last executing test programs: 15m16.302954054s ago: executing program 32 (id=2050): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x121900) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r7) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0x4}) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f0000000880)={0x2c2, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x6a, {0x40}, 0x10000000, 0x2000000, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1b3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f)\x9f\x06\x1fu\xb7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\xfa\xe4iz\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97'}}, 0x2c2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x400) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 8m5.932873434s ago: executing program 33 (id=2987): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x90, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0xb, "", {{{0x9, 0x5, 0x1, 0x2, 0x60, 0x1, 0x0, 0xb9}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x2, &(0x7f00000000c0)=@string={0x2}}, {0x12, &(0x7f0000000180)=@string={0x12, 0x3, "975fe9318817068be22f51f39edd01dc"}}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfefffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x4, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0x8, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@flushpolicy={0x94, 0x1d, 0x200, 0x70bd26, 0x25dfdbfb, "", [@tmpl={0x84, 0x5, [{{@in=@empty, 0x4d3, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3501, 0x2, 0x1, 0x4, 0x6, 0x1ff, 0xff}, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0xe823}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48014}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000fa"], 0xfdef) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x36, 0xe, 0x9, 0xc, 0x2, 0xd, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x94) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x40000000000002, 0x7, 0xeab, 0x180, 0x0, 0x0, 0xf2, 0x9, 0x8, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4], 0x1, 0x3c4212}) ioctl$KVM_RUN(r9, 0xae80, 0x0) close(0x3) 6m7.774899006s ago: executing program 34 (id=3393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x3b, 0x0, 0x2}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x3b, 0x0, 0x2}]}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xc, 0x2}) (async) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xc, 0x2}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) (async) r4 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000ab02000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0xff7, &(0x7f0000001840)=""/4087, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x1, 0x401, 0xbb7, 0x40, {0x0, 0x1800000, 0x2, 0x49, 0x10, 0xef, 0xc, 0x7ff, 0x2, 0xf000, 0x3, r6, r7, 0x3, 0xd98}}, {0x0, 0x1, 0x1, 0x2, '\x00'}}]}, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd", 0x21) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)={0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}, @pad1]}, 0x10) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)={0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}, @pad1]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x80) getdents64(r10, 0xfffffffffffffffe, 0x29) 4m50.974835038s ago: executing program 35 (id=3666): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket$inet(0x2, 0x1, 0x948e) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)="8907040400", 0x5) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)={0x6c, 0x0, 0x4, 0x9}, 0x8) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7fff, @mcast1, 0x7ff}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x1) 4m17.460897411s ago: executing program 36 (id=3789): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = gettid() prlimit64(r0, 0x5, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m24.547958844s ago: executing program 37 (id=4217): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x650000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000040482, 0x0) fallocate(r7, 0x11, 0x0, 0x400000074000) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2m14.463725705s ago: executing program 5 (id=4295): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r3, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="9c2f", 0x2}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x40) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x121e00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)={0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000740000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="280000001200010225bd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="008900000010000008001d0080000959"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0xfffffffffffffe1b}], 0x0, 0x4498bda7e2139f37, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x200004, 0x0, 0x2, 0x0, 0x1], 0x80a0000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2m13.41032304s ago: executing program 5 (id=4300): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, 0x0) r1 = socket(0x11, 0x4, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="040300000900000000000000000000008500000023000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) listen(r1, 0x100) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x5761, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setattr(r6, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x7ad8, 0x1}, {0xfffffffc, 0x80003}]}}) dup(r1) 2m12.379841373s ago: executing program 5 (id=4306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (fail_nth: 8) 2m11.876760902s ago: executing program 38 (id=4261): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) (async) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000ee43f6642531e08004800002c0000e000021191780000000000000000440c2d100000476d0000800100004e20000c907861100001"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff, 0x1}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) (async) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x1) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340), &(0x7f00000000c0)) (async) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) (async) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m11.834395543s ago: executing program 5 (id=4308): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') sendmsg$nl_route(r3, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x91, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x400, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="bafe3a52d8944d83c9ca4dc628af54846da317e97fdb02d49cef9823f2e9566ee6ebe7158ac279f052ab124e7214ea4a1e9055584473b98e843461ae5284da37e1d9dbb2c591880aa70da49c267ef07b9c431b749e7aa69725a4b6ec220db7fd03e456d80ec37e3883233080bec0d7c707dcba451e971604", 0x78}, {&(0x7f00000005c0)="4b72383d4cd500240a319cdd6012a14d1b217cd8db7d9517602a", 0x1a}, {&(0x7f00000002c0)="7e947f3b335873cbdd0c28de19732b5aac62620b170affd923616e58a17c9ad01e5e05cd07d5ff5a780165e62657296024921a6f861304e8c812279109cccecc0811cb186690770c96136aa3d956c62b602be3ef6891acedf213a3188c30ffe74e811c60c8922ae46633e7edb555bd86059f480b1cb27e1578a31177340b53a26cde1c0d15838e7ec343af4facdb1374b96f5cbee9c887159b6729f4820db24ae56fa9d18388ab98c75848c621920bce94ab6e75df7dd814ee3ec94698ac2a6897dcf13a8c161baa15a1577f13544219935c81497e462336b2fa5232bbdc732eb553c407883aaab0cb678d4e7a349361", 0xf0}, {0x0}], 0x4}, 0x11}], 0x1, 0x4001c00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x6, 0x5635}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) 2m9.279385761s ago: executing program 5 (id=4316): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x14, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x8880}, 0x2002c0c4) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbff, {}, [@IFLA_IFALIAS={0x14, 0x14, 'pim6reg0\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4604}, 0x0) 2m7.350066054s ago: executing program 5 (id=4322): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r1, 0xfffff000) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r2) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000d857e040fc0d0101190c000000010902120001000000030904e50000257d2700"], 0x0) keyctl$read(0xb, r3, &(0x7f00000000c0)=""/117, 0x75) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x7ffc, 0x2bc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r4, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r7 = dup(r0) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="f5", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000084000000050093920000000003000000"], 0x18, 0x48d5}, 0x8050) 1m52.014102416s ago: executing program 39 (id=4322): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r1, 0xfffff000) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r2) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000d857e040fc0d0101190c000000010902120001000000030904e50000257d2700"], 0x0) keyctl$read(0xb, r3, &(0x7f00000000c0)=""/117, 0x75) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x7ffc, 0x2bc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r4, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r7 = dup(r0) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="f5", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000084000000050093920000000003000000"], 0x18, 0x48d5}, 0x8050) 1m34.081149997s ago: executing program 1 (id=4404): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) flistxattr(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1m32.320185045s ago: executing program 1 (id=4409): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 24) 1m31.4931493s ago: executing program 1 (id=4410): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r6, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[], 0x74}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000080)="0f20c035000001000f22c0670feb6cbf260f211a67fe0ecebd670fc7a9888e0f01cf84b3d3abd1b5260f09f30f23750fd40500000000", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0) ioctl$EVIOCGKEY(r9, 0x80404518, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r11, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r11, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x26}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$EVIOCSCLOCKID(r9, 0x400445a0, &(0x7f0000000040)=0x1) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="7e9e436a6ed356e6b7062d89a9c13c7b59ec296695ad2a098af9e6071fb882dcd2fe5d7cb0441719df7c290a3fb58cf264e4c1d8d4d0d799ae93761825ede26331cecd01fe5d2610f406449f37c8c51f4880549c19eacb1634308220026457c8c1bccc023ae0215977b23cccda64a436e4a510cca4a75a4e0924e3faa1eab220fdc4671e9ef452f82ba3a541"], 0x4c}}, 0x0) 1m30.862468137s ago: executing program 1 (id=4414): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) futex_waitv(&(0x7f0000002600)=[{0x7, 0x0, 0x82}, {0x2, &(0x7f00000019c0)=0x9, 0x82}, {0x2b, &(0x7f0000001a00)=0x785, 0x82}, {0x400, &(0x7f0000001a40)=0x1ff, 0x82}, {0x80000000, &(0x7f0000001a80), 0x82}, {0x5, &(0x7f0000001ac0)=0x6, 0x2}, {0xdbb, &(0x7f0000001b00)=0xffffffff00000000, 0x82}, {0x4, &(0x7f0000001b40)=0x5, 0x82}, {0x73, &(0x7f0000001b80)=0x1, 0x82}, {0x9, &(0x7f0000001bc0)=0x9, 0x82}, {0x9c2a, &(0x7f0000001c00)=0x3f, 0x82}, {0xd, 0x0}, {0x7, &(0x7f0000001d00)=0x2, 0x82}, {0xfddd, &(0x7f0000001d40)=0xd, 0x2}, {0x3, &(0x7f0000001d80)=0x3, 0x2}, {0xa, &(0x7f0000001dc0)=0x7, 0x80}, {0x9, &(0x7f0000001e00)=0xff, 0x2}, {0xd, &(0x7f0000001e40)=0x200, 0x2}, {0x6, &(0x7f0000001e80)=0x89374c4, 0x82}, {0x800000, &(0x7f0000001ec0)=0x1ff, 0x80}, {0x80000001, &(0x7f0000001f00)=0xffe, 0x2}, {0x63b, &(0x7f0000001f40)=0xee, 0x2}, {0x1, &(0x7f0000001f80), 0x82}, {0x9c38, &(0x7f0000001fc0)=0x7, 0x82}, {0xdc, &(0x7f0000002000)=0x3, 0x82}, {0x7fffffff, &(0x7f0000002040)=0xc, 0x82}, {0x8, &(0x7f0000002080)=0xf8, 0x2}, {0x9, &(0x7f00000020c0)=0x1, 0x2}, {0x7, &(0x7f0000002100)=0x400, 0x2}, {0x4, &(0x7f0000002140)=0x7, 0x2}, {0x6, &(0x7f0000002180)=0x51f, 0x82}, {0xa8c7, 0x0, 0x2}, {0xd6f, &(0x7f0000002200)=0xfffffffffffffffe, 0x2}, {0x1000, &(0x7f0000002240)=0xe, 0x82}, {0x1, &(0x7f0000002280)=0x800, 0x2}, {0x3, &(0x7f00000022c0)=0x1, 0x82}, {0x7623, &(0x7f0000002300)=0x3, 0x82}, {0x7, &(0x7f0000002340)=0x400, 0x82}, {0x30d, &(0x7f0000002380)=0xfff, 0x82}, {0x2, &(0x7f00000023c0)=0x7, 0x82}, {0x9, &(0x7f0000002400)=0x1, 0x82}, {0x1, &(0x7f0000002440)=0xd, 0x80}, {0x8, &(0x7f0000002480)=0x5}, {0x7, 0x0, 0x2}, {0xfffffffffffffffd, 0x0, 0x82}, {0x57775a99, &(0x7f0000002580)=0x6, 0x80}], 0x2e, 0x0, &(0x7f0000002b00), 0x1) setxattr$system_posix_acl(&(0x7f0000000140)='./bus\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000080)=@file={0x0, './bus\x00'}, 0x6e) 1m30.641597339s ago: executing program 1 (id=4416): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x541b, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f000000aa00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008005) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) io_setup(0x1000, &(0x7f0000001d00)=0x0) io_submit(r8, 0x1ffffffffffffec5, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r7, &(0x7f0000000100)="331e767999fcd25f16458f4625beb50ccf5f5cefa8fb1e529ba065a5408dce94db48b94aaaf38e5a4a227022569863287447e19719aec40f9bc75aa3e46a465636b066cc1098833cb68b222af67ffef277f2465f770e6d1e6ffee834afce354bbb7e4f", 0x207f, 0x7, 0x0, 0x2}]) 1m30.227705927s ago: executing program 1 (id=4417): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000ee43f6642531e08004800002c0000e000021190476d0000800100004e20000c907861100001"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff, 0x1}, 0x20) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x400, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x2000000}, 0x1c) shutdown(r6, 0x1) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_xfrm(0x10, 0x3, 0x6) 1m22.397077844s ago: executing program 2 (id=4437): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) r1 = fsopen(&(0x7f0000000080)='xfs\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff00000000000000", 0x1c) recvmmsg(r2, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40002c1, 0x2000a002, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f00000000c0)='\x02~yT\b=\xc4U\xddmk\x184\x04\x8c\b):\x8b\x1bJ\xa9\xe4\x9e\xbb<\xc3\x9fFw\xc4\x98\xeb\x9f\xf9\xafK\a\xf6\xa9i\x1d\xd40T^\x9b\xe8s\x80\x143\x85\xb7\xa7V#\xeec\x1d\xc1\x83\xfa\x83\xfe\xfc\xd32\xa2#\xf8\x8e7@Xg\x9cam|\x89\xee7\xd1\xe2$\xfa\x12\xff\x8d\xd5[\x9a\xa0\xd4\x9eS\xdb\x04\x8f\xbd\xbd#<\xe8B\xa6\xc8-\xa0\x8c\xaa\xc4R<\xa9cAf\x05\xe6 \xf0e\x02\xc5\x84\xb6\xe1\x97\x9e63\xf3\xc1\xe8\x19\x94\xe7\xbf\xc1k\xee\x94\xf3\xc1s(\x87\xe6\x04.p\x98;\x91\xd8\x99L\x9e\"\x84*a', 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x7, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008804, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x6, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x59, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0xa, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x897, 0x0, 0x4, 0x20000005, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 1m22.112886352s ago: executing program 2 (id=4438): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000400)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x4}) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000c40)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES8=r2], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="401401150000d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 1m20.562506479s ago: executing program 3 (id=4445): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$inet(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m19.664464808s ago: executing program 3 (id=4450): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 1m19.378533542s ago: executing program 3 (id=4451): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) (async, rerun: 32) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0xe, {0x7, 0x28, 0x1000007a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x10, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) rename(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) 1m19.021505902s ago: executing program 3 (id=4452): openat$dlm_control(0xffffffffffffff9c, 0x0, 0x786c0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r2, r3, r3}, &(0x7f0000000180)=""/4093, 0xffd, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000006c0)={0x0, 0xf, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x40, 0xe, 0x2, "f2ad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x6, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0x0, 0x20, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'L\\'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x8000, 0x9, 0x80}, {0x6, 0x24, 0x1a, 0x7, 0x20}, [@obex={0x5, 0x24, 0x15, 0x8}, @acm={0x4, 0x24, 0x2, 0x4}, @acm={0x4, 0x24, 0x2, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @country_functional={0x6, 0x24, 0x7, 0x7, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x3, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x7, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x5, 0x2}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x8, 0x5f, 0x5, 0x8, 0x1}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x30, 0x10, 0x4, 0x2, 0x2}]}, 0x2, [{0xd9, &(0x7f0000000180)=@string={0xd9, 0x3, "6da8e39e329d5270f68c706d77ed11abc707361c4f0d639fde932af552a0b20ebdce0305dbe18b821c65fabfa9f50dec06e34c2833ac3cd9edc5b37a53dd4444145e7c06d88c55b97b30b40cfea6a0c0dee1589cdc18d9b70fe22ecd1fc19dd0e6d1845b076fa8f9f494c12e766b9209cddc8fdc5d2139ef13e5ead1a10c7131bd915c081151a500009278cfb854373158cf42c2f624759117bf0500d01f8a2ce14303bc2181634f0f374966224402529ad037603f0eed2057844d5311c9a21e3a6a5557e8dd0c2ef99ed8315686ec561f11c6a8aba8a7"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x804}}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r4 = msgget$private(0x0, 0x3ac) msgrcv(r4, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(r4, &(0x7f0000000040)={0x1}, 0x8, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="000a030900"], 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x786c0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) (async) add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) (async) keyctl$dh_compute(0x17, &(0x7f0000001340)={r2, r3, r3}, &(0x7f0000000180)=""/4093, 0xffd, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000006c0)={0x0, 0xf, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x40, 0xe, 0x2, "f2ad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ncm(0x6, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0x0, 0x20, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'L\\'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x8000, 0x9, 0x80}, {0x6, 0x24, 0x1a, 0x7, 0x20}, [@obex={0x5, 0x24, 0x15, 0x8}, @acm={0x4, 0x24, 0x2, 0x4}, @acm={0x4, 0x24, 0x2, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @country_functional={0x6, 0x24, 0x7, 0x7, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x3, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x7, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x5, 0x2}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x8, 0x5f, 0x5, 0x8, 0x1}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x30, 0x10, 0x4, 0x2, 0x2}]}, 0x2, [{0xd9, &(0x7f0000000180)=@string={0xd9, 0x3, "6da8e39e329d5270f68c706d77ed11abc707361c4f0d639fde932af552a0b20ebdce0305dbe18b821c65fabfa9f50dec06e34c2833ac3cd9edc5b37a53dd4444145e7c06d88c55b97b30b40cfea6a0c0dee1589cdc18d9b70fe22ecd1fc19dd0e6d1845b076fa8f9f494c12e766b9209cddc8fdc5d2139ef13e5ead1a10c7131bd915c081151a500009278cfb854373158cf42c2f624759117bf0500d01f8a2ce14303bc2181634f0f374966224402529ad037603f0eed2057844d5311c9a21e3a6a5557e8dd0c2ef99ed8315686ec561f11c6a8aba8a7"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x804}}]}) (async) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) (async) msgget$private(0x0, 0x3ac) (async) msgrcv(r4, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) (async) msgsnd(r4, &(0x7f0000000040)={0x1}, 0x8, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="000a030900"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 1m18.879479682s ago: executing program 2 (id=4453): socket$rds(0x15, 0x5, 0x0) r0 = socket(0x2a, 0x2, 0x9) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r2, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)="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", 0x160}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000540)="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", 0x17b}], 0x4}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f00000000c0)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f0000000140)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c8911080581b731f3f8b71fe8fc00a8bd0d9f2cfc1be3e698d57cb666d9fb032922b7b519e49c830c436fe64b1a7be1d05bf7022a3d4fd1ef3f47c4ed1dd355c46a32ea3f00bf751f1e603efca25dee72db6f8abfffeba5b6a0d7d05eda49221c361f678f26916bc4d4de25821532c4bdf4e7e4f64f1736e301f1b0e43982ca16f5b2ca442b92c5a1373c58450afbf0", 0xd6}, {&(0x7f0000001240)="b17b27be17bcb19544700a", 0xb}], 0x6}}], 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x4, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0xa, 0x9, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xffffffffffffff44, 0x8, {0x1, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m18.162564431s ago: executing program 2 (id=4454): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x44) syz_emit_ethernet(0x72, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa3f88fb"], 0x0) 1m17.593149937s ago: executing program 2 (id=4458): r0 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e0067"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) 1m17.28450696s ago: executing program 2 (id=4459): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getcwd(&(0x7f0000000040)=""/119, 0x77) syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x40400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f00000001c0)=[0x71], &(0x7f0000000200), &(0x7f00000001c0)}) r7 = socket(0xa, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r8 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r8, 0x7000000) r9 = dup(r8) preadv2(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x44}) gettid() 1m16.339647308s ago: executing program 3 (id=4461): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000006500)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1d}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)='\\', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0xe574, @rand_addr=' \x01\x00', 0x100}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="384c03f324", 0x5}], 0x1}}], 0x2, 0xd8) (async) shutdown(r0, 0x1) (async, rerun: 32) r1 = accept(r0, &(0x7f0000000000)=@caif=@dgm, &(0x7f0000000140)=0x80) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x80, 0x7800, 0xffffff80, 0x6, {{0x13, 0x4, 0x1, 0x2, 0x4c, 0x64, 0x0, 0x70, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast2, {[@rr={0x7, 0xb, 0xb3, [@remote, @empty]}, @rr={0x7, 0xf, 0x1e, [@remote, @empty, @multicast1]}, @rr={0x7, 0x1b, 0x37, [@empty, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, @remote, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000300)={'gretap0\x00', r2, 0x787, 0x1, 0x0, 0x7f, {{0xb, 0x4, 0x2, 0x24, 0x2c, 0x66, 0x0, 0xff, 0x29, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0x3d, [@multicast2, @loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1b04004000000000", 0x8) 1m16.170449647s ago: executing program 3 (id=4462): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000003800), 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendfile(r2, r2, 0x0, 0x10000000009) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0xa00, 0x4000a00}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x13, r2, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000040)) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000440)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r6, &(0x7f00000002c0)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000003800), 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) sendfile(r2, r2, 0x0, 0x10000000009) (async) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0xa00, 0x4000a00}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x13, r2, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (async) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000040)) (async) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000440)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r4, 0x0, 0x0, 0x0) (async) dup(r5) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) read$FUSE(r6, &(0x7f00000002c0)={0x2020}, 0x2020) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1m14.979669334s ago: executing program 40 (id=4417): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000ee43f6642531e08004800002c0000e000021190476d0000800100004e20000c907861100001"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff, 0x1}, 0x20) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x400, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x2000000}, 0x1c) shutdown(r6, 0x1) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_xfrm(0x10, 0x3, 0x6) 1m11.690438136s ago: executing program 6 (id=4471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x0, 0x4, 0x2, 0x6}, {0x1, 0x5, 0x9, 0x7}, {0x3, 0x2, 0x8000c}], 0x10, 0x4f}, 0x94) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) ioctl$KVM_CAP_X86_GUEST_MODE(r0, 0x4068aea3, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0x3, 0xd}, {0x8, 0x2}}}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x0, &(0x7f0000000040)) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000252000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r2, 0x7611d000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x1, 0x3}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x2400c890) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1a}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2e}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m11.471899517s ago: executing program 6 (id=4472): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xfc, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0x80}, 0x1, 0x7}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r5, 0x0, 0x0, 0x1000f4) r6 = socket$pptp(0x18, 0x1, 0x2) accept(r6, 0x0, 0x0) write(r5, &(0x7f0000000440)="9641", 0x2) sendfile(r5, r5, 0x0, 