00ca82deb37eacde0d074d408e2b0a0dd76b0a414d8c6c7677292d5eb0ed44d3c7f9cb600123d570ca13e77c2737414c2fcbdbb8956c03cc9f6209b42a612f77ff55e8d47911015bfa57e3fe2c7bd3bcc6f0b965771d0ed976b66cf2499b5", 0x7e}, {&(0x7f0000002e40)="28a96996a7b0230d1018e30e452d5cc5d9ccf8140a53a18b07b66e447fb65f", 0x1f}, {&(0x7f0000002e80)="956db9f702c063ad11d870b28fd0c35b22bd52f7932ed0eb3d5f740e0a016280d8a1c3852bbc6c63b2857149314f4d2ff42c53c75cac719eaf678e6e4c3d6a02a43dbcc839389523674d8b962ce9c817313b8c0ad2ef1ccbf2e9192d5acf7ce3abda77a096212e8777056330846a5a05e1a1f8c5b785e486ec", 0x79}, {&(0x7f0000002f00)="ec3405da7cbbe47259052c86b3ee5baf35aae65c10da94fccc4ba451dab9630e48c36de566f128b4df0e2db3de84aad3c549e6543fcbdc6ab0f5b0d287f59dd7c0b0b476e67319f5a42fc8db3c127af028503ad5b21b18a082d66c09c002dd0f2a88e524a95ef7449e55b234e4002dd858a7062a204afb46f3caa3714525e95b9d4241da4316cb2f47baa2544eee", 0x8e}, {&(0x7f0000002fc0)="c39f6efb8ca2b9ce3b6d43a3fdbbad5a0873772edc90b6cc0cfc6dba0af2617f0d07f3b149e3e8087e7504d833460da49a6605286c6978c2d2954d52dfe0987ac48b2c478d01c64089576bb59960c3dd564f4301e8ee1280ebbef1b1db8a124c932c059d71387469404601d343afd4146fe6cb00fa378203d430270401cb0c6440c8cb2b4f5f71a5a22ee33347f37a11", 0x90}], 0x5, &(0x7f0000003500)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r8}}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0xe8, 0xc0}}], 0x5, 0x8800) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@local, @local, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)=@delqdisc={0x194, 0x25, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x9, 0x7}, {0x3, 0xfff3}, {0xc, 0x8}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_pie={{0x8}, {0x34, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x15}, @TCA_PIE_LIMIT={0x8, 0x2, 0x5}, @TCA_PIE_BETA={0x8, 0x5, 0x18}, @TCA_PIE_ALPHA={0x8, 0x4, 0x20}, @TCA_PIE_BETA={0x8, 0x5, 0x3}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xaa}}, @qdisc_kind_options=@q_atm={0x8}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x96, 0xfc, 0x5, 0xfffff54d, 0x1, 0xffffffff, 0x0, 0x4}}, {0xc, 0x2, [0x9, 0xced0, 0x8, 0x4]}}, {{0x1c, 0x1, {0x8, 0x69, 0x5, 0x7, 0x0, 0x3ff, 0x7fffffff, 0x8}}, {0x14, 0x2, [0x6, 0x0, 0x8, 0x8, 0xfffc, 0x10, 0x1, 0x101]}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0x3, 0x2, 0xa7, 0x4, 0x2}}, {0x8, 0x2, [0xc, 0x9]}}, {{0x1c, 0x1, {0xd, 0x9, 0x4, 0x4, 0x0, 0x81, 0x8000, 0x6}}, {0x10, 0x2, [0x1, 0xb0ce, 0x0, 0x2, 0x5, 0x6]}}, {{0x1c, 0x1, {0x8e, 0x3, 0x3, 0x5, 0x0, 0x200, 0x7, 0x9}}, {0x16, 0x2, [0x3ff, 0x40, 0x6, 0x2, 0x4, 0x4, 0x5, 0xa748, 0x713d]}}]}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xff, 0x2, 0x1, 0x0, 0xe, 0x66e9, 0x7}}, {0x12, 0x2, [0x5, 0xa, 0xfe, 0x4, 0x0, 0x1, 0xc67]}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40}, 0x20040894) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) socket(0x2d, 0x2, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r11 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r11, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) 1m48.119465195s ago: executing program 8 (id=3146): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0xff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) preadv(r2, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) read$FUSE(r2, &(0x7f00000033c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m47.45611154s ago: executing program 8 (id=3147): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000900)=ANY=[@ANYBLOB="24010000160011092cbd7000fedbdf25ac1414aa000000000000000000000000fc0200000000000000000000000000004e2400004e2400060a0020a03c000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000ffffac1414bb000004d46c0000000000000000000000000000000000000109000000000000000000000000000000ffffffffffffff7f00000000003000000902008000800000000000000000000001800000000000004ed2000000000000ccacffffffffffff0500000000000000030000000000000039640000000000000600000009000000060000002bbd7000073500000a00014148000000000000000400000004000000200017000100000025bd700027bd70002abd700026bd700000000080c60000000a0020"], 0x124}, 0x1, 0x0, 0x0, 0xc804}, 0x24040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c000480420001800b0001006f626a726566000018000280080003400000000a0900020073797a31000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) 1m47.209935397s ago: executing program 8 (id=3148): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000006340)={0x2020}, 0x2058) read$FUSE(r2, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002140)={0x20, 0x0, r3, {0x0, 0x0, 0x80003ff}}, 0x20) 1m46.156019535s ago: executing program 8 (id=3151): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000200)={0x8043, 0x0, 0x1, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x2, 0x3}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380"], 0x1f0}}, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) lseek(r3, 0x80, 0x2) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) utime(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendto(r4, &(0x7f0000000200)="ffdf5a0d07c90c2176e138309de1305e463e3419924a024351d21287e9c75d1ba768db24f940b42de28db4737035af5550860c4825788688d6ea7b726244e6d7df17287e255617", 0x47, 0x40010, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2786dd603000bb00302b00fc020000000000000000000000000000fe80"], 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x1c9900) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0xc, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x10000, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x400c050) shutdown(r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 1m45.800614211s ago: executing program 8 (id=3154): symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x8) sendmsg(r4, &(0x7f0000000340)={0x0, 0x5f, 0x0, 0x5e, 0x0, 0x0, 0x2c}, 0x48d5) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/4096, 0x1000}, {0x0}], 0x5}, 0x0) syz_open_dev$loop(0x0, 0x9d, 0x10d502) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') lseek(r5, 0x1000000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r6, &(0x7f0000001700)={0x2020}, 0xffffff08) pread64(r0, &(0x7f0000000100)=""/253, 0xfffffd58, 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) openat$zero(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000480021032cbd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0400000008000200060000fcffffff00ff0100000cb8e28fb51ec06e00000000"], 0x11}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) symlink(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) 1m45.108128146s ago: executing program 37 (id=3154): symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x8) sendmsg(r4, &(0x7f0000000340)={0x0, 0x5f, 0x0, 0x5e, 0x0, 0x0, 0x2c}, 0x48d5) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/4096, 0x1000}, {0x0}], 0x5}, 0x0) syz_open_dev$loop(0x0, 0x9d, 0x10d502) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') lseek(r5, 0x1000000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r6, &(0x7f0000001700)={0x2020}, 0xffffff08) pread64(r0, &(0x7f0000000100)=""/253, 0xfffffd58, 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) openat$zero(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000480021032cbd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0400000008000200060000fcffffff00ff0100000cb8e28fb51ec06e00000000"], 0x11}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) symlink(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) 1m40.39519487s ago: executing program 38 (id=3127): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0xf) syz_open_dev$usbfs(0x0, 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea, 0x0, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000880)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x00\x00\x00\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000004100018000000000e4ffffffffffffff0e0001002a2d5c255b2a215d2d000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000830}, 0x0) epoll_create1(0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, @in6={0xa, 0x4e21, 0xb2f9, @local, 0x5}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x25, &(0x7f0000001500)={r7, @in={{0x2, 0x4e22, @empty}}, 0xfffe}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010017000000000a140000001100010000000001000000000300000ae02f2e18c0b99ca5b5273ab2d5ce9d71c0cb7c61180a884a63f60210596168abb6f2c53ea3ed714cf8db0857"], 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_io_uring_setup(0x187, &(0x7f00000006c0)={0x0, 0x8020c98e, 0x8, 0x2, 0x2e4}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000600), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x230, 0x278, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x8000004, 0x0, 0x20, 0x2, 0x1, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@unspec=@quota={{0x38}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'wg0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) 1m37.862274794s ago: executing program 9 (id=3167): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101442, 0x142) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\nr0, &(0x7f0000000000)='+&#-]})/%\x00', 0x400002, &(0x7f0000000040)={@align=0x7, {0x3, 0x34, 0x0, 0x5}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x9}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000140)={@my=0x1, 0xd}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000180)={0x2, {{0xa, 0x4e20, 0x6, @local, 0x962}}, 0x0, 0x6, [{{0xa, 0x4e22, 0x7, @local, 0x1}}, {{0xa, 0x4e24, 0x1000, @mcast2, 0x200}}, {{0xa, 0x4e23, 0x3, @empty}}, {{0xa, 0x4e21, 0x4, @loopback, 0x6}}, {{0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd0}}, {{0xa, 0x4e24, 0x7fffffff, @mcast1, 0x6}}]}, 0x390) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e24, 0x2e, @remote, 0x1}, {0xa, 0x4e22, 0x8000, @dev={0xfe, 0x80, '\x00', 0x39}, 0x703b}, 0x1, {[0x4, 0x2, 0x7fffffff, 0x1, 0x8, 0x9, 0x8, 0x4b46]}}, 0x5c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = signalfd4(r2, &(0x7f00000005c0)={[0x40]}, 0x8, 0x80800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x4b}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x820}, 0x20000041) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x4010, r2, 0xc0810000) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x33) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000780)={r1, 0x2, 0x1, r3}) write$hidraw(r1, &(0x7f00000007c0)="200ac639a627da89bc2113f4b6e2434b468c6a4b43d972b4fbd4eb48cd6a7d53a28580a5e6ae4c82ddfe6d63b71a4275f96fc8aa351c54fb692c49f70798b26a12818b75d260edfd886b114049489fecf794ba2f5d2e09db5f1507d0fa2335809f412bccbe8005fdfb792ab5713ee2ef5c063a3409cabd24467b3344ec62762fb4d7e0de92cf7c4051b2e14f09d04a1fabeb76b16b14c6c778f36e807394a9869da6cd18fa2e4c4903c7d9c708e1bd4cb7207a52f2309c784217394054b3e01c8d1981b29c167d06d7c86c206e65e68771f5bbcb6e8aa188e5191e695d39eec05b0589e3b90cb3b6dfc6e728a525b87b2dc6b6a87532", 0xf6) io_setup(0x10001, &(0x7f00000008c0)) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000a80)=@multiplanar_mmap={0x6, 0x6e063d71d697a3f0, 0x4, 0x0, 0x8, {0x77359400}, {0x5, 0x2, 0xff, 0xa, 0x8, 0x3, "dff1c99a"}, 0x2, 0x1, {&(0x7f0000000a00)=[{0x0, 0xa750, {0x2}, 0x9}, {0x10001, 0x3, {0x4}, 0x3}]}, 0x2, 0x0, r1}) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000b00)=0x5) r7 = creat(&(0x7f0000000b40)='./file0\x00', 0x100) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000b80)) r8 = socket$inet_smc(0x2b, 0x1, 0x0) close_range(r1, r8, 0x2) setsockopt$packet_int(r7, 0x107, 0xb, &(0x7f0000000bc0)=0x41, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x5, 0x0, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r9, 0x40089413, &(0x7f0000000c80)=0x2) ioctl$TUNSETLINK(r3, 0x400454cd, 0x312) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000cc0)={0x3e, 0x1, 0x7fffffff}) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000d40)={0x1, 0x1, 0x0, &(0x7f0000000d00)={0x1b, "dca27db6fe55d2195b6c0ea23d2a39717c5d5529ec852ce2a66406d10f9ca1b93c"}}) 1m34.51709982s ago: executing program 9 (id=3172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000000)=0x13) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xe860}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3000000}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000200)={0x0, 'macvtap0\x00', {0x4}, 0x401}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r6, 0x1, r0, 0x9, 0x80000}) r7 = syz_open_dev$video4linux(&(0x7f0000003e80), 0x7, 0x8000) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000003f40)={0x9e0000, 0x400, 0xb, 0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x9909df, 0x5, '\x00', @p_u32=0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f0000000380)={0x6, 0x5, 0xbf, 0x9, 0x4, 0x0, 0x4}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5201) 1m33.096181307s ago: executing program 9 (id=3174): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0x0, r3, {0x0, 0x0, 0x80003ff}}, 0x20) 1m32.161189781s ago: executing program 9 (id=3176): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x12, r2, 0x7e75d000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 1m31.572707185s ago: executing program 9 (id=3177): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0xfffffffffffffdcd, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1m30.834400469s ago: executing program 39 (id=3177): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0xfffffffffffffdcd, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1m29.674673219s ago: executing program 4 (id=3180): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x61b, 0xd027, {{0x9, 0x4, 0x3, 0x2a, 0x24, 0x65, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0x8c, 0x0, 0x1, [0xb, 0x7]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINK={0x8, 0x5, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x4000060) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x250000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000559c794feb2bca400ff000400000000000000050016002c0000f32279865e8a8d00bc00"/61], 0x24}}, 0x8800) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x840000000002, 0x3, 0x100) socket$kcm(0x29, 0x2, 0x0) 1m27.235991194s ago: executing program 4 (id=3181): r0 = syz_open_dev$dri(&(0x7f0000000340), 0xfffffffffffff7de, 0x2484c2) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000400)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1f, 0x9, @mcast2, 0x9}, 0x1c) shutdown(r3, 0x1) io_setup(0x101, &(0x7f0000000340)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8, r3, 0x0, 0x300, 0x0, 0x0, 0x2}]) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/212, 0xd4}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f00000004c0)=""/84, 0x54}, {&(0x7f00000005c0)=""/148, 0x94}, {&(0x7f0000000680)=""/154, 0x9a}, {&(0x7f0000000740)=""/108, 0x6c}, {&(0x7f00000007c0)=""/51, 0x33}, {&(0x7f0000000800)=""/111, 0x6f}], 0x8}, 0x7}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x2c, 0x2c, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {0xd, 0x2}, {0x7, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7}}]}, 0x2c}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x10) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r7 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000980)="98e752431c31c2f5221a956528f8127df671a05d0730a0af88500e711bd5ec36008bc8faa52564880218f806dcf6080ae48de060ef3d68139d42c1ba840d28a78c", 0x41}, {&(0x7f00000003c0)}], 0x2) io_uring_enter(r7, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, 0x0, 0x2) unshare(0x0) 1m25.685213742s ago: executing program 4 (id=3182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'pim6reg0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x5) io_submit(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x31e, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') lremovexattr(&(0x7f0000000780)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000001780)=@known='trusted.overlay.nlink\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) write$rfkill(r7, &(0x7f0000003040)={0x4, 0x3, 0x1, 0x1}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r8, &(0x7f0000003080)={0x2020}, 0x2020) 1m22.697134707s ago: executing program 4 (id=3183): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0x0, r3, {0x0, 0x0, 0x80003ff}}, 0x20) 1m21.731175075s ago: executing program 4 (id=3184): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000000, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) (async) mprotect(&(0x7f00000ce000/0x3000)=nil, 0x3000, 0x2000002) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) (async) r5 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) (async) setsockopt$inet_buf(r2, 0x0, 0x16a6113f93cd98d2, 0x0, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x8, 0x80000000) r7 = memfd_secret(0x80000) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0xbad689febb22c699, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x500c) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/126) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000000)=0x2, 0x4) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r11, {0x10, 0x9}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) accept(r5, &(0x7f0000000300)=@can, &(0x7f00000003c0)=0x80) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r1, 0x2}}, 0x18) 1m20.064096014s ago: executing program 4 (id=3185): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x2, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x5}}], 0x38) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\xa9\x06\x00\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c9bf765722c000000000400"]) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 1m19.628043297s ago: executing program 40 (id=3185): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x2, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x5}}], 0x38) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\xa9\x06\x00\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c9bf765722c000000000400"]) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 1m11.608161726s ago: executing program 3 (id=3187): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x9, @private1, 0x8}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)="81", 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r1, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 1m11.261664785s ago: executing program 3 (id=3188): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'net'}, {0x2d, 'rlimit'}, {0x2d, 'net_prio'}, {0x2b, 'cpuset'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}]}, 0x2b) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) flock(r0, 0xa) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000100)={{0x0, 0x1, 0xfffffffffffffffa, 0x4, 0x0, 0x6, 0x5, 0x1, 0x4, 0x8, 0x8001, 0x400, 0x8, 0x4dd2, 0x4}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001100)={r2, 0x9}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000002100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000002200)={0x8, 0x7, 0x3, 0x1d, &(0x7f0000002140)=""/29, 0x38, &(0x7f0000002180)=""/56, 0x33, &(0x7f00000021c0)=""/51}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r3, 0xc0386447, &(0x7f0000002280)={{0x8, 0x5, &(0x7f0000002240)=[{0xe9, 0x0, 0xa91}, {0x7, 0x0, 0x800}, {0x3, 0x0, 0x9}, {0x6, 0x0, 0x3}, {0x6, 0x0, 0x5}]}, 0xe0, 0x4, 0x8, 0x2, 0x0, 0x6, 0xc0a, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f00000022c0)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000002300)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000002340)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000002380)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000023c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000002400)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000002440)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000002540)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000002580)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000025c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000002640)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000002680)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f00000026c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000002700)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000002740)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000002780)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f00000027c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f00000028c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000002940)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r3, 0xc0186449, &(0x7f0000002f00)={r4, 0x0, {0x28, 0x7, &(0x7f0000002dc0)=[{0x7d, 0x727c2a60, 0x7aace92777708400, 0x9, 0x0, {0x10, 0xa, &(0x7f0000002480)=[{0x0, r5, 0x66}, {0xff, r6, 0x1000}, {0x1, r7}, {0x80000000, 0x0, 0x8}, {0x0, r8}, {0x80000000, r9, 0x3}, {0x1, r10}, {0xff, r11, 0x8}, {0x0, 0x0, 0x4}, {0x1, 0x0, 0x200}]}}, {0x49fe, 0x8cfbf638, 0x18beefe019412a00, 0x7b, 0x0, {0x10, 0x4, &(0x7f0000002600)=[{0x1, 0x0, 0x4}, {0xff, r12, 0x800}, {0x80000000, r13, 0x4}, {0x1, r14, 0x8591}]}}, {0x0, 0x4a7be018, 0xc8db4855a6361900, 0xb681, 0x0, {0x10, 0x9, &(0x7f0000002800)=[{0x80000000, r15, 0x101}, {0xff, r16, 0x10001}, {0x80000000, 0x0, 0x8}, {0x80000000, r17, 0xa}, {0x0, 0x0, 0xfffffffffffffffa}, {0x0, r18, 0x400}, {0x80000000, r19, 0x8}, {0x0, r20, 0x1ff}, {0x5e38ff2f99921ab5, r21, 0x8}]}}, {0xe14a, 0xb69eed38, 0x125e4d4995e939c0, 0x1, 0x0, {0x10, 0x3, &(0x7f0000002900)=[{0x0, 0x0, 0x4}, {0x0, r22, 0x40}, {0x1, 0x0, 0xeede}]}}, {0x6, 0xf4a81c88, 0x6763772d1e54bec0, 0x159, 0x0, {0x10, 0x5, &(0x7f0000002a40)=[{0x80000000, r23, 0x9}, {0x80000000, 0x0, 0x40}, {0x0, 0x0, 0x36e5a4d6}, {0x1, 0x0, 0xffffffffffffffff}, {0x80000000, 0x0, 0x7fffffff}]}}, {0x0, 0xc86f4698, 0x1d7ed4615f35cc40, 0x7, 0x0, {0x10, 0x6, &(0x7f0000002c40)=[{0x0, 0x0, 0x1ff}, {}, {}, {0x0, 0x0, 0x7}, {0x1, 0x0, 0x5270}, {0xff, 0x0, 0x1}]}}, {0xb, 0x3472d2b0, 0xeec1877c9b7e6ec0, 0x622, 0x0, {0x10, 0x4, &(0x7f0000002d80)=[{0x80000000, 0x0, 0x4}, {0xff, 0x0, 0x4}, {0xff, 0x0, 0x8}, {0xff, 0x0, 0x9e}]}}]}}) 1m11.076100846s ago: executing program 3 (id=3189): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xb80, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) unlinkat(r0, &(0x7f00000002c0)='./file0\x00', 0x200) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x4, 0x12}, 0x50) r2 = openat$incfs(r0, &(0x7f0000000300)='.pending_reads\x00', 0x802, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x51) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0xb) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f00000000c0)) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700302c0000000000000000000000080000001abbff02000000000000000000000000000129"], 0x0) 1m10.828360471s ago: executing program 3 (id=3190): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r2, &(0x7f00000021c0)={0x18, 0x0, r3, {0x7}}, 0x18) read$FUSE(r2, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002140)={0x20, 0x0, r4, {0x0, 0x0, 0x80003ff}}, 0x20) 1m9.823467977s ago: executing program 3 (id=3193): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfd3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$KVM_GET_TSC_KHZ_vm(r5, 0xaea3) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, 0xff7f}}, 0x20}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m9.368781318s ago: executing program 3 (id=3194): syz_usb_connect(0x1, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x98, 0x1b, 0x8b, 0x10, 0xbfd, 0x128, 0x3fe7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xae, 0x5, 0x40, 0x98}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x82c}}, {0x87, &(0x7f00000002c0)=@string={0x87, 0x3, "efa914e634be3e99cca5efec1928a7d7325800c63e5f9e5511c7a124753d5de38682bc76a463934dd28aea82aa5e6b86c98f42f48cbd1c1e114d4f8081d828dce778c6e4e83a85ab76f2ad9d820301066557aea18de67605c5beb7582a3cfc994df02acb26a464472699dcb969fae89310410344f7343a01ead6b1c73a0d0097b9a789acb8"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x810}}, {0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="2403d903d02b3e4cb062b7bdaa9b4784daba7ca54745"]}]}) syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x400) ioprio_set$pid(0x2, 0x0, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000100)=0x9, 0xa, 0x2) 1m8.707307517s ago: executing program 41 (id=3194): syz_usb_connect(0x1, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x98, 0x1b, 0x8b, 0x10, 0xbfd, 0x128, 0x3fe7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xae, 0x5, 0x40, 0x98}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x82c}}, {0x87, &(0x7f00000002c0)=@string={0x87, 0x3, "efa914e634be3e99cca5efec1928a7d7325800c63e5f9e5511c7a124753d5de38682bc76a463934dd28aea82aa5e6b86c98f42f48cbd1c1e114d4f8081d828dce778c6e4e83a85ab76f2ad9d820301066557aea18de67605c5beb7582a3cfc994df02acb26a464472699dcb969fae89310410344f7343a01ead6b1c73a0d0097b9a789acb8"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x810}}, {0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="2403d903d02b3e4cb062b7bdaa9b4784daba7ca54745"]}]}) syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x400) ioprio_set$pid(0x2, 