last executing test programs: 10.772844939s ago: executing program 4 (id=34): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000140)=ANY=[], 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x1f6, &(0x7f0000000600)={@random="98ab9f5f3b6b", @random="b73c66ef1a08", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1c0, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, [@fragment, @hopopts={0x0, 0x30, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @hao={0xc9, 0x10, @private2}, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b404b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e000000"}, @generic={0x0, 0x32, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd0000000000000005b418a0edc41397a2f639f9f6c3b379"}, @ra={0x5, 0x2, 0x4e}]}]}}}}}}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x1f8, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast1, @multicast2, 0x0, 0xff000000, 0x0, 0x0, {@mac=@local, {[0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="84f19a8b62cc", @empty, @rand_addr=0x64010102, @multicast2, 0xa, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r4, 0x80079a0) sendfile(r4, r3, 0x0, 0x7e78a6f3) fcntl$addseals(r4, 0x409, 0xb) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000480)={0x8, 0x3}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) 10.420584207s ago: executing program 4 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r5 = syz_io_uring_setup(0x3158, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x3, 0x354}, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) recvfrom(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x100000) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x48000) 6.957910918s ago: executing program 4 (id=45): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x66, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYBLOB="f3639a436a83d0718c8e733ad5de33f426758b49386c44855ab3cd13982d34fb66d85dde06c90592b2c416f371667dbaf43325af5ae2eb738c16141ee15dd63cdedf6672a0b6a55ad686a61fa8705a398c666f75b6be72bd2adff3e53f9cb7b6c45c3e304447027d7e337e523409bf3fd5ce32cdd08a3bb6737acbb3def80188a76fc53407fec8d2eff4cf79b152b0bbaf8975029ef7ef69b7f705279f96ef7f7b47f756fc50fde4a1948dbe3910fe5bfcc3271f7c8ecf12fc9b5f4f4f5e68b3a4b8f43c714c6d27d9e811737a5ddbed046acdb81a6d4d0c2b029d192c140af8988d5bb9", @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x0) 5.702102097s ago: executing program 3 (id=55): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x4020400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x4000000, @mcast1, 0x8}, 0x1c) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x440440c0) r5 = socket(0x10, 0x80003, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xffffffffffffff69, 0x2, {0xf, "0000000000000000000100000e00000f"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0xd, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xd}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x5, 0x5, 0x3}]}}]}}]}, 0x4c}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x2, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r13 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000040)=0xffffffffffffffff, 0x12) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000500000008000a00", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="140012800b0001006d6163736563"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5.55475407s ago: executing program 3 (id=56): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x990a269cb2d58133, 0x0, {0x7, 0x1f, 0x23c, 0xffffffffc4110f6c, 0x0, 0x88, 0x80000001, 0xffeffffc, 0x0, 0x0, 0x10, 0x10ff}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4302, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000e66e0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x3, 0x2}, 0x20) dup(r1) (async) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x3, 0x2, 0xeeee0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0xfffffffffffffe55) (async) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0xfffffffffffffe55) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.512902303s ago: executing program 3 (id=57): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0xb9, 0x2c, 0x5, 0x70, @local, @dev={0xfe, 0x80, '\x00', 0x33}, 0x40, 0x10, 0xc6bd, 0x4}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x0, 0x2}, {0xf, 0x1}, {0x2, 0x4}}, [{0x8, 0xb, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xc, &(0x7f0000000280)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff}, @ldst={0xe97725e11e8fcbb5, 0x3, 0x3, 0x1, 0x3, 0x41, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x35, &(0x7f0000000340)=""/53, 0x40f00, 0x4, '\x00', r0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xa, 0x0, 0xbd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000005c0)=[r3, r4, 0xffffffffffffffff, r5], &(0x7f0000000600)=[{0x0, 0x1, 0x8, 0x5}, {0x3, 0x2, 0x1, 0x2}, {0x2, 0x4, 0xa}], 0x10, 0x9}, 0x94) syz_usb_connect$cdc_ncm(0x0, 0x148, &(0x7f0000000700)={{0x12, 0x1, 0x111, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x136, 0x2, 0x1, 0x8, 0x60, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "a31c0d815167"}, {0x5, 0x24, 0x0, 0xf5ec}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x2, 0x4}, {0x6, 0x24, 0x1a, 0x1cde, 0x21}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x1, 0x7f, 0x10, 0x8, 0x80}, @dmm={0x7, 0x24, 0x14, 0xf, 0x7}, @mdlm_detail={0x6d, 0x24, 0x13, 0x1, "816460cf8ed4a1ef807813ce58d5fb51d06b422ceed449cc9df47f970aa77a4256fcf8d50823f9c7917ee88ac6e83f2165f77bbd7a196323d98377057753b095618bdfa69874c71412e16ad82ef871f1c7e4f7504649d158d7571e30c675138201947c6f3140cd8c2d"}, @mdlm_detail={0x4f, 0x24, 0x13, 0xae, "f9df244377b348ee592ba05255767d3731d7d0a8e50e8e2c6a587f191e7041ee1ab3693cdd4f3eb3c99adc80e4a75bcf72c4c0fb6bdd0c0a91cedc437dfabec8061fe175ce92fd0ce6610c"}, @obex={0x5, 0x24, 0x15, 0xe0}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x3e, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x220, 0x8, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x7bf, 0x4, 0x7f, 0xbd}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0xb, 0x9, 0x0, 0x20, 0x68}, 0x1a9, &(0x7f00000008c0)={0x5, 0xf, 0x1a9, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "a518f06f62d780c5c2a9c58bc79e84d5"}, @generic={0xde, 0x10, 0x3, "b63044b6077738d1d2d948abce701bb3d4e93e5ac6f1073e0c0235799031ef758249d2cfe4c4f33f57feb2e80fa417bbfcd627ba336b1df0af739fb276fe28f4e908569b451e7e268b10a676f42242431372a06b882005bfe3829542c89b3f1331de3bd59b975326af04925017bb7c4d551f1f7b46bdc6928aa5527400dd802ebe98948d5f4029001bc1547358bf4e00706a5c1e461d0506aa18e05062bc0862a18d58eef8eff5fad6ee7533a84e60cdc68a7dadf1dc5b4cc9cc91e818de9bec460972b9882949ab13a9fb43a0f8fda6d65a3a94b93f24727e4d2c"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x7, 0xf00, 0x7, [0xc0, 0x30, 0xff0018, 0xc000]}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x800, 0xf00, 0xfffd, [0xf, 0xff0000, 0x3f00, 0xc0ff]}, @generic={0x5e, 0x10, 0xa, "f800bd70583a9669d14bb6317e290e06b37d423247469a4aad637d722c71ee6e68ed9589ae166cac6c3f38343d30fda896d49abd960d392eb0f9a4e2c9581b0fdc5d65d61a6706511f3c95de28cce5413502cbfa2f32633e2892d4"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x5d98, 0x0, 0x4, [0x30, 0xc0cf, 0x30, 0xff3f00]}]}, 0x7, [{0xd5, &(0x7f0000000a80)=@string={0xd5, 0x3, "d75228fde1c2b9c624e328e7a7b9f84905ea96d1451106acfe2d87cbd172985c23904e584cdb18afcd25d00158f3214cef75be357c7f02ae48547ee14e6edc58cce174ba8590831f60e4a97bed999f8f82dac72ea578d9e30f10618583878d503169deb6edb50f410ea1a21d90792af77e2167522b71a10c8c52ec6f7fa8a602205ede70de5c7dfb30a0ab9737e7263fa2c052d170e45041a54ca1a918827bce1a38d0466d2db6ac24d046c8a6849ec0088479163e9b9bbb8443e776572eeaed62f182c133728d0642475dd930cf1494d294e8"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x140c}}, {0x100, &(0x7f0000000bc0)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x801}}, {0x5f, &(0x7f0000000d80)=@string={0x5f, 0x3, "580fcb22221521557b00784a1958d12ae01b17738f6f49230d73a9f017ecbe771bbe8d2bd9b831900112f56471d3fba73ea0fdad0de50cf95146289660940c275c2ec6b3101ae65e55b59685ae57e35b4a25a1e4d8febf27284ac7f00b"}}]}) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000e80)={0x73, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffe}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @pad1, @ra={0x5, 