0x800000a1e) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000280001801400028008000300ff00000008000100020000000d0001007464703a73"], 0x3c}, 0x1, 0x0, 0x0, 0x54}, 0x400c002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './bus\x00'}) sendmsg$SOCK_DESTROY(r7, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044094}, 0x40) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) nanosleep(&(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) r8 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58edc5b848d6fa38f7956549438addc5e", 0x70, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000500)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r9, r8}, &(0x7f00000000c0)=""/74, 0x4a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) 1m9.762334094s ago: executing program 6 (id=4474): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0xe65a, 0x400, 0x2000009, 0x1bf}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1m9.222579391s ago: executing program 6 (id=4475): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x1, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vbi(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) r5 = syz_open_dev$vbi(&(0x7f00000028c0), 0x3, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8a25123ad5d34ce50ea3d3984581e1ffe269dfad4197bf1b2fb82865d9bd40e315f995505dbe4c194a6efec74e579fa7925c26baa417a2f91959fca47e240051ce10952d2c609068c0f1b6b16f6b0575d0aa50366468fae0ad205d9cadbcb139dd28afab9d26399c5d67213681d83a6d4851156dade55f18192201d2ddb86612e8bffe4c3478009e35b00c76ac68e48c767716b8347b70f219617e86eaa274d95ea3256b3ed039306d49bdd1b140e8bed4eebe55988e9dbefa4370e807a77310c4a9f9afb0463190b5905d855368de331b47f5", @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf2564000000080001001a0000000c0099000100000038000000"], 0x28}, 0x1, 0x0, 0x0, 0x55}, 0x60044001) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000280)=""/149, 0x95}, {&(0x7f00000006c0)=""/19, 0x13}, {&(0x7f0000005bc0)=""/4097, 0x1001}, {&(0x7f0000000700)=""/27, 0x1b}], 0x4}, 0x9}, {{&(0x7f00000017c0)=@caif=@dbg, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001840)=""/201, 0xc9}, {&(0x7f0000001940)=""/152, 0x98}, {&(0x7f0000001a00)=""/242, 0xf2}, {&(0x7f0000001b00)=""/238, 0xee}, {&(0x7f0000001c00)=""/154, 0x9a}, {&(0x7f0000001cc0)=""/183, 0xb7}, {&(0x7f0000001d80)=""/33, 0x21}], 0x7, &(0x7f0000001e40)=""/39, 0x27}, 0x805}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001e80)=""/203, 0xcb}, {&(0x7f0000001f80)=""/68, 0x44}, {&(0x7f0000002000)=""/24, 0x18}, {&(0x7f0000002040)=""/74, 0x4a}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/136, 0x88}, {&(0x7f0000002180)=""/236, 0xec}, {&(0x7f0000002280)=""/1, 0x1}], 0x8, &(0x7f0000002340)=""/154, 0x9a}, 0x4}, {{&(0x7f0000002400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002480)=""/90, 0x5a}, {&(0x7f0000002500)=""/65, 0x41}], 0x2}, 0x138d}, {{&(0x7f00000025c0)=@caif=@dgm, 0x80, &(0x7f0000002840)=[{&(0x7f0000002640)=""/48, 0x30}, {&(0x7f0000002680)=""/181, 0xb5}, {&(0x7f0000002740)=""/196, 0xc4}, {&(0x7f0000003900)=""/208, 0xd0}], 0x4, &(0x7f0000003a00)=""/133, 0x85}, 0x2}, {{&(0x7f0000003ac0)=@alg, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003b40)=""/66, 0x42}, {&(0x7f0000002880)=""/15, 0xf}, {&(0x7f0000003bc0)=""/119, 0x77}, {&(0x7f0000003c40)=""/180, 0xb4}], 0x4, &(0x7f0000003d40)=""/236, 0xec}, 0x80}, {{&(0x7f0000003e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000003ec0)=""/246, 0xf6}, {&(0x7f0000003fc0)=""/240, 0xf0}, {&(0x7f00000040c0)=""/49, 0x31}, {&(0x7f0000004100)=""/166, 0xa6}, {&(0x7f00000041c0)=""/234, 0xea}, {&(0x7f00000042c0)=""/150, 0x96}, {&(0x7f0000004380)=""/110, 0x6e}, {&(0x7f0000004400)=""/78, 0x4e}], 0x8, &(0x7f0000004500)=""/224, 0xe0}, 0xc22a}, {{&(0x7f0000004600)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004680), 0x0, &(0x7f00000046c0)=""/208, 0xd0}, 0x9}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000047c0)=""/219, 0xdb}, {&(0x7f00000048c0)=""/109, 0x6d}], 0x2, &(0x7f0000004980)=""/4096, 0x1000}}], 0x9, 0x120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="184e2e20fbdd01a05cbb0b92e7fa84ec3fcd6ea6e65105000000000000000000000000009f000100000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94) syz_open_dev$dri(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1}, &(0x7f00000003c0), &(0x7f0000000400)=r8}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB="ca1af51c591f469f763aba487f1a82a744bb5d48328d8f70e9af0cc4e9b820ec07f76c1e1304afbbec7ef334c514f5bf1e61024746f342c90f07963c3b394c881d7c0b33f07386a1ad461a005586fc73f5597a50f1a645d6e2e16ef72da583a8d48a62363c64fdd92d51db907b3129c816febce39d4e027e34b870e8c5b4a62eb3cbd04d68340f6833ff9423372e07bf55ef67df9e6d77ca39100b518da75e4f66642f02a4081ea13be0cc", @ANYRES32=r1, @ANYRES64=r7, @ANYRES32=r0, @ANYRES64=0x0], 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) lseek(0xffffffffffffffff, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) 1m8.212495171s ago: executing program 6 (id=4476): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xa, 0x9}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2, 0xfffffffc}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003740)=@newtfilter={0x3c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xf2, 0x6d}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x40040841}, 0x20040044) recvmmsg(r5, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000580)=""/33, 0x21}, {&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000640)=""/93, 0x5d}], 0x8}, 0x1}], 0x1, 0x40002000, 0x0) (async) recvmmsg(r5, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000580)=""/33, 0x21}, {&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000640)=""/93, 0x5d}], 0x8}, 0x1}], 0x1, 0x40002000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xfffc, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) listen(r6, 0x5ece) (async) listen(r6, 0x5ece) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) socket$inet(0x10, 0x3, 0x0) (async) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'}) 1m7.726817737s ago: executing program 6 (id=4477): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x10, @buffer={0x0, 0xc8, &(0x7f0000000640)=""/200}, &(0x7f0000000240)="238d7acf0800", 0x0, 0x0, 0x1b, 0x0, 0x0}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$vim2m(0x0, 0x4, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x3, 0x2, 0x0, 0x0, 0xfffffffe}}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) epoll_create1(0x80000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, "000080f100df000000a7d9de16c708db7200"}) syz_open_pts(r6, 0x42) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x20, 0x11, 0x5, 0x2000, 0x300, {0x7, 0x0, 0x0, 0x0, 0x10400, 0x1942}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) 1m1.97446733s ago: executing program 41 (id=4459): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getcwd(&(0x7f0000000040)=""/119, 0x77) syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x40400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f00000001c0)=[0x71], &(0x7f0000000200), &(0x7f00000001c0)}) r7 = socket(0xa, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r8 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r8, 0x7000000) r9 = dup(r8) preadv2(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x44}) gettid() 1m0.683445985s ago: executing program 42 (id=4462): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000003800), 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendfile(r2, r2, 0x0, 0x10000000009) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0xa00, 0x4000a00}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x13, r2, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000040)) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000440)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r6, &(0x7f00000002c0)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000003800), 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) sendfile(r2, r2, 0x0, 0x10000000009) (async) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0xa00, 0x4000a00}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x13, r2, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (async) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000040)) (async) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000440)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r4, 0x0, 0x0, 0x0) (async) dup(r5) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) read$FUSE(r6, &(0x7f00000002c0)={0x2020}, 0x2020) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 52.154985834s ago: executing program 43 (id=4477): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x10, @buffer={0x0, 0xc8, &(0x7f0000000640)=""/200}, &(0x7f0000000240)="238d7acf0800", 0x0, 0x0, 0x1b, 0x0, 0x0}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$vim2m(0x0, 0x4, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x3, 0x2, 0x0, 0x0, 0xfffffffe}}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) epoll_create1(0x80000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, "000080f100df000000a7d9de16c708db7200"}) syz_open_pts(r6, 0x42) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x20, 0x11, 0x5, 0x2000, 0x300, {0x7, 0x0, 0x0, 0x0, 0x10400, 0x1942}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) 10.966477636s ago: executing program 7 (id=4610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0431000000b401002000128008000100677470001400028008000700ac1e01010500050000000000"], 0x40}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) 10.025885484s ago: executing program 7 (id=4613): syz_usb_connect$cdc_ecm(0x3, 0x150, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0xffffffffffffffff}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004800010000000700000000000a008000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x38}}, 0x40d) 9.183646786s ago: executing program 8 (id=4617): socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e26}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x1000, 0x0, 0x1fe, 0x9, 0x9, 0x1, 0x400002}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x69, 0x3, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x8000, 0x6, 0x3602ec0}}) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x80802, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x49, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$key(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x20}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0412"], 0xb) 8.965829755s ago: executing program 9 (id=4620): timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chmod(0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x0, 0x0, 0x10, 0x0, "92a3b751c88f76a4ff3d43513aadeaec1196ad458a36276a542d35da8e74144a9b28b1e5f58de44fb49ba7da7208cc8fccae96ad1f567835c46109c3a9d343b5d6da6c1fdf489fe838fa6c2530dd7e1f"}, 0xd8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x40100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d2d458dd69928e1ac0000fcffffff000000000500", "90be8b1c551265406c7f306003d8a0f4bd00000000000000000000ffefffff00"}}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) syz_open_procfs(0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0xf, 0x2, 0x9, 0x7fffffffffffffff, 0xffffffffffffffff, 0x9, 0x4e90}, &(0x7f0000000200)={0x0, 0xfffffffffffffffd, 0x6, 0x9, 0xbff0, 0x200, 0xb, 0x1}, &(0x7f0000000240)={0xac, 0x6, 0x5, 0x1, 0x7, 0x3, 0xc, 0x7}, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x8f1a]}, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b"], 0x118}}, 0x0) syz_clone3(&(0x7f00000012c0)={0x101000280, 0x0, 0x0, 0x0, {0x33}, &(0x7f0000000480)=""/220, 0xdc, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x7ffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) 7.518467115s ago: executing program 4 (id=4626): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 6.927589884s ago: executing program 7 (id=4627): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="0198000000000000200012800800", @ANYRES32=r1], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1, 0x88}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 6.528695608s ago: executing program 0 (id=4628): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x88800) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x9, 0xfffffffc], [0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x2]}) r1 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) capget(&(0x7f0000000240)={0x19980330}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x224, 0x52000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x50}}, 0x8000) 6.234368309s ago: executing program 0 (id=4629): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x1ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) socket$packet(0x11, 0x2, 0x300) close(0x3) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000140)={{r5}, {@void, @max}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x850) close(0x3) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0xfffe, 0x2}, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x4008031, 0xffffffffffffffff, 0x1000) 5.996240343s ago: executing program 7 (id=4630): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x1001d, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x2c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) connect$unix(r5, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x4, 0x10, 0xf1, 0x51, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x122182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="bdaecd2115ba1356bf5d54b6602a4fea74307f7d5ee77df266087e2c88323f5e174f0191d6006bb92a235a421a554eebd823e319c7e1c53c7ef6756c4311be08468bdd706a05318c247a8b425be78603caa1067f6e27571c87f3fd", @ANYRES8=0x0, @ANYBLOB="000000000000180012800b00180069703667726500000800000000000000d229d05051b8d93734d7c321c682603d0e65e367"], 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) 5.801691899s ago: executing program 9 (id=4631): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) flistxattr(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 5.322413645s ago: executing program 4 (id=4632): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0x0, 0xcb, {0xcb, 0xc, "829af0097ff476782adb72fe5deef7723ad9ade8cbc8425da0af3946df1b502232b8a9c12671a6107377af6471829aeb43001b13601502f19e43574a7edac3863f261f7a0a2fec4d40d8c67c600b5950e93105643fdb2db9ac7e76436426b4b40fdc3f9b9b3cd40adb8f5b450217d794a01f4d97ddb37d80bc7be5305311f80aad9e4e22c24b3bfb7b4d5d0e5340952c2c21813d66d97a3929bdb469e6e5d6d7a2bd2e6f184684058997aaa63f75b095635380ef2feffc50914b0929a975fbb0f538a0ecc1af339ad7"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f0000000140)={0x0, 0xf, 0xa2, {0x5, 0xf, 0xa2, 0x3, [@generic={0x7f, 0x10, 0x4, "8402ec994a222fd3351d4677b46d0430dba654fcebea1fd4644b5b7c5a6a0b04e249e728c1ae6793ebddb5287be83ff982a1385e33e66c1440c22473f2228d2297180902c8b7acbcb715a4d2a6bffca77df9ebf8c1114f15b57c3335026f9e2f695f5d8b86295c896c717952756820a548beddc1ee26617ad32abff3"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "a165f5ce9e15572976f2ffdfa7894d67"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0x4, 0x63, "60b273c5", "0dc23e9f"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x4, 0x7, 0x13, 0x5, 0xae13}}}, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x0, 0x12, 0xf, "a03e27d5f3b668218e2175ad572eb8"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x40, 0x529d3c5c546b4871, [0xf0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000480)={0x40, 0xb, 0x2, "8950"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0xf99}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000580)={0x40, 0x19, 0x2, "b87a"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x3e}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x5}}) (async) r0 = gettid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='subflow_check_data_avail\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000840)={r0, r1, 0x0, 0x5, &(0x7f0000000800)='\xaa\xaa\xaa\xaa\xaa'}, 0x30) (async) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x2, 0x5004) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/locks\x00', 0x0, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000008c0)=0xffffffffffffffff) (async) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc29b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x16, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x200, 0x4, 0x1, {0x22, 0x223}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x62, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x0, 0x6, 0x2}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x150, 0x6, 0x1, 0x40, 0xff, 0x7}, 0x2b, &(0x7f0000000980)={0x5, 0xf, 0x2b, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0xc, 0x2, 0x401, 0xf0f, 0x3, [0xff0000, 0x3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0xf, 0x2b67}, @wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0xe3, 0x0, 0x8, 0x1}]}, 0x3, [{0xe6, &(0x7f00000009c0)=@string={0xe6, 0x3, "8019a6998673ab776aa90e191340f7b49cfcfaa5b09dc7d74c1f07682a74a9e74559ecf901101b64d34daef8957b1dd685458e8e0c051f7d8fd984e7b4cd8f58346037710db65cea3a40d9b6779a522ffb4782ca814777106144e8d5f109858f54273368022eedfe7028b17bb0d3afbd8814c7e9a99ddc6538737e30c71a28ce1b239bd625eff35f1d3123a372640e76d90d8dbc38ecaa704bb6486a07f0d32942b52a82036ada82bc46039ffab68b09d7419029927b1afa1ee24351e19ed767cb184de3480a53f75d8ddf99ae04725b40d28ddd53fdf015e9426df7793742b9df631272"}}, {0xdf, &(0x7f0000000ac0)=@string={0xdf, 0x3, "b90961c226d1e94ae4e911843ca65b9ad29c58efd50f4eb45e7b9aed19581cfd9953cc7a0c222024231fca423e51471377a525f9388e973c3307c76b410c64dbfb4ded9f5b8c057f14e6154df999c6a0868693fcb7a6e5f2be7fe9c7f5640d2c3d097908c3c108484c59213bf3621343bab44f06ced37f3ac8e1dbf4187267d35c666712aac285b8bb6ddf25dcf9cb731c2593f217b0575cc04d17e8bcb1ee11e092781e5a6cbef32e2c5d33b2192a5d347a0141f4ef50992812cd23f143cdd1b8e2807bfce0ddd9ce8942aa18d422e884e7007d4c2b754ca52583c891"}}, {0x54, &(0x7f0000000bc0)=@string={0x54, 0x3, "29ab8d944f6d0e11903786cc0799a394338545b6bdc7ef25fe1ddfd72f20e05a9c16c5c1ea1d8a3830e120bb4aac0d1a8f1c40b45308503591c02fbdfba2b48e62b15fedc7fdb5dc98c73a6466013f99ad0a"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000e00)={0x24, &(0x7f0000000c80)={0x40, 0x3, 0x8f, {0x8f, 0xc, "342dcc571218af7e425ef98e34a5e6ae41ef75fdcbd439a116446e96bf2993a532ef77670a7558b52345c4f33a60779c13548962f2f3a8ae9fda7eedc9ce6347c6881b37c3878c92df49b4f264ce918754aacb12a766e136f85d9fc0ca1e296d3587dca14edb24eedb2e7deb647a2debe9c4f253659d6bea0f03659d0d3178db471f4ce0aadd4f6b69542e16a1"}}, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f0000000d80)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0xb, "b150fbe8"}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f0000000dc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0xb82}}}}, &(0x7f00000010c0)={0x2c, &(0x7f0000000e40)={0x40, 0x16, 0x57, "e58a95cc69531e2f17f63f5de091c5ba52aad7f6c197d1b393fec42fc9ce297c0f44b75e5ecc7946b81de5c19e26a99bfe4904cc31f33d19219a2fee0c2f6a858860f4cf1802f0f6cbb7988bd45f0e4f10dffdb1160aef"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000f40)={0x20, 0x1, 0xfd, "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"}, &(0x7f0000001080)={0x20, 0x3, 0x1, 0x6}}) (async) r4 = syz_usb_connect$uac1(0x3, 0xd4, &(0x7f0000001100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x4, 0x0, 0xa5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x39}, [@processing_unit={0x7, 0x24, 0x7, 0x4, 0x2, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x6}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x6, 0x4c, '%'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x84, 0x4, 0x3, 0x9d, 'H>', "4115"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xc8, 0x2, 0xa, 0x10, "1441"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0x8001, 0xa, "30aa69"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x0, 0x81, {0x7, 0x25, 0x1, 0x80, 0x6, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x98, 0x7}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4685, 0x4, 0x0, "c08ced10de292b"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x5, 0x40, 0x8, "409428d5761f514f8b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x80, 0x6, 0x7, {0x7, 0x25, 0x1, 0x80, 0x2, 0x7f}}}}}}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x310, 0x4, 0x6, 0x7f, 0xff, 0x10}, 0x45, &(0x7f0000001240)={0x5, 0xf, 0x45, 0x1, [@generic={0x40, 0x10, 0x3, "af7957d043102c2eceb5a47752e4c9c77b3820a8bd629b2f95ee76faa786db1551a05ce8ad68beadc29864500aa8058b4a7bf934b0306794cfd3b265c7"}]}, 0x1, [{0xcf, &(0x7f00000012c0)=@string={0xcf, 0x3, "58a227f9966db54cab95ced9d8c72719c607a33531661f06379d700333ef49242294e7d9254dde01017b97bcb0c254f0c8aaa5527992777fa68e146cef20e0ac2e8d707532b83438c47c9dace05e6f45a32ef4cf50d8e27b337b8843802a33da42a5c467f9c8985069ec4f94961ba3c5b7126a1a923e33b846811ce8a4c346684e336eed162c08b2f478cca45447aed039f99284276fd9ddf17a3881575aeb666e6cc8f92b60e6245dd6658789d918dbc831d5cef939cb5a280fd85edcfbc69022ba77edb65cb4677eb069daea"}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000001500)={0x14, &(0x7f0000001400)={0x60, 0x7, 0x93, {0x93, 0x22, "42d95be79c80b7c0f6e91f9e84106a6a12676fa1cf8435d10247e15018c8cbd7020b872c18a4542be061963ac5b8feff91980252cde2c22956774837ae5e0ec8b7b11822b7b31d271d8a5f93124ee4db427e8d3c03e4787daf91c9a4fb64f0bbcf0826fe1f72857444777b32ae3a2685dec4b65ef3a0f00d785e91fb5db4158a14de394dfeb0a317cd7ed718e092da5ae3"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000001780)={0x44, &(0x7f0000001540)={0x0, 0x18, 0x43, "0690797b82ba4e0d97809f58424db8a7598b050bd38691bc0610dcc1ccf9cf0bce8727fa59d9d8558bc2e9b19a732964e90b1637a45419f0192d3903a719f204d13daf"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001600)={0x0, 0x8, 0x1, 0x37}, &(0x7f0000001640)={0x20, 0x81, 0x1, '$'}, &(0x7f0000001680)={0x20, 0x82, 0x3, "22f054"}, &(0x7f00000016c0)={0x20, 0x83, 0x1, "e4"}, &(0x7f0000001700)={0x20, 0x84, 0x2, "55f2"}, &(0x7f0000001740)={0x20, 0x85, 0x3, "ab2301"}}) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001940)={0x0, @dev, @loopback}, &(0x7f0000001980)=0xc) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0x2, '\x00', 0x0, r2, 0x3, 0x5, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x13, 0xc, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000001880)='syzkaller\x00', 0x400, 0x7d, &(0x7f00000018c0)=""/125, 0x40f00, 0xb, '\x00', r5, @fallback=0x22, r2, 0x8, &(0x7f00000019c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001a00)={0x2, 0xa, 0x5e, 0x8fe8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000001ac0)=[r2, r2, r6, r2, r2, r2, r2], &(0x7f0000001b00)=[{0x5, 0x4, 0x6, 0x7}, {0x1, 0x2, 0x9, 0x4}, {0x2, 0x3, 0x3, 0xa}, {0x5, 0x1, 0x6, 0x2}, {0x0, 0x2, 0x7, 0x6}], 0x10, 0x4}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e00)=@bpf_tracing={0x1a, 0x3, &(0x7f0000001c40)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xfb7}, @exit], &(0x7f0000001c80)='GPL\x00', 0x6, 0x33, &(0x7f0000001cc0)=""/51, 0x41000, 0x38, '\x00', 0x0, 0x1a, r2, 0x8, &(0x7f0000001d00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001d40)={0x4, 0xd, 0x0, 0x7}, 0x10, 0x16867, r7, 0x2, &(0x7f0000001d80)=[r2, r6, r6, r6, r2, r6, r2, 0x1, r6, r6], &(0x7f0000001dc0)=[{0x0, 0x1, 0x6, 0xa}, {0x5, 0x3, 0x4, 0x8}], 0x10, 0x8}, 0x94) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000001ec0)=0x448) (async) syz_usb_control_io$hid(r3, &(0x7f0000002180)={0x24, &(0x7f0000001f00)={0x0, 0x24, 0xd2, {0xd2, 0x11, "11f46626c46e8d7d676c112a37d4d2f8353a998680664a18e8d08da84b337324d336ba4fbe4dfa9c6ccfc2c8de07afd48b07e46678439ce6867138fd534c211bae3854e36defc48644608a324d06dfd65b92541054bd1e3d362c191ebf4735c241df311ffd53899bf14146ffd9ea4fc65a440a4d7baa4e16d8205717572bbdbca49b2c32bbab5fb1e2e1ec6a11e45c1ce518595f4ea0214e08fd4683b7866be4e168d30c14583e8a8a9b4e7d80db2fae61e1c1348b9118dd3fcd532452ff95c8eb0255561862faa86f640b88ba0ca447"}}, &(0x7f0000002000)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "d5da74f5d63a15d16aa623527af8ff16165e2f5e2b961a54f088e4d6efeca19be758333e6e7dd7bf912b32b0840bf95396f79b8c5b2c697512f6852261e50bf7ef112c55ba71bc9156b6513840969268c48625c24b31fa906ef0de06ae3976d15e15d7a79f282ee89c30fd992c4a22019af7260f81db7369d650a26a41d5044a8fb4bdb6ac73e176c000c69dffed0c05378705d92904c94b871d2d786ef2562c9c065f8295c0da7773eaf2a574994a045104d4ec82d133927d2abdcb577950cca1d13ee9"}}, &(0x7f0000002100)={0x0, 0x22, 0x1a, {[@main=@item_4={0x3, 0x0, 0xa, "116b6530"}, @global=@item_4={0x3, 0x1, 0x0, "9b1e00c5"}, @global=@item_012={0x2, 0x1, 0x5, "e919"}, @main=@item_012={0x2, 0x0, 0x3, "c6fa"}, @global=@item_4={0x3, 0x1, 0x8, "1a71e171"}, @local=@item_4={0x3, 0x2, 0x3, "4c164392"}]}}, &(0x7f0000002140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5ca}}}}, &(0x7f0000002380)={0x2c, &(0x7f00000021c0)={0x59107da346214f7d, 0x12, 0x87, "ecae5f3040c72a93f95c2209098131c9f4659a7bdb27689c7363f9e1887e16ccf5db249d0170236386153a42ecc680bbacd98a7799f7eb7e3f4741c70ecab88549f37d464b0aeeabd0ed155be40edeef3b286f0f64ef3a6196d0689a73d70c1c2ac7d7aab649b8360036866d724f4f6fd566d250fdbfacf16433bdb0a42639722f445d9fe12748"}, &(0x7f0000002280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000022c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000002300)={0x20, 0x1, 0x7, "b398d8f51f3ae6"}, &(0x7f0000002340)={0x20, 0x3, 0x1, 0x6}}) (async) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f00000023c0)={0x4, @raw_data="66dbba1c534f6e6cc815cebb3354f0445e5050cf4473dcf2808848e16f896f3261271b7c914d7bce57e1fd2b553d8dba76694aa8fc18d9f24a5dc64962cb9d83bf14b3845f98637a74e6bbae10b30865847448376a980c6f6f40d3b12fd58f16954eb23a6b0429a12e00ee5587806ea0f4b7987ab663f20ba32ff0f608a89475dd7e1550584bf6dfe743f4de6721dcc16e2be9ddaf67fdf6f3c6cb3cd7773d9f30dbe668f2dba96a4b6791e4225b745cc27cdb5f89840461d69c8468016c9af07696c9ee32f87512"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000024c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), r9) sendmsg$NL80211_CMD_ASSOCIATE(r10, &(0x7f0000002700)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002580)={0x108, r11, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x3, 0x0, 0x0, {0x1, 0xe3, 0x0, 0x7, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0x29fcd664, 0xf}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}], @NL80211_ATTR_IE={0x6e, 0x2a, [@ht={0x2d, 0x1a, {0x20, 0x2, 0x2, 0x0, {0x7f, 0x1d61, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x3, 0x3}}, @supported_rates={0x1, 0x1, [{0x5, 0x1}]}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xcd, 0x8a, @device_a, 0xfffffff3, @value=@device_b, 