0x0, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000100)=0x9, 0xa, 0x2) 20.625046588s ago: executing program 0 (id=3320): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) dup(r0) r1 = socket(0x18, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000500)={0x9, 0x1, 0x20, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x32315241}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x89, 0x2, 0x2, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) r7 = socket(0x29, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(r7, 0x0, 0x0) getsockopt(r7, 0x200000000114, 0x271b, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) write$RDMA_USER_CM_CMD_LISTEN(r6, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000180)=@ethtool_rxfh={0x46, 0x2, 0x10, 0x6, 0x2, "3a1783", 0x2}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) 18.393026115s ago: executing program 0 (id=3324): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010070080904000001020d0000052406000105240000000d240f0100000000000000000006241a0000080905000000000000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x9, 0x0, 0x5d, 0xfff9, 0x10, 0x7d, 0xd, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc6010aa00000a000300053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x20, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2a, 0xfff}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x100, 0x2, 0x6, 0x2, 0x8002, 0x7, 0x10, 0x2}, @processing_unit={0xd, 0x24, 0x9, 0x2, 0x2, [0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xd, 0xb, {0xa, 0x25, 0x25, 0x401, 0xe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0x2, 0xff, 0x0, {0xa, 0x25, 0x25, 0x5, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000480)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x10000c) lseek(r4, 0x1ff, 0x0) r5 = syz_io_uring_setup(0x207f, &(0x7f0000000080)={0x0, 0x8000, 0x1, 0x40003, 0x32a}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000140)) syz_io_uring_modify_offsets$generic(r6, r7, 0x2c, 0x10000) io_uring_enter(r5, 0x1cc5, 0x22cb, 0x40, 0x0, 0x0) 15.23758744s ago: executing program 0 (id=3326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000058000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa20080ff00000007020000ddffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 14.861271198s ago: executing program 0 (id=3327): socket(0xa, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000004d80)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000008c0)="cc41", 0x2}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e51009894cae17d2b361d9fedae469737f49b6a39d85a1ca87cbbb9b8e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0x7afc, 0x3, 0x4, 0x6fa, 0x7ff}}) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) getpgrp(0xffffffffffffffff) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0x7, 0x23e654d4, 0xa, 0x1000, 0x0, 0x18, 0x0, 0x200, 0x100, 0x0, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40603d10, 0x0) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x132, 0x40001002, 0xffffffffffffffff, 0x0) recvfrom(r7, &(0x7f0000000340)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil}) 13.776715421s ago: executing program 7 (id=3330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0xca, 0x0, 0x1, r2, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.164738986s ago: executing program 7 (id=3334): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000400)={0x1e0, 0x240, 0x3c00, 0x280, 0x5bac, 0x8, 0x4bfe210fed2ce1bf, 0x2, {0x0, 0xb, 0x1}, {0x7, 0x40, 0x1}, {0x2, 0x8}, {0x3, 0x4, 0x1}, 0x1, 0x10, 0xfffffff8, 0x7, 0x1, 0x5, 0x5, 0x101, 0x7ff, 0x2, 0x10007, 0xc, 0x26, 0x2, 0x0, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg(r1, &(0x7f0000020800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c840) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001b80)=ANY=[@ANYBLOB="12011001000000401c1b3e1b0000000000010902240001000080010904000082030002000921fd6f000122eb0009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a4000000010902120001000000000904"], 0x0) 8.920904845s ago: executing program 7 (id=3337): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x3f6, 0x715, 0x70bd2a, 0x25dfdbf8}, 0xffffffffffffff62}, 0x1, 0x0, 0x0, 0xc8d5}, 0xc014) 8.752130523s ago: executing program 7 (id=3338): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_usb_connect$uac2(0x4, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) r2 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000900)=@chain={'key_or_keyring:', r3}) syz_usb_connect$cdc_ecm(0x5, 0x74, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0xff, 0x0, 0xf, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x80, {{0x9, 0x24, 0x6, 0x0, 0x0, "55ab92e8"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x759, 0x0, 0x3ff, 0xf}, [@country_functional={0xe, 0x24, 0x7, 0x7, 0x2, [0x5, 0x9, 0x1, 0x1]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0xf, 0x9, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x5, 0xfd}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x17, 0x9, 0x46, 0xff, 0x4a}, 0x62, &(0x7f0000000380)={0x5, 0xf, 0x62, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x2, 0xfffc}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x7fffff2, 0xf00, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x7fffff8, 0xf00, 0x0, [0x60, 0xf0, 0xc00f, 0x18f, 0x3f00]}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x4, 0x0, 0x4, [0x3f0f, 0xc000, 0xffffc0, 0x30, 0xff00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xb, 0x4, 0x6}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x420}}]}) keyctl$read(0xb, r3, &(0x7f0000000440)=""/222, 0xde) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b000104000000090400000207010100090501"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x2e, 0x9, 0x70bd27, 0x3, {0x4}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="400e0200000007"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r2, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac3(r2, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 8.08480416s ago: executing program 1 (id=3341): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000067fcffff0700c3"], 0x2c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x400000000000, 0x8, 0x6, 0x200000000007fd, 0x7, 0x4}, 0x0, &(0x7f00000001c0)={0x1f, 0x0, 0x200, 0x3, 0x0, 0x5, 0x6a9}, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 7.443046619s ago: executing program 5 (id=3342): r0 = syz_open_dev$loop(&(0x7f0000000880), 0x7, 0x8101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x6, 0x3c1803) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000640)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0xdf, r5, 0x5}, 0xc) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x4400, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000140)=0xfff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000100)={0x2, 0x4, 0xa, 0xc, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r8, 0x560e, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f00000004c0)) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) ioctl$GIO_FONTX(r8, 0x4b6b, &(0x7f0000000480)={0x11c, 0xb, &(0x7f0000000080)}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) modify_ldt$read(0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000008c0)={0x0, 0x200}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 6.688119033s ago: executing program 2 (id=3343): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) gettid() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) close(r8) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 6.08425457s ago: executing program 1 (id=3344): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304fcfffeff3d00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c0012800b00010067656e65766500a856470ac7a612270001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x10005, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x2c020400) r4 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES8=r0, @ANYBLOB="8b1e47c653a341dc420172b45c3acb9af0ede6f47ef5ea518dc3633d0ce0f9ba1aabdb167b57d9ae2d2f30f1273eb438c7ea4b4fef25fe48b5c85f11b5faadce1d514f328453abcecfb8833ff1a8b2f24482d7d8dfdb1dd8d250d27575ca255a86716c238760e9f3ff3c4ffbdc6511d638c7e9ad6c66eb3f4d50647dd4390c6e7ec0fe1526a4168b927ede58cb54", @ANYRES32=r0, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRESOCT=r0, @ANYRESDEC], 0x2000, 0x800) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000005700)=@svm={0x6, 0x1, 0x1080, {}, {"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"}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 5.460086082s ago: executing program 5 (id=3345): socket$alg(0x26, 0x5, 0x0) r0 = socket(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x14, 0x0, @val=@netfilter={0x5, 0x0, 0x80000008}}, 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x9, @mcast2, 0x9}, 0x1c) io_setup(0x101, &(0x7f0000000340)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8, r0, 0x0, 0x300, 0x0, 0x0, 0x2}]) 5.378950989s ago: executing program 5 (id=3346): capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = getpid() timer_create(0x7, &(0x7f00000005c0)={0x0, 0x39, 0x0, @thr={&(0x7f0000000440)="399fe494d7f578a12565dfdcad58982814949f2308c0002548ea97776116f0061f8fe7ca4ad1c6ab39860bb4c090a9c13858be8b08ccef53d3785143fb0c90b612f7f625cd8cd9609d2dd7c6f9d14591376571ac99a3bb53e94b7af63d1da9ddfd090da4185b737a345af2aea6435ee63e4291f4f4ba2d9dd9af88492e2650eb088b252e1a5624810774d57ef99c1ab4407d6aaf58126e9ae2d87227ad182a8b4386b1eae4c2442658fd2ffae56e4af2f76a2e1beb3204d260", &(0x7f0000000500)="0ca5b38ffe7489526401de455b54a53692966bd0c9e65c9313fc79b62fa5c1f095930acb226dae8b4f038c0194a364c70ba29df55403ac319f130cdcccb6f8331e272cf3ba17fe0348838ab77a47105c7f59ffc1215b6d61175a52392eed75b68bb42f3e17ec73d121602fc4211595661b34c9400a270eb26da7e855bce1513abf0fec0c790223dcebda20662463ae5f7b414c56d78fd016625446a29d1be2b4c86ada264576"}}, &(0x7f0000000600)) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x20000000) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r5, 0xffffffffffffffff, 0x1a, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="020a000902000000e4a17c45c8d2", 0xe}, {&(0x7f0000000040)="0f96", 0x2}], 0x2}, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0xb) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r6) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) setxattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@random={'osx.', '[\x00'}, &(0x7f00000006c0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x2) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x10, 0x40, 0x4, 0x20, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) io_uring_setup(0x1862, &(0x7f0000000240)={0x0, 0x45ec, 0x182, 0x8002, 0xac, 0x0, r3}) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x4, {0xa, 0x4e20, 0x4, @loopback, 0x7}}}, 0x32) ioctl$PPPIOCGMRU(r6, 0x80047453, &(0x7f0000000080)) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x991, 0x1, 0x0, 0xdd9f83, 0xffffffff, 0x9, 0xfffffff9, 0xfffffffe, 0x5, 0x722, 0x4, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xe5}}) 5.285397813s ago: executing program 5 (id=3347): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x6e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x1, 0x1a}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@local, 0x4e23, 0x0, 0xffff, 0x8000, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x200000000000001, 0xfffffffffffffffc, 0x1000080000000, 0x2093, 0xffffdffffffffffa, 0x2}, {0x4, 0x40, 0xfffffffffffffffb, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0xa, @in=@broadcast, 0x3507, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xfffffffc, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cca67b171f10622e1233"}) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xb, 0x1}, {0xffe8}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x4, 0x4, 0x9, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2040806}, 0x0) recvfrom$inet6(r3, &(0x7f0000001680)=""/198, 0xc6, 0x40000041, &(0x7f00000019c0)={0xa, 0x4e20, 0xe8, @local, 0x8}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x23, 0x2b, {0x2b, 0x10, "ea730aaee344e3a663be54989545b85cfc57fce499a87ef95bf1833be6f4630a832611fd1f2aac7f56"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x85238bc41762e5e7}}}, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="20166c0000007fdca0dee91f94db4dc67a87338a941df6c03106f23fb9c301240de7312d7932463a806fc6d47d86e156961097dc47b198f1e3e610ff1ecd116c948d8677fd72231ee74c9435ff3ec9c4860ca4d0d70f356bc093e8b45f5c864316f62d28fea151841b9cf4be4cee140029b3"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000280)={0x20, 0x0, 0x5c, {0x5a, "3b2badcda1bd9590a28cc8f81e34ccb241c9af6fdf4196befb1129207c6d122860b4aed0a9369e8d0714df8ef7f7e14f1f08b354054411c6a11408a641edd1d49d1eb8dcbf5bcc47d9ba60c49ef48b9f5e29d12d405ebe4de5b1"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0xa}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0xb}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xb, "18"}]}}, 0x0}, 0x0) listen(r1, 0x8) r4 = syz_usb_connect(0x2, 0xe6a, &(0x7f0000001a00)={{0x12, 0x1, 0x200, 0xb1, 0x79, 0x79, 0xef, 0xccd, 0x4c, 0xf67c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe58, 0x3, 0xc7, 0x3, 0xb0, 0x8, "", [{{0x9, 0x4, 0x30, 0x10, 0x4, 0x14, 0x84, 0x4f, 0xf, [@generic={0x52, 0x21, "f708a0a551ad645d162369807e86522b086d96c89d251e090a47b90acf779233b7a20bf20b4669b13bfded67c524e03572ed7537849d84ed9831aa6617ec3445e766df00429cc23b2f3ec3f28701b306"}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "f0e931838e"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x1c000000, 0x5, 0x6, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x38}, [@country_functional={0x10, 0x24, 0x7, 0x9, 0x8001, [0x7, 0xc3d, 0xfff, 0x4, 0xfff7]}]}], [{{0x9, 0x5, 0x9, 0x0, 0x8, 0x3, 0x4, 0x4, [@generic={0x3c, 0x22, "4765d586a222ebc0e8afa6bfcd5aa2ef31cc0e1e324d21b4c814034fa030aa898168bb4fe8c50df1d08a043c0043fe5bcc4dcdb33cf72ae694e5"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xa5, 0x8462}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x8, 0x9, 0x4, [@generic={0xd6, 0xb, "04d967b6b7dfef97fde9a99f9de6bb21c8b6c2f00a8f72f8a7994ba093f95e1332b23b109a0102ef4cd20a492a047cab646345c07c46264cc583777cb2146f84c8ea250ff2891654448b013617e61dd32cba1c39b6ff1fa9a497453f6ed261d46bef63f93fb62b54766776787449e48870a950a644a745a64c3cc1c5bb3e18d6207f62e73ea055c5e8e2d2d3c92bce6b901838c73b50f0a09ef5e5404872e249f114a8ef1e8887d72483b60836b25a5bbb2001a855b50a85bef8b27d710342f9effee3c1a01c3e4d8c853e980def12de9553555b"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x5, 0x90, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x3}]}}, {{0x9, 0x5, 0x6, 0x2, 0x210, 0x7, 0x2, 0x0, [@generic={0xf6, 0xf, "35b6b46536016005fe4602519ec9f5b4f454d03fd7625f1b7dd2782c391799edb05ea8692723f25b6f52c0731c2cb6331620cd7b5df5a6cbb36804da0a7b6a79913c529554c9bb8b2801ca34687bb2f43deaacea5df97987cf3bd43c65e475781c0781fec2e6a65f2fdfe0c41a0f731ee93ffad945671558994ed7ad44c19ddf0618d2172d6d00655d0e95dd93cd60a9d52b582a51d073132f8ad7c3d1cdf143f249837bcea7a968570efa305f39d080469e0497c4b3b4e235c09e7d92a04384d684b51021550a55a596d8af2e62d3cc77a142f8e550bbad970a5a8584770c28eda6e3c50ad00f9a8e9bf7b4531b952dbe0123c3"}]}}]}}, {{0x9, 0x4, 0xfe, 0xb, 0xd, 0x9f, 0xc, 0xd5, 0xfe, [@hid_hid={0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0xf3}}], [{{0x9, 0x5, 0x3, 0x4, 0x8, 0x3, 0x8, 0x2, [@generic={0xe7, 0x24, "3c477eb3d0153723a1701bee3da046bf6fc557e5860f0d254f316724852ae4d59ee0385dd5954c64b8231abed818232ece338e1706ae22fba3f4ec13dd6358d7ff291fadaccc2d3b30a5cf5fe789001882fd7e6c121c3fcf38e5e03560bb221a2523982c33fe0a335693147a399581040015dbffd211ef9fbe97502e0a9fd44eebf44a415cc0424e183aa5b2df9f39078740899e9472ae727dff2c562b1fc83fc2254083d8939c00a0fb0bcb532f9720fdc4030c47ebcf593e6c1dd8a989f976b5f0eacbca92bb9e230e336b51af6b5b95ab6463e203669be24c3b44abd7a875248f7dfe52"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x2, 0xdd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1ff}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x1, 0x7, 0xa5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x2}]}}, {{0x9, 0x5, 0x6, 0x4, 0x250, 0x8, 0xfb, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x1, 0x9a, 0x3, [@generic={0xf0, 0xf, "b00e5ab47aaa8249f1800cc7383987de35854b3b7478c644952d9956917cd7d49fb80ee48168c759cb4cdc3f665e22f7c096d1fe8bde18ddba3ac58112e00871e550249c4bd959a3bbd2e71f34e52cfa123e05a766daea51f36d904f017d3f4dd4bddfd21f4dce8e6acb9d31a57fabbf715e8ee24fc815ac2e23d6a8a7ef211983ecc069f3fa8dfda9327015a6641a6f61a0d77a5717a3a1a2486f0f62d0643b3b6d9d653f862d2675fefb9d522dae0866e2f3cceb3594bfcf38bd5079926942aca9c8fa62c98fe753f869547c390ff1172616629b0384be249a40664c72ac2e74428d08e4b1fdae89f2bed4d6c1"}, @generic={0x28, 0xc, "f418faffca2617ef33f06753816f9746d0eb0dd0379a2d42cedd4e5eba27e1b6db2718516796"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x1, 0xf0, 0xff, [@generic={0x83, 0xb, "2a9caf2de945645661ccfcbb26ace5de9af194486db286593b6d6d83b1d37755d957ea7d4999b017403f648e5895726e1fedc999361fccc9c57c70c37da67ab1a90682c906cc60a11ea412044fb75224911d9c311583208102f9c6d3c582dae1f2f9f0dde6f447b8d7f5f3b93ac072928bf81373ebf5e33fb71a881f3c09cd3cb4"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xf10d}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x9a, 0xd, 0x6, [@generic={0xa2, 0xa, "831f09ec33ccc1ec13781cbebc0d962f5d0d0475ce18eadd071dd7706ed7da41239ac19a0a2fbf872ade571ad3326e188c57782215f7657fe4cfbc79389d90fc8681ab1448e495004c7c3946d77c449ab29335b410e54b590965beaf320a8f7d0b15da279061e3e3145535eac0e01aa2f2cfec47f01b1dec1816a02a2cee15df1c9c3c17da3679b9157675852bebbd3d07947c3158ca86c0bd8e88df41aa908a"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x3, 0x6, 0x2, [@generic={0x7f, 0xe, "dfbf601963df111d9a63eb768be7ae1f59955260cbd09c0fed0ef6b4e5eea8e962ff143a5a91418e1d69359af08bae050f3d0c0a9788e5943e7e3677149af3c884dc7acf01b11290c977ab0a005576ebf521c78c9024d1c89650254f43d92608663f5eff3dd6717253aa7ec9f16839fc5d9d8fede4216b44a38c7f60e3"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0xff, 0xbc, 0x8, [@generic={0xa9, 0x24, "592a4000ebf101e7dedcc53cbcdd6b88fc357bebfe3b7c6577438937678aa1c642b7a66a19d6cfe983ab08a82bcd9991e6fe9be836f0892390fd70776a5cf57ab3a902f2de400ea64bb00f0dca9d1d127e46219f8ef3731c80bdd850c1c20cb6c036f71e4d37035bb421470a7bffad2ab399fedee660df5c3a098e28d1029cd42ad29dfcb10bb309b834a5fa0ef41db06b6f15620f2063fb6eb60e89e60137fce87e7c2c4c1674"}, @generic={0xee, 0x9, "8e43eda6f6d0819134293d5e4428aabf7451f769f09e31b12737c4482b8fa3f0bdd1b64e768d7e3869a07b206065c693ce6369fe1916df65acb6469f70ad0660c5bce1e8eca194d52d25ccbdd45ea461280f081cd55f5ecb3acab9f2a9d1e6e4bed87701b06ec3cc420b799d6047eb9df3b2da8c95be30aa94f2cebcac4c5ff020aa12741fa2b666cc6f04571df00f6399dd6238e1c0b23424d5243324874fa74e831968b225e9d08bb1618b369e2b810126d37c0c5f6f0d150e4fa91f40dddff9ced7d6224b3c4de278505e5ee5b1786640290f8309d21d1c64ce85bf819b885c91b85a7c3d5b9b3e6be120"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x4, 0x7, [@generic={0x60, 0x64841d3c4621eebb, "3a25ba29386d540a4159bbf81d1cd75db8da7a0a8b45ee0756ff95e69615dfaeab2aa3dd4a4f13446ce0c21928f44f81309d71d12a5649fe3c984c577a47aa0f244c28d66276ce72b2644d9ed6829cb8b3f52530f14de0d0b32685ae0f14"}, @generic={0x7, 0x23, "49ea545aec"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x20, 0x7, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x2}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0xf9, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x4}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x6, 0x0, 0xc7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x401}]}}]}}, {{0x9, 0x4, 0x47, 0x88, 0xd, 0x34, 0x58, 0x83, 0x2, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "d3e5ddd16c32"}, {0x5, 0x24, 0x0, 0x110}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0xff, 0xb}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x8, 0x8, 0x3, 0x5, 0xc6}]}], [{{0x9, 0x5, 0x2, 0x4, 0x20, 0x5, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x4}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x2, 0xb2, 0x3, [@generic={0x65, 0x21, "e99a05b2f8e70327f9797a7487177069dc2705d7e533b1fd6758c3377eabf370c7541645d3719a034d352594e5a65fe795d4e69ee9998f1821c29ebdd2f7a8b8cbd24ef9cd3fc3c599556e47d1228dd7b3497ab08d17c746c47bba4e82a3cef0e8ecd6"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xf, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x5, 0xfa, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xde3c}, @generic={0x15, 0x9, "9e9f7199bb5b673fe070f00dd004ca6fc2c481"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0xa4, 0x40, 0x1, [@generic={0x35, 0x2, "2c9ea639070c1999f122b30410a2fdcc69f1ea96f21ada5c5e9c28cd25bc4363cecf73a42e14219d01d4bc0c33138578f359bc"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xc}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0x4, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x2, 0x8, 0xd7, [@generic={0xcb, 0x5, "00192664cfb96d7051469b86f8df80d97599f01b7415e5df8470d7aa45e7727cb6ef93f4b8ec46df9866e6b561847c531b855ff25b2f80a97426fd1709093a2b90a04a0156175e3949a09f5432aa9c9cc25ba97082a2693b7e9f3ea98f4922dea24170dce4f8759a4d54222e18ba4d64cffc35a4dcfaf0cad5024de8ebba1093ba55765f9428011bedfa7a4ed64e86fa59ce3b4dca977bc577f7ad5a751685fea003dba262c9d167e1c778c26561481e26bdae04e1a78557f0525f51a759393a0fd545c820cd7c54a5"}, @generic={0x2f, 0x30, "e12d0fb6a40023d187f1371b5d583eb8d1f6da5c61cf634501cdf67694339d409eb9e18bce40a85fc647593dbe"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0xf2, 0x7, 0x6, [@generic={0x55, 0x4, "12a84bc82f5a35fdef728bacee36057136c2a8d432b6913ea84fa5bd5a8391459dea3348c167f6df86ca442f410c80dc0ec1ac935fe5b4226997058b8a542183bd6e73ace927e2a08773cebeee3ed51e828597"}, @generic={0xac, 0x23, "835dc21764c434264c42f0b338724645df7eed1973758ba7c7a18d87b5d5b6162ef7eb679e3f17395a4047803ea2349953501af0a4158f1e134e22dd0ac456205dce08778e316ce3da773ba41c6349ebf6ca6e3c73eb0128d995ee973c44ee8c0fbf4bd1d218a6a8bedb802f231a05411a9ba287a06a7e8a76f10046d68a02a9a8b81533f8751e0d2e152b908d7bcfb7534ede463147c4412ae7a062953a87bf02049c66928934965359"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x6, 0x51, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x204}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xe, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x18, 0xfb, 0xe1, [@generic={0x5c, 0x22, "890d05b960a3440b227ea3852ccb3d1b6a2b5daeb07a898c071e597fb01fe59c08140343c79068e613927586698e861f9daf216e36d22e8a99308a3fba9f7d29033350f257b879093beb4bc8ce76c438d91da3641e688be235d4"}, @generic={0x101, 0x3, "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"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x2, 0x99, 0x2, [@generic={0xc, 0x10, "48a5628f3ac74818ca6e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}]}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x77, 0x6, 0xf1, [@generic={0x21, 0x17, "5a60c8726bda1db0d5a70e0b9404ee48007fe08acc0d014c4fce239be9bec5"}]}}]}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0xb0, 0xa, 0x6, 0x40, 0x8}, 0xc, &(0x7f00000011c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x4, 0xb}]}, 0x5, [{0xe8, &(0x7f0000001200)=@string={0xe8, 0x3, "21016aa896294f8b0d85a07bf2463c9f2414beb666ec4e5108af231f970f5c56913e6023e368de9e75d7007ccf6f664cd8b3829180c121055a60e2a11d2eb582760f99ea6e77c4df3dcf1b6f32020931d96fa4dee42295c20061dcd62c16fec9fdbb42aa87d13210ab2ae68b406e156cb43312a0827fdecf17980ac3dee33a41baa964c3b792c2879af959c29673f6fd2dbdf5723a8f773ac90a238ec86401c7da5b797133a8a48759a378f3cb8fa43511be1e97231d8b47d79759699b71922307bf1ac6f8dd04f650c24f80d10c2940e2317999f051ffc57d22173b5df2ebc2d5085a58b24b"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x439}}]}) syz_io_uring_setup(0x16b, &(0x7f0000000000)={0x0, 0x0, 0x13090}, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x17af, &(0x7f0000000380)={0x0, 0x0, 0x13290}, 0x0, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, &(0x7f00000015c0)={0x18, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1981}, &(0x7f0000000140)={0x77359400}, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xc1}}}}}]}}]}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xbffc, 0x6}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' 16'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r4, &(0x7f0000001640)={0x14, &(0x7f0000001480)={0x20, 0x5, 0x9b, {0x4e, 0x30, "b91411b10199a1080c492522d80b5d0c4585a1644f00b98f05ad2beb7ac91c95f0c4d6942d9ca016daf4399cd0f8b35a2713011f6d1f5296c643ff8162a27ab4e72224593f6e2a3aadf266f00008a27c10ca121aabc74628462298d05fb76b6513e4f81bbaeacb7cfe8c167ed16d59d7c7891378fceefa5bb84ceef4e9e93f7540873ca67686ae50a661fb89afa60837be7538250b3ca0e6bc"}}, &(0x7f0000001540)={0x0, 0x3, 0xc1, @lang_id={0x0, 0x3, 0x42c}}}, &(0x7f0000001880)={0x34, &(0x7f00000018c0)={0x0, 0x3, 