0x2, 0x6}, @pad1, @jumbo={0xc2, 0x4, 0x400}, @pad1]}, 0x30) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000f00), r2) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0x9c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r0}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c000}, 0x20040000) sendto$inet6(r2, &(0x7f0000001080)="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", 0x1000, 0x200480d4, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000002080)={0xa}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000020c0), 0x10002, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r8, 0xc0805841, &(0x7f0000002100)={0xb, 0xc, 0x9, 0x82b2}) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000002180), 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000021c0)={{{@in=@multicast2, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e23, 0x1, 0xa, 0xa0, 0xc0, 0x32}, {0x4, 0x20000000, 0x7c8d985c, 0xffff, 0x5, 0x0, 0x1, 0x1}, {0x6, 0x7f, 0x800, 0xcc9}, 0x8, 0x6e6bb1, 0x2, 0x1, 0x2, 0x3}, {{@in=@empty, 0x4d3, 0x32}, 0xa, @in=@loopback, 0x3507, 0x3, 0x1, 0x8, 0x5, 0x605, 0x546c3e20}}, 0xe8) r9 = syz_open_dev$usbfs(&(0x7f00000022c0), 0x400, 0x101000) ioctl$USBDEVFS_GETDRIVER(r9, 0x41045508, &(0x7f0000002300)={0x6, "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"}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000002440)={0x0, 0x6}, &(0x7f0000002480)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000024c0)=@sack_info={r11, 0x8, 0x3}, &(0x7f0000002500)=0xc) ioctl$XFS_IOC_AG_GEOMETRY(r8, 0xc080583d, &(0x7f0000002540)={0x6, 0x1, 0xfff, 0x4, 0x2, 0x9c27, 0x2ee0, 0xf10}) clock_gettime(0x0, &(0x7f00000025c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000002600)={0xf, 0x1, 0x4, 0x1000, 0x7, {r12, r13/1000+60000}, {0x1, 0x1, 0x2, 0x9, 0x2, 0x6, "b8a7659e"}, 0x200, 0x4, {0xffffffffffffffff}, 0x2, 0x0, r2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000002700)=@multiplanar_fd={0x5, 0x9, 0x4, 0x0, 0x7, {}, {0x4, 0x2, 0xf, 0x7, 0x9, 0x7f, "9c16b226"}, 0x2, 0x4, {&(0x7f0000002680)=[{0x0, 0x43, {r14}, 0x63}, {0x800, 0x68a2, {r3}, 0x4}]}}) recvmsg$unix(r3, &(0x7f0000002b40)={&(0x7f0000002780)=@abs, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002800)=""/155, 0x9b}, {&(0x7f00000028c0)=""/187, 0xbb}, {&(0x7f0000002980)=""/239, 0xef}, {&(0x7f0000002a80)=""/75, 0x4b}], 0x4}, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002e80)={0x6, 0x19, &(0x7f0000002b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@exit, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @exit, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @generic={0x6, 0x5, 0x5, 0x2, 0x4}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000002c80)='syzkaller\x00', 0x9140, 0x88, &(0x7f0000002cc0)=""/136, 0x40f00, 0x10, '\x00', r0, 0x25, r3, 0x8, &(0x7f0000002d80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000002dc0)={0x2, 0x8, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002e00)=[r3], &(0x7f0000002e40)=[{0x5, 0x2, 0x10}, {0x3, 0x0, 0x4, 0x3}], 0x10, 0x1400}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002fc0)={{r3, 0xffffffffffffffff}, &(0x7f0000002f40), &(0x7f0000002f80)=r2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003400)=@bpf_ext={0x1c, 0xb, &(0x7f0000003000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000003080)='GPL\x00', 0x800, 0xb9, &(0x7f00000030c0)=""/185, 0x41100, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000032c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000003300)={0x5, 0x1, 0x3, 0x8}, 0x10, 0x7034, 0xffffffffffffffff, 0x4, &(0x7f0000003380)=[r4, r5, r1, r1, r4, 0xffffffffffffffff, r1, r5, r3], &(0x7f00000033c0)=[{0x4, 0x5, 0x4, 0x8}, {0x0, 0x3, 0x4, 0xd}, {0x2, 0x5, 0x6, 0x3}, {0x4, 0x5, 0xc, 0xc}], 0x10, 0x8}, 0x94) 4.62177377s ago: executing program 1 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000000000000000000000000000008600907800000000000000007fffffff0000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 4.531232221s ago: executing program 1 (id=60): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10, 0x0, 0x0, 0x7, 0x9, 0x8, 0x0, 0x80}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x8000, 0x1000000000, 0x200000000001, 0x1, 0x2d191, 0x3da0000000000, 0x2004cb, 0x80001000, 0xa7e, 0x3, 0x5, 0x9, 0x7, 0x0, 0x0, 0x5], 0xeeee8000, 0xa02}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd26, 0x25dfdc03, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3c, 0x2, [@TCA_MATCHALL_ACT={0x38, 0x2, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000180)={[{0x6, 0x4, 0xc2, 0x4f, 0xf5, 0x2, 0xc3, 0x1, 0x3, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa6f3, 0x6, 0xd, 0x9, 0xff, 0x4, 0x3, 0x6, 0x13, 0x7, 0x7, 0x1}, {0x1f7, 0x7, 0x2, 0x14, 0x25, 0x9, 0x4, 0xfb, 0x1, 0x9, 0x6, 0x1, 0x400004}], 0xa}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x7ff, 0x6, 0xffff, 0x0, 0x10002, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x14, 0x1, 0x7, 0x3, 0x1000000, 0xfffffffffffffffe], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) recvmmsg(r9, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r10 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r11, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x1fd, r10, 0x0, 0x0, 0x0, 0x0, 0x1, r10}]) 4.198299833s ago: executing program 3 (id=65): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011e00810087406d040e0a759400400001090212000100000000090400200003"], 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x480d1) 4.197300465s ago: executing program 1 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x202010, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode\x00\x00\x00\x0000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',allow_other,default_permissions,blksize=0x0000000000000600,allow_other,default_permissions,max_read=0x0000000000000400,default_permissions,default_permissions,allow_other,fsmagic=0xffffffffffffff40,smackfstransmute=,obj_type=/dev/usb/hiddev#\x00,smackfshat=/dev/usb/hiddev#\x00,\x00'], 0x1, 0x0, &(0x7f0000000640)="874cc16fe166bef1e2a492b7d33713cfa0b7fae5728dbe92afa67fc141bf9e9549292085ef74f7151ab54f990004719edce278023aad2ab48c50f2ba4013b43ec6ca0714f575ab32232d1cd3e0fb68a261972c27e12e40dd3a5d2bb0eeabc10d0749e319348b9c7989b36ee809d72feb1137b17fd1b790642ea209ea0f8452bb56378083002d14baf5ee73d946949f4f8afc979d1678cd1083d28ba179cf74829e99c3ac4d18215efc2af1d09e26224144f655b0a79051436ec73b082d08329df2d99fad81499555eed2b0fcba7590f4e50d572f1970203a7f77acd93161fc662632cbfc057b48ca7fa6f041c642fe33054b") sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x5}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r8, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000002e00090027bd700000000000040000002900118031f9e2672f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b75c2000000"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lseek(r0, 0x1, 0x0) 3.918508414s ago: executing program 4 (id=67): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) poll(&(0x7f0000000000)=[{r0, 0xda10}], 0x1, 0xfbfeffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x8f00, 0x0) r2 = socket(0x1d, 0x4, 0x6) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x8000000000000003, {}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18) close_range(r1, r2, 0x2) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f00000002c0)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000600)=@abs={0x0, 0x0, 0x80004e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000b40)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000500)="b3e7d7ea2edf082dfcbaf6e7f7f43a098b1e94824fd593388db78a6666d7a4998394f6fc23f623854f59b4797e3776f7a89aa993627fe82646ff0a36af1f45dc5bb5e5960c93ad96fd581e714439a15c98208849f02d1a507ac9573a0f00a7a83195c7b63d50f38ed6907e5be380520d484d139db5ec3b0aef07ebf121ff894c88b4c85f8c57047b91a08c21126511bbce49cb6fbf7254429e7e0f2c3c6be5a5cc860e30ae08226cdfb9feaf0ff044d65d7fea0d66154ad3f83570c2857090cc39bde8741c4599330bae2c0a068e4e683f19114d723539b7", 0xd8}, {&(0x7f0000000400)="dc2de093916226fa17f7d6cd6986ce1a85313c13b31db3a54496ed3c11f815d96265f44af049571b482345018807203bd064dd4e2d698c9e5bcf7ba56defc433a5b257efe61015db06f1fc39892c31db25024e65ba981ee123a744db273d29fbcfd3b09b3f0cf930495cdb64366c01813694a7fbf839a8c5", 