0x17, 0x1000, @device_a, 0x2}}, @ht={0x2d, 0x1a, {0x1, 0x3, 0x2, 0x0, {0x5, 0x9, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x3, 0xe}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6e1b4c2dbfeb"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x3, 0x0, 0x0, {0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0x2, 0x7f}}]}, 0x108}}, 0x0) getresuid(&(0x7f0000002740), &(0x7f0000002780), &(0x7f00000027c0)=0x0) (async) lstat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r6, r12, r13) (async) ptrace(0x4207, r0) (async) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f00000029c0)={0x6, 0x9, &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002940)=[0x0, 0x0, 0x0], &(0x7f0000002980)=[0x0, 0x0, 0x0, 0x0]}) (async) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x64, 0x1, 0x2, 0x484, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3c91375d}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xd24}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x34f6}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async) syz_usb_connect(0x0, 0x34b, &(0x7f0000002b40)={{0x12, 0x1, 0x0, 0x44, 0x1e, 0x18, 0x40, 0x2df3, 0x9d03, 0x4a23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x339, 0x1, 0x6, 0x7f, 0x20, 0xf8, [{{0x9, 0x4, 0x73, 0x9, 0xc, 0xff, 0x41, 0x95, 0x3, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x5, 0x4}, [@country_functional={0xa, 0x24, 0x7, 0x1, 0x8, [0xb1e, 0x5]}, @dmm={0x7, 0x24, 0x14, 0x8, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @obex={0x5, 0x24, 0x15, 0x7}, @country_functional={0x10, 0x24, 0x7, 0xfa, 0x5, [0x0, 0x1, 0x1, 0x2, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0xa, 0x3, 0x3, 0xf}]}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x24}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x1, 0xb4, 0x7b08, 0x9, 0xfc}]}], [{{0x9, 0x5, 0x0, 0x10, 0x20, 0x40, 0x6, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0xa, 0x0, 0xfa}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x2, 0x5, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xb1, 0xa9, 0x1}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x7, 0x5, 0x5}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xa1, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x40}, @generic={0x90, 0x21, "7c05339fa83ae8be77c7fd340de74c2b8aab4c843d82408a0bc7b9456d0094ff91d1563e9e9f882eae4a4e53fc33bda8b5f9a406b7fbb7847ebb5b7c0fbc3d3381dbd4443c4c8d510683668b2fcff8c8bd784bae592512e97b325e4bdee79b724839331819f1f2110983a9d805c462b10d4f7300df12e38027e0c179869323925369368ab9cd777b0f8f34f052ff"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x1, 0x6, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x31, 0x2}, @generic={0x8b, 0xa, "fd0c912c45eea5c87f1663736db6ab49e63bd3799748460f8b2e22dc66ff42918ee23b364bab55203b80d2a641a3725a0c09f39b1efe2f8e4c7e2cb7de2ae70d6408866da04962cca4472c8e5b77fb5dfb1eef374d39b6f2bae29af320454cf79ea8474471d203b66d456436815df3b72e59b38deedfacf74b59b934a773ecf004630cf5c61d7805a3"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x9, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x81, 0x9, 0x0, [@generic={0xbd, 0x11, "7f7056c09796a3172436eac1f07c7131da0d1b710c37cce0693e2701e9105d318c031bf239053a2ea367c82121af2ae51737d103efe447d755d0ac8c916a18b29dc8eb1f3b1b440576445423abe2607384759341446e8b7a31382ef0d2259399de66478496c2fdfbc2d2c485249ee4881c8b03658a4b4b7ef6906d2872313f2231a709e7cd954053e8c479b9a781f3352a2bdfbb0b9a16c26eec562b3ca807ce11453641622d6b1b2ef50bd6b842b92009bc7e5e5f47746fc46c95"}, @generic={0x4c, 0xb, "65e3d051aa42e29833faf3adefe9e07a35d7510e612db56e27553699473a2df4bbc3d009e97ca419ae0be793c0ad6deafb88ef8bb525506bee490962dc38a4e74db7ff0df8b3f4b5aaf3"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x2, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1}, @generic={0x16, 0x9, "b0598c9a17b242e00b8c99aa11fa5e23787c130c"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x4, 0xc0, 0xeb}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x9, 0x8, 0x2}}]}}]}}]}}, &(0x7f00000031c0)={0xa, &(0x7f0000002ec0)={0xa, 0x6, 0x110, 0x5, 0xfa, 0xc, 0x10, 0x4}, 0x5, &(0x7f0000002f00)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000002f40)=@lang_id={0x4, 0x3, 0x1053}}, {0x4, &(0x7f0000002f80)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000002fc0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x23, &(0x7f0000003000)=@string={0x23, 0x3, "28fd697b51a0a7183a2dc2c630ba58780f275bfdaa85383e9000b08aee81ee1fbd"}}, {0x76, &(0x7f0000003040)=@string={0x76, 0x3, "780d992488ac886da0f320ea5ff76c3656e3434b9ecd425ec090b00ab85b08fc328c0c48db3c225b7b4c8105fb53853d8d1148b02996dbee2e4c8352a5bffd443c4399510ca0e99866351915b73d587df59fc4adbf75f3ee5c8367cd82218fdd93cf3daaa39761c8945e1455c922543c95a028b9"}}, {0x8c, &(0x7f00000030c0)=@string={0x8c, 0x3, "8ed28600d6a55e4e53ceaddeeb0b55098c6309d623776cc7a406b6bb25f9e9623a0d51fb1d8acf4a9fdfc560631eb7dac846f12dc05ca8db22787a42e1a4ca7f80ab3da976b3b15523fae47facfd39a0ac5960d6499cd640816965b9e12a77bcd0a6c0614d9733e7ef73561feaa88b19d969d07e5db07bcc87d345c8d8899fa7afa34bcf63cbbbcb6f80"}}, {0x4, &(0x7f0000003180)=@lang_id={0x4, 0x3, 0x43f}}]}) 5.308972119s ago: executing program 9 (id=4633): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000006300001802c00018014000300fe88000000000000000000000000000114000400fe8800000000000000000000000001013c0003800c00028005000100000000002c00018014000300fe88000000000000000000000000010114000400fe8000000000000000000000000000bb3c0002800c00028005000108000000002c00018014000300fc02000000000000000000000000000014000400fc"], 0xbc}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1884, 0x0) move_mount(r5, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0x710, 0x0, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x81}, 0x6e, 0x7, 0x8001, 0x8, 0x24, 'syz0\x00', "8ad09ba136d686098016d76a7051dacea6ed0b7872483a0ac6a8163e2d519975", "bd25b0905aa7c6dc7ddfc8635dfbc836e4ac424643b053647df09fc17f845b1e", [{0x8, 0x7f, {0x0, 0x7fffffff}}, {0xffff, 0x8036, {0x1, 0xff}}, {0x5, 0x3, {0x1, 0x36b}}, {0x23, 0x8, {0x0, 0x6}}, {0xc1d5, 0x4, {0x1, 0xfffffff0}}, {0x7, 0x3, {0x2, 0x1}}, {0x3ff, 0x400, {0x1, 0x7}}, {0x1, 0x3, {0x3, 0x5}}, {0x9, 0x81, {0x1, 0x5}}, {0xc2cb, 0x0, {0x1, 0x800}}, {0xd, 0x1, {0x1, 0x2a}}, {0x3, 0x8, {0x0, 0x5ff}}, {0x6, 0x7, {0x0, 0x3}}, {0x8, 0x801b, {0x2, 0x9}}, {0x8, 0x6, {0x2, 0x2}}, {0x80, 0xc52, {0x1, 0x6}}, {0x8, 0x7, {0x0, 0x78}}, {0x5, 0x7f, {0x3, 0x57}}, {0x0, 0x0, {0x0, 0x5}}, {0xb0d, 0x4, {0x0, 0xffffffff}}, {0xff, 0x0, {0x0, 0x5}}, {0x7, 0x9, {0x2}}, {0x1, 0x3, {0x1, 0x21}}, {0x3, 0xe61b, {0x1, 0x8}}, {0x8326, 0x6, {0x0, 0xfffff800}}, {0x401, 0xff, {0x0, 0x4c}}, {0x5, 0x5, {0x0, 0x7fff}}, {0x21a, 0x8388, {0x0, 0x7fff}}, {0x6, 0xfff8, {0x3, 0x10001}}, {0x401, 0x2, {0x1, 0x8}}, {0x400, 0x7, {0x0, 0xec91}}, {0x7, 0x4, {0x3, 0x7bd}}, {0x5, 0x0, {0x1, 0x6}}, {0x9, 0xdb14, {0x2, 0x6}}, {0x10, 0x0, {0x0, 0x1000}}, {0x200, 0x1ff, {0x0, 0xa41a}}, {0xf, 0xfff, {0x3, 0x1ff}}, {0x4, 0xff, {0x0, 0xe}}, {0x8, 0xffe4, {0x2, 0x59d}}, {0x8, 0x80, {0x0, 0xe2}}]}}}, {{0x254, 0x1, {{0x3, 0x80}, 0x3, 0x10, 0x5, 0x81, 0x1c, 'syz1\x00', "6394d97a3de334fb48faf48ec8ad6a67b8bc25b2b03a40c67b38cd06e8687c2d", "71e2418e88fbcecd80f7b3032f38101a82b5db66e061cbf83e1f9be818cef05f", [{0x642d, 0x0, {0x3, 0x8}}, {0x7, 0x934d, {0x1, 0x9}}, {0x9, 0x6, {0x1}}, {0x800, 0xffff, {0x2}}, {0x2, 0x30b, {0x2, 0x8}}, {0x21c, 0x7, {0x3, 0xad0e}}, {0x8, 0xfffb, {0x1, 0x9}}, {0xff, 0x8000, {0x1}}, {0x9, 0xaa90, {0x3, 0x6}}, {0xfffd, 0x8, {0x3, 0x43a}}, {0x8, 0xe470, {0x0, 0x5}}, {0x9, 0x4, {0x0, 0x7}}, {0x2, 0xf, {0x3, 0xff}}, {0x4, 0x78a, {0x1, 0xc77}}, {0x800, 0x5, {0x0, 0x6}}, {0x7ff, 0x9, {0x0, 0x3}}, {0x3, 0xfff, {0x23b5edabb0229833, 0x4}}, {0x7, 0x0, {0x1, 0x2}}, {0xc0fb, 0x7825, {0x0, 0xc}}, {0x11, 0x6}, {0x7, 0x0, {0x3, 0x5}}, {0x6528, 0x4, {0x2, 0x80000001}}, {0x8757, 0x5, {0x1}}, {0xf, 0x8, {0x3, 0x1}}, {0x4, 0x80, {0x1, 0x6}}, {0xf699, 0x1, {0x0, 0xfffffff8}}, {0x0, 0x5, {0x3, 0x6}}, {0xfff, 0x0, {0x3, 0x4}}, {0xc, 0x3, {0x1}}, {0x9, 0x0, {0x2, 0x6}}, {0x0, 0x0, {0x3, 0x3}}, {0x401, 0x3b9b, {0x1, 0x1}}, {0x0, 0xb, {0x3, 0x1ff}}, {0x5, 0xd3d, {0x2, 0x4}}, {0x0, 0x8, {0x0, 0xb7}}, {0x5, 0x7ff, {0x3}}, {0x6, 0x836d, {0x1, 0x3}}, {0x40, 0x0, {0x3, 0x6a}}, {0x0, 0x1, {0x3, 0x7}}, {0x9, 0x7ff, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x7f}, 0x8, 0x1, 0x0, 0x1ff, 0x1b, 'syz0\x00', "0fdb7b1426f46d707a3125e78b03ed4a2284c03c3028a06bc62770facdeaa17c", "d96afa6776372a8ccbb272d69dba30902753127d7430b0cf400e85605c6c6760", [{0xfff8, 0xf801, {0x3, 0x8}}, {0x40, 0x5, {0x3, 0x7}}, {0x5, 0x0, {0x0, 0x6}}, {0x5, 0x1, {0x1, 0x4}}, {0x8000, 0x2, {0x2, 0x81}}, {0x94e8, 0x3, {0x3, 0xaf}}, {0x9, 0x2, {0x1, 0x7}}, {0xfffa, 0x5, {0x3, 0x1}}, {0x6, 0x3ff, {0x1, 0x4}}, {0x67, 0x1, {0x0, 0x6}}, {0x1, 0xfffa, {0x3, 0x3}}, {0x96d, 0x9, {0x3, 0x40}}, {0x2, 0x0, {0x2, 0xff}}, {0x2, 0x9, {0x1, 0x4}}, {0x3, 0x4, {0x2, 0x2}}, {0x3, 0x1}, {0x2, 0x7, {0x0, 0x6}}, {0x90, 0x4, {0x7, 0x9}}, {0x8, 0x200, {0x1, 0x1}}, {0x3, 0x3, {0x2, 0x400}}, {0xc, 0x6, {0x2, 0x6}}, {0xfffe, 0x3, {0x0, 0x60}}, {0x80, 0x4, {0x2, 0x10000}}, {0x626, 0x6, {0x2, 0x1}}, {0x5d, 0x8, {0x1, 0x8d7}}, {0x6, 0x6, {0x1, 0x5}}, {0xabfb, 0xfffd, {0x2, 0x5}}, {0x8, 0x4, {0x3, 0x80000000}}, {0x1, 0x5, {0x3, 0x8}}, {0xc3, 0x101, {0x1, 0x100}}, {0x3ff, 0xf52, {0x0, 0x3}}, {0x52f0, 0x2, {0x2, 0x5f}}, {0x6, 0xe7, {0x3, 0x7ff}}, {0x202, 0xb4, {0x2, 0x8}}, {0x2, 0x800, {0x1, 0x27}}, {0x9, 0x9, {0x3, 0x10000}}, {0x0, 0x97f, {0x3, 0x1}}, {0x2, 0x3, {0x4b06199e4a44fdca, 0xda}}, {0x709, 0xf, {0x2, 0x8}}, {0x8, 0x4, {0x3, 0xbe}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x44}, 0x8001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000003408000000001700638a00fe00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000001000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f00020000000800050099dee788cb57a5a73cc31fa18c1304a3b84836d3a3b4189ea9", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) 4.894447995s ago: executing program 7 (id=4634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000300)={0x32, @dev={0xac, 0x14, 0x14, 0x2f}, 0x4e20, 0x1, 'ovf\x00', 0x18, 0x3ff, 0x52}, 0x2c) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) write(r7, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586", 0xd, 0x0, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r9 = accept4(r8, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006880)={&(0x7f0000000140)={0x50, 0x0, 0x6, {0x7, 0x2b, 0x1ff, 0x100, 0xc, 0x2, 0xfea, 0x101, 0x0, 0x0, 0x80, 0xffffff20}}, &(0x7f00000001c0)={0x18, 0x0, 0x6, {0x1000}}, &(0x7f0000000200)={0x18, 0x0, 0x7fffffffffffffff, {0xfffffffffffff001}}, &(0x7f0000000240)={0x18, 0x0, 0x7}, &(0x7f00000002c0)={0x18, 0x0, 0x7ff, {0x5}}, &(0x7f00000003c0)={0x28, 0x0, 0x2, {{0x36, 0xeda3}}}, &(0x7f0000000400)={0x60, 0xffffffffffffffda, 0x1, {{0x8000, 0x1, 0x8000, 0xffffffffffffff0f, 0xfffffffffffffffd, 0x9, 0x7, 0x1}}}, &(0x7f00000004c0)={0x18, 0x0, 0x8, {0x6}}, &(0x7f0000000500)={0x1a, 0x0, 0xffffffffffffff9c, {'netdevsim\x00'}}, &(0x7f0000000540)={0x20, 0x0, 0xc, {0x0, 0x8}}, &(0x7f0000000580)={0x78, 0x0, 0x23b, {0x4, 0x7, 0x0, {0x6, 0x2, 0x4, 0x0, 0xf, 0x9, 0x5, 0x6, 0x2, 0x6000, 0x0, 0xee00, 0x0, 0x9, 0x6}}}, &(0x7f0000000680)={0x90, 0x0, 0x5, {0x3, 0x1, 0x5, 0xa, 0x0, 0x6, {0x2, 0xffffffffffffff4a, 0x8, 0xa6, 0x9, 0x7, 0x8, 0xe, 0x8, 0xb000, 0xfff, 0x0, 0x0, 0x2, 0x263}}}, &(0x7f0000000740)={0x10, 0x0, 0xda58}, &(0x7f0000006200)={0x3c8, 0xfffffffffffffff5, 0x0, [{{0x0, 0x3, 0xf, 0x6, 0xfffffffb, 0x6, {0x6, 0xe, 0x8c9, 0x0, 0xffff, 0x8000, 0x91, 0x6, 0x80000001, 0xa000, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x8}}, {0x1, 0x9, 0x2, 0x6, ',!'}}, {{0x5, 0x0, 0x53, 0x1, 0x7, 0x1, {0x4, 0x9, 0x0, 0x2, 0xc, 0x6, 0x3ff, 0x80, 0x8, 0x2000, 0x5, 0x0, 0x0, 0x0, 0x2}}, {0x0, 0x59, 0x3, 0x4, '#(+'}}, {{0x0, 0x3, 0x8, 0x8, 0x2, 0x3, {0x6, 0xfffffffffffffffa, 0x5, 0x7, 0x58, 0x8, 0x10001, 0x4, 0x2, 0x2000, 0x3, 0x0, 0x0, 0x3ff, 0x1000}}, {0x4, 0xb8a8, 0x8, 0x4, 'devlink\x00'}}, {{0x1, 0x3, 0xc31e, 0x0, 0x7, 0x7fffffff, {0x5, 0xfa99, 0x2, 0x52b, 0x5a4, 0xffffffffffffffff, 0xf, 0x5, 0xbb0, 0xc000, 0x800, 0xee01, 0x0, 0x6, 0x3}}, {0x2, 0x6, 0x8, 0x4, 'batadv0\x00'}}, {{0x0, 0x0, 0x9, 0x7c, 0x6, 0x1, {0x5, 0x10, 0x0, 0x1, 0x0, 0xffffffffffff8a15, 0x2, 0x5, 0x800, 0xc000, 0x7, 0x0, 0xee00, 0xfffffff9, 0x19}}, {0x5, 0x8, 0x1, 0xbea, '$'}}, {{0x0, 0x3, 0x1, 0x9, 0xe5, 0x7fff, {0x3, 0x0, 0x8, 0xd1b, 0x0, 0x4, 0x6, 0x25, 0x5, 0x6000, 0x80000001, 0xee01, 0x0, 0xa9, 0x1}}, {0x6, 0x5, 0x0, 0x101}}]}, &(0x7f0000006680)={0xa0, 0x0, 0x9, {{0x2, 0x0, 0x10, 0x400, 0x5, 0xaab, {0x1, 0x9, 0x3, 0x1, 0x7, 0x9, 0x7, 0x7, 0x5, 0xa000, 0xa0000, 0x0, 0x0, 0x2, 0x8}}, {0x0, 0xc29739591a85279a}}}, &(0x7f0000002100)={0x20, 0x0, 0x7, {0xd47, 0x4, 0x2, 0x3be0}}, &(0x7f0000006740)={0x130, 0x0, 0x7, {0x401, 0x7, 0x0, '\x00', {0x200, 0x0, 0x6, 0x8, 0x0, 0x0, 0x8000, '\x00', 0x3845, 0xffffffff, 0x4, 0x778, {0x9, 0x7ff}, {0x0, 0x2}, {0x2, 0xfffff800}, {0x81, 0x1}, 0x7fff, 0x3, 0x10001, 0x6}}}}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x40080) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) 4.448805553s ago: executing program 8 (id=4635): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 4.341097829s ago: executing program 8 (id=4636): r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xffffffffffff0000, 0x8) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x50001, 0x0) io_uring_enter(r1, 0x60a0, 0xae24, 0x40, &(0x7f0000000280)={[0x7]}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1, 0x140) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x106, 0x6}}, 0x20) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000380)={0x2, 0x1, [0xff, 0xaea, 0xf, 0xfc, 0x9, 0x800, 0x6, 0x1000]}) r3 = openat$incfs(r1, &(0x7f00000003c0)='.log\x00', 0x44080, 0x10) ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, &(0x7f0000000400)={"ab170baada0c49d996c0eb7631c1c64cfb09d068169bc37cf0932bd9b6bc", 0x3, 0xa, 0x1, [0xefa, 0x180, 0x8, 0x2, 0x1, 0x8, 0x9, 0x0, 0x4, 0x4, 0x9, 0x3f, 0x101, 0x4b, 0x943, 0x1, 0x2, 0x1000]}) setsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000480)="a2459cfe43c9039845e2f9913ef87dc7b0c39fc36f4c4349317c76824953a067a30cf2b57299f0459452a99fcb005a0f510b82ac3777af6c71f0732a231c168f656216b8b33dbd68f95202c08ab1f24cc50474", 0x53) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000540)={0x1d, r4, 0x3, {0x1, 0xff}, 0x2}, 0x18) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x3, 0x200, 0x1, 0x1, 0x5, 0x0, 0x5, 0x9e95, 0x1f6, 0x2c9, 0x541, 0x400, 0x0, 0x4, 0x0, 0x1, {0x3, 0x6}, 0x8e, 0x3}}) bind$can_j1939(r3, &(0x7f0000000640)={0x1d, r4, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) sendmmsg$inet(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000680)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000006c0)="c7dec07babc3c211bb81d9ee7ca1e88e977efd4a27772c9b8bfd2fa7d0b6a8861ffba8567d2b04e37ccf78615745bcbee1403344b80b6b9a8186c1a6990637262761452c363ba125fe4a5d2471af9ece56e299a19bababe35fd5c5d908045965361b604f263b2db82755ba06d6d8ff2dd1936da778f72a9ce678afecefdcb3c585c8e6b7836f35ae27", 0x89}, {&(0x7f0000000780)}], 0x2}}, {{&(0x7f0000000800)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000840)="dc05e6349a76574137a4d92de8d8c9946a585cdcbf978218de4c7b023860153249cdade59801dbab5592e09e648f0438370d23eac1b01886cb", 0x39}, {&(0x7f0000000880)="178e76cfc2ccd64f9cc0768fe18fc70bee8ca3e1eaf6954ee84dce02c37682b2a5b2c443b4149e4124caacfa1bd7eeefd26af0f2bcf1e4a53edbfbd51be5559bcdacc1d60009d0432e2a96c2c64ebfbd0e951c3c282598666c26e26bf499c65d815aff19cc02bee8c9b197b2cc34fd9fbe43", 0x72}, {&(0x7f0000000900)="00a95742a8d399bcdca2ad9198286d793a011401e40e96d75f04a5fde51f5f76cc54c95dd92fb7e3ec6667eb7effbe5cf494eccbdba5489d4734810e26363e69fd4ec104b24f4111f642c6496ebdbcb0012a4e1961e65a6db07b6eb7eea75bfdb7c77e4201904bbdc5df8c0c42264a26ec93a51de5efa05b2155100097839d67c0519ce0a469856e6d95f07916832fe69dcd509adf5b2a928805ed78e754e0f27a76b97a04415e852d1f647a0c31a9961a4a69a083fd21be048de627a300fb08af", 0xc1}], 0x3, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @noop, @generic={0x83, 0xb, "c1d2d650aeffa17f57"}, @ssrr={0x89, 0xb, 0xe0, [@rand_addr=0x64010101, @rand_addr=0x64010101]}]}}}], 0x68}}], 0x2, 0x4040) recvmsg$qrtr(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000b40)=""/199, 0xc7}, {&(0x7f0000000c40)=""/116, 0x74}, {&(0x7f0000000cc0)=""/89, 0x59}, {&(0x7f0000000d40)=""/52, 0x34}, {&(0x7f0000000d80)=""/74, 0x4a}, {&(0x7f0000000e00)=""/247, 0xf7}, {&(0x7f0000000f00)=""/4096, 0x1000}], 0x7, &(0x7f0000001f80)=[{0x1010, 0x0, 0x0, ""/4096}, {0x10}, {0xc8, 0x0, 0x0, ""/178}, {0x18, 0x0, 0x0, ""/2}, {0x10}, {0xe8, 0x0, 0x0, ""/216}], 0x11f8, 0x40000101}, 0x38, 0x2041) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) sendmsg$nl_route_sched(r2, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)=@delqdisc={0x64, 0x25, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0xfff1}, {0x0, 0xe}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x2048800) r5 = syz_open_dev$vbi(&(0x7f0000003300), 0x1, 0x2) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000033c0)=@multiplanar_overlay={0xa, 0xf, 0x4, 0x400, 0x2, {0x77359400}, {0x1, 0x8, 0x35, 0x3c, 0x40, 0x97, "fa2901ec"}, 0x7, 0x3, {&(0x7f0000003340)=[{0xffffffff, 0x200, {}, 0x8}, {0x0, 0x5, {0xb6c}, 0x5}]}, 0x1ff, 0x0, r3}) r6 = add_key$fscrypt_provisioning(&(0x7f0000003440), &(0x7f0000003480)={'syz', 0x0}, &(0x7f00000034c0)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r6, 0x8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1b) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000003500)={0xc38d, "1dc61076030a59a07adad0b6d411a9a631018819e042f9f91349815081e03c2e", 0x2, 0x1}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_SNAP_CREATE(r7, 0x50009401, &(0x7f0000003540)={{r2}, "7ea0a36b1d39060e6a30b4e799860b4435f7ce623c7303ec6040be2121bf0d4f207299f05459b61c57c294b3c8886a4a55bc2345990d1436fbd208b9c2aa07f999901bd7ef000a9021a250eddec1ed60e9aeb468817db64984f18ad2f281ab86fc43d7a2d6c7950d1ff9da0c4f75a090fd317a9fc84890b0c5735610c44187db4a49b64180a43968817d30731ecadce4ffc3713524ecc002a2b5359327c315151b86051e7a03f2faa7d0c3ef92a2356e5cb46552947ed4dc39ef68f481c9f9344a7dc9519676c4a3864b6f64ff59e39ab563422f66d84d8c88a7f0642b511bec077812e70a52e9d31cb032ed01b2322fdb475b00c917067eb56c58ba0e8521408a29743b68bdff72b8e17db5d3f8c4559911f5b37fbd1dd91cd1c1c3038f0b40de51642f8b25e622a7bf9178656368b5cd2c0cce3d8b96a3e4eaa3967f8e008a45c32fc8286ed0770a854d0c1f808626f8e2012dfbd5a9e812e9196daadd76467be3d8b55483c2d378f992688685539280bb9d1b91c2f2e2c6eb68e0f164bb6c685e109052e8a2b165b12af32dbd3265281ea4cf6e3854a64486f5fae50766f430a3b0230a40111293cfacbbb7b7a5fd8eefd019332421daa8ffc2d6afb0a67451481bb0b523455c72d20357e444c1f8f89485261b71b3cebdd8c0ae1fdb7a02c8d327ba9f019c259cde993f43440810cbb9a4f5a91e200a84db718fa86daf8c8cf0983838a35dffdda8cc86d7d4959843958215b5428db547ca8a24e7d580de36db0befc6c83f6e5bfc0eef7216d3d0585829db73233d50fd1cb4cb7e578fda3fc6c575f7a7b644527f54d5464af4f701064b25c0c9658255ea5e0963913504c79c4e1f6601e41418c6d1b3f4b621ac3d49461428576f2313371bb32893d474041aacf17547de49a45a9f31695cae11298ba3aa9d671e9d836d6bed9d34b7ccf643f693cf79c876489474d4bbd26850a3e40b31a1c18a96031ea19f3c623da1416592a7e1c83141d3820c114b5040a4a6cce7e3f845d30acfc8e2c7996b1f0b41aed506ca55da354cee4cde79fcbf79c53a094ba760033fdbd272c002595a2397d1d81ef89b18c7db48ca0332dedc0c41f2432cb60d7f96ee459d4d4fd108e0150de6198b79e61300b62e8a7dca703642780b71c71454c7154c603a418e02db496b40332e5df65a003009b67db0866a229ac68e8cfd266bb1ab39625a688b7f207641b3e2bf3c1e63d2a0320128e6ce16bc4fcddc84db00e5d98ad542fff600fea179d23a0f7a17e2a4af80179049a2a110e8e97d0bebc33447f01ebf69e6f4d45854cc196ede2922d17a8a6d235bb0aff771f1687861da6062021fb13218e3347b9960b4639403909686272490f4bd5cde81236ad3aaf82c3b62fd7607bca902b65d3acc9af739bcfabc0f85ccd1482ae67d443e1efb1ebc42e831e6e0f0f01c755e148cb972970e888d2977a856e81368eb0b421a75c0c79d1e7ab3d9522d545ca2f84ffb69f168f19d819111c900749b33028b3f48a3ecc1654e66f7cd390a6932aa73643af1a5af8ba47f499fce94ed60e9514f677b3671bfb2232d3d135bbad2ff32eafd03147d311136f000ce14a38bf7f66f7483e9eef6880782061caa21ac15961bf236fcf4c9fceb16d04f59277decf5775f783397702dd7a66a88686785df9033503d42881d3669b461e8fa1f7d14957ef1331481dadd1ca228224cfe16d7f34c8c7aa13115f6d5d3df562d7a8fc2b82487a73aab4aaebbf905f9d709cff76a481d4e52cb6ccc592518e635a661fba1eb377aa627e759443d98c78b21794cbd079544b33116a4034f3094d428a7ffd6164f76b5af28ca8cb549984ea50fcdd4745c4843d3af6acaf37df8fa3b409a3e230639ba4bb936edb11d0bae49a1fd576574949138a0de4a2671937413b5d90a77a315c3176f8efdd96c37a06d0c59856a1743c40075f190ff397e059ee6890cb181eb49b1ca81e23fd116dbfbbd1670dc8375391779745278b94895b592732aeae208825d2f0a8beef119ba995bac49ecd260a83d4eeede5e118c222ff512ddb69f01e87ceb789ef433815e3cd360d3d19d5406b5b3dc0503713fdf9cccf35cce4c72542b0658f6ccd3ddf8a64cc9d1333b6a4cea2c613e049ba60ac0f24d02550c519643ea2c354019ec3f89727a697f145a4b21b2557d9fee48bffc13e1c51fe2f5a6b550c8d71c33640f6d885b636a19e00c3cd74c5b8072a676cfc979a07e6d8984a5d02672879c80af57750c35355cc334765a3f03bffa47f12c8de01c538431d7796a86be3b168d09d22841937c0eb19e5141e73654c2809f8b794f74fa2adee1e27b29cae22d8ddba897368576a3eadde6335c92ac3f45b10ffe4855b9806f369f66df6c20b2c4b2c75f06d764db88b70e02ae532abc85071b82acfbb16808d168ef711c1b716d46f52f27fddbbab47f198d22699fc24824ea33cad048548643fd3dbb5f0c201b608bb2620e4e0549671d28f26ec61b2d057693424131ab6f01bd170408a98c040e8fa0838153934ed9b47a53e09628140cbc9d08f95ab329db26ffcef7a6c23a46d6d4062e529a8326bcac259bb67360df9f30407fea12548c56ea924661794aaf46c633c2bdcdbf54f1722a4c8a6ed226105316f86db003ea1bd09f7d9b8785696a794be7b1973762ed1e6ed6efd0eab5b0d1fe58e2f2c461c61ccd9c80ec1025af584dc3d0436eb1904d461d48db28c91c43d6598caf5e35971d210eafb7ee8e520c55adca4e11a8d77db105ddb326d767a16a7d7b7a9fa0279dff88c0615df31374081712f52c09475a8071559a770c2d7e3bd97ec603664a9a70613ab59e43e200a4a753bd8e9ebc7190331955b5d1f3ffdc4cf15688a79628b3e05fdfd6c66022dd2e139154ad50acf6621a36af3403a27e3a20547ccbc52d184714188751e01d71da96afbade8e0305d269e5a1d712c930d57ac5eeaf2d15a2f26f946b072b680273bb545e3eb8b72997e207830ba293c989ce0f64033f1da76a6677ad5b998abc960dc8fc249d714e3e6be346827c4c3e6ac9a63eecb2b5f58a0954df583e0b356872c2fe003813774e0f2662e0ee29f9cc3159c81382b7c0cebac88a803e28780cb64fe3d590d620e108f7a91a1c3228a932fb258b125e3cec1b6bbcf900a934e68c2c18f0e20ed3544a4000e86c62e90342f1d60f857025639fe37520a36404b27d68a4e99aa62d1ca08067ae412a565e27c3f42d049bdeb0e6dd077d31f9d640287a0d96a9457bdd9de5e6f2490d1e8f971c63bd9dc1c811d4877ca4632ba059f4d5d49659e797b80a5c3d7185aaedb92f1cf2b71b4a6211f285462d8974d77fdbc42c0cd72083680d9c9ae19b6eaa331f2b561c56bcc0d224e61513ac25141d1d1de8187d92fe3e937b836af8a183174936a423236b69f500a62a1d57827a91044dcdfb98d851acfd6a337e887e8b1f7bc64e55ebcb59d8c85ad6a9a722ecb799f0aeb985ad034a3c8cee9bd35521e6bdb93affa52f54bc688e601493671ada40695d12aa80342bbd05216ccbfe0117d9508edf0cafaa54405b65b041b926b947b0a3665dcb8d6d3fc8ac91637abd9062db9e3b07bbb5dcd48e0eb9ba97d821ac396bcbabb5a1bb630cb56f1e9b7652bbc71b3433a8cd3b3ffad8fa6751243184c325aa171d331eab4c93aa229f051f20f73b1e30c948d16da99f1f722a514077bdbbaf29ab7d7b67a756392c65c1c9d5636bc3348a00e347e463fa04789dbdc574d8a6c84c1fda08d31b19b62a5f357299e9ae4696da12571acd63876a7b19c604143326293dd2dba27d3ce68858f556f3fcfb103acbc04169715ee78bf24774da04070d14623be04c65783c71acbac6fdf4edd72d176ac1eae787258feb2eafbaded770f46dbfa0af11dc60d2d1e4807f5610c89f0a3d7f9d5e5f78006773dad851c6f284feb97ba33c54d93a8557130fc4251e1d994736c948ebbadc8673e046b02e12279dbed47ea92aece3400a1cd1c57d2ae7a2bc272005b5185382037ed4b7fd4307fd187b40e2445c505467235ad2aa1b3d81d301216c370e27518288c5e1d5c45ee6e852d457e149c98878046cebbf4b075c63596e24873303a6e943e3fa1408b0689dc82ed6ac08230734d928317568905df46285777e455784540a462f4295dd4ee46e948b530e7423ab36b9bb307d893a2f5721d006b1be0733ba82ffd41b94a3d95ddb4a0ccd91bf1272caf65ac4cde68722f660129e518fcad8af167180d66cabe54554df29a9a7356453dd0243d9ea6e65cacc695fdb63d6314d7aeee9194c08a7b21ce7de031fe23a292d3c914c5cc613514de477c5f21f48c1c94ad32268d6d324651b40dbc3432d1a45565d66e3054c34923d9207bd81737ae36ffd5e135fc2488dd1b31a6a5b530cb3c4aced5b3e74e1f024fe83099b17c6c13076a9aac09baeb2d0b1ccb7b35d2600e8917a3bbb77608e117922ea34b26f389774ecc3bf700ede4323aa5562b05e182dbdd6eca897a1283dfd2d548bf7ffd249939cae0940f5309a1d4a76a44c4664600bddafbc8d0eb4fd7d5fb59b68f168e5dcfb05a2d7ad5bfc6c7287dd962545345e1b77ebbdc0d64f856a4f84874b71bea6e3a8ef5a3d10173cfd860163c15d5c085ae8c3c5b3a9dc4aa5c26d397986042b80acc510e307b3f1b8d1b9c92e488a29b4d98d7119110372d14a93bc3e303a50f4883d1279ca89562480b81d3cafa177eb8c29c0baac8aab2b0972fd0bf2b64acb2684b55e10f30f63eb3d00c98aab0f089c93fc20a805d11b8e4534a5d3a648aba7d6e2b136ca5f83db1dabdbecdf4d10f0e08ae3996dad374098f90d5413102e380f39218b7bf4b92c060577ed627f16a9eae076c3f796a5add436685c5b35baee68e87ae5858e529477e5caaaee86146fb02aad2d3ec26eccfe6a2d1b29bef2c60191e5f0fec606d8ba0754b1b3ec385e5e11fc358e00135bcbc0913a4ee4c7b84019946cde728c9e29acb9c0d94f04d80a74d2bb556ec15291479303f239563f57585006b7506e50f926f5aa038d66b003e7e1eab871f8eb8b3cc802641ecd8d3668bc26de9531e4bd5eb399f508377baa34738b68dae5ee596733ae2f77e496726f149ad53352606ec5db0d359035398b4e82c770cf72391d8b7ab873c55b11444618078709f0fdc86e62e165f3a571bb282f96ae8f51a223de7425bf01b5e6c405efffd949707b6db33f64b27af3348543cc5e1d83b23aa080e9e6eac092766b326d477711010101e1ea2c084990f9634ad89ee40998eeab3ea7fb209731d40b5edd7ede0b7a2129246b15ada3f9ad3e6220f76920b03a8a2940eb25a0aff8cf6cef3f583856760b2ad9bef724d06f50e142d26a0cc61896297f035375fd0d1800a46dd89fe4669ed7acf30fcfe813cd660c4e83170609b9eb8fda86fe920888b142dd572af8d582b182fd617f96b84bf73e0bab49e4b56b08cf7140d9b026d6e8448ac86661e7511bc590b68a60a85b2518f0e57bf6c09ae74bdf39b63dfa4a6f5535b828a02c034cd405e2289ee8825d581c79585484ba069f9c32597be28435f3b8ecd21009c0608d169daa8edfa67fb179aa0552e37979a5f6af7da078e9e454bf6d816eef3a6a0b95f6f35c26738bdb7318929f4735a6b59174b3f167db1480a3fd67e4b599872a86483188125eeff84b2b164b121b37797e25dbdc08e75fed9bec224cb7400116a26a3c4999d84530e6d6fee62aac748634f4b2133858cbc7c860bca03efe61d36d"}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000004540)=0x70000, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000004580)) 4.246454468s ago: executing program 0 (id=4637): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071102200000000009c000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2400000070000100000080000000000007000000", @ANYRES32=r4, @ANYBLOB="011273d10500060009000000cb45d78655f6fcb6bec8960fd0e49c134e9a17dd08289f6bf60949cb6b7323038f764994587bd7626bce6e8ccd7c197b58b3f2ed95cac50c04880c94b20a48a92e38b236fe30076d1c873e2f0ff79f2bf8345e43213b9dcaeadb3fef109679997de18c685b453576bdf590a60c64974b1a0bac4bfc2d275ef7f768cd091905f6940ef09a68be320ec35ea455fa3bdf20d8d8894117326fc8d95542d613ef9ca84f15065b0c2cca1e3c1e87f8b010a1009d25e5968f824a76c539de47d3648ec4ee09b39df6db8a725a52bcfd704685b72af5fea532"], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r7], 