0xa3, "73a18082d60374703a89591b0dafe5dd2a8b56d1ea28462dd5ec2b7e807b1dda524855cc8a5da3f609b2b510701dc76b413859cb163b39c8a61195b01a840951aeeaf0b60b7c8715113141910c8af190d6586404bb7c19399f34351282ce38415221ce0815a33c92f54af42b3d115154955b37aa2242b802fe84a9dce2897af8867ad15b76c699edfa735646dc41f2453a2418a1daa35ed5487639a9651906112f005de8a31e79fb84092c113c484d430b7d1447be1d5bb4eacf81717fc84f4920e04a1e0f2d5b4241fb4726064ce252d9dcd861a7a1220da15c1c1f6180"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000001780)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000017c0)={0xc0, 0xa1, 0x1, 0x180}, &(0x7f0000001800)={0x40, 0xa0, 0x4, 0xb}, &(0x7f0000001840)={0xc0, 0xa2, 0x2f, "8ed1d6469cedb991d139a0eb21cef6b5aa3c3e72f287f7b6706220a59b3a4e5f0adeb93f3368d109e77917e5caf942"}}) 5.242816597s ago: executing program 1 (id=3348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0xa8003, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'caif0\x00', @multicast}) 5.148447832s ago: executing program 7 (id=3349): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000724000480200001800700010063740000140002800800014000000010080002400000000e0900010073797a30000000e90800020073797a3200000000140000001100010000000000000000000500000acaa9bbcc83ac2a88f65cfbc04dc38c229fbc71d209e4306eb649107a0d2cc0356ceade2e9c872b5bee32af57e41c986948eb3941a5c39611119cedbc754c731ab97bf7d81662667b3c954dd0dea949a348e2629ff093061507fabadaf412dd02bd958d5221275fce7a9e8d9a80cb41b4f7fdf02c3a92fe42"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000080)={0x40, 0x4, 0x80000000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) setsockopt$sock_int(r6, 0x1, 0x45, &(0x7f0000000040)=0x8, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xd3, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000000ac0)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) 4.842236575s ago: executing program 2 (id=3350): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d75c9a5db49e7bf875a98f5104019dc5b48bf9cd70d52ea5a80dcf2c38f2ce00680d6423ea693e0ac3128e85deb8586fdf1b939a3794bdfc5616872252701a9311070b8ed0f48d6952a62079a4c6cf0be4de81ee7f1e9f4dbb88329c1591d8406a52"], 0x0) socket(0x1a, 0x3, 0xb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000002000fedbdf251000000018000180140002006e657464657673696d30000000000000080007000000000008000800"], 0x3c}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x4, 0x8, 0x4, 0x1, 0xda, 0x9, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xf, 0x6, 0xff, 0x1fb, 0x0, 0x3, 0x10000, 0x2}}, {0x8, 0x2, [0xfffe, 0x8001]}}, {{0x1c, 0x1, {0x0, 0xee, 0x2, 0x7f, 0x0, 0x5, 0x10000, 0x6}}, {0x10, 0x2, [0xca5, 0xd, 0x1, 0x9f01, 0xf29, 0xf]}}, {{0x1c, 0x1, {0x2, 0x9, 0x5, 0x7, 0x0, 0xfffffffb, 0x3, 0x4}}, {0xc, 0x2, [0x40, 0x800, 0x7f, 0x1]}}]}]}, 0xc4}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) setpgid(0x0, 0xffffffffffffffff) r13 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r13, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) close(0x3) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x2a000) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 3.193921079s ago: executing program 5 (id=3351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x5, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0x9, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x6f1}], 0x1}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) (async) syz_usb_connect(0x1, 0x36, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000780), 0xa, 0x1fb660eca7c14840) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f00000007c0)={0x76, 0xe, 0x3, 0xfffff64a, "6be4aae42bbe55ec239af78bd6ad1426da1e2d85171c03a033cdb3c065980641"}) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001a4000/0x3000)=nil, &(0x7f0000678000/0x3000)=nil, 0x3, 0x0, 0x0, 0x403, 0x0, 0x0, 0x8, 0x84}) (async) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000200)=""/182) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000300)={[{0x7, 0xf, 0x81, 0x7f, 0x1, 0x4, 0xb7, 0x3, 0x8, 0x9, 0x5, 0x2, 0xfffffffffffff0bb}, {0xa, 0x80, 0x5, 0x0, 0x1, 0x10, 0x8, 0x8, 0x9, 0x0, 0xfb, 0x0, 0xe}, {0x8, 0x5, 0x4, 0x9, 0x80, 0x50, 0x1, 0x7f, 0x6, 0x3, 0x1, 0x9, 0x6c}], 0x8000}) 3.044161833s ago: executing program 1 (id=3352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'wg2\x00', @broadcast}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0xe, @empty, 0x3}}, [0xb, 0x6ec, 0xc4e7, 0x8000008000000007, 0x8, 0x42, 0xffffffffffff363b, 0x1, 0x704e, 0x10001, 0xfffffffffffffffd, 0x4, 0x814, 0xfffd, 0x76]}, &(0x7f0000000180)=0x100) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) socket$packet(0x11, 0x2, 0x300) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x3fd, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xa, 0xffff}, {0xfff2, 0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4020) sendmsg$nl_route_sched(r4, 0x0, 0x4890) (async) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000002101030000000000000000050000080900010073797a3100000000080002400000000320000000020a03000000000000000000000000080900010073797a3100000000140000001100010000000000000000000200000a47778514b3c99fe1871414f3985db5ced20501fb4997bae64e388684f4716605415a0f9f59ca9f4a8b8833108e418e47dff96632c49d1b3ef4879399f3b06a745a81d07e9e57e3e3ec4484f91df84f0a56ea901146507634ec9fab1ce84566052ca78b209326c7df3983e215"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4080040) (async) set_mempolicy_home_node(&(0x7f000080e000/0x4000)=nil, 0x4000, 0x2, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') read$FUSE(r7, &(0x7f0000002c80)={0x2020}, 0x2020) (async) r8 = syz_open_dev$loop(&(0x7f0000001300), 0x7, 0x80) ioctl$BLKBSZSET(r8, 0x40081271, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r6, @ANYRES32=0x0, @ANYBLOB="0000000042000000240012800b355100697036746e6c00001400028005000400f700000005000600d9000000"], 0x44}, 0x1, 0xba01}, 0x0) 2.260416995s ago: executing program 2 (id=3353): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8050, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), 0x0) syz_pidfd_open(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="01000041000000001c00128009000100626f6e64000000000c0002800500010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$tun(r7, &(0x7f0000000940)=ANY=[@ANYBLOB="000088a8aa00b00ccff0001cf2ff31e2e803ebac"], 0x13) r8 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') execveat$binfmt(r7, r8, &(0x7f00000001c0)={[&(0x7f0000000180)='\x00']}, &(0x7f0000000480)={[&(0x7f0000000200)='bond\x00', &(0x7f0000000340)='cts(cbc(serpent))\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='macvlan\x00', &(0x7f0000000400)='\x00']}, 0x1000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) 1.893404895s ago: executing program 7 (id=3354): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000040)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x8a, 0x6, 0x2000000000009, 0x4, 0x43, 0x52e6ac5a, 0x2000ffffffff, 0x9, 0xfffffffffffffffd, 0xa, 0x9, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0x8, 0x85, 0x16, 0x3, 0x100000000, 0x5, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x40, 0x30, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0}) 1.431922813s ago: executing program 2 (id=3355): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) (async) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) process_vm_writev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0x20048024) (async) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) (async) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x1) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000080)={0x4, [0xd3, 0x7fff, 0x1, 0x400, 0x3, 0x4, 0x81a7, 0x400, 0x9, 0x8ca8, 0x3, 0x2, 0x8, 0x8fb, 0xd43, 0xf001, 0x1ff, 0x9, 0x3, 0x5, 0x3, 0x7, 0xc5, 0x2, 0x6, 0x32c, 0xff80, 0x1, 0x7, 0x10, 0x3, 0x2, 0xe, 0x8, 0x3, 0x3, 0x400, 0x5, 0x2, 0x0, 0x0, 0x300, 0xbdd6, 0x1, 0x7fff, 0x9, 0x7, 0x7], 0x6}) (async, rerun: 64) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x18}) (rerun: 64) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x200000, 0x6, 0x8, 0x6, 0x0, [{0x9, 0x80, 0x8d, '\x00', 0x7}, {0xd5, 0xfc, 0xfa, '\x00', 0x80}, {0x3, 0x2, 0x8, '\x00', 0x2}, {0x4c, 0x9, 0xc, '\x00', 0x5}, {0x10, 0x9e, 0xf, '\x00', 0x81}, {0x7, 0x0, 0x5, '\x00', 0x1d}, {0x0, 0xc1, 0xce, '\x00', 0x1}, {0x9, 0x3, 0x7, '\x00', 0x8}, {0x15, 0x4, 0x1, '\x00', 0x4}, {0xbe, 0x4, 0x34, '\x00', 0x9c}, {0xd, 0x74, 0x9, '\x00', 0x5}, {0x0, 0x4, 0x40}, {0x7, 0x1, 0xe, '\x00', 0xf9}, {0x9, 0x49, 0x4, '\x00', 0xf}, {0x91, 0x4, 0x1}, {0x2, 0x7, 0x2, '\x00', 0xfa}, {0x6, 0x3, 0x9, '\x00', 0x96}, {0x7, 0x93, 0x41, '\x00', 0x71}, {0x40, 0x71, 0x36, '\x00', 0x7e}, {0x0, 0x6, 0x8}, {0x7, 0x0, 0x8, '\x00', 0x9}, {0x6c, 0x0, 0xfa, '\x00', 0x1}, {0x0, 0x5, 0x3, '\x00', 0xaf}, {0x6, 0xb4, 0x4, '\x00', 0xc}]}}) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x2, 0x0, 0x106c, 0x80000001, 0x7fff, 0x80000004000080, 0x3, 0x8, 0x0, 0x5, 0x9, 0x8001], 0x1, 0x3c4210}) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 1.176141979s ago: executing program 1 (id=3356): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x98, 0x29, 0x36, {0x5e, 0xf, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x268}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000000)={0xa, 0x2, 0xb2}) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x8}}}, 0x2a) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x41, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 1.158644118s ago: executing program 2 (id=3357): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r2 = socket$inet6(0xa, 0x2, 0x25) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@deltaction={0x270, 0x31, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf7d8}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4e73}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf26}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xb8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x34ff}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}]}]}, 0x270}}, 0x4c850) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001680)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x5, 0xf}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20045005}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@local, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) (async, rerun: 32) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (rerun: 32) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async, rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) (async, rerun: 64) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet(0x2, 0xa, 0x0) (async) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002000000000000"], 0x10}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r8, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000009c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r9, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x20008180}, 0x4040) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r10, &(0x7f00000021c0)={0x2020}, 0x206c) (async) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x400, 0x0) 1.104720971s ago: executing program 5 (id=3358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/155, &(0x7f00000001c0)=0x9b) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000065c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c000080090003400000000020000b801c0001800a0001"], 0xe0}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) close(0x3) recvmmsg(r4, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/185, 0xb9}, 0xb}], 0x2, 0x40012020, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x8) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000ffe000/0x1000)=nil) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1a000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 950.091654ms ago: executing program 0 (id=3359): ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x1], [0x0, 0xfffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x1], [0x91, 0x0, 0x0, 0x8000000]], '\x00', [{0xffff8000, 0xfffffffe}, {}, {0x1cc7}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x200000}, {0x400000}], '\x00', 0x300}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf254100000008000300", @ANYRES32=r3, @ANYBLOB="ba92f1541361367653e0461a11acb16ac4e3ff312f1d2a67f9061f0fbbdd8f8470f87cbd0c742a57d6a0b14e9b1230"], 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x20008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0xfffffeff, 0x2, {0x1, @raw_data="d1726cfa71d4ed4a810d74ff07ffc9488c698dc4e2b2cff7f2f005ff0fc1da163d964d1ecd6f9f91c61257338d3a02f2243bb2d85ccbaacc4812de079f6b6d42fe5cbbe2b284f9a8e552408c8f46173ce0571ae46e206ba928c34e1c27059ff9d5409ed4440954d1dd4a48452bb880a71684e6270228a478d0e5e4a8de37a918bdf2e18069ff646d4d6edc1ab8b608b5efa46408362badc01775247fd8a0ea6e823c3e0b7cc8438902987e2a0726ec864c6106bb58de94971887df9f5be363eab7f3b1af43096e79"}}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000003c0)={0x1, 0x8, 0x4, {0x9, @win={{0x10, 0x0, 0x2, 0x8}, 0x7, 0xe, 0x0, 0x0, 0x0, 0x1}}, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xa}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001c40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x38, 0x1411, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x20008080) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = syz_open_procfs(0x0, 0x0) getdents(r7, 0x0, 0x51) write$P9_RCREATE(r7, &(0x7f0000001c80)={0x18, 0x73, 0x2, {{0x0, 0x1, 0x4}, 0x4}}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) recvmmsg$unix(r7, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/119, 0x77}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001500)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001540)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/251, 0xfffffffffffffe92}, {&(0x7f00000016c0)=""/150, 0x96}], 0x2, &(0x7f00000017c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001b40)=""/191, 0xbb}], 0x1, &(0x7f0000001940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x4, 0x100, &(0x7f0000001b00)={r8, r9+10000000}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 932.273089ms ago: executing program 2 (id=3360): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="04e5540e221aa142cb4e2d06774693340de48a7eedeec0dfda8ff96e0dd3137c0b4e0407e708eede78c0060a3328e8d5bd313809f3f024526db7c4c3bfe62c01e434b0e514686982642ed3ddaa0a14", 0x4f}, {&(0x7f00000000c0)="dbba1b5dbe0224292eb18292dc386c8080c6f082e1f1d50029a8629591c183972527afb630cb0f11748ee6e5c6cdf4b0c08214e8656941caa230709d50c14e81", 0x40}], 0x2, &(0x7f0000000140)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0xfb, 0x20, '\x00', [@generic={0x9, 0x58, "265a5b609a78f7a5346cccbed2524eeb7b644b4943325290ff3cab91ec47a4e0a42982d5ad6b9de1eeda73f7a7b1ae1293901255bc599c97cd53f751600d9a137e2bb1f8036826fbdc67df923a409b0d826ad8b60edd090e"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x30}, @generic={0x3, 0x90, "f2260eb418cabb13ea868fc3d1fe8b053e6620913aa6878a5cc0fd4b0831825a4ab84f71148caa16bf3dd3da9e6801d401823a19137b37a27f643c4b7678f4c38c864f39f94996414f6091586add5b1fc3281a41c0cc4bf74c2e862b3bab64283c5177cf8c474d0b5b6022ab3775f189b54671fef809b7973ef1df19600533f9ed4066c123df8b619bd5a6932aa33a12"}, @ra={0x5, 0x2, 0x5}]}}}], 0x138}}], 0x1, 0x20004880) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff7010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b9"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000640)={0x14, 0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0]}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x13}) r2 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), 0x10000000000000b3}, 0xc880) socketpair(0xf, 0x4, 0x3ff, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r4, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x8000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES8, @ANYRESDEC=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="010000000b0e00000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x11) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket$netlink(0x10, 0x3, 0x0) 231.087168ms ago: executing program 0 (id=3361): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="a00de5992210000000b01b10501821b768603b7b018520b22c749b1ef37b04df247e23fd2304797bf2c58d0396b25bd953c21ef45ec4888d50e832d93da3f7a673b269a8cd9c7eb038666821a615966f0f9aa5937a65ef9d50fb172a78113aeef9d0b5f5b6ab0a1a06992b9c6c4823dada169e1ffcf25cf2e6ce489f7ff82f2590c53fe079762d7762982070c9f24135012d411b65a1963d1bb31ca3a3198dbdaf6620a411ce99"], 0x0}, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000200)={0x29, 0xa, 0x100, "b258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="a00de5992210000000b01b10501821b768603b7b018520b22c749b1ef37b04df247e23fd2304797bf2c58d0396b25bd953c21ef45ec4888d50e832d93da3f7a673b269a8cd9c7eb038666821a615966f0f9aa5937a65ef9d50fb172a78113aeef9d0b5f5b6ab0a1a06992b9c6c4823dada169e1ffcf25cf2e6ce489f7ff82f2590c53fe079762d7762982070c9f24135012d411b65a1963d1bb31ca3a3198dbdaf6620a411ce99"], 0x0}, 0x0) (async) syz_usb_connect(0x2, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r2, 0x0, 0x0) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000200)={0x29, 0xa, 0x100, "b258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) (async) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) (async) 0s ago: executing program 1 (id=3362): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:'}, 0x19, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0405668, &(0x7f0000000000)={0x0, 0x0, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200080000002, 0x7, 0x8, 0x3}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0107000000bafefafc196c09000300", @ANYRES32=0x0, @ANYBLOB="0800c300b00a0000"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r10 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0xac8, 0xffffffff, 0x9e4, 0x9e4, 0xec, 0xffffffff, 0xffffffff, 0xac8, 0xac8, 0xac8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0x70, 0x98, 0x1ba, {0x46010000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x850, 0x8b0, 0x0, {0x0, 0x4}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[{}, {}, {0x0, 0x2}], [{}, {0x0, 0x8}]}, {}, {}, {[{}, {}, {}, {}, {}, {0xfffffffe}], [{0x6}, {0x0, 0x3}], 0xfe}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe40}]}, {[{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[], [{}, {0x4}]}], 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb28) dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000001c0)={0x6, 0x2fc, &(0x7f00000009c0)="566ed15191ec0a918ac47114e78018ae8cc14e34f964d3d9a6edb8795c31f7d7b4d4a0e36ef0e0bb17328349b4616ffb4cf7781ebf2f4f190f972db09810c05092a49e631c013466d4689663838b025366ef3bf0e26f62c2a0aef9f938eaf406fa17110d0140fb175378daaca553551fef8893705d431ef2b99c47a12401dafdb4adb43623043b3fb3397d4f40a850b28a8fe8172350861ae1e6f51119f1c07a754603b9bdb434b28a612c166fd79070ef9478102700bc1b5f6d8416f48047730eb20f9926c438b1ebb5cd19f8c73a565c6c7c323a14bd5a9d9585c4a03c39fdb3c432201b26589c3f9280b3f24fa2c0a3255cdc9a8ade52ff2b1c64408e1c0498c6ae50196b5716ea68cac086cae109837d47a19c3d57d7707304d185ed18bcc98f3b20b8349cfbc493949d2623e130a3857389f268058b4ed5af9467a8c6f9d9cda59ea6a7f089dd1d30c415b2a56dccda5b69e2fa69ea5ae70369a23d7f1cca402092c940a12412c1f7e7f23a6a09feb4fe7cd1e94772625588ee305e19c4ff7ff9d42e721a05e4b0c6ed4339cda7846bd1b8863ab148f87d1f5ac9937509a1e3db00dbc7c7fcabda98b2e2191e5114eae78b20072766bcdadfb898ddc5a41107bdd6400bb4cabccdca511d71ba5dd766b5600a9f11e3826173e432f1e6de9b040d15ddcb8fdc14f29f345649da449941b9d7703134c197d388d07f4d362a0b05edc81dffc68cc2cd83234d99b912b8adc8eab6438388107e5041d97b98241de2049ab6d98734a5258e086b2ee759a629e38a7c4c488201cd61fc930ddc536002c4ef338c5dc9afae5c2aa9542c7b58ef803db406f18364cc8a5e2c3260fcdb9d2cec55ec8cf3aecbfbeaeabbec0cde187519f79d1a4811ca3a5318e9121fde9f986d6cb2a45ea4e69e3d4fa05a66bb779eb8037d8c299c12605efe038a5f4c22cfedb9baa086b18ee0a3e5cce6dbf8dcd4bd6f3d8a67aaa5d3d09cd720196826f8e8cc1b1f7bde9786840bedfcb42ca4781b195efe6d66046eef53f86f6f0a8c9dd86446dec51d00b1b48c82a3716d841b306664e570c20a04b92616c34f8a9cfa778ca5e3bf23c3e9f7a80fbe26be831614c8d91a26fa47e478a4940cc7c4c847efaeeef56f3ede97480814d2f4909a153fae743325ca2bea2e44a42b9a1dd84afeb0d5e888148281534c35cd8079bddf5e7a11df5df4cc139db8c659c54107409aa80b1ddceb2f8c11290e3be479233ec92aadc4fc67b39c81d70277b59b19392d4d9498dedba6686177fa1ab5a451298ad6723df334547b06e51599343360154460f4076947cdd67611a3715639a78cb1e823a4fb6db4f783e065e9b11c196f9efe11629c28a28cc50b06e11fce67a2cad1138e81d06685b6e325b1fb342678a68e3463e21d2df1b12920a0f3dbdc452313158ed6423c5a7b47028c45544984f6f82d61914a5bbce6d34567d83a71281b7eb30ba099037c81d46eb4cf2e7c59561f7ca3d7f3c49901ea5ff2e42e7928518ec0d277d1b1c2ca3aeef26df89daff30b3e514817696040771fe9c4dbd7afbb30e5977f5b9d5300a08360d9856685fc5e409ea22a78ef603672d8117209f1f7dd2c942e5a3b70668cc13258c67ebef5a2b1e16922f5bb07afbe5b1edf7fa4b67996169aac3ca2fb6e544e7bb868415c17333beda1907e245a1290f223b39ec94b51776b36d12b03a8719f4df36694e19d741752c6689ee13ecd72c7c99132673b1859746763f6a5af1d26bfbe67d40f7c767232676fa3d5573d8b6c73d2df7c241a5d00f57e8cefb5b380ec16aac9ffddb39b3f6522df40482edd84222906f33482950b361d2b59bef35ed0fe325af4379d2eea372088886ed123e173a69873b41dea0adb62b4edfa59cefd70cb528c976d85ef7883664f4cde5f60f113ce1557f1ae14521b2386573b6e7461d64e3b6013a5bb434494fb105ea91e5c9b7a4ed5796798e90ef193f5423a9dd9b9f9a0e5d39cd20cf184787b5fb5c3f3dcbd6d69d5d7ac950c2400acdb5879f6297d558b621e2b1c2d90ee313cd4c73997c7bb6ef79130b9b52d37eab3d7d2f9634d47d5682d639bc2e35411e4561970312fbf8e61707e0563e976e4b6820de003bf80fcd3f7351acfc46ea0c9d3ca11e8f2aa81ba69a687e27589eaf071becc88163f702b84a4cdccf49d922709ba94a25bb22281ae09f35ca5c0a631dffa9e92c70405971fbdadc3e2375f9f122d37a1fc2b07c51fff50bdd76bad20cd5707ec4c26a718000838cc14dd0e9a4caad9b6ef66a22544c72cd2feae51d823b4a9760ac643b883f96f0f02f6cbbe14a8e58af1cdef6bb43fbebfc6696ac52ed79bb6f19aca79505b5d8310dbf2e7276817010b8860b84b6d84cfbcbf676dcdad60a2cfc9abba1dee15f54d9b1f969f3451a6e4ae3a22e179c86f2d31719115592dbf9425fc0d99bba8a91563a9c3c54adbeb5a2b746997889f0b297015443d1d972f27d17170cb9374c16b993540d4628c85b93816136ea372bdcb33c2ee448c33534409debca70b370506d09c7be295726b526291e897ba76f9cf9d0f3274fc202984f92639d47571923ee48d18f8a98bd0f9021d5f0b8621a4699254865ed1940bb079a27af8866ff4922ea9388c402ae66870410519f687c4bcc9908e876254a3b5cd193e65a9ea0b1346dc2f5d45ddaf6a3f49d8c4b9179b68c1e92a8e13db407f296b1e55eb5f4647353b8da6a17d332aa6b8b5842cbd11700a34c1e598346a8ea3f5e5a8c3f1ea1f089dc7cdbec12fb826ba5ace700a397ba5d78e0a010ba0e244c2e0dd25be5d6b3e8f1bb072f5a80d6a9e64a583ca993d0aa6e3609e04d58b40fe103ba37a2384a4cfcb0730f9559c90a7481c609f98c118748ebacb8b0ada449b353e8ad002acfd7096b57d24fa0fb3016fec60c0643cf184744ddcf9bfb227cbbf4b327d5a4ee181654be52e4fe8135b96b8d9d95b09229a1026d9ac4a50f5d614942656e612095b275070b986b632330b207f69e57e7d1e1af759c94126d99cc5aae6c27b614ff199481b05b055d74fc847580690ccb978bc29fbd7a5b36fd76896727df9d2c860fc57c5b4d86c86ee8b1da6a936b1f45508e4ad8dca59d2bfb9bebcf9d2ee7ea5816bbe4e23d030c93aadd495ef9870e1c07c7635ccf5fcdf3e533e7f0d2f4763eb37f08bfd6ed1b0761f9be484c7d503bef24b29e642d8e4efc00307db742ff2cd4c77a00f5decf9497ec07336e2ec129c7868d3c81e484bc5373256ed34e1ae14c20b7170b815677dae07fafe331d8f86f0e33cb8200cc09b2b9509d5c8e6b54abe29c754eb26906247ea3ea6ca6426be83e21455205a8327292d9a45f43e636f72b25e6683670844b706e3221ad4f7a0b484c3fe9094efdb16578570b51af901b069c41ba3b7c1338021e0911970816596684489a97b11233eb8eb457459d27066b5ccd1a7d0cee2efb716e68c264ebfcdecd165520e01e7118c9b3b645a2de2490f94f63b9bd7d8af4580b59b7f0d2ce4c06203f1e96e2ee497e0a93675a03f065a259f0c3fd4a3f76ad9e8ce1972f2fe12300a26daef06627ee22bba0262aa5f707e538dfb8d681b7d1477e6a9f1d76580e22fb253d1a10c6faa923f80b4df5b3a978cefd9a21a35426bd2920c6fb915cdac53b47af544a26d65653dc3383ff8e58c4a22bf70651ef62e46e06fca15e9c2fe5395e937cc06c20ec34b9a2f2def7c37b1e6c7a2a088c9c55c5d69cc1d3afdbd38ab1e9c47cf88098f1f8a6bad1ed87fd3b19103dc3bd7bcc2613a8e47dda92977436e770d65fd7b2e739bd6cc4bc5b82d9c0512cafc1714f4680e69f84a13ff1dc77ee56309459d28efe74e9f3087738798851921677b7119b98375243b1250bbcfd76081bf71c1e2048c185547e970b8db40b2b586ea27ac62ae32ca3bddffd90ee3a76a167564abb02f15cab8b3eb9c9115650dac0bb494200f0b4758ed3bd8254cb44b25144f03f68b2b5d96b4a4b2607b8d7f76a25f43032041305690068d88cf17f558b54f9b19f6f7a7a9a1ca1a2565f114e086f22c3a41812b8b21ccce2206ae306926d1a376d23d168d89d25c3f8e33b68d79f8f1b05d37a896c24556f9328ddad3deb7f93d0c7d8f29ab6e764e129b4b4fc9873dadae105b915a909fdf712d2f7145ac85a916844d70a5fd149ed4d1bef8a4a44692995959af5f1ad987202c3cf7975d0932cb7edbaaa8798384d0c29d6aed67b7fce7880223f385031b87603079eceb2734b285258e002ef372900ae0a39f03da5285f2afbe8c721a34ed63f16e72", &(0x7f0000000640), 0xbe8}) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000240)='asymmetric\x00', 0x0) request_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000200)='/vekiB(\x00\x00', 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3) kernel console output (not intermixed with test programs): 4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3121" name="/newroot/593/file1" dev="fuse" ino=1 res=1 errno=0 [ 700.721676][ T24] ath6kl: Failed to submit usb control message: -71 [ 700.731583][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 700.746040][ T8901] team0 (unregistering): Port device team_slave_1 removed [ 700.777136][ T24] ath6kl: Unable to send get target info: -71 [ 700.824078][ T24] ath6kl: Failed to init ath6kl core: -71 [ 700.832749][ T24] ath6kl_usb 1-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 700.865194][ T24] usb 1-1: USB disconnect, device number 72 [ 700.906021][ T8901] team0 (unregistering): Port device team_slave_0 removed [ 700.965916][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3122'. [ 701.343784][ T5290] 8021q: adding VLAN 0 to HW filter on device eth10 [ 701.549582][ T5625] Bluetooth: hci1: command tx timeout [ 701.779382][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 701.993793][ T24] usb 9-1: device descriptor read/64, error -71 [ 702.072821][ T809] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 702.231906][T19566] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3126'. [ 702.232845][ T809] usb 5-1: Using ep0 maxpacket: 8 [ 702.313257][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 702.334534][ T809] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 702.371996][T19571] xt_policy: output policy not valid in PREROUTING and INPUT [ 702.382815][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.414368][ T809] usb 5-1: Product: syz [ 702.448987][ T809] usb 5-1: Manufacturer: syz [ 702.464418][ T809] usb 5-1: SerialNumber: syz [ 702.486785][ T809] usb 5-1: config 0 descriptor?? [ 702.515491][ T809] gspca_main: se401-2.14.0 probing 047d:5003 [ 702.543190][ T24] usb 9-1: device descriptor read/64, error -71 [ 702.558488][T19485] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.618111][T19485] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.637094][T19485] bridge_slave_0: entered allmulticast mode [ 702.667023][T19485] bridge_slave_0: entered promiscuous mode [ 702.684010][ T24] usb usb9-port1: attempt power cycle [ 702.731969][T19485] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.763578][T19485] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.788781][T19485] bridge_slave_1: entered allmulticast mode [ 702.841115][T19485] bridge_slave_1: entered promiscuous mode [ 702.929972][ T809] gspca_se401: ExtraFeatures: 189 [ 702.948822][ T809] gspca_se401: Too many frame sizes [ 703.063334][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 703.152945][ T24] usb 9-1: device descriptor read/8, error -71 [ 703.234905][ T29] usb 5-1: USB disconnect, device number 25 [ 703.594958][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 703.623103][ T5625] Bluetooth: hci1: command tx timeout [ 703.631104][T19485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.933899][ T24] usb 9-1: device descriptor read/8, error -71 [ 703.976876][T19485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.103566][ T24] usb usb9-port1: unable to enumerate USB device [ 704.114690][T19485] team0: Port device team_slave_0 added [ 704.151231][T19485] team0: Port device team_slave_1 added [ 704.301809][T19485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.336265][T19485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.451442][T19485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.497177][T19485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.523684][T19485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.526895][T19602] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1958477870 (3916955740 ns) > initial count (2199611658 ns). Using initial count to start timer. [ 704.638555][T19485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.703182][ T5290] 8021q: adding VLAN 0 to HW filter on device eth11 [ 704.893441][ T1223] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 704.913182][ T29] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 704.927968][T19606] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 704.954199][T19606] PKCS7: Only support pkcs7_signedData type [ 704.956716][T19485] hsr_slave_0: entered promiscuous mode [ 704.994086][T19485] hsr_slave_1: entered promiscuous mode [ 705.093189][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 705.107183][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 705.123178][ T1223] usb 5-1: Using ep0 maxpacket: 32 [ 705.156744][ T1223] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.175904][ T29] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 705.207591][ T1223] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 705.228612][ T29] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 705.248401][ T1223] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 705.261505][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.283876][ T1223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.302081][ T29] usb 1-1: Product: syz [ 705.307894][ T29] usb 1-1: Manufacturer: syz [ 705.323912][ T1223] usb 5-1: config 0 descriptor?? [ 705.330326][ T29] usb 1-1: SerialNumber: syz [ 705.465049][ T5710] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 705.570819][T19592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.597037][T19592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.632970][T19592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.657701][ T5710] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 705.668765][T19592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.686438][ T5710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.720295][ T5710] usb 9-1: Product: syz [ 705.731656][ T5710] usb 9-1: Manufacturer: syz [ 705.750605][ T5710] usb 9-1: SerialNumber: syz [ 705.769206][ T29] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 705.784431][ T5710] usb 9-1: config 0 descriptor?? [ 705.809964][ T29] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 705.821603][ T5710] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 006 [ 705.858454][ T29] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 705.905233][T19485] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 705.939271][T19485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 705.967289][T19485] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 706.008180][ T5710] (null): failure reading functionality [ 706.028467][T19485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 706.054261][ T5710] i2c i2c-1: failure reading functionality [ 706.085068][ T5710] i2c i2c-1: connected i2c-tiny-usb device [ 706.091565][T19485] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 706.137375][T19485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 706.162268][T19485] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 706.219969][T19485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 706.273049][T19603] kvm: kvm [19600]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 706.299924][T19603] kvm: kvm [19600]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 706.407455][ T6129] usb 9-1: USB disconnect, device number 6 [ 706.482204][ T5290] 8021q: adding VLAN 0 to HW filter on device eth12 [ 706.519696][T19485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.561341][T19485] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.591658][T10053] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.598834][T10053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.660561][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.667776][ T8890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.863197][T19485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.935911][T19485] veth0_vlan: entered promiscuous mode [ 706.966041][T19485] veth1_vlan: entered promiscuous mode [ 707.081712][T19485] veth0_macvtap: entered promiscuous mode [ 707.132609][T19485] veth1_macvtap: entered promiscuous mode [ 707.212546][T19485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.271513][T19485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.346106][ T24] usb 1-1: USB disconnect, device number 73 [ 707.359330][ T8890] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.448539][ T8890] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.507019][ T29] usb 5-1: USB disconnect, device number 26 [ 707.553502][ T8890] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.608711][ T8890] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.754331][T19643] netlink: 'syz.0.3135': attribute type 25 has an invalid length. [ 708.058641][T10053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.092792][T10053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.332131][T10050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.380974][T10050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.053790][T19664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.623457][ T6129] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 709.793995][ T6129] usb 10-1: Using ep0 maxpacket: 16 [ 709.826516][ T6129] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.864620][ T4945] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 709.877392][ T6129] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 709.884173][ T4945] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 709.901583][ T4945] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 709.913598][ T6129] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 709.925538][ T4945] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 709.933885][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 709.946429][ T4945] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 709.954434][ T6129] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 710.012982][ T6129] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.056638][ T6129] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 710.076035][ T6129] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 710.103242][ T6129] usb 10-1: Manufacturer: syz [ 710.113295][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 710.125446][ T6129] usb 10-1: config 0 descriptor?? [ 710.147893][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.199340][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 710.240034][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.266855][ T24] usb 5-1: config 0 descriptor?? [ 710.331669][T19681] macvtap1: entered promiscuous mode [ 710.338305][T19681] macvtap1: entered allmulticast mode [ 710.357626][T19681] veth1_vlan: entered allmulticast mode [ 710.450935][T19682] macvtap2: entered promiscuous mode [ 710.475070][T19682] macvtap2: entered allmulticast mode [ 710.490577][T19677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.522703][ T6129] rc_core: IR keymap rc-hauppauge not found [ 710.532075][T19677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.548016][ T6129] Registered IR keymap rc-empty [ 710.564841][ T6129] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 710.623893][ T6129] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 710.687191][ T6129] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 710.760444][ T6129] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input106 [ 710.843679][T19688] netlink: 'syz.8.3147': attribute type 32 has an invalid length. [ 710.864637][ T6129] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 710.916564][ T6129] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 710.954291][ T6129] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 710.995725][ T6129] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 711.052762][ T6129] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 711.104651][ T6129] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 711.175290][ T6129] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 711.253093][ T6129] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 711.304051][ T6129] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 711.327643][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 711.335563][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 711.378464][ T6129] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 711.382322][ T24] usb 5-1: USB disconnect, device number 27 [ 711.453803][ T6129] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 711.505679][ T6129] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 711.565030][ T6129] usb 10-1: USB disconnect, device number 2 [ 712.023682][ T4945] Bluetooth: hci6: command tx timeout [ 712.805098][T18361] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 712.821593][T19679] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.845176][T19679] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.863735][T19679] bridge_slave_0: entered allmulticast mode [ 712.883432][T19679] bridge_slave_0: entered promiscuous mode [ 712.927942][T19718] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3155'. [ 713.014989][T18361] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 713.051724][T18361] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 40736, setting to 64 [ 713.107268][T19679] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.131119][T19679] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.140532][T18361] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.165340][T19679] bridge_slave_1: entered allmulticast mode [ 713.182843][T19679] bridge_slave_1: entered promiscuous mode [ 713.189123][T18361] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 713.235072][T18361] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.437789][T19679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.471878][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 713.485399][T18361] usb 10-1: usb_control_msg returned -32 [ 713.487338][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 713.502086][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 713.507680][T18361] usbtmc 10-1:16.0: can't read capabilities [ 713.519512][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 713.527228][T19679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.539879][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 713.644449][T10050] bridge_slave_1: left allmulticast mode [ 713.652887][T10050] bridge_slave_1: left promiscuous mode [ 713.672616][T10050] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.699908][T10050] bridge_slave_0: left allmulticast mode [ 713.716288][T10050] bridge_slave_0: left promiscuous mode [ 713.740817][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.806290][T10050] dummy0: left allmulticast mode [ 713.846021][T10050] pimreg3: left allmulticast mode [ 714.113608][ T5625] Bluetooth: hci6: command tx timeout [ 714.351782][T10050] bond3 (unregistering): (slave gretap1): Releasing active interface [ 714.666769][T10050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.707554][T10050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.737755][T10050] bond0 (unregistering): Released all slaves [ 714.769674][T10050] bond1 (unregistering): Released all slaves [ 714.820467][T10050] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 714.852962][T10050] veth0_to_bond: left promiscuous mode [ 714.870461][T10050] veth0_to_bond: left allmulticast mode [ 714.897469][T10050] bond2 (unregistering): Released all slaves [ 714.942528][T10050] bond3 (unregistering): Released all slaves [ 714.996341][T10050] bond4 (unregistering): Released all slaves [ 715.147777][T19679] team0: Port device team_slave_0 added [ 715.216831][T10050] tipc: Left network mode [ 715.231200][T19679] team0: Port device team_slave_1 added [ 715.263153][T10050] IPVS: stopping backup sync thread 10547 ... [ 715.420747][ T6129] usb 10-1: USB disconnect, device number 3 [ 715.528744][T19679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.551220][T19679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.623320][ T5625] Bluetooth: hci0: command tx timeout [ 715.644220][T19679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.709382][T19679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.752904][T19679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.844045][T19679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.133726][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 716.184190][ T5625] Bluetooth: hci6: command tx timeout [ 716.263612][T18361] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 716.326392][T19679] hsr_slave_0: entered promiscuous mode [ 716.333606][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 716.354137][T19679] hsr_slave_1: entered promiscuous mode [ 716.367012][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.382106][T19679] debugfs: 'hsr0' already exists in 'hsr' [ 716.394950][T19679] Cannot create hsr debugfs directory [ 716.400411][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.439006][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.460424][T18361] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 716.491206][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.541201][T18361] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 716.559281][ T24] usb 5-1: Product: syz [ 716.579078][ T24] usb 5-1: Manufacturer: syz [ 716.589948][T18361] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 716.607725][ T24] usb 5-1: SerialNumber: syz [ 716.650522][T18361] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 716.669374][ T24] usb 5-1: 0:2 : does not exist [ 716.684711][T18361] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.705723][T18361] usb 10-1: Product: syz [ 716.721164][T18361] usb 10-1: Manufacturer: syz [ 716.726808][T18361] usb 10-1: SerialNumber: syz [ 716.736024][T18361] usb 10-1: config 0 descriptor?? [ 716.742075][T19739] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 716.758091][T19739] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 716.827424][T18361] usb 10-1: ucan: probing device on interface #0 [ 716.848562][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 716.914791][ T5290] 8021q: adding VLAN 0 to HW filter on device eth13 [ 717.008346][ T24] usb 5-1: USB disconnect, device number 28 [ 717.081551][T18361] usb 10-1: ucan: could not read protocol version, ret=-71 [ 717.139371][T18361] usb 10-1: ucan: probe failed; try to update the device firmware [ 717.177608][T19085] udevd[19085]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.186236][T18361] usb 10-1: USB disconnect, device number 4 [ 717.716130][ T5625] Bluetooth: hci0: command tx timeout [ 718.264256][ T5625] Bluetooth: hci6: command tx timeout [ 718.269823][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 718.336924][T19725] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.373719][T19725] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.426728][T19725] bridge_slave_0: entered allmulticast mode [ 718.431330][ T4945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 718.446398][T19725] bridge_slave_0: entered promiscuous mode [ 718.457706][ T4945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 718.466653][ T4945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 718.475300][T19774] tc_dump_action: action bad kind [ 718.480449][ T4945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 718.491549][ T4945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 718.520558][ T24] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 718.531881][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.540529][ T24] usb 10-1: Product: syz [ 718.574649][ T24] usb 10-1: Manufacturer: syz [ 718.579433][ T24] usb 10-1: SerialNumber: syz [ 718.608184][ T24] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 718.659100][ T29] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 718.844981][T19725] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.880314][T19725] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.906977][T19725] bridge_slave_1: entered allmulticast mode [ 718.935646][T19725] bridge_slave_1: entered promiscuous mode [ 719.139831][ T24] usb 10-1: USB disconnect, device number 5 [ 719.173281][T18361] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 719.271239][T19725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.299215][T19725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.366963][T18361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.408594][T18361] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 719.455714][T18361] usb 5-1: New USB device found, idVendor=1f58, idProduct=3bfc, bcdDevice=eb.a4 [ 719.465973][T18361] usb 5-1: New USB device strings: Mfr=169, Product=21, SerialNumber=247 [ 719.492624][T18361] usb 5-1: Product: syz [ 719.513768][T18361] usb 5-1: Manufacturer: syz [ 719.523449][T18361] usb 5-1: SerialNumber: syz [ 719.559847][T18361] usb 5-1: config 0 descriptor?? [ 719.639768][T19725] team0: Port device team_slave_0 added [ 719.697815][T19725] team0: Port device team_slave_1 added [ 719.717833][ T29] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 719.737753][ T29] ath9k_htc: Failed to initialize the device [ 719.764189][ T24] usb 10-1: ath9k_htc: USB layer deinitialized [ 719.784565][ T5625] Bluetooth: hci0: command tx timeout [ 719.909901][T19725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.922947][T19725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.949735][T19725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.014841][T19725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.041482][T19725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.098326][T19725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.440310][T19806] loop7: detected capacity change from 0 to 16384 [ 720.583944][ T5625] Bluetooth: hci3: command tx timeout [ 720.913207][ T5710] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 721.001583][T19725] hsr_slave_0: entered promiscuous mode [ 721.024094][T19725] hsr_slave_1: entered promiscuous mode [ 721.033471][T19725] debugfs: 'hsr0' already exists in 'hsr' [ 721.047719][T19725] Cannot create hsr debugfs directory [ 721.085079][ T5710] usb 10-1: No LPM exit latency info found, disabling LPM. [ 721.097006][ T5710] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 721.129612][ T5710] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 4 [ 721.142151][ T5710] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 721.163722][ T5710] usb 10-1: string descriptor 0 read error: -22 [ 721.183460][ T5710] usb 10-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 721.198301][ T5710] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.262475][ T5710] usb 10-1: low speed audio streaming not supported [ 721.275296][ T5710] usb 10-1: low speed audio streaming not supported [ 721.674646][ T5710] usb 10-1: selecting invalid altsetting 1 [ 721.720786][ T5710] snd-usb-us122l 10-1:1.1: usb_set_interface error [ 721.768718][ T5710] snd-usb-us122l 10-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 721.856758][ T5710] usb 10-1: USB disconnect, device number 6 [ 721.863296][ T5625] Bluetooth: hci0: command tx timeout [ 721.869880][T19679] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 721.950512][T19679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 722.003879][T19679] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 722.079406][T19679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 722.280679][T19679] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 722.374381][T19679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 722.414136][T19679] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 722.459729][T19679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 722.553088][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3169'. [ 722.662655][ T5625] Bluetooth: hci3: command tx timeout [ 723.646377][T19786] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.671779][T19786] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.695357][T19786] bridge_slave_0: entered allmulticast mode [ 723.728726][T19786] bridge_slave_0: entered promiscuous mode [ 723.986665][T19855] netlink: 'syz.9.3172': attribute type 7 has an invalid length. [ 724.335051][T19786] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.366007][T19786] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.402920][T19786] bridge_slave_1: entered allmulticast mode [ 724.420322][T19786] bridge_slave_1: entered promiscuous mode [ 724.570868][T19855] netlink: 'syz.9.3172': attribute type 7 has an invalid length. [ 724.705938][ T8867] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.725876][ T8867] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.743594][ T5625] Bluetooth: hci3: command tx timeout [ 724.821615][T19855] netlink: 'syz.9.3172': attribute type 7 has an invalid length. [ 724.848015][T18361] usbhid 5-1:0.0: can't add hid device: -32 [ 724.867201][T18361] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 724.893900][T19786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.919767][ T8867] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.942439][ T8867] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.037025][T19786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.230979][T19873] fuse: Bad value for 'fd' [ 725.264209][ T809] usb 5-1: USB disconnect, device number 29 [ 725.502376][T10050] hsr_slave_0: left promiscuous mode [ 725.523531][T10050] hsr_slave_1: left promiscuous