0x78}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001100000", @ANYRES32=r3, @ANYRES32=r7], 0x38, 0x20000825}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000780)="6554e47abeac6ce319170666f1fbce48310a2cba53c8ab0683215b6e29bb7841307495e71d6e37c09761c492cd0ce6b2c4f2bd183e36630e0d7aa40051a0d9925b837caf7470943ea1b7a40d1805751255c1e94fec9414995a4afc4c32c38ad43ed71025e4b33eef07d1543f742eca637fa68d33f6247d29225c347776ec1c63109c66470f5c", 0x86}, {&(0x7f0000000840)="7d64f09f420f66768b29037abdd3b91322748e9bdb932e6665c1be9413fa16ddf5ffc334e9f5587faedf1092f34ceae0de58177dce4c5f5d5fffb0b8e6dac5cfa338497196a09742d1d3e812e1933f849f243ad41b90f8d1aea01961292b9474b68ea9455c5b6e04cbf8472fa1ed35fb0e7c935442bb8b7ac578cb8f6928b75a42a12063", 0x84}, {&(0x7f0000000900)="2f97e9ab31fbfd6072f0a785c2d57c20557a58405809b4e6107229465f4abb018eb9295e46aac63b3b280250b3e072f76e923b8888fda8b850abf8b42c8e0bbe37280a8bdf2378b7aa8170a2bd28f6bae8b340d45d53a95f6d52806d0eb8341aa07795f99a00f9d722137f804a7bbd18cbbfbf9e81695ab7e03916ad53a4ccb0f572c3615e07320e430b4c7e76d17f2219943ecf4810ab10ca0c374df100cfdd1fb0bcdd06b858fb9ee5163b9399c64386e83b7d6c616ff258cfa28bbc30263b456e75dab6a9e2144efcd4146e73e40551daefb40bba256f67c2c81f0a", 0xdd}, {&(0x7f0000000a00)}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000a40)="c9a6fe1f67db25be0aba38fa910b392fc9ededc55c50", 0x16}], 0x6, 0x0, 0x0, 0x90}}], 0x2, 0x1090) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230f000000000000000007000000", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40081, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x2, 0xfffffffd) 3.25312567s ago: executing program 0 (id=70): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000082ffffffffffffff0000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3.109446064s ago: executing program 2 (id=71): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) (async) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_secret(0x0) r4 = syz_io_uring_setup(0x6887, &(0x7f0000000180)={0x0, 0xc332, 0x400, 0x0, 0x399, 0x0, r3}, &(0x7f0000000200), &(0x7f0000000340)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003840)=ANY=[@ANYBLOB="440000004000070202ffffff00000010010a000008001600"/40, @ANYRES32=0x0, @ANYRES16=r4], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r6, 0x0, r6) (async) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_SET_DEBUG(r7, 0x227e, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) (async) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x44004) sendmsg$NFT_BATCH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYRES8=0xffffffffffffffff], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYRES64=r10], 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYRES64=r10], 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000400)=[{0x7, 0x3, 0x0, 0x7fff7ffc}, {0x4, 0x6, 0x7, 0x23e0}, {0x8, 0x0, 0x2, 0x3}, {0x9, 0x1, 0x4, 0x9}]}) syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) (async) r12 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000003c0)={0x7, 0x2, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x4, [{0x2000000}, {}, {0x7}, {0x4}, {0x80000000}]}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x4, [{0x2000000}, {}, {0x7}, {0x4}, {0x80000000}]}}) close_range(r11, 0xffffffffffffffff, 0x0) 2.841785593s ago: executing program 0 (id=72): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000240)={r1, 0xb9, 0x3ff, 0x5e, 0xed, 0x7ff, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r3], &(0x7f0000000180)=[0x31], 0x0, 0x8000000000009}) 2.751734851s ago: executing program 4 (id=73): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) epoll_create(0x7fffffff) (async) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8101, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x484, 0x0, 0x6}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)=""/228, &(0x7f0000000040)=0xe4) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="66a1da5153a56d6117fbd7003d1c7c9d04b4e12034f1586e96570d9a03c4173a20624d76741bc9956230beac5abe515632b407011d05ff63529b74f45e9dd7064d158131d485aa5816acdb55a8caedba3a497fe415b11267ef92692f9f46c064c7bff33d5da19b0e42efd30f126d9841d708b3d4729a56d0fb12", @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) (async) read$FUSE(r6, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0x0, r7, {0x7, 0x2b, 0xfffffefe, 0x3000c044, 0x0, 0xfffe, 0x6, 0x0, 0x0, 0x0, 0x100, 0x100}}, 0x50) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) (async) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 2.733546021s ago: executing program 0 (id=74): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x24000000) (rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x210, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0x8, 0x7}, {0x10, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000041}, 0x43) (rerun: 32) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) read$dsp(0xffffffffffffffff, &(0x7f0000000140)=""/21, 0x15) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES32], 0xa0}}, 0x4800) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[], 0x23c}}, 0x0) (async) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x80) syz_open_dev$dri(0x0, 0x7, 0x220042) (async) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x0, 0x0, r8}) (async) syz_open_dev$loop(&(0x7f0000000240), 0x45, 0x5c0862) 2.638457742s ago: executing program 0 (id=75): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000340)={{0x5, 0x7f}, {0x28, 0x8}, 0xfffffffa, 0x3, 0x1}) (async) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "b341af", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0xff, 0x0, 0x7, 0x8}]}}}}}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x10, 0x80003, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000204000000000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000230800"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d9076dd5ee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d1e0492756f720ca0053a9655015ba33f845b27760c9139c2a0dbadb7ce1c"], 0x80}}, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)) close_range(r9, 0xffffffffffffffff, 0x0) 2.481033034s ago: executing program 0 (id=76): r0 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x145cc2, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x33) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000100)={0x2}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8, 0x1b, 0x4000000}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2.242529531s ago: executing program 4 (id=77): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r5, &(0x7f0000000080)={0x60, 0x8000000000000001, 0x0, {{0x6, 0x7, 0x3, 0x0, 0x171e, 0x10000, 0x7, 0x7ff}}}, 0x60) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000a80)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x2) syz_usb_connect(0x2, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000069f74a20b810b41b6534010203010902240001000010000904"], 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40202, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) mknod(0x0, 0x1000, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r10, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x200) 2.057693847s ago: executing program 0 (id=78): r0 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000088f0e0300000000000001090224000100007001000000000103000000092100000001220200090581030000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000002140)=ANY=[@ANYBLOB='@#\f\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.052383931s ago: executing program 2 (id=79): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) syz_open_dev$dri(0x0, 0xb, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="259374c96e", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) unshare(0x8000000) (async, rerun: 32) semget$private(0x0, 0x4000, 0x0) (async, rerun: 32) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x15) (async) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) (async) syz_open_dev$media(0x0, 0x8001, 0x180502) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x1ae) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) (async, rerun: 32) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x8000}, 0x8) getsockname$packet(r6, 0x0, &(0x7f00000000c0)) 1.894534687s