0x68}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0xc, 0x9, 0x8, 0x56, @remote, @rand_addr=' \x01\x00', 0x8000, 0x7, 0xdefd, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x40, 0x80, 0xfffffffb, 0x3, {{0x21, 0x4, 0x1, 0x8, 0x84, 0x66, 0x0, 0x23, 0x29, 0x0, @empty, @loopback, {[@ssrr={0x89, 0x13, 0x24, [@empty, @local, @private=0xa010102, @loopback]}, @generic={0x88, 0x8, "82fe12af8aa7"}, @timestamp_addr={0x44, 0xc, 0x8f, 0x1, 0x6, [{@private=0xa010100, 0x3ff}]}, @timestamp={0x44, 0x2c, 0xd8, 0x0, 0x6, [0x7, 0x9, 0x7, 0x1000, 0x7fffffff, 0x9, 0x4, 0x9, 0x5814, 0x6]}, @end, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x2}, {@local, 0x43}]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@empty, @rand_addr, 0x0}, &(0x7f0000000240)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x20, 0x80, 0xd47, 0xffff, {{0xb, 0x4, 0x0, 0x8, 0x2c, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast2, @private=0xa010101, {[@lsrr={0x83, 0x17, 0xc2, [@private=0xa010101, @local, @remote, @local, @rand_addr=0x64010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0x7fff, 0x8, {{0x9, 0x4, 0x0, 0x1c, 0x24, 0x67, 0x0, 0xe, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@end, @generic={0x82, 0xe, "904aaf38b21894525c8e32e6"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="78010000", @ANYRES16=r1, @ANYBLOB="0800d134ad4339c06bbe18e0556908a5ae0e28bd7000", @ANYRES32=r4, @ANYBLOB="7000018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1400020076657468305f746f5f6272696467650008000100", @ANYRES32=r9, @ANYBLOB="140002007665746831000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="080003000200000008000300000000001400020076657468315f746f5f62617461647600640001801400020077673000000000000000000000000000080003000100000008000100", @ANYRES32=r11, @ANYBLOB="14000200766574683000000000000000000000001400020067656e657665310000000000000000001400020067656e657665300000000000000000008400018008000100", @ANYRES32=r12, @ANYBLOB="08000300030000001400020067656e657665310000000000000000001400020067656e6576653000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="140002006e657470636930000000000000000000080003000000000008000300020000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r14, @ANYBLOB], 0x178}, 0x1, 0x0, 0x0, 0x40}, 0x844) 3.633756035s ago: executing program 9 (id=4638): sendmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) io_setup(0x9, &(0x7f0000000080)=0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0017ba70da28ef7d3d09f36e019999681719f75f205998e5b49dc16afd32031cade357d352b71185de8ad2f5b3e5d3695faaaff2fad754ed0b6d446cda887ff9fa7a0ee49b5e6963c2af28ca9ea0460134ea1584aed586d9c22a33c9bcd6401ae7fc164828b23f34bbb25215a005c461", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x20000080}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.49911918s ago: executing program 8 (id=4639): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) fcntl$setsig(r2, 0xa, 0x33) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0x8, 0x3, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0x10f, @time={0xf2ee}}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vim2m(0x0, 0xf, 0x2) poll(&(0x7f0000000200), 0x51, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYRESDEC=r0, @ANYRES8=r3], 0x50}, 0x1, 0x0, 0x0, 0x10000012}, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, "", [@nested={0x11, 0x78, 0x0, 0x1, [@typed={0x6, 0x72, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0xbc}, @generic='[']}]}, 0x24}], 0x1}, 0x4008800) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.398550978s ago: executing program 4 (id=4640): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000280)='./cgroup\x00', r0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0xa) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40001004, r4, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) 3.305170901s ago: executing program 9 (id=4641): timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chmod(0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x0, 0x0, 0x10, 0x0, "92a3b751c88f76a4ff3d43513aadeaec1196ad458a36276a542d35da8e74144a9b28b1e5f58de44fb49ba7da7208cc8fccae96ad1f567835c46109c3a9d343b5d6da6c1fdf489fe838fa6c2530dd7e1f"}, 0xd8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x40100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d2d458dd69928e1ac0000fcffffff000000000500", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) syz_open_procfs(0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0xf, 0x2, 0x9, 0x7fffffffffffffff, 0xffffffffffffffff, 0x9, 0x4e90}, &(0x7f0000000200)={0x0, 0xfffffffffffffffd, 0x6, 0x9, 0xbff0, 0x200, 0xb, 0x1}, &(0x7f0000000240)={0xac, 0x6, 0x5, 0x1, 0x7, 0x3, 0xc, 0x7}, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x8f1a]}, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b"], 0x118}}, 0x0) syz_clone3(&(0x7f00000012c0)={0x101000280, 0x0, 0x0, 0x0, {0x33}, &(0x7f0000000480)=""/220, 0xdc, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x7ffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) 2.884565007s ago: executing program 4 (id=4642): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) flistxattr(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1.966557479s ago: executing program 0 (id=4643): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) flistxattr(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1.82145078s ago: executing program 0 (id=4644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000004c0)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, '\t\x00'}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.47108328s ago: executing program 9 (id=4645): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000f"], 0x1c}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x7}}}}}]}}]}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {0x0, 0x4107}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0x19, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0}, 0x0) 1.386138218s ago: executing program 7 (id=4646): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0xa, @win={{0x83bd352, 0x6, 0x46, 0x1}, 0x5, 0x4, 0x0, 0xfffffeff, 0x0, 0x5f}}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = fsopen(&(0x7f0000003940)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000003980)='[\x00', &(0x7f00000039c0)="1bbd9664c0", 0x5) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) munmap(&(0x7f00004e7000/0x1000)=nil, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1a901, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$kcm(0xa, 0x7, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[]) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x2, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.046923672s ago: executing program 8 (id=4647): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 906.416426ms ago: executing program 0 (id=4648): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "002b90607c98f2ec7eda3826968801a93d799ff9f1b3812b7d599d4a617f366f3d1f53fa4ddcb18e2f557c324879ffc5341eadf34558d217dcf7288e35d6cc88", 0x20}, 0x48, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000840)={0x2c, r4, 0x3, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xff9, &(0x7f0000001840)=""/4089, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="66a389ec938447c68a44a58bc9c9fe87a9cec94e92d689a24fe557bedcb8758522bfb2fa35b5750b9297d1fb", 0x2c, r2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_create(0x5) write$P9_RSTAT(r6, &(0x7f0000000340)=ANY=[], 0x44) write$P9_RVERSION(r6, 0x0, 0x13) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18c8df5af45b0699af815ebabefa0daa00000024000103"], 0x18}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x0) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=""/269, 0x10d}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000b00)=""/4120, 0x1018}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f0000000340)=""/236, 0xec}], 0x5}, 0xb9fc}], 0x4, 0x40000030, 0x0) 763.599062ms ago: executing program 8 (id=4649): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x0, 0x1, 0x4}, @global=@item_012={0x2, 0x1, 0x7, "4aef"}, @main]}}, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002d00090027bd7000000000000400000008001a80040004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 583.188689ms ago: executing program 4 (id=4650): socket$pppoe(0x18, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 4 (id=4651): r0 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfeab, 0xf) (async) splice(r2, 0x0, r1, 0x0, 0xfeab, 0xf) bind(r0, &(0x7f0000000000)=@generic={0xa, "f7c39f5ee85fae0c91e3ccfb11d200005efe967df06c2913060a14051e3867cc75f0da4c1c0f660ee7cda99d667b56cba361b21d917f1d08beb895ab85c460adc58eea9034c4dda505f16b07d7ab538e5d435d5626c30d8a0ffd818eb88942ddb032a0ee83819d54cecffbac6e4b483814e486948fb090684a73b87fe590"}, 0x80) r3 = eventfd2(0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101"], 0x0) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000000)="f67804e83b4e100b", 0x8}, {0x0, 0x8}], 0x2) kernel console output (not intermixed with test programs): 14 [ 1391.077586][T22227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4239'. [ 1391.216923][ T9] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1391.397601][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1391.408891][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1391.441720][ T9] usb 4-1: config 179 has no interface number 0 [ 1391.475672][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1391.487957][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1391.496577][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1391.499586][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1391.521164][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1391.537226][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1391.550628][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1391.561298][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.572668][T22225] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1391.704517][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1391.717339][ T24] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1391.754212][ T24] usb 6-1: config 0 has no interface number 0 [ 1391.794999][ T24] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1391.826440][ T24] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1391.867675][ T5937] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input91 [ 1391.888594][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1391.911724][T22238] FAULT_INJECTION: forcing a failure. [ 1391.911724][T22238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1391.925004][T22238] CPU: 0 UID: 0 PID: 22238 Comm: syz.9.4245 Not tainted syzkaller #0 PREEMPT(full) [ 1391.925029][T22238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1391.925044][T22238] Call Trace: [ 1391.925052][T22238] [ 1391.925060][T22238] dump_stack_lvl+0x189/0x250 [ 1391.925085][T22238] ? __pfx____ratelimit+0x10/0x10 [ 1391.925105][T22238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1391.925125][T22238] ? __pfx__printk+0x10/0x10 [ 1391.925147][T22238] ? __might_fault+0xb0/0x130 [ 1391.925180][T22238] should_fail_ex+0x414/0x560 [ 1391.925209][T22238] _copy_from_iter+0x1de/0x1790 [ 1391.925234][T22238] ? rcu_is_watching+0x15/0xb0 [ 1391.925253][T22238] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1391.925276][T22238] ? __pfx__copy_from_iter+0x10/0x10 [ 1391.925297][T22238] ? __build_skb_around+0x257/0x3e0 [ 1391.925321][T22238] ? netlink_sendmsg+0x642/0xb30 [ 1391.925337][T22238] ? skb_put+0x11b/0x210 [ 1391.925360][T22238] netlink_sendmsg+0x6b2/0xb30 [ 1391.925387][T22238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1391.925409][T22238] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1391.925429][T22238] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1391.925447][T22238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1391.925467][T22238] __sock_sendmsg+0x219/0x270 [ 1391.925494][T22238] ____sys_sendmsg+0x52d/0x830 [ 1391.925520][T22238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1391.925549][T22238] ? import_iovec+0x74/0xa0 [ 1391.925573][T22238] ___sys_sendmsg+0x21f/0x2a0 [ 1391.925597][T22238] ? __pfx____sys_sendmsg+0x10/0x10 [ 1391.925651][T22238] ? __fget_files+0x2a/0x420 [ 1391.925665][T22238] ? __fget_files+0x3a0/0x420 [ 1391.925686][T22238] __sys_sendmmsg+0x227/0x430 [ 1391.925708][T22238] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1391.925724][T22238] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1391.925763][T22238] ? ksys_write+0x22a/0x250 [ 1391.925786][T22238] ? __pfx_ksys_write+0x10/0x10 [ 1391.925802][T22238] ? rcu_is_watching+0x15/0xb0 [ 1391.925822][T22238] __x64_sys_sendmmsg+0xa0/0xc0 [ 1391.925841][T22238] do_syscall_64+0xfa/0x3b0 [ 1391.925855][T22238] ? lockdep_hardirqs_on+0x9c/0x150 [ 1391.925871][T22238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.925885][T22238] ? clear_bhb_loop+0x60/0xb0 [ 1391.925914][T22238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.925930][T22238] RIP: 0033:0x7f6c6ad8eba9 [ 1391.925945][T22238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.925957][T22238] RSP: 002b:00007f6c6bc23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1391.925975][T22238] RAX: ffffffffffffffda RBX: 00007f6c6afd5fa0 RCX: 00007f6c6ad8eba9 [ 1391.925987][T22238] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1391.925998][T22238] RBP: 00007f6c6bc23090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.926007][T22238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1391.926015][T22238] R13: 00007f6c6afd6038 R14: 00007f6c6afd5fa0 R15: 00007f6c6b0ffa28 [ 1391.926041][T22238] [ 1392.217759][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.225975][ T24] usb 6-1: Product: syz [ 1392.230554][ T24] usb 6-1: Manufacturer: syz [ 1392.235172][ T24] usb 6-1: SerialNumber: syz [ 1392.272778][T22225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.288712][T22225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.342682][ T24] usb 6-1: config 0 descriptor?? [ 1392.730450][ T24] appletouch 6-1:0.85: Geyser mode initialized. [ 1392.770232][ T5954] usb 4-1: USB disconnect, device number 115 [ 1392.770309][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1392.785063][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1392.835164][ T24] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input92 [ 1393.216587][ T5937] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1393.376647][ T5937] usb 10-1: Using ep0 maxpacket: 32 [ 1393.395241][ T5937] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1393.407200][ T5937] usb 10-1: config 0 has no interface number 0 [ 1393.416056][ T5937] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1393.469349][ T5937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.516882][ T5937] usb 10-1: Product: syz [ 1393.535875][ T5937] usb 10-1: Manufacturer: syz [ 1393.549302][ T5937] usb 10-1: SerialNumber: syz [ 1393.562072][ T5937] usb 10-1: config 0 descriptor?? [ 1393.579044][ T5937] smsc95xx v2.0.0 [ 1393.586910][ T5937] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1393.625585][ T5937] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 1393.792594][ T5937] usb 10-1: USB disconnect, device number 25 [ 1394.332939][T16554] usb 6-1: USB disconnect, device number 29 [ 1394.388629][T16554] appletouch 6-1:0.85: input: appletouch disconnected [ 1394.506811][ T5954] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1394.696302][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 1394.712633][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.744447][ T5954] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1394.756929][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.770813][ T5954] usb 4-1: config 0 descriptor?? [ 1395.414061][T22277] pim6reg: entered allmulticast mode [ 1395.440490][T22259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.457283][T22259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.467191][T22259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.486829][T22259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.531271][T22259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.607002][T22259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.637230][ T24] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1395.689744][ T5954] usbhid 4-1:0.0: can't add hid device: -71 [ 1395.723091][ T5954] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1395.752004][ T5954] usb 4-1: USB disconnect, device number 116 [ 1395.796675][ T24] usb 6-1: device descriptor read/64, error -71 [ 1396.046318][ T24] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1396.205267][ T24] usb 6-1: device descriptor read/64, error -71 [ 1396.357952][ T24] usb usb6-port1: attempt power cycle [ 1396.684678][T22288] fuse: Unknown parameter 'grou00000000000000000000' [ 1396.716907][ T24] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1396.761254][ T24] usb 6-1: device descriptor read/8, error -71 [ 1396.982247][T22295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4262'. [ 1397.028177][ T24] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1397.147022][ T24] usb 6-1: device descriptor read/8, error -71 [ 1397.227350][T22297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4262'. [ 1397.277987][ T24] usb usb6-port1: unable to enumerate USB device [ 1399.187066][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1399.339650][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.398754][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.429007][ T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1399.463241][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.500623][ T24] usb 6-1: config 0 descriptor?? [ 1399.922100][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1399.940279][ T24] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 1399.954194][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1399.967761][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1399.968070][ T24] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 1399.982787][T18920] bond0: (slave syz_tun): Releasing backup interface [ 1399.990350][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1399.996796][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.003C/input/input93 [ 1400.015553][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1400.048822][T15649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1400.058885][T15649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1400.066392][T15649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1400.101022][T15649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1400.108878][T15649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1400.168882][T22309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.179764][ T24] cm6533_jd 0003:0D8C:0022.003C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 1400.246076][T22309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.440622][ T5937] usb 6-1: USB disconnect, device number 34 [ 1400.871956][T22322] chnl_net:caif_netlink_parms(): no params data found [ 1400.986559][ T5937] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1401.123576][T22322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.134713][T22322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.143365][T22322] bridge_slave_0: entered allmulticast mode [ 1401.150191][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 1401.158786][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.171256][T22322] bridge_slave_0: entered promiscuous mode [ 1401.178527][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.191983][T22322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.199162][ T5937] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1401.208362][T22322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.216477][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.227312][T22322] bridge_slave_1: entered allmulticast mode [ 1401.256858][ T5937] usb 6-1: config 0 descriptor?? [ 1401.264609][T22322] bridge_slave_1: entered promiscuous mode [ 1401.368544][T22322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.403071][T22322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.466818][ T24] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1401.500900][T22322] team0: Port device team_slave_0 added [ 1401.530237][T22322] team0: Port device team_slave_1 added [ 1401.601811][T22322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.610379][T22322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.636552][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1401.638489][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.643291][T22322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.668460][T22322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.680250][T22322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.684034][ T24] usb 4-1: config 0 has no interfaces? [ 1401.712551][ T5937] lua 0003:1E7D:2C2E.003D: item fetching failed at offset 1/5 [ 1401.721363][ T5937] lua 0003:1E7D:2C2E.003D: parse failed [ 1401.727652][ T5937] lua 0003:1E7D:2C2E.003D: probe with driver lua failed with error -22 [ 1401.745096][T22322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.780528][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1401.798403][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1401.811947][ T24] usb 4-1: SerialNumber: syz [ 1401.821344][ T24] usb 4-1: config 0 descriptor?? [ 1401.896118][T22322] hsr_slave_0: entered promiscuous mode [ 1401.905047][T22322] hsr_slave_1: entered promiscuous mode [ 1401.912824][T22322] debugfs: 'hsr0' already exists in 'hsr' [ 1401.920279][T22322] Cannot create hsr debugfs directory [ 1401.932840][ T24] usb 6-1: USB disconnect, device number 35 [ 1402.198507][ T51] Bluetooth: hci1: command tx timeout [ 1402.343592][ T24] usb 4-1: USB disconnect, device number 117 [ 1402.409622][T22322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.559876][T22322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.583683][T22336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1402.590963][T22336] IPv6: NLM_F_CREATE should be set when creating new route [ 1402.609676][T22336] FAULT_INJECTION: forcing a failure. [ 1402.609676][T22336] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.625048][T22336] CPU: 0 UID: 0 PID: 22336 Comm: syz.5.4273 Not tainted syzkaller #0 PREEMPT(full) [ 1402.625073][T22336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1402.625085][T22336] Call Trace: [ 1402.625092][T22336] [ 1402.625101][T22336] dump_stack_lvl+0x189/0x250 [ 1402.625126][T22336] ? __pfx____ratelimit+0x10/0x10 [ 1402.625145][T22336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1402.625165][T22336] ? __pfx__printk+0x10/0x10 [ 1402.625193][T22336] ? __pfx___might_resched+0x10/0x10 [ 1402.625216][T22336] should_fail_ex+0x414/0x560 [ 1402.625244][T22336] should_failslab+0xa8/0x100 [ 1402.625269][T22336] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1402.625292][T22336] ? __alloc_skb+0x112/0x2d0 [ 1402.625315][T22336] __alloc_skb+0x112/0x2d0 [ 1402.625338][T22336] netlink_sendmsg+0x5c6/0xb30 [ 1402.625366][T22336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1402.625387][T22336] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1402.625407][T22336] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1402.625426][T22336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1402.625445][T22336] __sock_sendmsg+0x219/0x270 [ 1402.625472][T22336] ____sys_sendmsg+0x505/0x830 [ 1402.625498][T22336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1402.625527][T22336] ? import_iovec+0x74/0xa0 [ 1402.625552][T22336] ___sys_sendmsg+0x21f/0x2a0 [ 1402.625575][T22336] ? __pfx____sys_sendmsg+0x10/0x10 [ 1402.625631][T22336] ? __fget_files+0x2a/0x420 [ 1402.625644][T22336] ? __fget_files+0x3a0/0x420 [ 1402.625672][T22336] __x64_sys_sendmsg+0x19b/0x260 [ 1402.625693][T22336] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1402.625718][T22336] ? __pfx_ksys_write+0x10/0x10 [ 1402.625736][T22336] ? rcu_is_watching+0x15/0xb0 [ 1402.625756][T22336] ? do_syscall_64+0xbe/0x3b0 [ 1402.625777][T22336] do_syscall_64+0xfa/0x3b0 [ 1402.625792][T22336] ? lockdep_hardirqs_on+0x9c/0x150 [ 1402.625807][T22336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.625823][T22336] ? clear_bhb_loop+0x60/0xb0 [ 1402.625843][T22336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.625859][T22336] RIP: 0033:0x7f7ee058eba9 [ 1402.625875][T22336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1402.625890][T22336] RSP: 002b:00007f7ede7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1402.625909][T22336] RAX: ffffffffffffffda RBX: 00007f7ee07d5fa0 RCX: 00007f7ee058eba9 [ 1402.625922][T22336] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1402.625934][T22336] RBP: 00007f7ede7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1402.625945][T22336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1402.625956][T22336] R13: 00007f7ee07d6038 R14: 00007f7ee07d5fa0 R15: 00007f7ee08ffa28 [ 1402.625985][T22336] [ 1402.950901][T22338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4274'. [ 1402.988629][T22322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.135313][T22322] bond0: (slave netdevsim0): Releasing backup interface [ 1403.145668][T22322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.359939][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1403.485902][T22322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1403.499711][T22322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1403.507014][ T9] usb 6-1: device descriptor read/64, error -71 [ 1403.563089][T22322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1403.622182][T22322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1403.747588][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1403.886690][ T9] usb 6-1: device descriptor read/64, error -71 [ 1403.901654][T22322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.953800][T22322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.009453][T22361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4281'. [ 