mode [ 725.546980][T10050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.589472][T10050] pim6reg (unregistering): left allmulticast mode [ 725.949190][T10050] team_slave_1 (unregistering): left promiscuous mode [ 725.974771][T10050] team_slave_1 (unregistering): left allmulticast mode [ 725.997093][T10050] team0 (unregistering): Port device team_slave_1 removed [ 726.047687][T10050] team_slave_0 (unregistering): left promiscuous mode [ 726.075680][T10050] team_slave_0 (unregistering): left allmulticast mode [ 726.098004][T10050] team0 (unregistering): Port device team_slave_0 removed [ 726.322532][T10050] team0 (unregistering): left allmulticast mode [ 726.381493][T19786] team0: Port device team_slave_0 added [ 726.538422][T19786] team0: Port device team_slave_1 added [ 726.680161][T19786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.716494][T19786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.798113][T19786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.823454][ T5625] Bluetooth: hci3: command tx timeout [ 726.832512][T19786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.843012][T19786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.903374][T19786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.207197][T19679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.373987][T10050] IPVS: stop unused estimator thread 0... [ 727.388804][T19786] hsr_slave_0: entered promiscuous mode [ 727.425389][T19786] hsr_slave_1: entered promiscuous mode [ 727.456855][T19786] debugfs: 'hsr0' already exists in 'hsr' [ 727.493379][T19786] Cannot create hsr debugfs directory [ 727.709036][ T4945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 727.730191][ T4945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 727.748742][ T4945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 727.775899][ T4945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 727.788192][ T4945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 728.055999][T19903] netlink: 'syz.4.3179': attribute type 4 has an invalid length. [ 728.098940][T19902] netlink: 'syz.4.3179': attribute type 4 has an invalid length. [ 728.172913][T19679] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.259371][T19725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 728.285255][T19725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 728.317614][T19902] netlink: 'syz.4.3179': attribute type 4 has an invalid length. [ 728.318828][ T8899] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.332506][ T8899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.349734][T19725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 728.366968][T19725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 728.375878][T19725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 728.387085][T19725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.408425][T19725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 728.422195][T19725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.591362][ T8899] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.598551][ T8899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.796588][T10050] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.838282][T10050] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.874580][ T4945] Bluetooth: hci1: command tx timeout [ 730.354211][T10050] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.402778][T10050] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.546337][T19786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.723510][T10050] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.751143][T10050] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.964528][T19786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.214576][T10050] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.225622][T10050] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.425995][T19786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.727375][T19786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.862492][T19679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.944692][ T4945] Bluetooth: hci1: command tx timeout [ 732.496268][T19725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.038862][T19725] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.587425][T19899] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.627520][T19899] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.685893][T19899] bridge_slave_0: entered allmulticast mode [ 733.735709][T19899] bridge_slave_0: entered promiscuous mode [ 733.866620][T19786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 733.923376][T19786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 733.957916][T19962] loop2: detected capacity change from 0 to 7 [ 733.969238][T19899] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.998360][T19962] Dev loop2: unable to read RDB block 7 [ 734.014152][T19899] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.026459][T19962] loop2: AHDI p1 p2 p3 [ 734.026808][ T4945] Bluetooth: hci1: command tx timeout [ 734.050460][T19962] loop2: partition table partially beyond EOD, truncated [ 734.057824][T19899] bridge_slave_1: entered allmulticast mode [ 734.072366][T19899] bridge_slave_1: entered promiscuous mode [ 734.089275][T19962] loop2: p1 start 1601398130 is beyond EOD, truncated [ 734.125297][T19962] loop2: p2 start 1702059890 is beyond EOD, truncated [ 734.126458][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.139240][ T8901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.679172][T10050] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.837192][T19786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 734.898603][T19786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.000670][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.007813][ T8872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.031192][T19786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 735.047772][T19786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 735.140871][T10050] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.194909][T19786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 735.228994][T19786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 735.275929][T19899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.296033][T19899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.527703][T10050] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.646230][T19996] fuse: Bad value for 'fd' [ 735.658595][T19899] team0: Port device team_slave_0 added [ 735.686982][T19899] team0: Port device team_slave_1 added [ 735.762106][T10050] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.847310][T19679] veth0_vlan: entered promiscuous mode [ 735.861134][T19899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.876091][T19899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.908261][T19899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.971773][T19899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.990645][T19899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.056951][T19899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.113931][ T4945] Bluetooth: hci1: command tx timeout [ 736.310076][T19899] hsr_slave_0: entered promiscuous mode [ 736.336291][T19899] hsr_slave_1: entered promiscuous mode [ 736.363704][T19899] debugfs: 'hsr0' already exists in 'hsr' [ 736.382812][T19899] Cannot create hsr debugfs directory [ 736.420951][T19679] veth1_vlan: entered promiscuous mode [ 736.726201][T18241] bridge0: port 3(macvlan2) entered disabled state [ 736.751543][T18241] macvlan2 (unregistering): left allmulticast mode [ 736.763726][T18241] macvlan2 (unregistering): left promiscuous mode [ 736.773614][T18241] bridge0: port 3(macvlan2) entered disabled state [ 737.007343][T19725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.159512][T10050] bridge_slave_1: left allmulticast mode [ 737.179055][T10050] bridge_slave_1: left promiscuous mode [ 737.200986][T10050] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.245884][T10050] bridge_slave_0: left allmulticast mode [ 737.251541][T10050] bridge_slave_0: left promiscuous mode [ 737.289328][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.335826][T10050] bridge_slave_1: left allmulticast mode [ 737.341503][T10050] bridge_slave_1: left promiscuous mode [ 737.354541][T10050] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.408970][T10050] bridge_slave_0: left allmulticast mode [ 737.417699][T10050] bridge_slave_0: left promiscuous mode [ 737.431842][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.137697][T10050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.172957][T10050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.215851][T10050] bond0 (unregistering): Released all slaves [ 738.757331][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 738.780607][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 738.798606][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 738.806770][T10050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.826440][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 738.834883][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 738.881604][T10050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.915831][T10050] bond0 (unregistering): Released all slaves [ 739.148309][T19679] veth0_macvtap: entered promiscuous mode [ 739.337372][T19679] veth1_macvtap: entered promiscuous mode [ 739.582363][T19786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.949486][T19679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.283845][T19786] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.321284][T19725] veth0_vlan: entered promiscuous mode [ 740.366710][T19679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.434411][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.441568][ T8890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.473457][T10053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.615730][T10050] hsr_slave_0: left promiscuous mode [ 740.621863][T10050] hsr_slave_1: left promiscuous mode [ 740.634168][T10050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.652631][T10050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.670584][T10050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.687912][T10050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.707688][T10050] hsr_slave_0: left promiscuous mode [ 740.725021][T10050] hsr_slave_1: left promiscuous mode [ 740.744709][T10050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.754955][T10050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.778052][T10050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.804152][T10050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.868133][T10050] veth1_macvtap: left promiscuous mode [ 740.875536][T10050] veth0_macvtap: left promiscuous mode [ 740.881150][T10050] veth1_vlan: left promiscuous mode [ 740.888384][T10050] veth0_vlan: left promiscuous mode [ 740.903406][ T5625] Bluetooth: hci4: command tx timeout [ 740.928098][T10050] veth1_vlan: left allmulticast mode [ 740.935460][T10050] veth1_macvtap: left promiscuous mode [ 740.940973][T10050] veth0_macvtap: left promiscuous mode [ 740.948169][T10050] veth1_vlan: left promiscuous mode [ 740.953947][T10050] veth0_vlan: left promiscuous mode [ 741.557155][T10050] team0 (unregistering): Port device team_slave_1 removed [ 741.594683][T10050] team0 (unregistering): Port device team_slave_0 removed [ 742.180886][T10050] team0 (unregistering): Port device team_slave_1 removed [ 742.218378][T10050] team0 (unregistering): Port device team_slave_0 removed [ 742.446656][T10053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.464555][T19725] veth1_vlan: entered promiscuous mode [ 742.525252][T10053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.557024][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.564182][ T8890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.711943][T10053] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.983312][ T5625] Bluetooth: hci4: command tx timeout [ 743.285849][ T8890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.320569][ T8890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.463836][T19725] veth0_macvtap: entered promiscuous mode [ 743.690929][ T8872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.700691][T19725] veth1_macvtap: entered promiscuous mode [ 743.728701][ T8872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.762414][T20028] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.814784][T20028] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.841096][T20028] bridge_slave_0: entered allmulticast mode [ 743.856528][T20028] bridge_slave_0: entered promiscuous mode [ 743.942304][T20028] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.973075][T20028] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.996305][T20028] bridge_slave_1: entered allmulticast mode [ 744.016770][T20028] bridge_slave_1: entered promiscuous mode [ 744.048142][T19786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.260882][T20028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.307121][T20028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.380128][T19899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 744.421311][T19899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 744.533746][T19899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 744.557383][T19899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 744.577176][T20028] team0: Port device team_slave_0 added [ 744.596233][T20028] team0: Port device team_slave_1 added [ 744.608198][T19725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.615803][T19899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 744.630716][T19899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.639450][T19899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 744.650626][T19899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.709645][T20028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.718097][T20028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.749647][T20028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.787371][T19725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.806498][ T1223] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 744.827577][T20028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.838083][T20028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.865477][T20028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.911366][ T8890] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.942348][ T8890] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.967699][ T8890] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.992952][ T1223] usb 1-1: Using ep0 maxpacket: 16 [ 745.007941][ T1223] usb 1-1: unable to get BOS descriptor or descriptor too short [ 745.031486][ T1223] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 745.059414][ T1223] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 745.077685][ T5625] Bluetooth: hci4: command tx timeout [ 745.090302][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.109108][ T1223] usb 1-1: Product: syz [ 745.112708][ T8890] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.115607][ T1223] usb 1-1: Manufacturer: syz [ 745.128640][ T1223] usb 1-1: SerialNumber: syz [ 745.193023][T20028] hsr_slave_0: entered promiscuous mode [ 745.207602][T20028] hsr_slave_1: entered promiscuous mode [ 745.357711][T20090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.399407][T20090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.415266][T20090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.441132][T20090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.528177][T19786] veth0_vlan: entered promiscuous mode [ 745.551234][ T1223] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 745.581920][ T1223] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 745.626502][ T1223] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 745.695184][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.710051][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.738163][T19786] veth1_vlan: entered promiscuous mode [ 746.062522][ T8867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.072130][ T8867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.404181][T19786] veth0_macvtap: entered promiscuous mode [ 746.454976][T19786] veth1_macvtap: entered promiscuous mode [ 746.655674][T19899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.698496][T20128] netlink: 'syz.3.3187': attribute type 10 has an invalid length. [ 746.765824][T20128] veth0_vlan: left promiscuous mode [ 746.790191][T20128] veth0_vlan: entered promiscuous mode [ 746.825127][T20128] team0: Device veth0_vlan failed to register rx_handler [ 746.995785][T19786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.067268][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.073757][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.077487][T19786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.144123][ T5625] Bluetooth: hci4: command tx timeout [ 747.159496][ T6128] usb 1-1: USB disconnect, device number 74 [ 747.276826][T19899] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.355130][ T8890] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.389765][ T8890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.468775][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.475892][ T8897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.551543][ T8890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.577810][ T8890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.606068][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.613255][ T8897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.319561][T10053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.390808][T10053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.793753][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.865200][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.889967][T20028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 748.961489][T20028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.013659][T20028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 749.068841][T20028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.110838][T20028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 749.177420][T20028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.225447][T19899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.651282][T10053] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.897336][T20028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 749.978108][T20028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.086227][ T4945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 750.115261][ T4945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 750.128732][ T4945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 750.141812][ T4945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 750.155711][ T4945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 750.322124][T10053] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.716607][T10053] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.104338][T10053] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.192832][ T809] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 751.368695][T19899] veth0_vlan: entered promiscuous mode [ 751.373211][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 751.421828][ T809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 751.484175][ T809] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 751.506847][T19899] veth1_vlan: entered promiscuous mode [ 751.576326][ T809] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 751.605902][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.641550][ T809] usb 1-1: Product: syz [ 751.663840][ T809] usb 1-1: Manufacturer: syz [ 751.677481][ T809] usb 1-1: SerialNumber: syz [ 751.909313][T20028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.926741][T20191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.966481][T20191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.011075][T20191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.067147][T20191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.197953][ T809] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 752.244553][ T809] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 752.265713][ T4945] Bluetooth: hci0: command tx timeout [ 752.290700][ T809] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 752.488094][T19899] veth0_macvtap: entered promiscuous mode [ 752.556789][T20028] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.641031][T10053] bridge_slave_1: left allmulticast mode [ 752.661694][T10053] bridge_slave_1: left promiscuous mode [ 752.687816][T10053] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.713897][T10053] bridge_slave_0: left allmulticast mode [ 752.719654][T10053] bridge_slave_0: left promiscuous mode [ 752.726494][T10053] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.934528][T20229] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 753.241940][T10053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.281962][T10053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.299500][T10053] bond0 (unregistering): Released all slaves [ 753.324848][T19899] veth1_macvtap: entered promiscuous mode [ 753.776886][T20107] usb 1-1: USB disconnect, device number 75 [ 753.809667][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.816804][ T8897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.086196][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.093348][ T8872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.143654][T20192] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.160191][T20192] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.178706][T20192] bridge_slave_0: entered allmulticast mode [ 754.200966][T20192] bridge_slave_0: entered promiscuous mode [ 754.250561][T19899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.277798][T20192] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.289639][T20192] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.301357][T20192] bridge_slave_1: entered allmulticast mode [ 754.315679][T20192] bridge_slave_1: entered promiscuous mode [ 754.340816][T10053] hsr_slave_0: left promiscuous mode [ 754.346579][ T4945] Bluetooth: hci0: command tx timeout [ 754.359654][T10053] hsr_slave_1: left promiscuous mode [ 754.368361][T10053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.379082][T10053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.400092][T10053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.410975][T10053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.445968][T10053] veth1_macvtap: left promiscuous mode [ 754.451578][T10053] veth0_macvtap: left promiscuous mode [ 754.458013][T10053] veth1_vlan: left promiscuous mode [ 754.535480][ T6128] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 754.724894][ T6128] usb 1-1: Using ep0 maxpacket: 32 [ 754.791380][ T6128] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.836082][ T6128] usb 1-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30 [ 754.869901][ T6128] usb 1-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255 [ 754.912645][ T6128] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 754.957303][ T6128] usb 1-1: config 0 interface 0 has no altsetting 0 [ 754.986995][ T6128] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 755.003932][ T6128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.032958][ T6128] usb 1-1: Product: syz [ 755.045881][ T6128] usb 1-1: Manufacturer: syz [ 755.065658][ T6128] usb 1-1: SerialNumber: syz [ 755.098883][ T6128] usb 1-1: config 0 descriptor?? [ 755.123589][T20238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 755.443649][T10053] team0 (unregistering): Port device team_slave_1 removed [ 755.500213][T10053] team0 (unregistering): Port device team_slave_0 removed [ 756.040801][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 756.085444][T19899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.223778][T20192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.259650][T20192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.325908][ T8897] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.363973][ T8897] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.380504][ T6128] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 756.423143][ T4945] Bluetooth: hci0: command tx timeout [ 756.532847][T10050] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.562198][T10050] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.615369][T20192] team0: Port device team_slave_0 added [ 756.634528][ T6128] usb 1-1: USB disconnect, device number 76 [ 756.699842][T20192] team0: Port device team_slave_1 added [ 756.756695][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 