ago: executing program 2 (id=80): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d4, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x9) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="050310332800"/18, 0xfffffffffffffd39, 0x4, &(0x7f0000000140)={0x11, 0x1c, r3, 0x1, 0x0, 0x6, @remote}, 0x1f) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x161, 0x40000867, r5, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x10000}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_disconnect(r0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.108082321s ago: executing program 3 (id=81): r0 = socket$tipc(0x1e, 0x5, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000380)={0x0, 0x0, 0x8000, 0x1, 0x3a2, 0x0, r3}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r7, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18}, 0x0, 0x40000, 0x1}) (async, rerun: 64) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 1.001154852s ago: executing program 3 (id=82): unshare(0x22020600) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x50) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x50) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[], 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x37e698, 0x368aa8}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) quotactl_fd$Q_SYNC(r4, 0xffffffff80000100, 0x0, 0x0) (async) quotactl_fd$Q_SYNC(r4, 0xffffffff80000100, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r6 = dup(r5) fallocate(r6, 0x10, 0x0, 0x72000) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f0000000480)={"0deb2f09c46ea1a25056060b8503003fe040df8ea9244f8aff1c55876afd", 0xffffffff, 0x1, 0x1, 0x6, 0x99, 0x8, 0x38d, 0x4, [0x9, 0xb, 0x0, 0x2, 0xacf, 0x2, 0x5, 0x8e4, 0x7, 0x3, 0x1, 0x7f, 0x4, 0x8, 0x4, 0xffffefff, 0x505f, 0x8]}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x800}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0xc8bbf2a48522880d, 0x4, 0x40, 0x0, 0xf}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0xc8bbf2a48522880d, 0x4, 0x40, 0x0, 0xf}) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x1) clock_gettime(0x4, &(0x7f0000000180)) (async) clock_gettime(0x4, &(0x7f0000000180)) ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000000040)={0x6f, 0x20, 0x4, 0x3, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 918.446315ms ago: executing program 1 (id=83): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffd}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 898.949696ms ago: executing program 1 (id=84): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f00000002c0)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) poll(&(0x7f0000000240)=[{r4, 0x2188}], 0x1, 0x8001) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230f000000000000000029000000", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}) 439.062715ms ago: executing program 2 (id=85): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x10000, 0xc, 0xf1, 0x7, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0xdddd1000, 0x10, 0xa, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x4000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x3, 0xfe, 0xd, 0x40, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x1, 0xd, 0x6, 0x3, 0xa, 0x1}, {0x100000, 0x4000, 0x3, 0x9, 0x3, 0x9, 0xd, 0x4, 0x6, 0x4, 0x5, 0x4b}, {0x60000, 0xffff1000, 0xe, 0x0, 0x6, 0x1, 0x21, 0xff, 0x4, 0x90, 0xfb, 0xfc}, {0x6000, 0xfec00000, 0x19, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x8080000, 0x8080000, 0x3, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0x6000, 0x9}, {0xfec00000, 0x4}, 0x40010000, 0x0, 0x8080000, 0x381, 0x3, 0xa400, 0x2, [0x100000003, 0x4, 0x7, 0xc5]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a01080000000022bbcd0000000000000002080008400000000008000640ffffff0008000740000000310c00104000000000000000040c001040000000000000000240000000140a010800000020000000000a000001290008006762ccdad070ba9ee324100976be1ca0aa1d6cb518798900e5ce9dab4adf4418d7d018733f00000014000000110001000000000000"], 0xac}, 0x1, 0x0, 0x0, 0x618b37b523276f6c}, 0x20000000) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000100)=[r4, r5, r4], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000380)={r2, r4, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32], &(0x7f0000005d80)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 334.197626ms ago: executing program 2 (id=86): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000040)=0x1c, 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x9c0, 0x0, 0x468, 0x7b0, 0x0, 0x6c0, 0x8f0, 0x8f0, 0x8f0, 0x8f0, 0x8f0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0x300, 0x348, 0x0, {}, [@common=@mh={{0x28}, {' w'}}, @common=@unspec=@bpf0={{0x230}, {0x27, [{0x7, 0x0, 0x1, 0x6}, {0x4, 0x4, 0x3, 0x7}, {0x3, 0x9, 0x5, 0x622}, {0x10, 0x9, 0x1}, {0x3ff, 0x7, 0x8, 0x3470}, {0x2, 0x1, 0x2, 0x9}, {0x6, 0x10, 0x1, 0xffff}, {0x200, 0x8, 0x6, 0x8}, {0x5, 0xe, 0x2, 0xffffffff}, {0x2, 0x6a, 0x10, 0x6}, {0x4, 0xff, 0x8, 0x3}, {0x8001, 0x80, 0x4, 0x1ff}, {0x378b, 0x3, 0x7, 0xfff}, {0x8, 0x9, 0x9c, 0xf}, {0x6c, 0x8, 0x7, 0x7fff}, {0x7, 0x0, 0x1, 0xfff}, {0x4, 0x6, 0x1, 0x6}, {0x7, 0x80, 0x5, 0xff}, {0xf4b7, 0x2, 0x40, 0x6}, {0x7, 0x0, 0x8, 0x9}, {0x4, 0x10, 0x5, 0x6}, {0x1, 0x6, 0x1, 0xabbe30e8}, {0x8f7, 0x9, 0x9, 0x2}, {0x9, 0xe1, 0x2, 0xc}, {0x0, 0x4, 0x5, 0x40}, {0x0, 0x0, 0x7, 0xfffffff7}, {0x1, 0x7, 0xc, 0x8000}, {0x9158, 0xe, 0x6, 0x1}, {0x1, 0xfc, 0x54, 0x5}, {0x9, 0x7, 0x0, 0x3}, {0x7, 0x7, 0x7, 0x7}, {0xb, 0x0, 0x6, 0x2}, {0x5, 0xd, 0x6, 0x401}, {0x6, 0x2, 0x80, 0xfffffffa}, {0x5, 0x4, 0x5, 0x3}, {0xebf5, 0x11, 0x6, 0xb}, {0xbf, 0x7, 0x1c, 0x8}, {0x800, 0x8, 0x7, 0x2}, {0x7, 0x4, 0x4, 0x3}, {0x0, 0x9, 0x7, 0xfff}, {0x7, 0xa3, 0x4, 0x40}, {0x4, 0x9, 0x1, 0x1}, {0x9, 0x6, 0x6, 0x6}, {0x1ff, 0x5, 0xc0, 0x9}, {0x800, 0x7, 0x8, 0xa}, {0xfffe, 0x1, 0x8, 0x5}, {0x2, 0x6, 0xf4, 0x2}, {0x2, 0x3, 0x5, 0x1}, {0xfffb, 0x7, 0x10, 0x9}, {0xffff, 0xb9, 0x80, 0xed}, {0x1, 0x9, 0x9, 0x4d}, {0x7fff, 0x0, 0x6, 0x2}, {0x0, 0x85, 0xfb, 0x3}, {0x5, 0x3b, 0x3, 0x4}, {0x0, 0x2, 0xf7, 0x2b9}, {0x0, 0x1, 0xc8}, {0xfeb, 0x6, 0x1}, {0x6, 0x2, 0x4, 0xfffffff6}, {0x2, 0x9e, 0x8, 0xffffffff}, {0x2, 0x3, 0x7, 0x3}, {0x9, 0x8, 0x0, 0x3}, {0x8, 0x2, 0x4, 0x3}, {0x4, 0x1, 0xc}, {0x0, 0x6, 0xd, 0x7}], {0x200}}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@private2, 0xb, 0x5, 0x7}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ipv6header={{0x28}, {0x89, 0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @loopback, [0xffffff00, 0x0, 0xff000000, 0xff000000], [0xff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x11, 0x33, 0x7, 0x2d}, 0x0, 0x210, 0x258, 0x0, {}, [@common=@frag={{0x30}, {[0x8001, 0x6cc], 0x6, 0x4, 0x3}}, @common=@rt={{0x138}, {0x5, [0x6], 0x8, 0x30, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @loopback], 0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast2, 0x11, 0x3d, 0xfc01}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xffffffff, 0xffffffff, 0xff000000], [0xffffff, 0x0, 0xff, 0xffffffff], 'wg0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x62, 0x1, 0x2, 0x48}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa7, 'syz0\x00', {0x5}}}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'virt_wifi0\x00', 'pim6reg0\x00', {}, {0xff}, 0x32, 0x44, 0x2, 0x4b}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x8bf, 0x1ff], 0x8, 0x1b, 0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x10001, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x35}, 0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xa20) close(r1) (async) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x4c) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x449) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x7ff) r5 = inotify_add_watch(r4, &(0x7f00000001c0)='./file0\x00', 0x80000226) inotify_rm_watch(r4, r5) (async) inotify_rm_watch(r3, r5) 195.446888ms ago: executing program 2 (id=87): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket(0x840000000002, 0x3, 0xff) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0xf, 0xa, 0xfffffffc}) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsopen(&(0x7f0000000300)='hpfs\x00', 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000480)=r3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x82, 0x69, @buffer={0x0, 