1404.038108][ T9] usb usb6-port1: attempt power cycle [ 1404.105835][T18193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.112985][T18193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.177944][T18193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.185090][T18193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.285178][ T51] Bluetooth: hci1: command tx timeout [ 1404.446741][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1404.484574][ T9] usb 6-1: device descriptor read/8, error -71 [ 1404.766831][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1404.787211][ T9] usb 6-1: device descriptor read/8, error -71 [ 1404.801232][T22322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1404.896630][ T9] usb usb6-port1: unable to enumerate USB device [ 1404.988084][T22322] veth0_vlan: entered promiscuous mode [ 1405.002757][T22322] veth1_vlan: entered promiscuous mode [ 1405.064078][T22322] veth0_macvtap: entered promiscuous mode [ 1405.084453][T22322] veth1_macvtap: entered promiscuous mode [ 1405.148195][T22322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1405.173132][T22365] FAULT_INJECTION: forcing a failure. [ 1405.173132][T22365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1405.176355][T22322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1405.195223][T22365] CPU: 0 UID: 0 PID: 22365 Comm: syz.3.4283 Not tainted syzkaller #0 PREEMPT(full) [ 1405.195248][T22365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1405.195259][T22365] Call Trace: [ 1405.195267][T22365] [ 1405.195275][T22365] dump_stack_lvl+0x189/0x250 [ 1405.195300][T22365] ? __pfx____ratelimit+0x10/0x10 [ 1405.195319][T22365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1405.195339][T22365] ? __pfx__printk+0x10/0x10 [ 1405.195362][T22365] ? __might_fault+0xb0/0x130 [ 1405.195403][T22365] should_fail_ex+0x414/0x560 [ 1405.195431][T22365] _copy_from_user+0x2d/0xb0 [ 1405.195454][T22365] ___sys_sendmsg+0x158/0x2a0 [ 1405.195477][T22365] ? __pfx____sys_sendmsg+0x10/0x10 [ 1405.195541][T22365] ? __might_fault+0xb0/0x130 [ 1405.195566][T22365] __sys_sendmmsg+0x227/0x430 [ 1405.195593][T22365] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1405.195612][T22365] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1405.195660][T22365] ? ksys_write+0x22a/0x250 [ 1405.195683][T22365] ? __pfx_ksys_write+0x10/0x10 [ 1405.195701][T22365] ? rcu_is_watching+0x15/0xb0 [ 1405.195724][T22365] __x64_sys_sendmmsg+0xa0/0xc0 [ 1405.195745][T22365] do_syscall_64+0xfa/0x3b0 [ 1405.195762][T22365] ? lockdep_hardirqs_on+0x9c/0x150 [ 1405.195780][T22365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.195797][T22365] ? clear_bhb_loop+0x60/0xb0 [ 1405.195818][T22365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.195835][T22365] RIP: 0033:0x7facc7d8eba9 [ 1405.195852][T22365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1405.195867][T22365] RSP: 002b:00007facc8be9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1405.195887][T22365] RAX: ffffffffffffffda RBX: 00007facc7fd5fa0 RCX: 00007facc7d8eba9 [ 1405.195900][T22365] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1405.195913][T22365] RBP: 00007facc8be9090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.195924][T22365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1405.195935][T22365] R13: 00007facc7fd6038 R14: 00007facc7fd5fa0 R15: 00007facc80ffa28 [ 1405.195964][T22365] [ 1405.440988][ T1158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.460447][ T1158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.558243][ T1158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.575042][ T1158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.672313][T18193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.701576][T18193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.912812][T18193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.955122][T18193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.425848][ T51] Bluetooth: hci1: command tx timeout [ 1406.953384][T22381] netlink: 'syz.1.4287': attribute type 10 has an invalid length. [ 1407.068033][T22381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1407.147954][T22381] bond0: (slave team0): Enslaving as an active interface with an up link [ 1407.397130][T22386] fuse: Unknown parameter 'group_i00000000000000000000' [ 1407.646494][ T9] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1407.806984][ T9] usb 4-1: device descriptor read/64, error -71 [ 1408.076331][ T9] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1408.256556][ T9] usb 4-1: device descriptor read/64, error -71 [ 1408.366935][ T9] usb usb4-port1: attempt power cycle [ 1408.440810][ T51] Bluetooth: hci1: command tx timeout [ 1408.455053][T22395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4291'. [ 1408.886954][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1408.917892][ T9] usb 4-1: device descriptor read/8, error -71 [ 1409.206462][ T9] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1409.237278][ T9] usb 4-1: device descriptor read/8, error -71 [ 1409.348725][ T9] usb usb4-port1: unable to enumerate USB device [ 1409.561081][T22411] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4296'. [ 1410.684529][T22425] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4300'. [ 1410.778404][ T30] audit: type=1326 audit(1758282086.176:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1410.878259][ T30] audit: type=1326 audit(1758282086.186:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1410.904226][ T30] audit: type=1326 audit(1758282086.216:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1410.927932][ T30] audit: type=1326 audit(1758282086.226:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1410.952208][ T30] audit: type=1326 audit(1758282086.226:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1410.978673][ T30] audit: type=1326 audit(1758282086.226:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1411.003505][ T30] audit: type=1326 audit(1758282086.226:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1411.033702][ T30] audit: type=1326 audit(1758282086.226:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1411.059494][ T30] audit: type=1326 audit(1758282086.226:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1411.089255][ T5937] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 1411.112640][ T30] audit: type=1326 audit(1758282086.226:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22426 comm="syz.3.4303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1411.259688][T22433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4305'. [ 1411.314547][ T5937] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 1411.527948][ T5937] usb 4-1: config 0 has no interface number 0 [ 1411.551968][ T5937] usb 4-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 1411.569578][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.585436][ T5937] usb 4-1: Product: syz [ 1411.615032][ T5937] usb 4-1: Manufacturer: syz [ 1411.620067][ T5937] usb 4-1: SerialNumber: syz [ 1411.643401][ T5937] usb 4-1: config 0 descriptor?? [ 1411.696310][T22435] tipc: Enabling of bearer rejected, already enabled [ 1411.728617][ T5937] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 1411.744208][ T5937] dvb-usb: bulk message failed: -22 (4/0) [ 1411.767953][ T5937] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1411.779175][ T5937] dvb-usb: bulk message failed: -22 (5/0) [ 1411.784916][ T5937] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1411.822529][ T5937] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1411.848955][ T5937] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 1411.942298][ T5937] usb 4-1: USB disconnect, device number 122 [ 1412.945941][T15649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1412.971235][T15649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1412.988941][T15649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1413.001747][T15649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1413.010717][T15649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1414.289316][T22453] chnl_net:caif_netlink_parms(): no params data found [ 1414.397709][T22462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4314'. [ 1414.926479][T16554] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1415.060307][T22453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.067895][T22453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.075170][T22453] bridge_slave_0: entered allmulticast mode [ 1415.082187][T15649] Bluetooth: hci5: command tx timeout [ 1415.092214][T22453] bridge_slave_0: entered promiscuous mode [ 1415.098540][T16554] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1415.101159][T22453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.108343][T16554] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.115657][T22453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.142436][T22453] bridge_slave_1: entered allmulticast mode [ 1415.160765][T22453] bridge_slave_1: entered promiscuous mode [ 1415.230403][T22453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.281838][T16554] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1415.309769][T16554] usb 6-1: config 1 has no interface number 0 [ 1415.320831][T22453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.342239][T16554] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1415.353613][T16554] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1415.373955][T16554] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1415.383631][T16554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.396671][T16554] usb 6-1: Product: syz [ 1415.401857][T16554] usb 6-1: Manufacturer: syz [ 1415.424166][T16554] usb 6-1: SerialNumber: syz [ 1415.460394][T22453] team0: Port device team_slave_0 added [ 1415.481600][T22453] team0: Port device team_slave_1 added [ 1415.752799][T22453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1415.763241][T22453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1415.789130][ C1] vkms_vblank_simulate: vblank timer overrun [ 1415.801993][T22453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1415.816586][T22453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1415.823552][T22453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1415.849496][ C1] vkms_vblank_simulate: vblank timer overrun [ 1415.901613][T22453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1415.974248][ T5922] usb 6-1: USB disconnect, device number 40 [ 1416.205756][T22453] hsr_slave_0: entered promiscuous mode [ 1416.232419][T22453] hsr_slave_1: entered promiscuous mode [ 1416.247330][T22453] debugfs: 'hsr0' already exists in 'hsr' [ 1416.258367][T22453] Cannot create hsr debugfs directory [ 1416.894856][T22453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.098666][T22453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.156890][T15649] Bluetooth: hci5: command tx timeout [ 1417.218327][T22453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.344870][T22453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.571671][T22453] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1417.585338][T22453] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1417.607072][T22453] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1417.636430][T22453] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1417.843857][T22453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.887669][T22453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.914793][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.922040][ T6737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.993445][T18191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.000625][T18191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.139741][T22453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1418.261093][T22453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1418.502944][T22453] veth0_vlan: entered promiscuous mode [ 1418.601325][T22453] veth1_vlan: entered promiscuous mode [ 1418.681244][T22453] veth0_macvtap: entered promiscuous mode [ 1418.695348][T22453] veth1_macvtap: entered promiscuous mode [ 1418.725732][T22453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.764345][T22453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1418.817362][ T6737] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.843062][ T6737] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.872792][T22508] netlink: 'syz.3.4327': attribute type 13 has an invalid length. [ 1418.910939][ T6737] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.925416][ T6737] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.992956][T22508] tipc: Resetting bearer [ 1419.026150][T22508] gretap0: refused to change device tx_queue_len [ 1419.055235][T22508] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1419.238556][T15649] Bluetooth: hci5: command tx timeout [ 1419.352595][ T6737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.373497][ T6737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.444426][T18191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.486084][T18191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.680821][T22525] fuse: Bad value for 'fd' [ 1420.765721][T22523] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4330'. [ 1421.327261][T15649] Bluetooth: hci5: command tx timeout [ 1422.347285][T22535] all: renamed from bridge_slave_0 [ 1422.696580][ T24] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 1422.879261][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1422.900785][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.970849][ T24] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 1422.986127][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.001066][ T24] usb 2-1: config 0 descriptor?? [ 1423.084067][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.090899][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.347074][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1423.353111][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1423.465417][ T24] usb 2-1: USB disconnect, device number 125 [ 1423.912356][T22562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4339'. [ 1423.940795][T22562] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1424.019373][T22564] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4340'. [ 1424.028684][T22564] netlink: 'syz.3.4340': attribute type 2 has an invalid length. [ 1424.048503][T22564] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4340'. [ 1424.060484][T22564] netlink: 'syz.3.4340': attribute type 2 has an invalid length. [ 1424.866702][ T24] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1424.937150][T22586] binder: 22585:22586 ioctl c0306201 0 returned -14 [ 1424.969775][T22586] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1425.068462][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1425.105358][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1425.122236][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1425.131853][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.152064][ T24] usb 2-1: config 0 descriptor?? [ 1425.178661][T22574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1425.197218][ T24] hub 2-1:0.0: USB hub found [ 1425.379829][ T5937] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1425.393952][ T24] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 1425.555348][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 1425.568533][ T5937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.591495][ T5937] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1425.662918][ T5937] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1425.683182][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1425.694814][ T5937] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1425.706150][ T5937] usb 4-1: Manufacturer: syz [ 1425.720324][ T5937] usb 4-1: config 0 descriptor?? [ 1425.727854][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1425.768559][ T24] usb 2-1: USB disconnect, device number 126 [ 1426.116735][ T24] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1426.160446][ T9] usb 4-1: USB disconnect, device number 123 [ 1426.288994][ T24] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 1426.307533][ T24] usb 2-1: config 0 has no interface number 0 [ 1426.313656][ T24] usb 2-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1426.327437][ T24] usb 2-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 1426.338525][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.349565][ T24] usb 2-1: Product: syz [ 1426.353741][ T24] usb 2-1: Manufacturer: syz [ 1426.365803][ T24] usb 2-1: SerialNumber: syz [ 1426.376964][ T24] usb 2-1: config 0 descriptor?? [ 1426.390197][ T24] cdc_ncm 2-1:0.47: CDC Union missing and no IAD found [ 1426.397141][ T24] cdc_ncm 2-1:0.47: bind() failure [ 1426.705740][ T24] usb 2-1: USB disconnect, device number 127 [ 1427.108764][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1427.278852][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1427.297246][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.308989][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1427.316495][ T9] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1427.344351][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1427.354931][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.389043][ T24] usb 2-1: config 0 descriptor?? [ 1427.506566][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1427.522651][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1427.537529][ T9] usb 4-1: can't read configurations, error -61 [ 1427.676853][ T9] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1427.694445][T22606] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4351'. [ 1427.846344][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1427.870766][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1427.891294][ T9] usb 4-1: can't read configurations, error -61 [ 1427.908971][ T9] usb usb4-port1: attempt power cycle [ 1428.276928][ T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1428.317943][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1428.329694][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1428.341311][ T9] usb 4-1: can't read configurations, error -61 [ 1428.476987][ T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1428.521929][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1428.532793][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1428.546006][ T9] usb 4-1: can't read configurations, error -61 [ 1428.563551][ T9] usb usb4-port1: unable to enumerate USB device [ 1429.872355][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1429.894974][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1429.967363][ T24] usb 2-1: USB disconnect, device number 2 [ 1430.022937][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1430.022955][ T30] audit: type=1326 audit(1758282105.426:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22612 comm="syz.3.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1430.077542][ T30] audit: type=1326 audit(1758282105.476:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22612 comm="syz.3.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1430.134617][ T30] audit: type=1326 audit(1758282105.476:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22612 comm="syz.3.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1430.187825][ T30] audit: type=1326 audit(1758282105.476:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22612 comm="syz.3.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1430.218648][ T30] audit: type=1326 audit(1758282105.476:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22612 comm="syz.3.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1430.242593][ T30] audit: type=1326 audit(1758282105.476:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22612 comm="syz.3.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1430.268307][ T30] audit: type=1326 audit(1758282105.476:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22612 comm="syz.3.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1430.292480][ T30] audit: type=1326 audit(1758282105.476:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22612 comm="syz.3.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1430.323781][ T30] audit: type=1326 audit(1758282105.476:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22612 comm="syz.3.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1430.373647][T22616] tipc: Started in network mode [ 1430.378851][T22616] tipc: Node identity 6e4b088f4ef9, cluster identity 4711 [ 1430.386063][T22616] tipc: Enabled bearer , priority 0 [ 1430.405096][ T30] audit: type=1326 audit(1758282105.476:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22612 comm="syz.3.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1430.436896][T22619] syzkaller0: entered promiscuous mode [ 1430.456589][T22619] syzkaller0: entered allmulticast mode [ 1430.697651][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4358'. [ 1430.709494][T22622] tipc: Resetting bearer [ 1430.724810][T22623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4358'. [ 1431.026564][T22614] tipc: Resetting bearer [ 1431.159361][T22614] tipc: Disabling bearer [ 1431.425056][T22631] netlink: 'syz.1.4360': attribute type 13 has an invalid length. [ 1431.469993][T22631] gretap0: refused to change device tx_queue_len [ 1431.490263][T22631] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1433.085366][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1433.097250][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1433.106792][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1433.115376][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1433.125473][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1433.233997][T22644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4364'. [ 1434.571050][T22646] chnl_net:caif_netlink_parms(): no params data found [ 1434.674714][T22656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1434.684902][T22656] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1434.861228][T22656] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1434.944055][T22656] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1434.951875][T22656] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1435.014906][T22656] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1435.096649][T22646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.103823][T22646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.113177][T22656] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1435.127983][T22646] bridge_slave_0: entered allmulticast mode [ 1435.147325][T22646] bridge_slave_0: entered promiscuous mode [ 1435.170294][T22646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.179059][T22656] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1435.212222][T22646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.219729][T22646] bridge_slave_1: entered allmulticast mode [ 1435.227311][T22646] bridge_slave_1: entered promiscuous mode [ 1435.245323][T22656] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1435.282698][T22646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1435.328573][T22646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.393856][T22646] team0: Port device team_slave_0 added [ 1435.411673][T22646] team0: Port device team_slave_1 added [ 1435.570845][T22646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.583488][T22646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.613060][T22646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.626076][T22646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.634248][T22646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.671506][T22646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1435.763970][T22646] hsr_slave_0: entered promiscuous mode [ 1435.777510][T22646] hsr_slave_1: entered promiscuous mode [ 1435.788372][T22646] debugfs: 'hsr0' already exists in 'hsr' [ 1435.795058][T22646] Cannot create hsr debugfs directory [ 1436.292781][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1436.292795][ T30] audit: type=1326 audit(1758282111.686:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22681 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1436.363796][T15649] Bluetooth: hci1: command 0x0c1a tx timeout [ 1436.566667][ T30] audit: type=1326 audit(1758282111.686:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22681 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1436.614551][T22691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4376'. [ 1436.628938][ T30] audit: type=1326 audit(1758282111.686:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22681 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1436.663245][ T30] audit: type=1326 audit(1758282111.686:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22681 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1436.686013][ T30] audit: type=1326 audit(1758282111.686:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22681 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1436.793198][ T30] audit: type=1326 audit(1758282111.686:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22681 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1436.809632][T22696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4374'. [ 1436.816199][ T30] audit: type=1326 audit(1758282111.686:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22681 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1436.847847][ T30] audit: type=1326 audit(1758282111.686:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22681 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1436.870447][ T30] audit: type=1326 audit(1758282111.686:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22681 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1436.897407][ T30] audit: type=1326 audit(1758282111.686:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22681 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1436.996542][T15649] Bluetooth: hci5: command 0x0c1a tx timeout [ 1437.158717][T15649] Bluetooth: hci6: command 0x041b tx timeout [ 1438.445403][T15649] Bluetooth: hci1: command 0x0c1a tx timeout [ 