756.971006][T20192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.014374][T20192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.127460][T20192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.171036][T20192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.199017][T20192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.293246][T20192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.633870][T20192] hsr_slave_0: entered promiscuous mode [ 757.650031][T20192] hsr_slave_1: entered promiscuous mode [ 757.666819][T20192] debugfs: 'hsr0' already exists in 'hsr' [ 757.682657][T20192] Cannot create hsr debugfs directory [ 757.753259][T18361] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 757.931767][T18361] usb 1-1: Using ep0 maxpacket: 32 [ 757.941554][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.965942][T20028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.982812][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.271050][T10053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.292647][T10053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.504420][ T4945] Bluetooth: hci0: command tx timeout [ 758.558541][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 758.665886][T18361] usb 1-1: unable to get BOS descriptor or descriptor too short [ 758.696272][T18361] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 758.729829][T18361] usb 1-1: can't read configurations, error -71 [ 758.795525][T20281] netlink: 'syz.5.3208': attribute type 10 has an invalid length. [ 759.657198][T20028] veth0_vlan: entered promiscuous mode [ 759.963851][T20028] veth1_vlan: entered promiscuous mode [ 760.163199][T20074] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 760.269174][T20028] veth0_macvtap: entered promiscuous mode [ 760.325116][T20028] veth1_macvtap: entered promiscuous mode [ 760.343630][T20074] usb 1-1: Using ep0 maxpacket: 16 [ 760.387880][T20074] usb 1-1: unable to get BOS descriptor or descriptor too short [ 760.425982][T20074] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 760.448050][T20028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.486858][T20028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.493250][T20074] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 760.547682][T20074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.583032][T20074] usb 1-1: Product: syz [ 760.599182][T20074] usb 1-1: Manufacturer: syz [ 760.609391][T20074] usb 1-1: SerialNumber: syz [ 760.774433][T10053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.800665][T10053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.841354][T10053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.880746][T20287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.909506][T20287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.941371][T10053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.961665][T20287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.999612][T20287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.106452][T20074] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 761.144280][T20074] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 761.210951][T20074] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 761.399209][T20192] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 761.434152][T20192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 761.458064][T20192] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 761.501021][T20192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 761.520031][ T8897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.526672][T20192] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 761.558411][ T8897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.575079][T20192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 761.586327][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 761.624733][T20192] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 761.645936][T20192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 761.708319][ T8867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.732814][ T8867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.041844][T20192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.141487][T20192] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.180779][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.187991][ T8872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.238738][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.245941][ T8867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.334320][ T6134] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 762.492888][ T6134] usb 3-1: device descriptor read/64, error -71 [ 762.588408][T20192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.720189][ T1223] usb 1-1: USB disconnect, device number 79 [ 762.774702][ T6134] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 762.803706][T20192] veth0_vlan: entered promiscuous mode [ 762.858915][T20192] veth1_vlan: entered promiscuous mode [ 762.952841][ T6134] usb 3-1: device descriptor read/64, error -71 [ 763.055477][T20192] veth0_macvtap: entered promiscuous mode [ 763.083331][ T6134] usb usb3-port1: attempt power cycle [ 763.112490][T20192] veth1_macvtap: entered promiscuous mode [ 763.193851][T20074] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 763.219086][T20346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.420709][T20192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.474059][ T6134] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 763.526623][ T6134] usb 3-1: device descriptor read/8, error -71 [ 763.549185][T20192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.647956][T10050] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.721273][T10050] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.811524][T10050] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.824807][ T6134] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 763.903609][ T6134] usb 3-1: device descriptor read/8, error -71 [ 763.934172][ T6128] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 763.948397][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 764.017105][T10050] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.039894][ T6134] usb usb3-port1: unable to enumerate USB device [ 764.135580][ T6128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.213644][ T6128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 764.274611][ T6128] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 764.307257][ T6128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.361305][ T8897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.390023][ T8897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.444899][ T6128] usb 1-1: config 0 descriptor?? [ 764.506646][T20355] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 764.561116][ T8897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.595425][ T8897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.999868][ T6128] hid-steam 0003:28DE:1142.004E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 765.168851][ T6128] hid-steam 0003:28DE:1142.004E: Steam wireless receiver connected [ 765.456884][ T6128] hid-steam 0003:28DE:1142.004F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 765.531291][T20371] CUSE: DEVNAME unspecified [ 765.767053][ T6128] usb 1-1: USB disconnect, device number 80 [ 765.924607][ T6128] hid-steam 0003:28DE:1142.004E: Steam wireless receiver disconnected [ 766.043744][T20382] netlink: 'syz.2.3220': attribute type 13 has an invalid length. [ 766.085061][T20382] netlink: 'syz.2.3220': attribute type 17 has an invalid length. [ 766.106922][T20388] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 766.106922][T20388] program syz.0.3223 not setting count and/or reply_len properly [ 766.367681][T20402] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1958477870 (3916955740 ns) > initial count (2199611658 ns). Using initial count to start timer. [ 766.663672][T18361] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 766.686844][T20392] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.694254][T20392] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.748950][ T5290] 8021q: adding VLAN 0 to HW filter on device eth13 [ 766.823974][T18361] usb 1-1: Using ep0 maxpacket: 32 [ 766.843480][T18361] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.863915][T20074] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 766.864450][T18361] usb 1-1: config 0 has no interfaces? [ 766.892737][T18361] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 766.919323][T18361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.959776][T18361] usb 1-1: config 0 descriptor?? [ 767.047283][T20074] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 767.072674][T20074] usb 6-1: config 8 has an invalid descriptor of length 145, skipping remainder of the config [ 767.105265][T20074] usb 6-1: config 8 has no interface number 0 [ 767.124141][T20074] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 14336, setting to 64 [ 767.174716][T20074] usb 6-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 767.214810][T20074] usb 6-1: config 8 interface 177 has no altsetting 0 [ 767.242652][T20074] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 767.272376][T20074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.520517][T20074] usb 6-1: string descriptor 0 read error: -71 [ 767.544057][T20074] ir_toy 6-1:8.177: required endpoints not found [ 767.602817][T20074] usb 6-1: USB disconnect, device number 4 [ 767.643414][ T24] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 767.813173][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 767.824445][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 767.850501][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 767.874065][ T24] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 767.884366][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.892387][ T24] usb 3-1: Product: syz [ 767.897621][ T24] usb 3-1: Manufacturer: syz [ 767.902247][ T24] usb 3-1: SerialNumber: syz [ 767.926993][T20403] kvm: kvm [20397]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 767.937646][T20403] kvm: kvm [20397]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 768.005177][ T5290] 8021q: adding VLAN 0 to HW filter on device eth14 [ 768.119592][T20407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.146827][T20407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.163362][T20407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.182098][T20407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.267443][ T24] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 768.290848][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 768.323739][ T24] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 768.419403][T20430] fuse: Bad value for 'fd' [ 768.539762][T20432] fuse: Bad value for 'fd' [ 769.023581][T20107] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 769.216676][T20107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 769.236532][T20107] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 769.250703][T20107] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 769.293604][T20107] usb 6-1: config 1 interface 0 has no altsetting 0 [ 769.302300][T18361] usb 1-1: USB disconnect, device number 81 [ 769.331656][T20107] usb 6-1: string descriptor 0 read error: -22 [ 769.348883][T20107] usb 6-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 769.384613][T20107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.397084][ T5290] 8021q: adding VLAN 0 to HW filter on device eth15 [ 769.855884][T20436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.894300][T20436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.006795][T18361] usb 3-1: USB disconnect, device number 98 [ 770.170584][T20107] usbhid 6-1:1.0: can't add hid device: -71 [ 770.180609][ T30] audit: type=1326 audit(1779271749.611:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20475 comm="syz.1.3235" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f715439ce59 code=0x0 [ 770.223809][T20107] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 770.246356][T20107] usb 6-1: USB disconnect, device number 5 [ 770.337350][T20478] dvmrp1: entered allmulticast mode [ 770.618517][T20489] fuse: Bad value for 'fd' [ 771.008611][T20500] netlink: 'syz.2.3240': attribute type 1 has an invalid length. [ 771.055802][ T5290] 8021q: adding VLAN 0 to HW filter on device eth16 [ 771.559171][T20518] netlink: 'syz.0.3243': attribute type 11 has an invalid length. [ 772.077084][T20535] syzkaller0: entered allmulticast mode [ 773.298988][T20555] xt_hashlimit: size too large, truncated to 1048576 [ 773.573778][T20561] syzkaller1: entered promiscuous mode [ 773.573800][T20561] syzkaller1: entered allmulticast mode [ 774.448364][ T30] audit: type=1326 audit(1779271753.871:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20577 comm="syz.5.3255" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f409179ce59 code=0x0 [ 775.038631][T20603] syzkaller1: entered promiscuous mode [ 775.055123][T20603] syzkaller1: entered allmulticast mode [ 775.083547][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3260'. [ 775.144177][ T6128] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 775.309158][ T6128] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 775.338431][ T6128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.362952][ T6128] usb 6-1: Product: syz [ 775.376645][ T6128] usb 6-1: Manufacturer: syz [ 775.391733][ T6128] usb 6-1: SerialNumber: syz [ 775.847361][ T6128] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 776.272776][T20629] netlink: 'syz.2.3262': attribute type 13 has an invalid length. [ 777.353347][ T24] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 777.453054][T20107] usb 6-1: USB disconnect, device number 6 [ 777.508947][T20107] usblp0: removed [ 777.557611][ T24] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 777.616174][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.655164][ T24] usb 1-1: Product: syz [ 777.683414][ T24] usb 1-1: Manufacturer: syz [ 777.702435][ T24] usb 1-1: SerialNumber: syz [ 777.757055][ T24] usb 1-1: config 0 descriptor?? [ 778.053589][T20107] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 778.146373][ T24] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 778.198602][ T24] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 778.224826][ T24] usb 1-1: USB disconnect, device number 82 [ 778.253163][T20107] usb 3-1: Using ep0 maxpacket: 32 [ 778.260160][T20107] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 778.279784][T20107] usb 3-1: config 0 has no interface number 0 [ 778.304437][T20107] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 778.339357][T20107] usb 3-1: config 0 interface 85 has no altsetting 0 [ 778.359696][T20107] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 778.385659][T20107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.414592][T20107] usb 3-1: Product: syz [ 778.430648][T20107] usb 3-1: Manufacturer: syz [ 778.447809][T20107] usb 3-1: SerialNumber: syz [ 778.467704][T20107] usb 3-1: config 0 descriptor?? [ 778.851605][T20107] appletouch 3-1:0.85: Failed to read mode from device. [ 778.875924][T20107] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 779.079790][T20107] usb 3-1: USB disconnect, device number 99 [ 779.129909][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3269'. [ 779.318766][T20107] IPVS: starting estimator thread 0... [ 779.414235][T20688] IPVS: using max 29 ests per chain, 69600 per kthread [ 779.813557][T20074] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 780.024044][T20074] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 780.084291][T20074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.153847][T20074] usb 2-1: config 0 descriptor?? [ 780.194630][T20074] cp210x 2-1:0.0: cp210x converter detected [ 780.811681][T20691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.845772][T20691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.915435][T20074] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 780.972100][T20074] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 781.012862][T20074] usb 2-1: cp210x converter now attached to ttyUSB0 [ 781.050244][T20074] usb 2-1: USB disconnect, device number 78 [ 781.104784][T19085] udevd[19085]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 781.108245][T20074] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 781.158323][T19085] udevd[19085]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 781.190791][T20074] cp210x 2-1:0.0: device disconnected [ 781.883363][T20107] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 782.033263][T20107] usb 2-1: device descriptor read/64, error -71 [ 782.113309][ T24] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 782.304062][T20107] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 782.333318][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 782.390141][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 782.436952][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 782.523232][T20107] usb 2-1: device descriptor read/64, error -71 [ 782.553216][ T24] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 782.591268][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.629416][ T24] usb 1-1: Product: syz [ 782.649416][ T24] usb 1-1: Manufacturer: syz [ 782.664393][ T24] usb 1-1: SerialNumber: syz [ 782.673592][T20107] usb usb2-port1: attempt power cycle [ 782.933538][T18361] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 782.944749][T20722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.981600][T20722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.030233][T20722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.064662][T20107] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 783.073645][T20722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.114651][T20107] usb 2-1: device descriptor read/8, error -71 [ 783.144017][T18361] usb 3-1: config 0 has an invalid interface number: 255 but max is 8 [ 783.159134][T18361] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.170222][ T24] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 783.179474][T18361] usb 3-1: config 0 has no interface number 0 [ 783.186114][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 783.196747][T18361] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 783.218471][ T24] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 783.253966][T18361] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 783.295614][T18361] usb 3-1: config 0 interface 255 has no altsetting 0 [ 783.317749][T18361] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 783.350155][T18361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 783.391112][T18361] usb 3-1: Product: syz [ 783.395941][T20107] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 783.416762][T18361] usb 3-1: Manufacturer: syz [ 783.443212][T20107] usb 2-1: device descriptor read/8, error -71 [ 783.451085][T18361] usb 3-1: SerialNumber: syz [ 783.474666][T18361] usb 3-1: config 0 descriptor?? [ 783.568765][T20107] usb usb2-port1: unable to enumerate USB device [ 785.140370][T18361] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 785.189280][T18361] pctv452e: pctv452e_power_ctrl: 1 [ 785.189280][T18361] [ 785.228009][T18361] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 785.228009][T18361] [ 785.258435][T18361] dvb-usb: bulk message failed: -22 (5/0) [ 785.270282][T18361] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 785.296047][T18361] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 785.326427][T18361] usb 3-1: USB disconnect, device number 100 [ 785.587450][T20776] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1958477870 (3916955740 ns) > initial count (2199611658 ns). Using initial count to start timer. [ 785.878296][T18361] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 786.043377][T18361] usb 3-1: Using ep0 maxpacket: 32 [ 786.097433][T18361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.116111][T18361] usb 3-1: config 0 has no interfaces? [ 786.121668][T18361] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 786.131381][T18361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.168925][T18361] usb 3-1: config 0 descriptor?? [ 787.227508][T20781] FAULT_INJECTION: forcing a failure. [ 787.227508][T20781] name failslab, interval 1, probability 0, space 0, times 0 [ 787.282872][T20781] CPU: 0 UID: 0 PID: 20781 Comm: syz.2.3284 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.282901][T20781] Tainted: [L]=SOFTLOCKUP [ 787.282908][T20781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 787.282919][T20781] Call Trace: [ 787.282928][T20781] [ 787.282936][T20781] dump_stack_lvl+0xe8/0x150 [ 787.282970][T20781] should_fail_ex+0x412/0x560 [ 787.282999][T20781] should_failslab+0xa8/0x100 [ 787.283027][T20781] __kmalloc_cache_noprof+0x88/0x660 [ 787.283052][T20781] ? vhost_task_create+0x123/0x380 [ 787.283081][T20781] vhost_task_create+0x123/0x380 [ 787.283104][T20781] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 787.283127][T20781] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 787.283152][T20781] ? __pfx_vhost_task_create+0x10/0x10 [ 787.283183][T20781] ? __pfx_vhost_task_fn+0x10/0x10 [ 787.283210][T20781] ? __lock_acquire+0x6b5/0x2cf0 [ 787.283232][T20781] ? kasan_save_track+0x4f/0x80 [ 787.283253][T20781] ? kasan_save_track+0x3e/0x80 [ 787.283272][T20781] ? kasan_save_free_info+0x46/0x50 [ 787.283289][T20781] ? __kasan_slab_free+0x5c/0x80 [ 787.283309][T20781] ? kfree+0x1c5/0x640 [ 787.283331][T20781] kvm_mmu_post_init_vm+0x147/0x2d0 [ 787.283357][T20781] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 787.283389][T20781] ? __mutex_trylock_common+0x158/0x260 [ 787.283413][T20781] ? look_up_lock_class+0x57/0x110 [ 787.283439][T20781] ? register_lock_class+0x31/0x2e0 [ 787.283457][T20781] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 787.283483][T20781] ? __lock_acquire+0x6b5/0x2cf0 [ 787.283503][T20781] ? __mutex_lock+0x319/0x1550 [ 787.283526][T20781] ? kasan_quarantine_put+0xbb/0x1f0 [ 787.283561][T20781] ? do_raw_write_lock+0x11d/0x260 [ 787.283601][T20781] kvm_vcpu_ioctl+0xa62/0xfd0 [ 787.283631][T20781] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 787.283651][T20781] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 787.283686][T20781] ? __fget_files+0x2a/0x420 [ 787.283710][T20781] ? __fget_files+0x2a/0x420 [ 787.283729][T20781] ? __fget_files+0x3a0/0x420 [ 787.283748][T20781] ? __fget_files+0x2a/0x420 [ 787.283772][T20781] ? bpf_lsm_file_ioctl+0x9/0x20 [ 787.283797][T20781] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 787.283820][T20781] __se_sys_ioctl+0xfc/0x170 [ 787.283845][T20781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.283864][T20781] do_syscall_64+0x15f/0xf80 [ 787.283888][T20781] ? trace_irq_disable+0x3b/0x140 [ 787.283914][T20781] ? clear_bhb_loop+0x40/0x90 [ 787.283936][T20781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.283953][T20781] RIP: 0033:0x7fcdc379ce59 [ 787.283977][T20781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.283991][T20781] RSP: 002b:00007fcdc4674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 787.284009][T20781] RAX: ffffffffffffffda RBX: 00007fcdc3a16180 RCX: 00007fcdc379ce59 [ 787.284022][T20781] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 787.284033][T20781] RBP: 00007fcdc4674090 R08: 0000000000000000 R09: 0000000000000000 [ 787.284044][T20781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.284055][T20781] R13: 00007fcdc3a16218 R14: 00007fcdc3a16180 R15: 00007fcdc3b3fa48 [ 787.284085][T20781] [ 788.571691][ T6135] usb 3-1: USB disconnect, device number 101 [ 788.601206][ T5717] usb 1-1: USB disconnect, device number 83 [ 788.801188][T20793] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1958477870 (3916955740 ns) > initial count (2199611658 ns). Using initial count to start timer. [ 788.890164][T20796] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3289'. [ 788.945345][T20796] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3289'. [ 789.123294][ T24] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 789.250149][T20803] netlink: 'syz.7.3291': attribute type 2 has an invalid length. [ 789.294162][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 789.302125][T20803] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3291'. [ 789.339159][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.406342][ T24] usb 2-1: config 0 has no interfaces? [ 789.440226][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 789.491429][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.538922][ T24] usb 2-1: config 0 descriptor?? [ 789.684327][ T5717] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 789.855837][ T5717] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.892488][ T5717] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.924159][ T5717] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 789.946312][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 789.986579][ T5717] usb 3-1: SerialNumber: syz [ 790.084558][ T30] audit: type=1800 audit(1779271769.511:1857): pid=20829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3295" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 790.230220][ T5717] usb 3-1: 0:2 : does not exist [ 790.255319][T20834] xt_hashlimit: size too large, truncated to 1048576 [ 790.284870][T20834] xt_hashlimit: max too large, truncated to 1048576 [ 790.379891][ T5717] usb 3-1: USB disconnect, device number 102 [ 790.455779][T19085] udevd[19085]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.495651][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 790.613213][T20834] netlink: 840 bytes leftover after parsing attributes in process `syz.0.3297'. [ 790.674030][ T24] usb 6-1: device descriptor read/64, error -71 [ 790.926969][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 790.990364][T20852] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1958477870 (3916955740 ns) > initial count (2199611658 ns). Using initial count to start timer. [ 791.072909][ T24] usb 6-1: device descriptor read/64, error -71 [ 791.194003][ T24] usb usb6-port1: attempt power cycle [ 791.256981][T18361] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 791.425058][T18361] usb 3-1: Using ep0 maxpacket: 32 [ 791.453538][T18361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.483386][T18361] usb 3-1: config 0 has no interfaces? [ 791.499965][T18361] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 791.521453][T18361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.543169][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 791.556056][T18361] usb 3-1: config 0 descriptor?? [ 791.588546][ T24] usb 6-1: device descriptor read/8, error -71 [ 791.661549][T20107] usb 2-1: USB disconnect, device number 83 [ 791.853612][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 791.895321][ T24] usb 6-1: device descriptor read/8, error -71 [ 792.014426][ T24] usb usb6-port1: unable to enumerate USB device [ 792.164991][ T24] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 792.334918][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 792.346232][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 792.364344][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 792.383980][ T24] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 792.395123][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.404069][ T24] usb 1-1: Product: syz [ 792.408444][ T24] usb 1-1: Manufacturer: syz [ 792.414830][ T24] usb 1-1: SerialNumber: syz [ 792.510564][T20882] FAULT_INJECTION: forcing a failure. [ 792.510564][T20882] name failslab, interval 1, probability 0, space 0, times 0 [ 792.560298][T20882] CPU: 0 UID: 0 PID: 20882 Comm: syz.2.3299 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.560327][T20882] Tainted: [L]=SOFTLOCKUP [ 792.560334][T20882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 792.560344][T20882] Call Trace: [ 792.560351][T20882] [ 792.560359][T20882] dump_stack_lvl+0xe8/0x150 [ 792.560385][T20882] should_fail_ex+0x412/0x560 [ 792.560413][T20882] should_failslab+0xa8/0x100 [ 792.560441][T20882] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 792.560465][T20882] ? dup_task_struct+0x52/0x840 [ 792.560489][T20882] dup_task_struct+0x52/0x840 [ 792.560506][T20882] ? _raw_spin_unlock_irq+0x23/0x50 [ 792.560532][T20882] copy_process+0x89b/0x4440 [ 792.560591][T20882] ? __pfx_copy_process+0x10/0x10 [ 792.560617][T20882] ? mutex_init_lockdep+0xdf/0x110 [ 792.560641][T20882] vhost_task_create+0x1f9/0x380 [ 792.560665][T20882] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 792.560687][T20882] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 792.560711][T20882] ? __pfx_vhost_task_create+0x10/0x10 [ 792.560741][T20882] ? __pfx_vhost_task_fn+0x10/0x10 [ 792.560768][T20882] ? __lock_acquire+0x6b5/0x2cf0 [ 792.560789][T20882] ? kasan_save_track+0x4f/0x80 [ 792.560810][T20882] ? kasan_save_track+0x3e/0x80 [ 792.560831][T20882] ? kasan_save_free_info+0x46/0x50 [ 792.560849][T20882] ? __kasan_slab_free+0x5c/0x80 [ 792.560870][T20882] ? kfree+0x1c5/0x640 [ 792.560892][T20882] kvm_mmu_post_init_vm+0x147/0x2d0 [ 792.560919][T20882] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 792.560951][T20882] ? __mutex_trylock_common+0x158/0x260 [ 792.560973][T20882] ? look_up_lock_class+0x57/0x110 [ 792.560997][T20882] ? register_lock_class+0x31/0x2e0 [ 792.561015][T20882] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 792.561043][T20882] ? __lock_acquire+0x6b5/0x2cf0 [ 792.561063][T20882] ? __mutex_lock+0x319/0x1550 [ 792.561086][T20882] ? kasan_quarantine_put+0xbb/0x1f0 [ 792.561121][T20882] ? do_raw_write_lock+0x11d/0x260 [ 792.561159][T20882] kvm_vcpu_ioctl+0xa62/0xfd0 [ 792.561187][T20882] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 792.561208][T20882] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 792.561244][T20882] ? __fget_files+0x2a/0x420 [ 792.561268][T20882] ? __fget_files+0x2a/0x420 [ 792.561285][T20882] ? __fget_files+0x3a0/0x420 [ 792.561303][T20882] ? __fget_files+0x2a/0x420 [ 792.561326][T20882] ? bpf_lsm_file_ioctl+0x9/0x20 [ 792.561350][T20882] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 792.561373][T20882] __se_sys_ioctl+0xfc/0x170 [ 792.561397][T20882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.561416][T20882] do_syscall_64+0x15f/0xf80 [ 792.561440][T20882] ? trace_irq_disable+0x3b/0x140 [ 792.561465][T20882] ? clear_bhb_loop+0x40/0x90 [ 792.561486][T20882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.561504][T20882] RIP: 0033:0x7fcdc379ce59 [ 792.561520][T20882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.561543][T20882] RSP: 002b:00007fcdc4674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 792.561562][T20882] RAX: ffffffffffffffda RBX: 00007fcdc3a16180 RCX: 00007fcdc379ce59 [ 792.561574][T20882] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 792.561585][T20882] RBP: 00007fcdc4674090 R08: 0000000000000000 R09: 0000000000000000 [ 792.561595][T20882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.561606][T20882] R13: 00007fcdc3a16218 R14: 00007fcdc3a16180 R15: 00007fcdc3b3fa48 [ 792.561636][T20882] [ 793.058032][T20858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.091665][T20858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.112434][T20858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.225672][T20858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.277451][T20890] QAT: Invalid ioctl 35076 [ 793.352289][ T24] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 793.437378][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 793.572232][ T24] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 793.607257][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 793.690642][T20900] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3304'. [ 793.751154][T20900] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3304'. [ 793.970382][T20074] usb 3-1: USB disconnect, device number 103 [ 794.213338][ T24] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 794.387448][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 794.411289][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 794.477641][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.536836][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 794.571754][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.611313][ T24] usb 2-1: Product: syz [ 794.648799][ T24] usb 2-1: Manufacturer: syz [ 794.679495][ T24] usb 2-1: SerialNumber: syz [ 794.772122][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 794.791061][ T24] hub 2-1:1.0: probe with driver hub failed with error -5 [ 794.883110][T20107] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 794.958811][ T5696] usb 1-1: USB disconnect, device number 84 [ 795.001997][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 795.064023][T20107] usb 3-1: Using ep0 maxpacket: 32 [ 795.073957][T20107] usb 3-1: config 1 interface 0 altsetting 250 endpoint 0x1 has invalid maxpacket 1568, setting to 1024 [ 795.141181][T20107] usb 3-1: config 1 interface 0 altsetting 250 bulk endpoint 0x1 has invalid maxpacket 1024 [ 795.192315][T20107] usb 3-1: config 1 interface 0 has no altsetting 0 [ 795.241891][T20107] usb 3-1: New USB device found, idVendor=e925, idProduct=53d3, bcdDevice= 0.58 [ 795.272289][T20107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.306112][T20107] usb 3-1: Product: syz [ 795.310435][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.334751][T20107] usb 3-1: Manufacturer: syz [ 795.346588][T20107] usb 3-1: SerialNumber: syz [ 795.368902][T20935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.418207][T20928] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 795.463931][T20935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.549475][T20935] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3307'. [ 795.635518][T20074] usb 2-1: USB disconnect, device number 84 [ 795.682265][T20074] usblp0: removed [ 795.824460][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.005711][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 796.188614][T20107] usb 3-1: USB disconnect, device number 104 [ 796.280712][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.374241][ T24] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 796.476036][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 796.499365][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.519690][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 796.529150][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 796.553250][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 796.560571][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 796.569812][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 796.581826][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 796.589958][ T24] usb 1-1: config 179 has no interface number 0 [ 796.598610][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 796.650302][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 796.656758][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'. [ 796.662204][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 796.683853][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 796.700850][ T24] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 796.714685][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 796.725964][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.742342][T20940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 797.041590][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 797.114844][T20107] usb 1-1: USB disconnect, device number 85 [ 797.114914][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 797.114959][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 797.393263][ T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 797.557700][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 797.611724][ T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 797.657610][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.701212][ T24] usb 2-1: Product: syz [ 797.718708][ T24] usb 2-1: Manufacturer: syz [ 797.731558][ T24] usb 2-1: SerialNumber: syz [ 797.773403][ T36] bridge_slave_1: left allmulticast mode [ 797.782333][T20974] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1958477870 (3916955740 ns) > initial count (2199611658 ns). Using initial count to start timer. [ 797.783957][ T24] usb 2-1: config 0 descriptor?? [ 797.819079][ T36] bridge_slave_1: left promiscuous mode [ 797.827778][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.890058][ T36] bridge_slave_0: left allmulticast mode [ 797.963274][ T24] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 797.977586][ T36] bridge_slave_0: left promiscuous mode [ 798.052566][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.104501][ T24] ssu100 2-1:0.0: probe with driver ssu100 failed with error -32 [ 798.664704][ T5625] Bluetooth: hci1: command tx timeout [ 798.899034][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.928702][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.941291][ T36] bond0 (unregistering): Released all slaves [ 799.070408][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 799.297883][T20074] usb 2-1: USB disconnect, device number 85 [ 799.730392][ T36] hsr_slave_0: left promiscuous mode [ 799.775299][ T36] hsr_slave_1: left promiscuous mode [ 799.832045][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.855063][T18361] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 799.906937][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.057442][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.110755][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.122174][T18361] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 800.169780][ T36] veth1_vlan: left promiscuous mode [ 800.183556][T18361] usb 3-1: string descriptor 0 read error: -22 [ 800.190048][T18361] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.40 [ 800.200922][ T36] veth0_vlan: left promiscuous mode [ 800.213269][T18361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.245251][ T6135] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 800.414783][ T6135] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 800.444349][ T6135] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 800.486228][ T6135] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 800.523820][ T6135] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 800.542872][ T6135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.570791][ T36] team0 (unregistering): Port device team_slave_1 removed [ 800.571415][ T6135] usb 1-1: Product: syz [ 800.606738][T18361] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 800.612638][ T6135] usb 1-1: Manufacturer: syz [ 800.620102][ T36] team0 (unregistering): Port device team_slave_0 removed [ 800.636592][ T6135] usb 1-1: SerialNumber: syz [ 800.743533][ T5625] Bluetooth: hci1: command tx timeout [ 800.772918][T18361] usb 2-1: Using ep0 maxpacket: 16 [ 800.791714][T18361] usb 2-1: unable to get BOS descriptor or descriptor too short [ 800.854061][T18361] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 800.886005][T20999] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 800.906558][T18361] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 800.924853][T20999] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 800.957233][T18361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.979704][T18361] usb 2-1: Product: syz [ 801.000946][T18361] usb 2-1: Manufacturer: syz [ 801.021194][T18361] usb 2-1: SerialNumber: syz [ 801.250938][T20994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.260130][T20994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.272082][T20994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.290835][T20994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.363429][T18361] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 801.383983][T18361] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 801.402339][T18361] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 801.572548][T20999] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 801.595573][T20999] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 801.675583][T20952] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.698137][T20952] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.725914][T20952] bridge_slave_0: entered allmulticast mode [ 801.758902][T20952] bridge_slave_0: entered promiscuous mode [ 801.819448][T20952] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.833547][T20999] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3324'. [ 801.857018][T20952] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.880621][T20999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.893388][T20952] bridge_slave_1: entered allmulticast mode [ 801.915757][T20952] bridge_slave_1: entered promiscuous mode [ 801.947979][T20999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.081472][T20952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.126739][T20952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.235273][T20952] team0: Port device team_slave_0 added [ 802.271027][T20952] team0: Port device team_slave_1 added [ 802.304498][ T6135] cdc_ncm 1-1:1.0: bind() failure [ 802.336008][ T6135] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 802.369161][ T6135] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 802.383977][T20952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.391183][T20952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.399761][ T6135] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 802.430100][T20952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.455937][T20952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.463402][T20952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.489945][T20952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.502487][ T6135] usb 1-1: USB disconnect, device number 86 [ 802.632151][T20952] hsr_slave_0: entered promiscuous mode [ 802.650377][T20952] hsr_slave_1: entered promiscuous mode [ 802.661869][T20952] debugfs: 'hsr0' already exists in 'hsr' [ 802.672554][T20952] Cannot create hsr debugfs directory [ 802.822936][ T5625] Bluetooth: hci1: command tx timeout [ 802.949206][ T24] usb 2-1: USB disconnect, device number 86 [ 803.526167][ T5717] usb 3-1: USB disconnect, device number 105 [ 804.903188][ T5625] Bluetooth: hci1: command tx timeout [ 806.312087][T21045] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3334'. [ 806.483791][ T6135] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 806.607443][T20952] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 806.627438][T20952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 806.638974][T20952] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 806.654473][T20952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 806.675470][T20952] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 806.707537][ T5696] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 806.728102][T20952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 806.750889][T20952] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 806.788284][T20952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 806.812670][ T6135] usb 3-1: Using ep0 maxpacket: 8 [ 806.846173][ T5696] usb 2-1: device descriptor read/64, error -71 [ 806.890761][ T6135] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 806.912644][ T6135] usb 3-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config [ 806.921714][T20952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.942820][ T6135] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 806.986360][ T6135] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 806.995192][T20952] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.019384][ T6135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.031581][ T8899] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.038740][ T8899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.086174][ T6135] usbtmc 3-1:16.0: bulk endpoints not found [ 807.093245][ T5696] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 807.103929][ T8899] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.111098][ T8899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.273257][ T5696] usb 2-1: device descriptor read/64, error -71 [ 807.381270][T20952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.400387][ T5696] usb usb2-port1: attempt power cycle [ 807.476232][T20952] veth0_vlan: entered promiscuous mode [ 807.549073][T20952] veth1_vlan: entered promiscuous mode [ 807.616933][T20952] veth0_macvtap: entered promiscuous mode [ 807.648353][T20952] veth1_macvtap: entered promiscuous mode [ 807.664778][T21071] veth1: Caught tx_queue_len zero misconfig [ 807.727041][T20952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.764464][ T5696] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 807.780039][T20952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.805844][ T5696] usb 2-1: device descriptor read/8, error -71 [ 807.826303][T20818] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.855243][T20818] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.896319][T20818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.927192][T20818] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.053206][ T5696] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 808.087341][ T5696] usb 2-1: device descriptor read/8, error -71 [ 808.203487][ T5696] usb usb2-port1: unable to enumerate USB device [ 808.448894][T20817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.472106][T20817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.504438][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.510856][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.577516][T20814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.612658][T20814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.019487][T21089] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3312'. [ 809.177763][ T5710] usb 3-1: USB disconnect, device number 106 [ 809.283567][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 809.480242][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.507218][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 809.532015][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 809.591426][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 809.612546][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.633548][ T5710] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 809.696785][ T24] usb 6-1: config 0 descriptor?? [ 809.735792][ T24] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 809.805109][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 809.830352][ T5710] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 809.873254][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.917330][ T5710] usb 3-1: Product: syz [ 809.926484][ T5710] usb 3-1: Manufacturer: syz [ 809.940865][ T5710] usb 3-1: SerialNumber: syz [ 809.966531][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'. [ 810.465783][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 810.562490][ T5290] 8021q: adding VLAN 0 to HW filter on device eth8 [ 810.636442][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.675671][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.687259][T18361] usb 6-1: USB disconnect, device number 11 [ 810.704331][ T5710] usb 3-1: clock source 0 is not valid, cannot use [ 810.720452][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 810.740973][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.774064][ T24] usb 2-1: config 0 descriptor?? [ 810.906216][ T5710] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 810.937815][ T5710] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 810.971817][ T5710] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 811.014931][ T5710] usb 3-1: clock source 0 is not valid, cannot use [ 811.022056][T21119] netlink: 'syz.1.3341': attribute type 195 has an invalid length. [ 811.038593][ T5710] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 811.057368][ T5710] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 811.233454][ T5710] usb 3-1: USB disconnect, device number 107 [ 811.255397][ T24] hid_parser_main: 2022 callbacks suppressed [ 811.255417][ T24] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 811.356491][ T24] cp2112 0003:10C4:EA90.0050: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 811.553236][ T24] cp2112 0003:10C4:EA90.0050: error requesting version [ 811.606608][ T24] cp2112 0003:10C4:EA90.0050: probe with driver cp2112 failed with error -71 [ 811.640615][ T24] usb 2-1: USB disconnect, device number 91 [ 812.221176][T21149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3344'. [ 812.260272][T21149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3344'. [ 812.331288][T21149] syzkaller0: entered promiscuous mode [ 812.337778][T21149] syzkaller0: entered allmulticast mode [ 812.474428][T21140] KVM: debugfs: duplicate directory 21140-9 [ 813.187244][T21165] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3349'. [ 813.273785][ T6128] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 813.352814][T20074] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 813.472155][ T6128] usb 6-1: config 1 interface 0 has no altsetting 0 [ 813.496079][ T6128] usb 6-1: string descriptor 0 read error: -22 [ 813.513145][T20074] usb 2-1: Using ep0 maxpacket: 16 [ 813.521874][ T6128] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 813.550553][T20074] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 813.570827][ T6128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.584175][T20074] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 