0x9, &(0x7f0000000140)=""/9}, &(0x7f0000000280)="99d3a24738682d0c1c1cd66fd35b568856fc3a45500836a494b5fd5fc07adfed31556cc6a593978da7f96e3891556ee93d06070912cf42085046e03a2e546dd83779aad39639307fb9b955470e5febf3b8588357c48644e2ce292d12dcee0ff0323b3dae269b7434357c167b58384e358bed021a1a8be956337955db3ca276a6b5c8", &(0x7f0000000340)=""/166, 0x7, 0x1, 0x1, &(0x7f00000004c0)}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) 0s ago: executing program 1 (id=88): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x814400, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x0, 0xc, 0x8}}, 0x28) syz_usb_connect(0x0, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ca9bd410991108b098090212000100004669248d30020017b51b00"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 65.561099][ T5806] cgroup: Unknown subsys name 'net' [ 65.648752][ T5806] cgroup: Unknown subsys name 'cpuset' [ 65.657067][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.052112][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.148095][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.156763][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.165965][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.169811][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.175259][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.182153][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.188905][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.195864][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.202525][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.209715][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.216997][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.224016][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.231340][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.250394][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.251081][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.265862][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.273843][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.274632][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.283118][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.289181][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.303600][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.305824][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.311918][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.329616][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.334942][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.897732][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 69.931808][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 69.989354][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 70.071488][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 70.188731][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 70.237430][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.244572][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.253310][ T5837] bridge_slave_0: entered allmulticast mode [ 70.260656][ T5837] bridge_slave_0: entered promiscuous mode [ 70.306448][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.313606][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.320869][ T5837] bridge_slave_1: entered allmulticast mode [ 70.327961][ T5837] bridge_slave_1: entered promiscuous mode [ 70.335289][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.342415][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.349622][ T5834] bridge_slave_0: entered allmulticast mode [ 70.356785][ T5834] bridge_slave_0: entered promiscuous mode [ 70.400854][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.408534][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.415941][ T5834] bridge_slave_1: entered allmulticast mode [ 70.422831][ T5834] bridge_slave_1: entered promiscuous mode [ 70.429773][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.436979][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.444698][ T5839] bridge_slave_0: entered allmulticast mode [ 70.451764][ T5839] bridge_slave_0: entered promiscuous mode [ 70.463450][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.471690][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.479296][ T5838] bridge_slave_0: entered allmulticast mode [ 70.486548][ T5838] bridge_slave_0: entered promiscuous mode [ 70.510741][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.517978][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.525398][ T5839] bridge_slave_1: entered allmulticast mode [ 70.532294][ T5839] bridge_slave_1: entered promiscuous mode [ 70.544416][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.551768][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.559203][ T5838] bridge_slave_1: entered allmulticast mode [ 70.566385][ T5838] bridge_slave_1: entered promiscuous mode [ 70.576552][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.619508][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.631440][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.679363][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.691088][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.712282][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.741479][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.753290][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.762595][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.770085][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.777312][ T5836] bridge_slave_0: entered allmulticast mode [ 70.784178][ T5836] bridge_slave_0: entered promiscuous mode [ 70.793336][ T5837] team0: Port device team_slave_0 added [ 70.801723][ T5837] team0: Port device team_slave_1 added [ 70.836018][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.843157][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.850569][ T5836] bridge_slave_1: entered allmulticast mode [ 70.857587][ T5836] bridge_slave_1: entered promiscuous mode [ 70.877645][ T5834] team0: Port device team_slave_0 added [ 70.903512][ T5838] team0: Port device team_slave_0 added [ 70.929851][ T5834] team0: Port device team_slave_1 added [ 70.944469][ T5839] team0: Port device team_slave_0 added [ 70.951766][ T5838] team0: Port device team_slave_1 added [ 70.968453][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.975655][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.001623][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.023293][ T5839] team0: Port device team_slave_1 added [ 71.040203][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.050550][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.057851][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.083864][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.096169][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.103128][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.132964][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.173320][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.197975][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.204938][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.231305][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.243349][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.250379][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.276457][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.287618][ T5832] Bluetooth: hci0: command tx timeout [ 71.290330][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.300121][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.326287][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.337874][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.344821][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.371227][ T5832] Bluetooth: hci3: command tx timeout [ 71.371387][ T5832] Bluetooth: hci2: command tx timeout [ 71.376872][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.378715][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.378729][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.378750][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.381675][ T5833] Bluetooth: hci1: command tx timeout [ 71.388254][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.449789][ T5833] Bluetooth: hci4: command tx timeout [ 71.453709][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.463204][ T5836] team0: Port device team_slave_0 added [ 71.518628][ T5836] team0: Port device team_slave_1 added [ 71.576846][ T5837] hsr_slave_0: entered promiscuous mode [ 71.583502][ T5837] hsr_slave_1: entered promiscuous mode [ 71.604061][ T5839] hsr_slave_0: entered promiscuous mode [ 71.610350][ T5839] hsr_slave_1: entered promiscuous mode [ 71.616575][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 71.622398][ T5839] Cannot create hsr debugfs directory [ 71.628661][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.635783][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.662023][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.697461][ T5834] hsr_slave_0: entered promiscuous mode [ 71.703687][ T5834] hsr_slave_1: entered promiscuous mode [ 71.709919][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 71.715891][ T5834] Cannot create hsr debugfs directory [ 71.722944][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.730426][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.756614][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.787860][ T5838] hsr_slave_0: entered promiscuous mode [ 71.794408][ T5838] hsr_slave_1: entered promiscuous mode [ 71.800863][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 71.806708][ T5838] Cannot create hsr debugfs directory [ 71.971444][ T5836] hsr_slave_0: entered promiscuous mode [ 71.977881][ T5836] hsr_slave_1: entered promiscuous mode [ 71.983981][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 71.989800][ T5836] Cannot create hsr debugfs directory [ 72.344637][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.367856][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.387282][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.404261][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.452333][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.467004][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.488906][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.500294][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.563754][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.587094][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.614020][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.626451][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.698713][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.709289][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.722620][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.751005][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.824445][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.860803][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.873877][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.886657][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.910372][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.927976][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.962289][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.979135][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.997669][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.004917][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.018480][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.025673][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.034830][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.042112][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.069842][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.077008][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.176333][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.220384][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.263465][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.270648][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.288028][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.301147][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.308305][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.358379][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.366169][ T5833] Bluetooth: hci0: command tx timeout [ 73.380128][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.390535][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.431558][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.438715][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.445383][ T5833] Bluetooth: hci1: command tx timeout [ 73.448752][ T5832] Bluetooth: hci3: command tx timeout [ 73.467533][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.482426][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.493565][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.500708][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.516317][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.525423][ T5832] Bluetooth: hci2: command tx timeout [ 73.525867][ T5833] Bluetooth: hci4: command tx timeout [ 73.557358][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.564473][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.604846][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.611996][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.646038][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.670957][ T5837] veth0_vlan: entered promiscuous mode [ 73.689310][ T5837] veth1_vlan: entered promiscuous mode [ 73.739679][ T5838] veth0_vlan: entered promiscuous mode [ 73.798541][ T5838] veth1_vlan: entered promiscuous mode [ 73.808015][ T5837] veth0_macvtap: entered promiscuous mode [ 73.817985][ T5839] veth0_vlan: entered promiscuous mode [ 73.837573][ T5837] veth1_macvtap: entered promiscuous mode [ 73.857450][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.867704][ T5839] veth1_vlan: entered promiscuous mode [ 73.887022][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.912473][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.934724][ T1139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.944968][ T1139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.972815][ T1139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.982895][ T1139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.998855][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.031308][ T5839] veth0_macvtap: entered promiscuous mode [ 74.044947][ T5839] veth1_macvtap: entered promiscuous mode [ 74.061386][ T5838] veth0_macvtap: entered promiscuous mode [ 74.098329][ T5838] veth1_macvtap: entered promiscuous mode [ 74.141944][ T5834] veth0_vlan: entered promiscuous mode [ 74.153882][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.173804][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.202168][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.214775][ T5834] veth1_vlan: entered promiscuous mode [ 74.223453][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.239261][ T5836] veth0_vlan: entered promiscuous mode [ 74.255819][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.269688][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.278695][ T106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.287963][ T106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.319603][ T106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.328606][ T106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.365537][ T106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.393585][ T5836] veth1_vlan: entered promiscuous mode [ 74.396900][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.419136][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.431102][ T106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.451123][ T106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.460622][ T106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.518997][ T5834] veth0_macvtap: entered promiscuous mode [ 74.539746][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.556274][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.567251][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.580257][ T5834] veth1_macvtap: entered promiscuous mode [ 74.673275][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.690118][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.724985][ T562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.733714][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.746102][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.751333][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.757515][ T5836] veth0_macvtap: entered promiscuous mode [ 74.762332][ T562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.814506][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.849502][ T5836] veth1_macvtap: entered promiscuous mode [ 74.899158][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.925027][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.068413][ T5926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 75.237148][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.238391][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.244986][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.266123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.305673][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.342205][ T1139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.381376][ T1139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.465463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 75.477025][ T5833] Bluetooth: hci0: command tx timeout [ 75.526516][ T5833] Bluetooth: hci1: command tx timeout [ 75.535434][ T5833] Bluetooth: hci3: command tx timeout [ 75.558154][ T1139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.568116][ T1139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.595318][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.605882][ T5833] Bluetooth: hci4: command tx timeout [ 75.611306][ T5833] Bluetooth: hci2: command tx timeout [ 75.665604][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.847568][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.864049][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.926754][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.934606][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.055500][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.063344][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.096122][ T5911] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.256177][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 76.266796][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.293509][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 76.313898][ T5911] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 76.316709][ T5943] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.324795][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.382849][ T5911] usb 2-1: config 0 descriptor?? [ 76.446282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.454802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.463779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.495535][ T5911] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 76.605740][ T5950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.694814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.723878][ T5911] usb 2-1: USB disconnect, device number 2 [ 77.122582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.238930][ T5964] Zero length message leads to an empty skb [ 77.315507][ T5969] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 77.325053][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12'. [ 77.450172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.459047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.503699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.563110][ T5832] Bluetooth: hci0: command tx timeout [ 77.616894][ T5832] Bluetooth: hci3: command tx timeout [ 77.625273][ T5832] Bluetooth: hci1: command tx timeout [ 77.635281][ T5879] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.704936][ T5833] Bluetooth: hci2: command tx timeout [ 77.704995][ T5832] Bluetooth: hci4: command tx timeout [ 77.946141][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.957938][ T5879] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 78.028156][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.086175][ T5879] usb 2-1: config 0 descriptor?? [ 78.945263][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.115298][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 79.122202][ T9] usb 5-1: config 0 has an invalid interface number: 202 but max is 0 [ 79.135328][ T9] usb 5-1: config 0 has no interface number 0 [ 79.163800][ T9] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=52.85 [ 79.169893][ T5983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 79.174826][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.281338][ T9] usb 5-1: Product: syz [ 79.334930][ T9] usb 5-1: Manufacturer: syz [ 79.402476][ T9] usb 5-1: SerialNumber: syz [ 79.421295][ T9] usb 5-1: config 0 descriptor?? [ 79.938345][ T5979] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 80.098044][ T5979] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 80.557737][ T5879] usbhid 2-1:0.0: can't add hid device: -71 [ 80.594110][ T5879] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 81.007231][ T6004] fuse: Bad value for 'fd' [ 81.039447][ T5879] usb 2-1: USB disconnect, device number 3 [ 81.059649][ T9] usb_8dev 5-1:0.202 can0: sending command message failed [ 81.085522][ T9] usb_8dev 5-1:0.202 can0: can't get firmware version [ 81.326646][ T6009] input: syz1 as /devices/virtual/input/input5 [ 81.409090][ T9] usb_8dev 5-1:0.202: probe with driver usb_8dev failed with error -22 [ 81.469641][ T9] usb 5-1: USB disconnect, device number 2 [ 81.622537][ T797] cfg80211: failed to load regulatory.db [ 81.933330][ T6023] capability: warning: `syz.4.28' uses deprecated v2 capabilities in a way that may be insecure [ 82.147197][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.445509][ T798] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 82.727673][ T798] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 82.767181][ T798] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.805506][ T798] usb 1-1: config 0 has no interfaces? [ 82.843493][ T798] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 82.888014][ T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.032835][ T798] usb 1-1: config 0 descriptor?? [ 83.705272][ T798] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 83.725427][ T5879] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.914794][ T798] usb 4-1: config index 0 descriptor too short (expected 76, got 72) [ 83.957748][ T798] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 83.976577][ T798] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 84.152056][ T798] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.161343][ T798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.172984][ T798] usb 4-1: SerialNumber: syz [ 84.182127][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1280, setting to 1024 [ 84.193915][ T5879] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 84.205568][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.242248][ T5879] usb 3-1: config 0 descriptor?? [ 84.257848][ T6052] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 84.409852][ T797] usb 4-1: USB disconnect, device number 2 [ 84.574465][ T5879] usbhid 3-1:0.0: can't add hid device: -71 [ 84.599929][ T5879] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 84.661634][ T5879] usb 3-1: USB disconnect, device number 2 [ 85.060277][ T5907] usb 1-1: USB disconnect, device number 2 [ 85.093542][ T5879] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.275385][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 85.311756][ T5879] usb 3-1: unable to get BOS descriptor or descriptor too short [ 85.326026][ T5879] usb 3-1: config 10 has an invalid interface number: 183 but max is 0 [ 85.334609][ T5879] usb 3-1: config 10 has no interface number 0 [ 85.341579][ T5879] usb 3-1: config 10 interface 183 has no altsetting 0 [ 85.341624][ T6075] syzkaller0: entered promiscuous mode [ 85.365088][ T5879] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 85.375268][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.383442][ T5879] usb 3-1: Product: syz [ 85.383560][ T6075] syzkaller0: entered allmulticast mode [ 85.387776][ T5879] usb 3-1: Manufacturer: syz [ 85.387791][ T5879] usb 3-1: SerialNumber: syz [ 85.414188][ T6084] syz.3.43 uses obsolete (PF_INET,SOCK_PACKET) [ 