1439.043073][T22646] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1439.076943][T15649] Bluetooth: hci5: command 0x0c1a tx timeout [ 1439.178412][T22646] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1439.236572][ T51] Bluetooth: hci6: command 0x041b tx timeout [ 1439.259916][T22728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4381'. [ 1439.321053][T22646] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1439.495308][T22646] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1440.435730][T22646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.523821][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 1440.559287][T22646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.664396][T18193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.671540][T18193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.792673][T18192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.799869][T18192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1440.973419][T22646] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1441.007021][T22646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1441.157000][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 1441.173447][T22646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1441.234202][T22646] veth0_vlan: entered promiscuous mode [ 1441.321522][ T51] Bluetooth: hci6: command 0x041b tx timeout [ 1441.355889][T22646] veth1_vlan: entered promiscuous mode [ 1441.580065][T22646] veth0_macvtap: entered promiscuous mode [ 1441.661536][T22756] FAULT_INJECTION: forcing a failure. [ 1441.661536][T22756] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.680152][T22755] bridge_slave_0: left allmulticast mode [ 1441.743968][T22755] bridge_slave_0: left promiscuous mode [ 1441.776578][T22755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.785625][T22756] CPU: 1 UID: 0 PID: 22756 Comm: syz.1.4383 Not tainted syzkaller #0 PREEMPT(full) [ 1441.785652][T22756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1441.785664][T22756] Call Trace: [ 1441.785672][T22756] [ 1441.785680][T22756] dump_stack_lvl+0x189/0x250 [ 1441.785706][T22756] ? __pfx____ratelimit+0x10/0x10 [ 1441.785733][T22756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1441.785752][T22756] ? __pfx__printk+0x10/0x10 [ 1441.785776][T22756] ? __lock_acquire+0xab9/0xd20 [ 1441.785806][T22756] should_fail_ex+0x414/0x560 [ 1441.785833][T22756] should_failslab+0xa8/0x100 [ 1441.785857][T22756] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1441.785876][T22756] ? skb_clone+0x212/0x3a0 [ 1441.785903][T22756] skb_clone+0x212/0x3a0 [ 1441.785928][T22756] __netlink_deliver_tap+0x404/0x850 [ 1441.785958][T22756] ? netlink_deliver_tap+0x2e/0x1b0 [ 1441.785977][T22756] netlink_deliver_tap+0x19c/0x1b0 [ 1441.785996][T22756] netlink_unicast+0x7fa/0x9e0 [ 1441.786031][T22756] ? __pfx_netlink_unicast+0x10/0x10 [ 1441.786057][T22756] ? netlink_sendmsg+0x642/0xb30 [ 1441.786073][T22756] ? skb_put+0x11b/0x210 [ 1441.786096][T22756] netlink_sendmsg+0x805/0xb30 [ 1441.786132][T22756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1441.786155][T22756] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1441.786173][T22756] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1441.786190][T22756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1441.786208][T22756] __sock_sendmsg+0x219/0x270 [ 1441.786234][T22756] ____sys_sendmsg+0x52d/0x830 [ 1441.786257][T22756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1441.786288][T22756] ? import_iovec+0x74/0xa0 [ 1441.786312][T22756] ___sys_sendmsg+0x21f/0x2a0 [ 1441.786335][T22756] ? __pfx____sys_sendmsg+0x10/0x10 [ 1441.786402][T22756] ? __might_fault+0xb0/0x130 [ 1441.786429][T22756] __sys_sendmmsg+0x227/0x430 [ 1441.786455][T22756] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1441.786473][T22756] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1441.786521][T22756] ? ksys_write+0x22a/0x250 [ 1441.786543][T22756] ? __pfx_ksys_write+0x10/0x10 [ 1441.786561][T22756] ? rcu_is_watching+0x15/0xb0 [ 1441.786585][T22756] __x64_sys_sendmmsg+0xa0/0xc0 [ 1441.786608][T22756] do_syscall_64+0xfa/0x3b0 [ 1441.786626][T22756] ? lockdep_hardirqs_on+0x9c/0x150 [ 1441.786643][T22756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.786662][T22756] ? clear_bhb_loop+0x60/0xb0 [ 1441.786683][T22756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.786701][T22756] RIP: 0033:0x7fd8aef8eba9 [ 1441.786717][T22756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1441.786731][T22756] RSP: 002b:00007fd8afd39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1441.786749][T22756] RAX: ffffffffffffffda RBX: 00007fd8af1d5fa0 RCX: 00007fd8aef8eba9 [ 1441.786761][T22756] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1441.786773][T22756] RBP: 00007fd8afd39090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.786783][T22756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.786793][T22756] R13: 00007fd8af1d6038 R14: 00007fd8af1d5fa0 R15: 00007fd8af2ffa28 [ 1441.786821][T22756] [ 1442.173455][T22755] bridge_slave_1: left allmulticast mode [ 1442.174166][T22762] netlink: 'syz.2.4384': attribute type 10 has an invalid length. [ 1442.267382][T22755] bridge_slave_1: left promiscuous mode [ 1442.323422][T22764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4384'. [ 1442.379960][T22755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.536816][T16554] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1442.551913][T22755] bond0: (slave bond_slave_0): Releasing backup interface [ 1442.693733][T16554] usb 4-1: Using ep0 maxpacket: 16 [ 1442.701691][T16554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.714719][T16554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.729864][T22755] bond0: (slave bond_slave_1): Releasing backup interface [ 1442.777263][T16554] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1442.861363][T22755] team0: Port device team_slave_0 removed [ 1442.912934][T22755] team0: Port device team_slave_1 removed [ 1442.920437][T16554] usb 4-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 1442.934612][T22755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1442.962967][T22755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.037397][T22755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.049940][T22755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.067122][T16554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.081250][T16554] usb 4-1: config 0 descriptor?? [ 1443.177581][T22762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.192182][T22762] team0: Port device bond0 added [ 1443.406780][ T51] Bluetooth: hci6: command 0x041b tx timeout [ 1443.505382][T22767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4386'. [ 1443.597397][T16554] usbhid 4-1:0.0: can't add hid device: -71 [ 1443.603416][T16554] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1443.613037][T16554] usb 4-1: USB disconnect, device number 2 [ 1444.111333][T22764] team0 (unregistering): Port device bond0 removed [ 1444.271233][T22646] veth1_macvtap: entered promiscuous mode [ 1444.322417][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1444.322434][ T30] audit: type=1326 audit(1758282119.726:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22787 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1444.364806][ T30] audit: type=1326 audit(1758282119.726:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22787 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1444.391703][ T30] audit: type=1326 audit(1758282119.726:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22787 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1444.472988][ T30] audit: type=1326 audit(1758282119.726:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22787 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1444.495704][ T30] audit: type=1326 audit(1758282119.726:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22787 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1444.719014][T22646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.968835][ T30] audit: type=1326 audit(1758282120.376:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22787 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1444.978553][T22646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1445.014203][ T5937] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1445.086571][ T1158] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.207723][ T1158] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.220969][ T30] audit: type=1326 audit(1758282120.376:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22787 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1445.256033][T12612] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.336303][T12612] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.483678][ T51] Bluetooth: hci6: command 0x041b tx timeout [ 1445.484216][ T5937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1445.503077][ T5937] usb 4-1: not running at top speed; connect to a high speed hub [ 1445.512824][T18192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.572486][T18192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.604909][ T5937] usb 4-1: config 9 has an invalid interface number: 198 but max is 0 [ 1445.616949][ T5937] usb 4-1: config 9 has no interface number 0 [ 1445.648451][ T5937] usb 4-1: config 9 interface 198 has no altsetting 0 [ 1445.694009][ T5937] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 1445.741189][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.749679][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.791007][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.810978][ T5937] usb 4-1: Product: syz [ 1445.826511][ T5937] usb 4-1: Manufacturer: syz [ 1445.832999][ T5937] usb 4-1: SerialNumber: syz [ 1446.062029][ T30] audit: type=1326 audit(1758282121.466:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22787 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1446.194036][ T5937] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1446.204657][ T5937] dvb-usb: bulk message failed: -22 (3/0) [ 1446.212205][ T30] audit: type=1326 audit(1758282121.466:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22787 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1446.236507][ T30] audit: type=1326 audit(1758282121.466:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22787 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc7d8eba9 code=0x7ffc0000 [ 1446.261709][ T5937] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1446.274551][ T5937] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1446.309720][ T5937] dvb_usb_umt_010 4-1:9.198: probe with driver dvb_usb_umt_010 failed with error -22 [ 1446.345842][T22813] vti0: entered promiscuous mode [ 1446.351438][T22813] vti0: entered allmulticast mode [ 1446.575856][T22818] syz_tun: entered promiscuous mode [ 1446.684820][ T5937] usb 4-1: USB disconnect, device number 3 [ 1446.691959][T22818] batadv_slave_0: entered promiscuous mode [ 1446.739067][T22818] debugfs: 'hsr1' already exists in 'hsr' [ 1446.810136][T22818] Cannot create hsr debugfs directory [ 1446.913195][T22818] hsr1: entered allmulticast mode [ 1446.918862][T22818] syz_tun: entered allmulticast mode [ 1446.932206][T22818] batadv_slave_0: entered allmulticast mode [ 1447.341749][T22831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4396'. [ 1447.560271][ T51] Bluetooth: hci6: command 0x041b tx timeout [ 1448.222800][T22844] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1448.230398][T22844] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1449.639893][T22863] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4402'. [ 1449.755295][T22863] bond1: entered allmulticast mode [ 1450.052941][T22876] netdevsim netdevsim3: Direct firmware load for . [ 1450.052941][T22876] failed with error -2 [ 1450.082337][T22876] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1450.082337][T22876] [ 1451.087829][T22889] geneve2: entered allmulticast mode [ 1451.539674][T22900] syz_tun: entered promiscuous mode [ 1451.612205][T22900] batadv_slave_0: entered promiscuous mode [ 1451.660428][T22900] debugfs: 'hsr1' already exists in 'hsr' [ 1451.702277][T22900] Cannot create hsr debugfs directory [ 1451.722688][T22900] hsr1: entered allmulticast mode [ 1451.753477][T22900] syz_tun: entered allmulticast mode [ 1451.874225][T22900] batadv_slave_0: entered allmulticast mode [ 1451.890647][T22903] FAULT_INJECTION: forcing a failure. [ 1451.890647][T22903] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.919486][T22903] CPU: 1 UID: 0 PID: 22903 Comm: syz.1.4409 Not tainted syzkaller #0 PREEMPT(full) [ 1451.919513][T22903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1451.919524][T22903] Call Trace: [ 1451.919532][T22903] [ 1451.919541][T22903] dump_stack_lvl+0x189/0x250 [ 1451.919567][T22903] ? __pfx____ratelimit+0x10/0x10 [ 1451.919585][T22903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1451.919605][T22903] ? __pfx__printk+0x10/0x10 [ 1451.919625][T22903] ? netlink_unicast+0x82f/0x9e0 [ 1451.919650][T22903] ? ___sys_sendmsg+0x21f/0x2a0 [ 1451.919669][T22903] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1451.919700][T22903] should_fail_ex+0x414/0x560 [ 1451.919729][T22903] should_failslab+0xa8/0x100 [ 1451.919754][T22903] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1451.919776][T22903] ? skb_clone+0x212/0x3a0 [ 1451.919802][T22903] skb_clone+0x212/0x3a0 [ 1451.919826][T22903] __netlink_deliver_tap+0x404/0x850 [ 1451.919858][T22903] ? netlink_deliver_tap+0x2e/0x1b0 [ 1451.919879][T22903] netlink_deliver_tap+0x19c/0x1b0 [ 1451.919899][T22903] netlink_sendskb+0x68/0x140 [ 1451.919925][T22903] netlink_unicast+0x397/0x9e0 [ 1451.919946][T22903] ? __asan_memcpy+0x40/0x70 [ 1451.919975][T22903] ? __pfx_netlink_unicast+0x10/0x10 [ 1451.920008][T22903] netlink_rcv_skb+0x28c/0x470 [ 1451.920028][T22903] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1451.920048][T22903] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1451.920079][T22903] ? netlink_deliver_tap+0x2e/0x1b0 [ 1451.920105][T22903] netlink_unicast+0x82f/0x9e0 [ 1451.920137][T22903] ? __pfx_netlink_unicast+0x10/0x10 [ 1451.920163][T22903] ? netlink_sendmsg+0x642/0xb30 [ 1451.920185][T22903] ? skb_put+0x11b/0x210 [ 1451.920208][T22903] netlink_sendmsg+0x805/0xb30 [ 1451.920237][T22903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1451.920259][T22903] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1451.920279][T22903] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1451.920298][T22903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1451.920318][T22903] __sock_sendmsg+0x219/0x270 [ 1451.920346][T22903] ____sys_sendmsg+0x52d/0x830 [ 1451.920373][T22903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1451.920404][T22903] ? import_iovec+0x74/0xa0 [ 1451.920429][T22903] ___sys_sendmsg+0x21f/0x2a0 [ 1451.920453][T22903] ? __pfx____sys_sendmsg+0x10/0x10 [ 1451.920523][T22903] ? __might_fault+0xb0/0x130 [ 1451.920550][T22903] __sys_sendmmsg+0x227/0x430 [ 1451.920577][T22903] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1451.920595][T22903] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1451.920642][T22903] ? ksys_write+0x22a/0x250 [ 1451.920667][T22903] ? __pfx_ksys_write+0x10/0x10 [ 1451.920685][T22903] ? rcu_is_watching+0x15/0xb0 [ 1451.920710][T22903] __x64_sys_sendmmsg+0xa0/0xc0 [ 1451.920733][T22903] do_syscall_64+0xfa/0x3b0 [ 1451.920751][T22903] ? lockdep_hardirqs_on+0x9c/0x150 [ 1451.920769][T22903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.920786][T22903] ? clear_bhb_loop+0x60/0xb0 [ 1451.920807][T22903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.920824][T22903] RIP: 0033:0x7fd8aef8eba9 [ 1451.920840][T22903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1451.920856][T22903] RSP: 002b:00007fd8afd39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1451.920875][T22903] RAX: ffffffffffffffda RBX: 00007fd8af1d5fa0 RCX: 00007fd8aef8eba9 [ 1451.920888][T22903] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1451.920901][T22903] RBP: 00007fd8afd39090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.920913][T22903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1451.920924][T22903] R13: 00007fd8af1d6038 R14: 00007fd8af1d5fa0 R15: 00007fd8af2ffa28 [ 1451.920954][T22903] [ 1453.496300][T16554] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1453.646364][T16554] usb 4-1: Using ep0 maxpacket: 32 [ 1453.658108][T16554] usb 4-1: config 0 has an invalid interface number: 111 but max is 0 [ 1453.670682][T16554] usb 4-1: config 0 has no interface number 0 [ 1453.678380][T16554] usb 4-1: config 0 interface 111 has no altsetting 0 [ 1453.691659][T16554] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff46, bcdDevice=ea.ae [ 1453.773645][T16554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.792402][T16554] usb 4-1: Product: syz [ 1453.800192][T16554] usb 4-1: Manufacturer: syz [ 1453.804808][T16554] usb 4-1: SerialNumber: syz [ 1453.823739][T16554] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1453.842681][T16554] usb 4-1: no configuration chosen from 1 choice [ 1456.216303][ T24] usb 4-1: USB disconnect, device number 4 [ 1456.844904][ T24] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1457.087978][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1457.134995][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1457.177907][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1457.202296][ T24] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1457.221108][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.314268][ T24] usb 4-1: Product: syz [ 1457.427964][T23007] loop6: detected capacity change from 0 to 524288000 [ 1457.475606][ T24] usb 4-1: Manufacturer: syz [ 1457.504681][ T24] usb 4-1: SerialNumber: syz [ 1457.558208][ T24] usb 4-1: config 0 descriptor?? [ 1457.564326][T22997] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1457.666813][T22997] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1457.720150][ T24] usb 4-1: ucan: probing device on interface #0 [ 1459.172236][ T24] ucan 4-1:0.0: probe with driver ucan failed with error -110 [ 1459.389548][T23027] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20001 [ 1459.566316][ T5937] usb 4-1: USB disconnect, device number 5 [ 1460.101122][T23046] netlink: 'syz.3.4433': attribute type 6 has an invalid length. [ 1460.118316][T23046] netlink: 'syz.3.4433': attribute type 1 has an invalid length. [ 1460.126101][T23046] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.4433'. [ 1460.426300][ T5937] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1460.589150][ T5937] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 1460.644993][ T5937] usb 4-1: config 0 has no interface number 0 [ 1460.658646][ T5937] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1460.693979][ T5937] usb 4-1: config 0 interface 113 has no altsetting 0 [ 1460.709523][ T5937] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1460.729634][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.785411][ T5937] usb 4-1: Product: syz [ 1460.886364][ T5937] usb 4-1: Manufacturer: syz [ 1460.921304][ T5937] usb 4-1: SerialNumber: syz [ 1460.942673][ T5937] usb 4-1: config 0 descriptor?? [ 1461.021556][ T5937] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1461.236871][ T5937] usb 4-1: USB disconnect, device number 6 [ 1463.430033][T23100] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1464.761884][T23113] fuse: Invalid gid '00000000000000000000003' [ 1464.774606][T23113] fuse: Invalid gid '00000000000000000000003' [ 1464.781649][T23113] fuse: Invalid gid '00000000000000000000003' [ 1464.788396][T23113] fuse: Invalid gid '00000000000000000000003' [ 1464.805079][T23113] fuse: Invalid gid '00000000000000000000003' [ 1464.812029][T23113] fuse: Invalid gid '00000000000000000000003' [ 1464.819205][T23113] fuse: Invalid gid '00000000000000000000003' [ 1465.346372][T15646] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1465.572844][T15646] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1465.645005][T15646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.739838][T15646] usb 4-1: config 0 descriptor?? [ 1465.887508][T23125] fuse: Bad value for 'fd' [ 1467.478459][T23118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.498146][T23118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.540210][T15646] pegasus 4-1:0.0: setup Pegasus II specific registers [ 1467.660200][T15646] pegasus 4-1:0.0: can't locate MII phy, using default [ 1467.707427][T15646] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, ae:45:54:83:fb:bd [ 1467.753996][T15646] usb 4-1: USB disconnect, device number 7 [ 1467.807542][T16554] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1467.844075][T16554] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1469.692193][T15649] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1469.702414][T15649] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1469.711933][T15649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1469.720214][T15649] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1469.729345][T15649] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1469.880237][T23180] fuse: Unknown parameter 'smackfstransmute' [ 1470.158994][T23185] chnl_net:caif_netlink_parms(): no params data found [ 1470.562713][T23185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.601957][T23185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.609701][T23185] bridge_slave_0: entered allmulticast mode [ 1470.620538][T23185] bridge_slave_0: entered promiscuous mode [ 1470.631905][T23185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.643535][T23185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.651887][T23185] bridge_slave_1: entered allmulticast mode [ 1470.669039][T23185] bridge_slave_1: entered promiscuous mode [ 1470.859772][T23185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.955220][T23185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.606871][T23185] team0: Port device team_slave_0 added [ 1471.614373][T23185] team0: Port device team_slave_1 added [ 1471.816334][ T51] Bluetooth: hci7: command tx timeout [ 1471.829044][T23185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.836005][T23185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.863931][T23185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1471.881944][T23185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1471.890024][T23185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.933888][T23185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.045838][T23185] hsr_slave_0: entered promiscuous mode [ 1472.052513][T23185] hsr_slave_1: entered promiscuous mode [ 1472.065253][T23185] debugfs: 'hsr0' already exists in 'hsr' [ 1472.071293][T23185] Cannot create hsr debugfs directory [ 1472.272574][T23209] openvswitch: netlink: IP tunnel TTL not specified. [ 1473.174293][T23214] tipc: Enabling of bearer rejected, media not registered [ 1473.876832][ T51] Bluetooth: hci7: command tx timeout [ 1474.423443][T23185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1474.515479][T23185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1474.545450][T23185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1474.591663][T23185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1475.248642][T23185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.297922][T23185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.382995][T12612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.390176][T12612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1475.485637][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.492901][ T6737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1475.802740][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4476'. [ 1475.813411][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4476'. [ 1475.966941][ T51] Bluetooth: hci7: command tx timeout [ 1476.005432][T23185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1476.105873][T23185] veth0_vlan: entered promiscuous mode [ 1476.122291][T23185] veth1_vlan: entered promiscuous mode [ 1476.252942][T23185] veth0_macvtap: entered promiscuous mode [ 1476.280574][T23185] veth1_macvtap: entered promiscuous mode [ 1476.400440][T23185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1476.414027][T23185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1476.512050][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.548984][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.565086][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.600601][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.805478][T18191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.839496][T18191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.932434][T18191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.941078][T18191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.037014][ T51] Bluetooth: hci7: command tx timeout [ 1478.429473][T23312] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1478.478564][T23312] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1479.684225][T23341] fuse: Unknown parameter 'user_i00000000000000000000' [ 1482.953443][T15649] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1482.968110][T15649] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1482.986551][T15649] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1483.007197][T15649] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1483.016550][T15649] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1484.378409][T23395] chnl_net:caif_netlink_parms(): no params data found [ 1484.526745][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.543653][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.880500][T15649] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1484.894701][T15649] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1484.906831][T15649] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1484.917743][T15649] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1484.925269][T15649] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1485.077913][T15649] Bluetooth: hci8: command tx timeout [ 1485.119445][T23395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.165902][T23395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.176700][T23395] bridge_slave_0: entered