813.616796][T20074] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 813.662850][T20074] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 813.703780][T20074] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 813.741413][T20074] usb 2-1: config 0 has no interface number 0 [ 813.769258][T20074] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 813.824156][ T6133] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 813.832073][T20074] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 813.867737][T20074] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 813.912092][T20074] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 813.974553][T20074] usb 2-1: config 0 interface 125 has no altsetting 0 [ 814.006385][T20074] usb 2-1: config 0 interface 125 has no altsetting 2 [ 814.030498][ T6133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 93, changing to 10 [ 814.056792][T20074] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 814.074411][ T6133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33372, setting to 1024 [ 814.106220][T20074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.141201][ T6133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 814.162811][T20074] usb 2-1: Product: syz [ 814.184454][T20074] usb 2-1: Manufacturer: syz [ 814.205075][T20074] usb 2-1: SerialNumber: syz [ 814.219899][ T6133] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 814.247950][T20074] usb 2-1: config 0 descriptor?? [ 814.289456][ T6133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.303371][T21160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.308306][T20074] usb 2-1: selecting invalid altsetting 2 [ 814.323740][T21160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.356639][T21160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.360088][ T6133] usb 3-1: config 0 descriptor?? [ 814.389805][T21160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.427222][ T6128] uclogic 0003:5543:006E.0051: failed retrieving string descriptor #200: -71 [ 814.464031][ T6128] uclogic 0003:5543:006E.0051: failed retrieving pen parameters: -71 [ 814.495720][ C0] usb 2-1: async_complete: urb error -71 [ 814.501447][ C0] usb 2-1: async_complete: urb error -71 [ 814.507119][ C0] usb 2-1: async_complete: urb error -71 [ 814.512817][ C0] usb 2-1: async_complete: urb error -71 [ 814.531082][ T6128] uclogic 0003:5543:006E.0051: failed probing pen v2 parameters: -71 [ 814.550549][T20074] get_1284_register: usb error -71 [ 814.575046][ T6128] uclogic 0003:5543:006E.0051: failed probing parameters: -71 [ 814.602687][T20074] usb 2-1: USB disconnect, device number 92 [ 814.619349][ T6128] uclogic 0003:5543:006E.0051: probe with driver uclogic failed with error -71 [ 814.693509][ T6128] usb 6-1: USB disconnect, device number 12 [ 814.750722][ T6133] usbhid 3-1:0.0: can't add hid device: -71 [ 814.777130][ T6133] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 814.828314][ T6133] usb 3-1: USB disconnect, device number 108 [ 815.393184][ T5710] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 815.515194][ T6133] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 815.565716][ T5710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.596081][ T5710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.636883][ T5710] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 815.661292][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.694269][ T6133] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 815.695842][ T5710] usb 6-1: config 0 descriptor?? [ 815.732634][ T6133] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.772641][ T6133] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 815.802113][ T6133] usb 2-1: config 1 has no interface number 1 [ 815.822357][ T6133] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 815.862812][ T6133] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 815.914450][ T6133] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 815.939101][ T6133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.980003][ T6133] usb 2-1: Product: syz [ 816.001685][ T6133] usb 2-1: Manufacturer: syz [ 816.020145][ T6133] usb 2-1: SerialNumber: syz [ 816.081388][T21214] netlink: 'syz.2.3353': attribute type 10 has an invalid length. [ 816.130107][ T5710] cm6533_jd 0003:0D8C:0022.0052: unknown main item tag 0x0 [ 816.162133][T21214] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 816.180879][ T5710] cm6533_jd 0003:0D8C:0022.0052: unknown main item tag 0x0 [ 816.230808][ T5710] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0052/input/input108 [ 816.372221][T21215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 816.408693][ T5710] cm6533_jd 0003:0D8C:0022.0052: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 816.444965][T21200] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3352'. [ 816.537231][ T5710] usb 6-1: USB disconnect, device number 13 [ 816.638449][ T6133] usb 2-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 816.684891][ T6133] usb 2-1: MIDIStreaming interface descriptor not found [ 816.728742][T21222] fido_id[21222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 817.043565][ T6133] usb 2-1: USB disconnect, device number 93 [ 817.140761][T21240] netlink: 'syz.5.3358': attribute type 3 has an invalid length. [ 817.200486][T21240] netlink: 'syz.5.3358': attribute type 3 has an invalid length. [ 817.278272][T21240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3358'. [ 817.282116][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.484782][T21245] syzkaller1: entered promiscuous mode [ 817.499612][T21245] syzkaller1: entered allmulticast mode [ 817.693233][T18361] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 817.865214][T18361] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 817.904810][T18361] usb 3-1: config 0 has no interface number 0 [ 817.921050][T18361] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 817.951479][T18361] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 32448, setting to 64 [ 817.988962][T18361] usb 3-1: config 0 interface 2 has no altsetting 0 [ 818.026613][T18361] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 818.055209][T18361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.077092][T18361] usb 3-1: Product: syz [ 818.081288][T18361] usb 3-1: Manufacturer: syz [ 818.107470][T18361] usb 3-1: SerialNumber: syz [ 818.128179][T18361] usb 3-1: config 0 descriptor?? [ 818.150478][T21255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 818.172856][T21255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 818.247665][T18361] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 818.304294][ T24] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 818.476485][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.515523][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.548548][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 818.588764][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 818.612472][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.638028][ T24] usb 1-1: config 0 descriptor?? [ 818.657826][T21255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.695945][T21255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.746873][ T31] INFO: task syz.2.3036:19149 blocked for more than 143 seconds. [ 818.755715][ T31] Tainted: G L syzkaller #0 [ 818.772410][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 818.800837][ T31] task:syz.2.3036 state:D stack:22024 pid:19149 tgid:19147 ppid:6116 task_flags:0x400140 flags:0x00080002 [ 818.850966][ T31] Call Trace: [ 818.862144][ T31] [ 818.877241][ T31] __schedule+0x1821/0x5740 [ 818.912493][ T31] ? __pfx___schedule+0x10/0x10 [ 818.950973][ T31] ? schedule+0x90/0x360 [ 818.992274][ T31] schedule+0x164/0x360 [ 819.028167][ T31] schedule_preempt_disabled+0x13/0x30 [ 819.069208][T21270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.081926][ T31] __mutex_lock+0x7f7/0x1550 [ 819.108525][ T31] ? __mutex_lock+0x608/0x1550 [ 819.138195][ T31] ? usbdev_open+0x182/0x770 [ 819.147043][T21270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.201664][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 819.218428][T21287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.267486][ T31] ? bus_find_device+0x27d/0x2d0 [ 819.319586][T21287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.343360][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 819.418781][ T31] ? usbdev_open+0xa7/0x770 [ 819.489267][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 819.555382][ T31] usbdev_open+0x182/0x770 [ 819.592776][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 819.643232][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 819.664893][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 819.670160][ T31] chrdev_open+0x4cd/0x5e0 [ 819.685441][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 819.704446][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 819.732105][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 819.757404][ T31] do_dentry_open+0x785/0x14e0 [ 819.774843][ T31] vfs_open+0x3b/0x340 [ 819.797202][ T31] ? path_openat+0x2df0/0x3860 [ 819.813103][ T31] path_openat+0x2e08/0x3860 [ 819.817799][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 819.840957][ T31] ? stack_depot_save_flags+0x33/0x810 [ 819.851948][ T31] ? __pfx_path_openat+0x10/0x10 [ 819.866641][ T31] ? __x64_sys_openat+0x138/0x170 [ 819.883218][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 819.889724][ T31] do_file_open+0x23e/0x4a0 [ 819.903181][ T31] ? __pfx_do_file_open+0x10/0x10 [ 819.915580][ T31] ? _raw_spin_unlock+0x28/0x50 [ 819.933148][ T31] ? alloc_fd+0x64b/0x6c0 [ 819.937553][ T31] do_sys_openat2+0x113/0x200 [ 819.942270][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 819.974204][ T31] __x64_sys_openat+0x138/0x170 [ 819.987238][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.004986][ T31] do_syscall_64+0x15f/0xf80 [ 820.043165][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.074221][ T31] ? clear_bhb_loop+0x40/0x90 [ 820.084542][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.100391][ T31] RIP: 0033:0x7f8be435d68e [ 820.106358][ T31] RSP: 002b:00007f8be5312b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 820.115922][ T31] RAX: ffffffffffffffda RBX: 00007f8be53136c0 RCX: 00007f8be435d68e [ 820.127327][ T31] RDX: 0000000000141301 RSI: 00007f8be5312c00 RDI: ffffffffffffff9c [ 820.136981][ T31] RBP: 00007f8be5312c00 R08: 0000000000000000 R09: 0000000000000000 [ 820.145717][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 820.154859][ T31] R13: 00007f8be4616038 R14: 00007f8be4615fa0 R15: 00007f8be473fa48 [ 820.163620][ T31] [ 820.166828][ T31] [ 820.166828][ T31] Showing all locks held in the system: [ 820.223310][ T31] 5 locks held by kworker/0:1/10: [ 820.243204][ T31] 5 locks held by kworker/1:0/24: [ 820.248298][ T31] #0: ffff8880222fad40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 820.283172][ T31] #1: ffffc900001e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 820.311751][ T31] #2: ffff888029dea1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 820.333169][ T31] #3: ffff8880766981d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 820.358213][ T31] #4: ffff888021e8a1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 820.393176][ T31] 1 lock held by khungtaskd/31: [ 820.403437][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 820.443178][ T31] 2 locks held by kworker/1:2/1223: [ 820.456626][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 820.493196][ T31] #1: ffffc90005ca7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 820.522407][ T31] 2 locks held by getty/5384: [ 820.552684][ T31] #0: ffff888035da60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 820.583332][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 820.613207][ T31] 1 lock held by syz.2.3036/19149: [ 820.634314][ T31] #0: ffff88802a0bc1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 820.683171][ T31] 1 lock held by syz.6.3127/19576: [ 820.688359][ T31] #0: ffff88802a0bc1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 820.728719][ T31] 2 locks held by dhcpcd/19657: [ 820.734518][ T31] #0: ffff8880555f1a40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 820.760032][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 820.804388][ T31] 2 locks held by syz.5.3358/21240: [ 820.833189][ T31] 1 lock held by syz.2.3360/21255: [ 820.839094][ T31] #0: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 820.866142][ T31] 1 lock held by syz.1.3362/21273: [ 820.877389][ T31] #0: ffffffff8e962e78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 820.910066][ T31] 1 lock held by dhcpcd-run-hook/21298: [ 820.917271][ T31] [ 820.919651][ T31] ============================================= [ 820.919651][ T31] [ 820.943361][ T31] NMI backtrace for cpu 1 [ 820.943379][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 820.943402][ T31] Tainted: [L]=SOFTLOCKUP [ 820.943409][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 820.943419][ T31] Call Trace: [ 820.943427][ T31] [ 820.943435][ T31] dump_stack_lvl+0xe8/0x150 [ 820.943462][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 820.943484][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 820.943504][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 820.943528][ T31] sys_info+0x135/0x170 [ 820.943545][ T31] watchdog+0xfd3/0x1030 [ 820.943575][ T31] ? watchdog+0x1c9/0x1030 [ 820.943604][ T31] kthread+0x389/0x470 [ 820.943626][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.943647][ T31] ? __pfx_kthread+0x10/0x10 [ 820.943669][ T31] ret_from_fork+0x514/0xb70 [ 820.943691][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 820.943710][ T31] ? __switch_to+0xc79/0x1410 [ 820.943737][ T31] ? __pfx_kthread+0x10/0x10 [ 820.943759][ T31] ret_from_fork_asm+0x1a/0x30 [ 820.943792][ T31] [ 820.943824][ T31] Sending NMI from CPU 1 to CPUs 0: [ 821.066869][ C0] NMI backtrace for cpu 0 [ 821.066887][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.066907][ C0] Tainted: [L]=SOFTLOCKUP [ 821.066913][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 821.066922][ C0] Workqueue: usb_hub_wq hub_event [ 821.066945][ C0] RIP: 0010:unwind_next_frame+0xdd1/0x2550 [ 821.066967][ C0] Code: 48 89 df e8 21 03 ba 00 48 89 5c 24 60 4c 89 64 24 18 49 8d 5c 24 f8 4d 8b 66 10 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 20 <0f> b6 04 01 84 c0 0f 85 2c 12 00 00 41 83 3e 00 0f 95 c0 49 39 df [ 821.066980][ C0] RSP: 0018:ffffc90000007518 EFLAGS: 00000046 [ 821.066993][ C0] RAX: dffffc0000000000 RBX: ffffc90000007e10 RCX: 1ffff92000000ebd [ 821.067004][ C0] RDX: ffffffff912b166e RSI: 0000000000000002 RDI: ffffffff8c28b600 [ 821.067014][ C0] RBP: 1ffff92000000ebe R08: 0000000000000001 R09: ffffffff8e95cca0 [ 821.067024][ C0] R10: ffffc90000007638 R11: ffffffff81b0eff0 R12: ffffc90000008000 [ 821.067035][ C0] R13: 1ffff92000000ebf R14: ffffc900000075e8 R15: ffffc90000000000 [ 821.067047][ C0] FS: 0000000000000000(0000) GS:ffff888125289000(0000) knlGS:0000000000000000 [ 821.067060][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.067070][ C0] CR2: 00007f81fd8fd7d0 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 821.067083][ C0] Call Trace: [ 821.067089][ C0] [ 821.067098][ C0] ? unwind_next_frame+0xa6/0x2550 [ 821.067118][ C0] ? dummy_timer+0xbc0/0x4650 [ 821.067141][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 821.067162][ C0] arch_stack_walk+0x11b/0x150 [ 821.067181][ C0] ? dummy_timer+0xbc0/0x4650 [ 821.067202][ C0] stack_trace_save+0xa9/0x100 [ 821.067222][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 821.067245][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 821.067263][ C0] kasan_save_track+0x3e/0x80 [ 821.067281][ C0] ? kasan_save_track+0x3e/0x80 [ 821.067299][ C0] ? kasan_save_free_info+0x46/0x50 [ 821.067314][ C0] ? __kasan_slab_free+0x5c/0x80 [ 821.067333][ C0] ? kfree+0x1c5/0x640 [ 821.067348][ C0] ? skb_release_data+0x828/0xa60 [ 821.067368][ C0] ? __kfree_skb+0x5d/0x210 [ 821.067387][ C0] ? ath6kl_usb_recv_complete+0x1d6/0x4d0 [ 821.067406][ C0] ? __usb_hcd_giveback_urb+0x376/0x540 [ 821.067425][ C0] ? dummy_timer+0xbc0/0x4650 [ 821.067461][ C0] kasan_save_free_info+0x46/0x50 [ 821.067477][ C0] __kasan_slab_free+0x5c/0x80 [ 821.067495][ C0] kfree+0x1c5/0x640 [ 821.067511][ C0] ? skb_release_data+0x828/0xa60 [ 821.067540][ C0] skb_release_data+0x828/0xa60 [ 821.067564][ C0] __kfree_skb+0x5d/0x210 [ 821.067582][ C0] ath6kl_usb_recv_complete+0x1d6/0x4d0 [ 821.067602][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 821.067625][ C0] dummy_timer+0xbc0/0x4650 [ 821.067646][ C0] ? lock_acquire+0x106/0x350 [ 821.067668][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 821.067684][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 821.067704][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 821.067727][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 821.067747][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 821.067767][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 821.067786][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 821.067815][ C0] hrtimer_run_softirq+0x17a/0x240 [ 821.067835][ C0] handle_softirqs+0x22a/0x840 [ 821.067851][ C0] ? __irq_exit_rcu+0xca/0x220 [ 821.067868][ C0] __irq_exit_rcu+0xca/0x220 [ 821.067883][ C0] irq_exit_rcu+0x9/0x30 [ 821.067896][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 821.067915][ C0] [ 821.067920][ C0] [ 821.067926][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 821.067943][ C0] RIP: 0010:unwind_next_frame+0xf33/0x2550 [ 821.067961][ C0] Code: 8b 5c 24 78 4c 8b 64 24 18 74 08 48 89 df e8 a4 02 ba 00 4c 89 23 ba 10 00 00 00 48 8b 5c 24 28 48 89 df 31 f6 e8 6d 04 ba 00 <48> 8b 3c 24 e9 d0 04 00 00 4c 89 64 24 18 4d 8d 6e 08 4d 89 ec 49 [ 821.067971][ C0] RSP: 0018:ffffc900000f6598 EFLAGS: 00000246 [ 821.067983][ C0] RAX: ffffc900000f66b8 RBX: ffffc900000f66b8 RCX: 0000000000000000 [ 821.067993][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900000f66c8 [ 821.068002][ C0] RBP: dffffc0000000000 R08: ffffc900000f66c7 R09: 0000000000000000 [ 821.068012][ C0] R10: ffffc900000f66b8 R11: fffff5200001ecd9 R12: ffffc900000f6e90 [ 821.068023][ C0] R13: 1ffff9200001eccf R14: ffffc900000f6668 R15: ffffc900000f66b0 [ 821.068040][ C0] ? unwind_next_frame+0xf33/0x2550 [ 821.068059][ C0] ? unwind_next_frame+0xa6/0x2550 [ 821.068078][ C0] ? usb_probe_interface+0x659/0xc70 [ 821.068099][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 821.068120][ C0] arch_stack_walk+0x11b/0x150 [ 821.068138][ C0] ? really_probe+0x267/0xaf0 [ 821.068159][ C0] stack_trace_save+0xa9/0x100 [ 821.068178][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 821.068199][ C0] ? kasan_save_track+0x4f/0x80 [ 821.068218][ C0] ? kasan_save_track+0x3e/0x80 [ 821.068235][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 821.068252][ C0] ? __kmalloc_cache_noprof+0x31c/0x660 [ 821.068270][ C0] ? dummy_urb_enqueue+0x7c/0x780 [ 821.068289][ C0] ? usb_hcd_submit_urb+0x328/0x1b70 [ 821.068308][ C0] ? ath6kl_usb_power_on+0x6a/0x280 [ 821.068323][ C0] ? ath6kl_core_init+0x1e1/0x10b0 [ 821.068339][ C0] kasan_save_track+0x3e/0x80 [ 821.068359][ C0] ? kasan_save_track+0x3e/0x80 [ 821.068375][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 821.068393][ C0] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 821.068410][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 821.068427][ C0] ? __netdev_alloc_skb+0xc1/0x810 [ 821.068443][ C0] ? ath6kl_usb_post_recv_transfers+0x207/0x6f0 [ 821.068460][ C0] ? ath6kl_usb_power_on+0x6a/0x280 [ 821.068475][ C0] ? ath6kl_core_init+0x1e1/0x10b0 [ 821.068491][ C0] ? ath6kl_usb_probe+0x14a6/0x15a0 [ 821.068505][ C0] ? usb_probe_interface+0x659/0xc70 [ 821.068546][ C0] __kasan_slab_alloc+0x6c/0x80 [ 821.068565][ C0] kmem_cache_alloc_node_noprof+0x384/0x690 [ 821.068584][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 821.068600][ C0] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 821.068621][ C0] __alloc_skb+0x1d0/0x7d0 [ 821.068642][ C0] __netdev_alloc_skb+0xc1/0x810 [ 821.068659][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 821.068680][ C0] ath6kl_usb_post_recv_transfers+0x207/0x6f0 [ 821.068703][ C0] ath6kl_usb_power_on+0x6a/0x280 [ 821.068724][ C0] ath6kl_core_init+0x1e1/0x10b0 [ 821.068740][ C0] ? rcu_is_watching+0x15/0xb0 [ 821.068759][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 821.068780][ C0] ? __pfx_ath6kl_core_init+0x10/0x10 [ 821.068796][ C0] ? __asan_memcpy+0x40/0x70 [ 821.068813][ C0] ? ath6kl_core_create+0x7de/0x980 [ 821.068829][ C0] ath6kl_usb_probe+0x14a6/0x15a0 [ 821.068851][ C0] usb_probe_interface+0x659/0xc70 [ 821.068875][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 821.068893][ C0] really_probe+0x267/0xaf0 [ 821.068916][ C0] __driver_probe_device+0x1ef/0x380 [ 821.068935][ C0] driver_probe_device+0x4f/0x240 [ 821.068954][ C0] __device_attach_driver+0x279/0x430 [ 821.068974][ C0] bus_for_each_drv+0x258/0x2f0 [ 821.068988][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 821.069007][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 821.069021][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 821.069044][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 821.069064][ C0] __device_attach+0x2c5/0x450 [ 821.069082][ C0] ? __pfx___device_attach+0x10/0x10 [ 821.069101][ C0] ? _raw_spin_unlock+0x28/0x50 [ 821.069120][ C0] device_initial_probe+0xa1/0xd0 [ 821.069138][ C0] bus_probe_device+0x12a/0x220 [ 821.069153][ C0] device_add+0x7e9/0xbb0 [ 821.069173][ C0] usb_set_configuration+0x1a87/0x2110 [ 821.069203][ C0] usb_generic_driver_probe+0x8d/0x150 [ 821.069221][ C0] usb_probe_device+0x1c4/0x3b0 [ 821.069241][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 821.069258][ C0] really_probe+0x267/0xaf0 [ 821.069278][ C0] __driver_probe_device+0x1ef/0x380 [ 821.069297][ C0] driver_probe_device+0x4f/0x240 [ 821.069320][ C0] __device_attach_driver+0x279/0x430 [ 821.069340][ C0] bus_for_each_drv+0x258/0x2f0 [ 821.069354][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 821.069372][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 821.069387][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 821.069406][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 821.069426][ C0] __device_attach+0x2c5/0x450 [ 821.069446][ C0] ? __pfx___device_attach+0x10/0x10 [ 821.069466][ C0] ? _raw_spin_unlock+0x28/0x50 [ 821.069486][ C0] device_initial_probe+0xa1/0xd0 [ 821.069504][ C0] bus_probe_device+0x12a/0x220 [ 821.069519][ C0] device_add+0x7e9/0xbb0 [ 821.069542][ C0] usb_new_device+0xa08/0x16f0 [ 821.069562][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 821.069579][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 821.069600][ C0] hub_event+0x2a1c/0x4f30 [ 821.069617][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 821.069654][ C0] ? __pfx_hub_event+0x10/0x10 [ 821.069671][ C0] ? process_scheduled_works+0xa70/0x1860 [ 821.069689][ C0] ? process_scheduled_works+0xa70/0x1860 [ 821.069702][ C0] ? process_scheduled_works+0xa70/0x1860 [ 821.069718][ C0] process_scheduled_works+0xb5d/0x1860 [ 821.069747][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 821.069764][ C0] ? assign_work+0x3d5/0x5e0 [ 821.069780][ C0] worker_thread+0xa53/0xfc0 [ 821.069805][ C0] kthread+0x389/0x470 [ 821.069823][ C0] ? __pfx_worker_thread+0x10/0x10 [ 821.069837][ C0] ? __pfx_kthread+0x10/0x10 [ 821.069854][ C0] ret_from_fork+0x514/0xb70 [ 821.069872][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 821.069887][ C0] ? __switch_to+0xc79/0x1410 [ 821.069907][ C0] ? __pfx_kthread+0x10/0x10 [ 821.069925][ C0] ret_from_fork_asm+0x1a/0x30 [ 821.069949][ C0] [ 822.300762][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 822.307664][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 822.318345][ T31] Tainted: [L]=SOFTLOCKUP [ 822.322672][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.332731][ T31] Call Trace: [ 822.336017][ T31] [ 822.338953][ T31] vpanic+0x56c/0xa60 [ 822.342949][ T31] ? __pfx___schedule+0x10/0x10 [ 822.347809][ T31] ? __pfx_vpanic+0x10/0x10 [ 822.352305][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 822.358454][ T31] panic+0xc5/0xd0 [ 822.362168][ T31] ? __pfx_panic+0x10/0x10 [ 822.366577][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 822.371950][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 822.378098][ T31] watchdog+0x102c/0x1030 [ 822.382425][ T31] ? watchdog+0x1c9/0x1030 [ 822.386839][ T31] kthread+0x389/0x470 [ 822.390903][ T31] ? __pfx_watchdog+0x10/0x10 [ 822.395572][ T31] ? __pfx_kthread+0x10/0x10 [ 822.400158][ T31] ret_from_fork+0x514/0xb70 [ 822.404740][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 822.409839][ T31] ? __switch_to+0xc79/0x1410 [ 822.414509][ T31] ? __pfx_kthread+0x10/0x10 [ 822.419095][ T31] ret_from_fork_asm+0x1a/0x30 [ 822.423861][ T31] [ 822.427465][ T31] Kernel Offset: disabled [ 822.431783][ T31] Rebooting in 86400 seconds..