allmulticast mode [ 1485.193350][T23395] bridge_slave_0: entered promiscuous mode [ 1485.232214][T23395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.246610][T23395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.263548][T23395] bridge_slave_1: entered allmulticast mode [ 1485.281706][T23395] bridge_slave_1: entered promiscuous mode [ 1485.574771][T23395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.610535][T23395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1485.707396][T23428] fuse: Unknown parameter 'user_i00000000000000000000' [ 1485.961043][T23395] team0: Port device team_slave_0 added [ 1486.129295][T23395] team0: Port device team_slave_1 added [ 1486.213712][T23439] fuse: Bad value for 'fd' [ 1486.391095][T23395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.420035][T23395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.457953][T23395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.595707][T23395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.614746][T23395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.694119][T23395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.874794][T23420] chnl_net:caif_netlink_parms(): no params data found [ 1486.937868][T23395] hsr_slave_0: entered promiscuous mode [ 1486.944932][T23395] hsr_slave_1: entered promiscuous mode [ 1486.953960][T23395] debugfs: 'hsr0' already exists in 'hsr' [ 1486.975339][T23395] Cannot create hsr debugfs directory [ 1486.998710][T15649] Bluetooth: hci9: command tx timeout [ 1487.160623][T15649] Bluetooth: hci8: command tx timeout [ 1487.679682][T23420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.717491][T23420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.750371][T23420] bridge_slave_0: entered allmulticast mode [ 1487.769427][T23420] bridge_slave_0: entered promiscuous mode [ 1487.786694][T23420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.801873][T23420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.815413][T23420] bridge_slave_1: entered allmulticast mode [ 1487.830417][T23420] bridge_slave_1: entered promiscuous mode [ 1488.020268][T23420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.049072][T23420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.307254][T23420] team0: Port device team_slave_0 added [ 1488.555816][T23420] team0: Port device team_slave_1 added [ 1488.740167][T23420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.789952][T23420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1488.860212][T23420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.984638][T23420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.994609][T23420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.081596][T23420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1489.087083][T15649] Bluetooth: hci9: command tx timeout [ 1489.237489][T15649] Bluetooth: hci8: command tx timeout [ 1489.857584][T23420] hsr_slave_0: entered promiscuous mode [ 1489.871716][T23420] hsr_slave_1: entered promiscuous mode [ 1489.883718][T23420] debugfs: 'hsr0' already exists in 'hsr' [ 1489.891335][T23420] Cannot create hsr debugfs directory [ 1490.471815][T23395] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1490.557316][T23395] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1490.793373][T23420] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1490.807476][T23505] fuse: Unknown parameter 'roup_id' [ 1490.822098][T23420] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.891380][T23395] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1490.949881][T23395] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1491.154686][T23420] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1491.158132][T15649] Bluetooth: hci9: command tx timeout [ 1491.205903][T23420] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.317807][T15649] Bluetooth: hci8: command tx timeout [ 1491.443627][T23420] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1491.454942][T23420] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.723813][T23420] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1491.797361][T23420] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.055029][T23395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.334030][T23395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.362109][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.369332][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1492.410406][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.417630][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.582923][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1492.595660][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1492.607534][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1492.615700][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1492.627215][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1493.239354][T15649] Bluetooth: hci9: command tx timeout [ 1493.335150][T23420] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1493.455646][T23420] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1493.502017][T23420] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1493.527698][T23420] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1493.873516][T23395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1494.631728][T23395] veth0_vlan: entered promiscuous mode [ 1494.676593][T15649] Bluetooth: hci10: command tx timeout [ 1494.768004][T23395] veth1_vlan: entered promiscuous mode [ 1494.871518][T23420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.930628][T23539] chnl_net:caif_netlink_parms(): no params data found [ 1495.160022][T23420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.303057][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.310273][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.638118][T18193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.645296][T18193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.721958][T23395] veth0_macvtap: entered promiscuous mode [ 1496.155485][T23539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.174150][T23539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.198254][T23539] bridge_slave_0: entered allmulticast mode [ 1496.205458][T23539] bridge_slave_0: entered promiscuous mode [ 1496.214454][T23539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.223121][T23539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.235229][T23539] bridge_slave_1: entered allmulticast mode [ 1496.247261][T23539] bridge_slave_1: entered promiscuous mode [ 1496.329442][T23395] veth1_macvtap: entered promiscuous mode [ 1496.355922][T23539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.450361][T23539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.584083][T23420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1496.708893][T23539] team0: Port device team_slave_0 added [ 1496.757440][T15649] Bluetooth: hci10: command tx timeout [ 1496.770554][T23395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.792168][T23539] team0: Port device team_slave_1 added [ 1496.942305][T23539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.981973][T23539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1497.021139][T23539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1497.053283][T23395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1497.095237][T23539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1497.120327][T23539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1497.170671][T23539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.283552][ T1158] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.319920][ T1158] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.432674][ T1158] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.474140][ T1158] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.494862][T23539] hsr_slave_0: entered promiscuous mode [ 1497.503262][T23539] hsr_slave_1: entered promiscuous mode [ 1497.547869][T23539] debugfs: 'hsr0' already exists in 'hsr' [ 1497.564112][T23539] Cannot create hsr debugfs directory [ 1497.630559][T23420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1498.031715][T18193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.053367][T18193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.085279][T23420] veth0_vlan: entered promiscuous mode [ 1498.269427][T23420] veth1_vlan: entered promiscuous mode [ 1498.321272][T18191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.373854][T18191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.473782][T23420] veth0_macvtap: entered promiscuous mode [ 1498.742117][T23539] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.840132][T15649] Bluetooth: hci10: command tx timeout [ 1498.890352][T23420] veth1_macvtap: entered promiscuous mode [ 1499.033586][T23539] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.227224][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1499.269842][T23539] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.383119][T23420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1499.414298][T23420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1499.433506][ T24] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1499.455526][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.477637][ T24] usb 9-1: config 0 descriptor?? [ 1499.518223][ T24] cp210x 9-1:0.0: cp210x converter detected [ 1499.603662][T23539] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.685914][T18191] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.705123][T18191] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.783293][T18191] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.887292][T23624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.908212][T18191] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.934694][T23624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.976987][ T24] cp210x 9-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 1499.986497][ T24] cp210x 9-1:0.0: GPIO initialisation failed: -32 [ 1500.003768][ T24] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1500.400427][ T24] usb 9-1: USB disconnect, device number 4 [ 1500.460321][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1500.470322][ T24] cp210x 9-1:0.0: device disconnected [ 1500.553015][T12612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.621340][T12612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.731760][T23539] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1500.832207][T18192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.841674][T23539] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1500.850700][T18192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.917094][T15649] Bluetooth: hci10: command tx timeout [ 1500.958067][T23539] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1501.076043][T23539] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1501.421138][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4492'. [ 1501.920703][T23539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.202376][T23678] syz_tun: entered promiscuous mode [ 1502.374237][T23678] batadv_slave_0: entered promiscuous mode [ 1502.475003][T23678] debugfs: 'hsr1' already exists in 'hsr' [ 1502.526346][T23678] Cannot create hsr debugfs directory [ 1502.573699][T23678] hsr1: entered allmulticast mode [ 1502.580814][T23678] syz_tun: entered allmulticast mode [ 1502.588058][T23678] batadv_slave_0: entered allmulticast mode [ 1502.609667][T23539] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.712828][T18193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.720052][T18193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.787701][T18193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.794819][T18193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1502.904333][T23539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1502.919766][T23696] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4521'. [ 1503.227404][T23539] veth0_vlan: entered promiscuous mode [ 1503.276890][T23539] veth1_vlan: entered promiscuous mode [ 1503.403895][T23539] veth0_macvtap: entered promiscuous mode [ 1503.418124][T23539] veth1_macvtap: entered promiscuous mode [ 1503.460003][T23539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1503.531230][T23539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1503.743458][ T1161] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.877891][ T1161] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.887728][T18192] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.909475][T18192] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.094974][T23717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1504.381076][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.417984][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.841814][T23730] veth1_macvtap: left promiscuous mode [ 1504.865035][T18192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.881852][T18192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.017676][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4525'. [ 1505.050199][T23732] input: syz0 as /devices/virtual/input/input95 [ 1505.729608][T23741] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4527'. [ 1505.767181][T23742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.775996][T23742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.916321][ T981] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 1506.058194][T23752] syz_tun: entered promiscuous mode [ 1506.168473][T23752] batadv_slave_0: entered promiscuous mode [ 1506.299731][T23752] debugfs: 'hsr1' already exists in 'hsr' [ 1506.440354][T23752] Cannot create hsr debugfs directory [ 1506.452826][T23752] hsr1: entered allmulticast mode [ 1506.460627][T23752] syz_tun: entered allmulticast mode [ 1506.466028][T23752] batadv_slave_0: entered allmulticast mode [ 1506.691475][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1506.702495][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1506.721391][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1506.755159][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1506.771240][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1508.693001][T23767] chnl_net:caif_netlink_parms(): no params data found [ 1508.839457][ T51] Bluetooth: hci11: command tx timeout [ 1508.962416][T23806] FAULT_INJECTION: forcing a failure. [ 1508.962416][T23806] name failslab, interval 1, probability 0, space 0, times 0 [ 1508.986394][T23806] CPU: 0 UID: 0 PID: 23806 Comm: syz.8.4537 Not tainted syzkaller #0 PREEMPT(full) [ 1508.986417][T23806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1508.986425][T23806] Call Trace: [ 1508.986432][T23806] [ 1508.986439][T23806] dump_stack_lvl+0x189/0x250 [ 1508.986460][T23806] ? __pfx____ratelimit+0x10/0x10 [ 1508.986475][T23806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1508.986491][T23806] ? __pfx__printk+0x10/0x10 [ 1508.986513][T23806] ? __pfx___might_resched+0x10/0x10 [ 1508.986526][T23806] ? fs_reclaim_acquire+0x7d/0x100 [ 1508.986543][T23806] should_fail_ex+0x414/0x560 [ 1508.986566][T23806] should_failslab+0xa8/0x100 [ 1508.986586][T23806] __kmalloc_noprof+0xcb/0x4f0 [ 1508.986603][T23806] ? io_cache_alloc_new+0x40/0x100 [ 1508.986618][T23806] ? __lock_acquire+0xab9/0xd20 [ 1508.986639][T23806] io_cache_alloc_new+0x40/0x100 [ 1508.986655][T23806] __io_prep_rw+0x23f/0xe20 [ 1508.986680][T23806] ? __pfx___io_prep_rw+0x10/0x10 [ 1508.986696][T23806] ? percpu_ref_get_many+0x21/0x1e0 [ 1508.986713][T23806] ? percpu_ref_get_many+0x21/0x1e0 [ 1508.986737][T23806] io_prep_rwv+0x8c/0x3d0 [ 1508.986754][T23806] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 1508.986769][T23806] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1508.986788][T23806] ? __pfx_io_prep_rwv+0x10/0x10 [ 1508.986810][T23806] ? __asan_memset+0x22/0x50 [ 1508.986825][T23806] ? blk_start_plug_nr_ios+0x7f/0x1c0 [ 1508.986841][T23806] io_submit_sqes+0x914/0x1d30 [ 1508.986883][T23806] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1508.986916][T23806] ? ksys_write+0x1cb/0x250 [ 1508.986936][T23806] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1508.986953][T23806] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1508.986967][T23806] ? __pfx_vfs_write+0x10/0x10 [ 1508.986986][T23806] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1508.987003][T23806] ? __fget_files+0x3a0/0x420 [ 1508.987021][T23806] ? fput+0xa0/0xd0 [ 1508.987035][T23806] ? ksys_write+0x22a/0x250 [ 1508.987053][T23806] ? __pfx_ksys_write+0x10/0x10 [ 1508.987068][T23806] ? rcu_is_watching+0x15/0xb0 [ 1508.987085][T23806] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1508.987106][T23806] do_syscall_64+0xfa/0x3b0 [ 1508.987120][T23806] ? lockdep_hardirqs_on+0x9c/0x150 [ 1508.987140][T23806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.987154][T23806] ? clear_bhb_loop+0x60/0xb0 [ 1508.987170][T23806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.987183][T23806] RIP: 0033:0x7efecc38eba9 [ 1508.987197][T23806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1508.987209][T23806] RSP: 002b:00007efecd167038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1508.987225][T23806] RAX: ffffffffffffffda RBX: 00007efecc5d6180 RCX: 00007efecc38eba9 [ 1508.987235][T23806] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000009 [ 1508.987244][T23806] RBP: 00007efecd167090 R08: 0000000000000000 R09: 0000000000000000 [ 1508.987252][T23806] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 1508.987261][T23806] R13: 00007efecc5d6218 R14: 00007efecc5d6180 R15: 00007efecc6ffa28 [ 1508.987283][T23806] [ 1509.875000][T23820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4539'. [ 1510.185085][T23814] hub 9-0:1.0: USB hub found [ 1510.287989][T23814] hub 9-0:1.0: 1 port detected [ 1510.508399][T23805] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1510.524753][T23805] team0: Port device batadv1 added [ 1510.531770][T23767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.556763][T23767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.574637][T23767] bridge_slave_0: entered allmulticast mode [ 1510.605378][T23767] bridge_slave_0: entered promiscuous mode [ 1510.635272][T23767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.981743][ T51] Bluetooth: hci11: command tx timeout [ 1511.016467][T23767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.023870][T23767] bridge_slave_1: entered allmulticast mode [ 1511.069090][T23767] bridge_slave_1: entered promiscuous mode [ 1511.309281][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1511.309299][ T30] audit: type=1326 audit(1758282186.716:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.8.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecc38eba9 code=0x7ffc0000 [ 1511.517943][ T30] audit: type=1326 audit(1758282186.776:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.8.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7efecc38eba9 code=0x7ffc0000 [ 1511.543932][ T30] audit: type=1326 audit(1758282186.776:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.8.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecc38eba9 code=0x7ffc0000 [ 1511.566924][ T30] audit: type=1326 audit(1758282186.776:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.8.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efecc38eba9 code=0x7ffc0000 [ 1511.596867][ T30] audit: type=1326 audit(1758282186.776:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.8.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecc38eba9 code=0x7ffc0000 [ 1511.619457][ T30] audit: type=1326 audit(1758282186.786:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.8.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7efecc38eba9 code=0x7ffc0000 [ 1511.641866][ C1] vkms_vblank_simulate: vblank timer overrun [ 1511.735334][ T30] audit: type=1326 audit(1758282186.796:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.8.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecc38eba9 code=0x7ffc0000 [ 1511.757815][ C1] vkms_vblank_simulate: vblank timer overrun [ 1511.799422][ T30] audit: type=1326 audit(1758282186.796:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.8.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efecc38eba9 code=0x7ffc0000 [ 1511.893277][ T30] audit: type=1326 audit(1758282186.796:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.8.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecc38eba9 code=0x7ffc0000 [ 1511.957243][ T30] audit: type=1326 audit(1758282186.806:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.8.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efecc38eba9 code=0x7ffc0000 [ 1511.972539][T23767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.979588][ C1] vkms_vblank_simulate: vblank timer overrun [ 1512.278348][T23767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.612718][T23767] team0: Port device team_slave_0 added [ 1512.661785][T23767] team0: Port device team_slave_1 added [ 1512.981847][T23767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1512.996412][ T51] Bluetooth: hci11: command tx timeout [ 1513.006290][T23767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.046988][T23767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.067088][ T5954] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1513.068761][T23767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.083817][T23767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.116409][T23767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.286483][ T5954] usb 10-1: Using ep0 maxpacket: 8 [ 1513.309249][ T5954] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.370172][ T5954] usb 10-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1513.438732][ T5954] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.504628][T23854] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4544'. [ 1513.513684][T23854] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4544'. [ 1513.525069][T23854] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4544'. [ 1513.564465][ T5954] usb 10-1: config 0 descriptor?? [ 1513.988271][T23767] hsr_slave_0: entered promiscuous mode [ 1514.070920][T23767] hsr_slave_1: entered promiscuous mode [ 1514.080702][T23865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.094014][T23865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.120768][T23767] debugfs: 'hsr0' already exists in 'hsr' [ 1514.140573][T23767] Cannot create hsr debugfs directory [ 1514.168151][ T5954] belkin 0003:050D:3201.003F: unknown main item tag 0x0 [ 1514.254890][ T5954] belkin 0003:050D:3201.003F: hiddev0,hidraw1: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.9-1/input0 [ 1514.266313][ T9] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1514.703700][T23880] could not allocate digest TFM handle blake2s-128-generic [ 1514.856999][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1514.999625][T23767] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.019934][ T9] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1515.039702][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.068007][ T9] usb 9-1: Product: syz [ 1515.078149][ T51] Bluetooth: hci11: command tx timeout [ 1515.091739][ T9] usb 9-1: Manufacturer: syz [ 1515.104752][ T9] usb 9-1: SerialNumber: syz [ 1515.150229][T23767] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.415376][T23767] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.719973][T23888] bridge0: entered promiscuous mode [ 1515.727632][T23888] macsec1: entered promiscuous mode [ 1515.813565][T15646] usb 10-1: USB disconnect, device number 26 [ 1516.062951][T23892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1516.113560][T23892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.153076][T23767] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.570038][ T9] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1516.585078][ T9] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1516.743430][T23767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1516.822644][T23767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1516.897121][T23767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1516.914917][T23767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1517.307946][ T9] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 1517.325877][ T9] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1517.339865][T23767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.349966][ T9] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1517.371116][ T9] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1517.415071][ T9] usb 9-1: USB disconnect, device number 6 [ 1517.459399][T23767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.498332][T18192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.505542][T18192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.531353][T18192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.538575][T18192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.849857][T23767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1517.934588][T23767] veth0_vlan: entered promiscuous mode [ 1517.949889][T23767] veth1_vlan: entered promiscuous mode [ 1518.116127][T23767] veth0_macvtap: entered promiscuous mode [ 1518.141945][T23767] veth1_macvtap: entered promiscuous mode [ 1518.173097][T23767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.241547][T23767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.272050][ T146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.289698][ T146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.388823][T23925] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1518.398077][T23929] openvswitch: netlink: Key type 256 is out of range max 32 [ 1518.562749][T23937] hub 9-0:1.0: USB hub found [ 1518.568224][T23937] hub 9-0:1.0: 1 port detected [ 1518.590827][ T146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.756693][ T146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.226370][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.244538][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.320746][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.411666][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.584499][T23965] tipc: Enabling of bearer rejected, failed to enable media [ 1520.805448][T23967] syz_tun: entered promiscuous mode [ 1520.909291][T23967] batadv_slave_0: entered promiscuous mode [ 1520.916050][T23967] debugfs: 'hsr1' already exists in 'hsr' [ 1520.986353][T23967] Cannot create hsr debugfs directory [ 1520.992359][T23967] hsr1: entered allmulticast mode [ 1521.092352][T23967] syz_tun: entered allmulticast mode [ 1521.104372][T23967] batadv_slave_0: entered allmulticast mode [ 1522.873717][T23993] __vm_enough_memory: pid: 23993, comm: syz.0.4578, bytes: 4503599627366400 not enough memory for the allocation [ 1523.241920][ T5965] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1523.496734][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1523.621870][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4581'. [ 1523.678497][ T24] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 1523.690280][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.701625][ T24] usb 9-1: config 0 has no interface number 0 [ 1523.707853][ T24] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1523.718250][T24007] tipc: MTU too low for tipc bearer [ 1523.731209][ T24] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1523.758016][ T24] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1523.766811][T24013] tipc: Enabling of bearer rejected, failed to enable media [ 1523.859777][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.869428][ T24] usb 9-1: Product: syz [ 1523.873614][ T24] usb 9-1: Manufacturer: syz [ 1523.881529][ T24] usb 9-1: SerialNumber: syz [ 1523.908233][ T24] usb 9-1: config 0 descriptor?? [ 1524.021057][T24018] netlink: 'syz.9.4583': attribute type 27 has an invalid length. [ 1525.263939][ T5922] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1525.446710][ T5922] usb 10-1: Using ep0 maxpacket: 16 [ 1525.568618][ T5922] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1525.955976][ T5922] usb 10-1: config 0 has no interface number 0 [ 1526.029782][T24018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.037678][T24018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.163165][ T5922] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1526.174253][ T5922] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.187133][ T5922] usb 10-1: Product: syz [ 1526.192088][ T5922] usb 10-1: Manufacturer: syz [ 1526.229372][ T24] usbtouchscreen 9-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1526.264453][ T5922] usb 10-1: SerialNumber: syz [ 1526.291172][ T5922] usb 10-1: config 0 descriptor?? [ 1526.321481][ T24] usb 9-1: USB disconnect, device number 7 [ 1526.386712][ T5922] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1526.463953][T24042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1526.669108][ T981] IPVS: starting estimator thread 0... [ 1526.767917][T24054] IPVS: using max 33 ests per chain, 79200 per kthread [ 1526.906777][ T5922] gspca_spca1528: reg_w err -110 [ 1527.039578][ T5922] spca1528 10-1:0.1: probe with driver spca1528 failed with error -110 [ 1527.220386][T24018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1527.234845][T24018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.080476][T24018] hsr1: left allmulticast mode [ 1529.096358][T24018] syz_tun: left allmulticast mode [ 1529.111692][T24018] batadv_slave_0: left allmulticast mode [ 1529.129364][T24027] netlink: 'syz.0.4587': attribute type 7 has an invalid length. [ 1529.137324][T24027] netlink: 'syz.0.4587': attribute type 8 has an invalid length. [ 1529.145025][T24027] netlink: 'syz.0.4587': attribute type 7 has an invalid length. [ 1529.387078][T24024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1529.395180][T24024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1529.519622][T24024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1529.714858][ T10] usb 10-1: USB disconnect, device number 27 [ 1529.726308][ T146] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.818229][ T146] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.876692][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1530.017255][ T146] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.057639][ T146] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.107373][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1530.125280][ T9] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1530.155860][ T9] usb 9-1: config 0 has no interface number 0 [ 1530.165958][ T9] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1530.176546][ T9] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1530.191096][ T9] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1530.206046][T24079] netlink: 'syz.0.4598': attribute type 30 has an invalid length. [ 1530.386800][ T10] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1530.400938][ T9] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1530.410816][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.421039][ T9] usb 9-1: Product: syz [ 1530.428653][ T9] usb 9-1: Manufacturer: syz [ 1530.435088][ T9] usb 9-1: SerialNumber: syz [ 1530.450625][ T9] usb 9-1: config 0 descriptor?? [ 1530.612927][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1530.643387][ T10] usb 10-1: config index 0 descriptor too short (expected 31780, got 36) [ 1530.683137][ T10] usb 10-1: config 27 has too many interfaces: 185, using maximum allowed: 32 [ 1530.906635][T24067] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1530.907946][ T10] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.920388][T24067] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1530.947634][ T10] usb 10-1: config 27 has 1 interface, different from the descriptor's value: 185 [ 1530.961234][ T10] usb 10-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=86.ae [ 1530.970538][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.978876][ T10] usb 10-1: Product: syz [ 1530.983141][ T10] usb 10-1: Manufacturer: syz [ 1530.987899][ T10] usb 10-1: SerialNumber: syz [ 1531.232801][T24067] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1531.242226][T24067] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1531.347685][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240 [ 1531.359682][ T10] gspca_sn9c20x: Write register 1000 failed -71 [ 1531.365956][ T10] gspca_sn9c20x: Device initialization failed [ 1531.377256][ T10] gspca_sn9c20x 10-1:27.0: probe with driver gspca_sn9c20x failed with error -71 [ 1531.541743][ T10] usb 10-1: USB disconnect, device number 28 [ 1531.880792][ T9] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1531.965270][ T9] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 1532.068923][ T9] usb 9-1: USB disconnect, device number 8 [ 1533.058794][T24117] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4610'. [ 1533.092598][T24120] netlink: 14 bytes leftover after parsing attributes in process `syz.9.4607'. [ 1533.719892][T24131] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4612'. [ 1534.151910][ T10] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1534.297220][ T10] usb 8-1: device descriptor read/64, error -71 [ 1534.422178][T24120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1534.466049][T24120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1534.497060][T24120] bond0 (unregistering): Released all slaves [ 1534.606475][ T10] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1534.811655][ T10] usb 8-1: device descriptor read/64, error -71 [ 1534.946569][ T10] usb usb8-port1: attempt power cycle [ 1535.349711][ T10] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1535.419181][ T10] usb 8-1: device descriptor read/8, error -71 [ 1535.686548][ T10] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1535.851125][ T10] usb 8-1: device descriptor read/8, error -71 [ 1535.967766][ T10] usb usb8-port1: unable to enumerate USB device [ 1537.427232][T24183] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4627'. [ 1538.000713][T24191] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1538.007265][T24191] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1538.033770][T24191] vhci_hcd vhci_hcd.0: Device attached [ 1538.153184][T24194] netdevsim netdevsim0: Direct firmware load for nel/config failed with error -2 [ 1538.220325][T24191] netlink: 'syz.0.4629': attribute type 21 has an invalid length. [ 1538.228725][T24194] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/config [ 1538.237886][T24191] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4629'. [ 1538.269396][ T5954] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1538.723122][T24192] vhci_hcd: connection reset by peer [ 1538.745389][ T1158] vhci_hcd: stop threads [ 1538.775512][ T1158] vhci_hcd: release socket [ 1538.812388][ T1158] vhci_hcd: disconnect device [ 1538.876388][ T24] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1539.038818][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 1539.199520][ T24] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1539.212844][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1539.229825][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c29b, bcdDevice= 0.40 [ 1539.241413][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.262057][ T24] usb 5-1: Product: ꬩ钍浏ᄎ㞐첆餇钣蔳뙅잽◯᷾ퟟ 嫠᚜쇅ᷪ㢊묠걊ᨍ᲏둀ࡓ㕐삑봯ꋻ躴녢ﷇ잘携Ŧ餿ભ [ 1539.267040][T24210] IPVS: set_ctl: invalid protocol: 50 172.20.20.47:20000 [ 1539.313419][ T24] usb 5-1: Manufacturer: হ쉡턦䫩萑꘼驛鳒࿕둎筞堙ﴜ厙竌∌␠ἣ䋊儾ፇꕷ拉踸㲗ܳ毇ు䷻鿭豛缅䴕駹ꃆ蚆ﲓꚷ羾쟩擵Ⰽऽࡹ쇃䠈奌㬡拳䌓뒺ُ폎㩿爘퍧晜ቧ슪뢅涻◟隆珋├뀗屗䷀놼ᇮ鋠Ṹ汚Ⱞ㍝ᦲ崪稴䄁饐ረ⏍䏱퇍简觎ꩂ퐘紀⭌䱵▥좃 [ 1539.566281][ T24] usb 5-1: SerialNumber: syz [ 1539.671586][T24202] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1539.977187][T24213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.079749][T24213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.239546][T24215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4637'. [ 1540.346513][T24215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4637'. [ 1540.449937][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 1540.480721][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1540.724307][ T24] usb 5-1: USB disconnect, device number 89 [ 1541.112102][T24215] bond0: (slave bond_slave_1): Releasing backup interface [ 1542.438351][T24245] use of bytesused == 0 is deprecated and will be removed in the future, [ 1542.464902][T24245] use the actual size instead. [ 1542.906557][ T9] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1543.326436][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1543.483068][ T9] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1543.486634][ T5954] vhci_hcd: vhci_device speed not set [ 1543.500720][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1543.510801][ T9] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1543.538111][ T9] usb 10-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1543.594216][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1543.606642][ T9] usb 10-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1543.615879][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.680845][ T9] usb 10-1: config 0 descriptor?? [ 1543.717752][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1543.834275][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1543.845979][ T24] usb 9-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1543.855540][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.869049][ T24] usb 9-1: config 0 descriptor?? [ 1544.039535][ T31] INFO: task syz.9.4261:22289 blocked for more than 143 seconds. [ 1544.049445][ T31] Not tainted syzkaller #0 [ 1544.054433][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1544.109189][T24271] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 1544.121898][ T31] task:syz.9.4261 state:D stack:25128 pid:22289 tgid:22289 ppid:20568 task_flags:0x440040 flags:0x00004004 [ 1544.122040][ T31] Call Trace: [ 1544.122049][ T31] [ 1544.122063][ T31] __schedule+0x1798/0x4cc0 [ 1544.122140][ T31] ? __pfx___schedule+0x10/0x10 [ 1544.122175][ T31] ? schedule+0x91/0x360 [ 1544.122197][ T31] schedule+0x165/0x360 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1544.122219][ T31] schedule_preempt_disabled+0x13/0x30 [ 1544.122259][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 1544.122282][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 1544.122309][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1544.122346][ T31] down_read+0x98/0x2e0 [ 1544.188403][ T31] page_cache_ra_order+0x318/0xd40 [ 1544.276686][ T31] ? maybe_unlock_mmap_for_io+0x225/0x2d0 [ 1544.282482][ T31] do_sync_mmap_readahead+0x25e/0x7a0 [ 1544.296502][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 1544.304055][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 1544.357998][ T24] petalynx 0003:18B1:0037.0040: invalid report_size 61258 [ 1544.365139][ T24] petalynx 0003:18B1:0037.0040: item 0 2 1 7 parsing failed [ 1544.396605][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 1544.402023][ T31] filemap_fault+0x62c/0x1200 [ 1544.428226][ T31] ? __pagetable_ctor+0x253/0x340 [ 1544.433617][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 1544.438857][ T31] ? rcu_is_watching+0x15/0xb0 [ 1544.443673][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1544.449478][ T31] __do_fault+0x135/0x390 [ 1544.453857][ T31] __handle_mm_fault+0x1847/0x5440 [ 1544.459049][ T31] ? __lock_acquire+0xab9/0xd20 [ 1544.464168][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 1544.469821][ T31] ? __pfx_do_futex+0x10/0x10 [ 1544.474533][ T31] ? lock_vma_under_rcu+0xdf/0x3d0 [ 1544.480097][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1544.485696][ T31] handle_mm_fault+0x40a/0x8e0 [ 1544.490595][ T31] do_user_addr_fault+0xa81/0x1390 [ 1544.495764][ T31] ? rcu_is_watching+0x15/0xb0 [ 1544.507428][ T24] petalynx 0003:18B1:0037.0040: parse failed [ 1544.576233][ T31] ? trace_page_fault_user+0x84/0x1e0 [ 1544.576952][ T24] petalynx 0003:18B1:0037.0040: probe with driver petalynx failed with error -22 [ 1544.581705][ T31] exc_page_fault+0x76/0xf0 [ 1544.661914][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 1544.668258][ T31] asm_exc_page_fault+0x26/0x30 [ 1544.673124][ T31] RIP: 0033:0x7f6c6ad5689d [ 1544.696916][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1544.727632][ T31] RSP: 002b:00007f6c6b0ffb88 EFLAGS: 00010287 [ 1544.733736][ T31] RAX: 0000200000000040 RBX: 0000000000000004 RCX: ffffffffffffffc5 [ 1544.746451][ T31] RDX: 000000000000003a RSI: 0000001b308200a6 RDI: 0000200000000040 [ 1544.756516][ T31] RBP: 00007f6c6afd7da0 R08: 0000001b30c20000 R09: 0000000000000074 [ 1544.764483][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f6c6afd5fac [ 1544.776273][ T31] R13: 00007f6c6afd5fa0 R14: fffffffffffffffe R15: 00007f6c6b0ffca0 [ 1544.784288][ T31] [ 1544.796699][ T31] [ 1544.796699][ T31] Showing all locks held in the system: [ 1544.827672][ T9] usb 10-1: USB disconnect, device number 29 [ 1544.849147][ T31] 3 locks held by kworker/0:0/9: [ 1544.896788][ T31] 1 lock held by khungtaskd/31: [ 1544.901678][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1544.976345][ T31] 2 locks held by getty/5626: [ 1544.981059][ T31] #0: ffff888033b8a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1545.006589][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1545.043310][ T31] 3 locks held by kworker/u8:16/18191: [ 1545.056837][ T31] 2 locks held by syz.7.4217/22168: [ 1545.064816][ T31] #0: ffff888148f907a8 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_fallocate+0x260/0x530 [ 1545.085933][ T31] #1: ffff888148f90948 (mapping.invalidate_lock){++++}-{4:4}, at: blkdev_fallocate+0x290/0x530 [ 1545.133568][ T31] 1 lock held by syz.9.4261/22289: [ 1545.169272][ T31] #0: ffff888148f90948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 1545.186700][ T31] 1 lock held by syz.5.4322/22486: [ 1545.191863][ T31] #0: ffff888148f90948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 1545.227985][ T31] 1 lock held by syz.5.4322/22487: [ 1545.297239][ T31] #0: ffff888148f90948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 1545.326259][ T31] 1 lock held by syz.1.4417/22939: [ 1545.346351][ T31] #0: ffff888148f90948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 1545.416320][ T31] 1 lock held by syz.2.4459/23133: [ 1545.421471][ T31] #0: ffff888148f90948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 1545.517958][ T31] 1 lock held by syz.2.4459/23134: [ 1545.523140][ T31] #0: ffff888148f90948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 1545.556897][ T31] 1 lock held by syz.2.4459/23136: [ 1545.562053][ T31] #0: ffff888148f90948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 1545.576605][ T31] 1 lock held by syz.3.4462/23146: [ 1545.585973][ T31] #0: ffff888148f90948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 1545.606636][ T31] 1 lock held by syz.3.4462/23149: [ 1545.616387][ T31] #0: ffff888148f907a8 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_common_ioctl+0x1ab6/0x2550 [ 1545.627619][ T31] 1 lock held by syz.3.4462/23151: [ 1545.632731][ T31] #0: ffff888148f90948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 1545.645667][ T31] 1 lock held by syz.6.4477/23267: [ 1545.654716][ T31] #0: ffff888148f90948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 1545.665731][ T31] 1 lock held by syz.6.4477/23272: [ 1545.672392][ T31] #0: ffff888148f90948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 1545.686331][ T31] 1 lock held by syz.6.4477/23275: [ 1545.691469][ T31] #0: ffff888148f90948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 1545.736542][ T31] 3 locks held by kworker/u8:3/24063: [ 1545.741949][ T31] 1 lock held by syz.9.4641/24239: [ 1545.756218][ T31] #0: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1545.806378][ T31] 2 locks held by syz.7.4646/24252: [ 1545.811593][ T31] 4 locks held by syz.8.4649/24260: [ 1545.819559][ T31] #0: ffff8880366f8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1545.833587][ T31] #1: ffff8880366f80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1545.857641][ T31] #2: ffffffff8f69eea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1545.878289][ T31] #3: ffff8880659bbb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1545.888485][ T31] [ 1545.890830][ T31] ============================================= [ 1545.890830][ T31] [ 1545.936574][ T31] NMI backtrace for cpu 0 [ 1545.936595][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1545.936612][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1545.936621][ T31] Call Trace: [ 1545.936629][ T31] [ 1545.936638][ T31] dump_stack_lvl+0x189/0x250 [ 1545.936666][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1545.936686][ T31] ? __pfx__printk+0x10/0x10 [ 1545.936712][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1545.936734][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1545.936760][ T31] ? __pfx__printk+0x10/0x10 [ 1545.936786][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1545.936813][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1545.936839][ T31] watchdog+0xf93/0xfe0 [ 1545.936867][ T31] ? watchdog+0x1de/0xfe0 [ 1545.936894][ T31] kthread+0x70e/0x8a0 [ 1545.936918][ T31] ? __pfx_watchdog+0x10/0x10 [ 1545.936947][ T31] ? __pfx_kthread+0x10/0x10 [ 1545.936966][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1545.936989][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1545.937004][ T31] ? __pfx_kthread+0x10/0x10 [ 1545.937023][ T31] ret_from_fork+0x439/0x7d0 [ 1545.937037][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1545.937050][ T31] ? __switch_to_asm+0x39/0x70 [ 1545.937061][ T31] ? __switch_to_asm+0x33/0x70 [ 1545.937074][ T31] ? __pfx_kthread+0x10/0x10 [ 1545.937086][ T31] ret_from_fork_asm+0x1a/0x30 [ 1545.937105][ T31] [ 1545.937110][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1545.997178][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.002320][ C1] NMI backtrace for cpu 1 [ 1546.002334][ C1] CPU: 1 UID: 0 PID: 1306 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 1546.002352][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1546.002363][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1546.002386][ C1] Code: e8 1e 06 70 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f 83 d3 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1546.002400][ C1] RSP: 0018:ffffc9000428ee58 EFLAGS: 00000006 [ 1546.002415][ C1] RAX: 1ffffffff33bee05 RBX: 00000000000003f9 RCX: 0000000000000000 [ 1546.002426][ C1] RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020 [ 1546.002436][ C1] RBP: ffffc9000428f030 R08: 0000000000000003 R09: 0000000000000004 [ 1546.002447][ C1] R10: dffffc0000000000 R11: ffffffff854fa720 R12: dffffc0000000000 [ 1546.002459][ C1] R13: dffffc0000000000 R14: ffffffff99df7480 R15: 0000000000000000 [ 1546.002471][ C1] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 1546.002485][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1546.002496][ C1] CR2: 0000200000340030 CR3: 000000000df36000 CR4: 00000000003526f0 [ 1546.002510][ C1] DR0: 0000000000000007 DR1: 0000000000104e69 DR2: 00000000000007ff [ 1546.002521][ C1] DR3: 0000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1546.002531][ C1] Call Trace: [ 1546.002538][ C1] [ 1546.002547][ C1] serial8250_console_write+0x581/0x1ba0 [ 1546.002572][ C1] ? __lock_acquire+0xab9/0xd20 [ 1546.002593][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1546.002612][ C1] ? console_flush_all+0x13a/0xc40 [ 1546.002630][ C1] ? console_flush_all+0x13a/0xc40 [ 1546.002650][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1546.002667][ C1] ? console_flush_all+0x13a/0xc40 [ 1546.002690][ C1] ? console_flush_all+0x13a/0xc40 [ 1546.002707][ C1] console_flush_all+0x725/0xc40 [ 1546.002726][ C1] ? console_flush_all+0x13a/0xc40 [ 1546.002745][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1546.002767][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1546.002787][ C1] console_unlock+0xc4/0x270 [ 1546.002804][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1546.002822][ C1] ? vprintk_emit+0x444/0x7a0 [ 1546.002837][ C1] ? vprintk_emit+0x444/0x7a0 [ 1546.002853][ C1] vprintk_emit+0x5b7/0x7a0 [ 1546.002867][ C1] ? vprintk_emit+0x444/0x7a0 [ 1546.002883][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1546.002900][ C1] ? __pfx_snprintf+0x10/0x10 [ 1546.002925][ C1] dev_vprintk_emit+0x337/0x3f0 [ 1546.002946][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1546.002971][ C1] dev_printk_emit+0xe0/0x130 [ 1546.002987][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1546.003010][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1546.003027][ C1] ? ieee802154_hdr_get_sechdr+0x3f/0x150 [ 1546.003048][ C1] ? __asan_memcpy+0x40/0x70 [ 1546.003065][ C1] ? skb_pull+0xc1/0x1d0 [ 1546.003086][ C1] __netdev_printk+0x3d7/0x4d0 [ 1546.003110][ C1] netdev_warn+0x10a/0x160 [ 1546.003127][ C1] ? __pfx_netdev_warn+0x10/0x10 [ 1546.003149][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 1546.003167][ C1] ? rcu_read_lock_bh_held+0x79/0xe0 [ 1546.003183][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 1546.003199][ C1] ? __lock_acquire+0xab9/0xd20 [ 1546.003220][ C1] ieee802154_subif_start_xmit+0x136/0x190 [ 1546.003238][ C1] dev_hard_start_xmit+0x2d7/0x830 [ 1546.003264][ C1] sch_direct_xmit+0x241/0x4b0 [ 1546.003287][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1546.003311][ C1] __dev_queue_xmit+0x1857/0x3b50 [ 1546.003334][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 1546.003354][ C1] ? rcu_is_watching+0x15/0xb0 [ 1546.003370][ C1] ? trace_sched_exit_tp+0x36/0x110 [ 1546.003391][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1546.003412][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1546.003433][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1546.003452][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1546.003478][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1546.003498][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1546.003514][ C1] tx+0x6b/0x190 [ 1546.003532][ C1] ? __pfx_tx+0x10/0x10 [ 1546.003549][ C1] kthread+0x1cd/0x3e0 [ 1546.003569][ C1] ? __pfx_kthread+0x10/0x10 [ 1546.003585][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 1546.003605][ C1] ? __kthread_parkme+0x7b/0x200 [ 1546.003621][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1546.003640][ C1] kthread+0x70e/0x8a0 [ 1546.003658][ C1] ? __pfx_kthread+0x10/0x10 [ 1546.003673][ C1] ? __pfx_kthread+0x10/0x10 [ 1546.003697][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1546.003716][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1546.003731][ C1] ? __pfx_kthread+0x10/0x10 [ 1546.003749][ C1] ret_from_fork+0x439/0x7d0 [ 1546.003766][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1546.003784][ C1] ? __switch_to_asm+0x39/0x70 [ 1546.003801][ C1] ? __switch_to_asm+0x33/0x70 [ 1546.003818][ C1] ? __pfx_kthread+0x10/0x10 [ 1546.003835][ C1] ret_from_fork_asm+0x1a/0x30 [ 1546.003861][ C1] [ 1546.014372][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1546.014392][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1546.014412][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1546.014423][ T31] Call Trace: [ 1546.014431][ T31] [ 1546.611580][ T31] dump_stack_lvl+0x99/0x250 [ 1546.616157][ T31] ? __asan_memcpy+0x40/0x70 [ 1546.620741][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1546.625923][ T31] ? __pfx__printk+0x10/0x10 [ 1546.630516][ T31] vpanic+0x281/0x750 [ 1546.634487][ T31] ? __pfx_vpanic+0x10/0x10 [ 1546.638988][ T31] ? preempt_schedule+0xae/0xc0 [ 1546.643824][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1546.649264][ T31] panic+0xb9/0xc0 [ 1546.652967][ T31] ? __pfx_panic+0x10/0x10 [ 1546.657373][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1546.662734][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1546.668876][ T31] watchdog+0xfd2/0xfe0 [ 1546.673034][ T31] ? watchdog+0x1de/0xfe0 [ 1546.677348][ T31] kthread+0x70e/0x8a0 [ 1546.681401][ T31] ? __pfx_watchdog+0x10/0x10 [ 1546.686057][ T31] ? __pfx_kthread+0x10/0x10 [ 1546.690634][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1546.695871][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1546.701049][ T31] ? __pfx_kthread+0x10/0x10 [ 1546.705630][ T31] ret_from_fork+0x439/0x7d0 [ 1546.710206][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1546.715300][ T31] ? __switch_to_asm+0x39/0x70 [ 1546.720047][ T31] ? __switch_to_asm+0x33/0x70 [ 1546.724793][ T31] ? __pfx_kthread+0x10/0x10 [ 1546.729365][ T31] ret_from_fork_asm+0x1a/0x30 [ 1546.734133][ T31] [ 1546.737401][ T31] Kernel Offset: disabled [ 1546.741710][ T31] Rebooting in 86400 seconds..