85.475267][ T5907] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.628618][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 85.648954][ T5907] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 85.665835][ T5907] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 85.685219][ T5907] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.703316][ T5907] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 85.743918][ T5907] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 85.761472][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.774631][ T5907] usb 1-1: Product: syz [ 85.779142][ T5907] usb 1-1: Manufacturer: syz [ 85.783809][ T5907] usb 1-1: SerialNumber: syz [ 85.806429][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 85.823026][ T5907] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input6 [ 86.004795][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.026741][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.078905][ T5907] imon:send_packet: packet tx failed (-71) [ 86.126762][ T5907] imon 1-1:155.0: panel buttons/knobs setup failed [ 86.135076][ T5907] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 86.145581][ T5907] (id 0x00) [ 86.225289][ T5907] rc_core: IR keymap rc-imon-pad not found [ 86.231366][ T5907] Registered IR keymap rc-empty [ 86.243392][ T5907] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 86.261553][ T5907] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 86.271953][ T5907] imon:send_packet: packet tx failed (-71) [ 86.295536][ T5907] imon 1-1:155.0: remote input dev register failed [ 86.303555][ T5907] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 86.379473][ T5907] imon 1-1:155.0: unable to initialize intf0, err 0 [ 86.386485][ T5907] imon:imon_probe: failed to initialize context! [ 86.393049][ T5907] imon 1-1:155.0: unable to register, err -19 [ 86.412725][ T5907] usb 1-1: USB disconnect, device number 3 [ 87.007182][ T5879] usb 3-1: USB disconnect, device number 3 [ 87.195430][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.221652][ T6108] netlink: 'syz.0.49': attribute type 2 has an invalid length. [ 87.325711][ T24] usb 5-1: device descriptor read/64, error -71 [ 87.630053][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.785256][ T24] usb 5-1: device descriptor read/64, error -71 [ 87.808089][ T5879] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.896948][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.916634][ T24] usb usb5-port1: attempt power cycle [ 87.986623][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 87.998724][ T5879] usb 2-1: config 0 interface 0 has no altsetting 0 [ 88.013071][ T5879] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 88.022468][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.031219][ T5879] usb 2-1: Product: syz [ 88.035854][ T5879] usb 2-1: Manufacturer: syz [ 88.046204][ T5879] usb 2-1: SerialNumber: syz [ 88.056585][ T5879] usb 2-1: config 0 descriptor?? [ 88.066901][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 88.087942][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.096149][ T9] usb 3-1: config 0 has no interface number 0 [ 88.103108][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.115239][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.141693][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 88.155239][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.175960][ T9] usb 3-1: config 0 descriptor?? [ 88.192373][ T6127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.55'. [ 88.216634][ T6127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 88.235279][ T798] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.265486][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 88.285725][ T24] usb 5-1: device descriptor read/8, error -71 [ 88.410224][ T798] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 88.418661][ T798] usb 1-1: config 0 has no interface number 0 [ 88.424814][ T798] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 88.440640][ T798] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 88.454455][ T798] usb 1-1: config 0 interface 255 has no altsetting 0 [ 88.461309][ T798] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 88.471874][ T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.480873][ T5879] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 88.482463][ T798] usb 1-1: config 0 descriptor?? [ 88.503907][ T798] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 88.525323][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 88.547709][ T24] usb 5-1: device descriptor read/8, error -71 [ 88.612607][ T9] uclogic 0003:28BD:0071.0001: pen parameters not found [ 88.619892][ T9] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 88.635424][ T5900] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.663267][ T24] usb usb5-port1: unable to enumerate USB device [ 88.684870][ T5879] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 88.695264][ T5879] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 88.701482][ T24] usb 1-1: USB disconnect, device number 4 [ 88.711321][ T5879] usb 2-1: USB disconnect, device number 4 [ 88.815766][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 88.820717][ T9] usb 3-1: USB disconnect, device number 4 [ 88.823431][ T5900] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 544 [ 88.838743][ T5900] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1983, setting to 1024 [ 88.850127][ T5900] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 88.861891][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.871111][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.882610][ T5900] usb 4-1: Manufacturer: ᐌ [ 88.888885][ T5900] usb 4-1: SerialNumber: с [ 89.108741][ T5900] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 89.115750][ T5900] cdc_ncm 4-1:1.0: bind() failure [ 89.124893][ T5900] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 89.131772][ T5900] cdc_ncm 4-1:1.1: bind() failure [ 89.141139][ T5900] usb 4-1: USB disconnect, device number 3 [ 89.825283][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.946915][ T5900] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.999947][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.025773][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.044606][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 90.064466][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 90.065286][ T798] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.093576][ T9] usb 1-1: Manufacturer: syz [ 90.110115][ T9] usb 1-1: config 0 descriptor?? [ 90.123728][ T5900] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.135874][ T5900] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 90.145359][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 90.153664][ T5900] usb 4-1: Product: syz [ 90.162869][ T5900] usb 4-1: config 0 descriptor?? [ 90.175788][ T5900] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 90.247261][ T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.258993][ T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.270126][ T798] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.292561][ T798] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.308979][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.332284][ T798] usb 2-1: config 0 descriptor?? [ 90.381387][ T9] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 90.413946][ T9] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 90.451039][ T9] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 90.490097][ T9] usb 1-1: USB disconnect, device number 5 [ 90.886388][ T798] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 91.201850][ T798] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 91.457519][ T6163] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1g!l1*$pOcɔr$G [ 92.045336][ T798] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.075271][ T5900] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 92.185265][ T5907] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.205250][ T798] usb 5-1: Using ep0 maxpacket: 32 [ 92.211995][ T798] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 92.220409][ T798] usb 5-1: config 0 has no interface number 0 [ 92.230044][ T798] usb 5-1: config 0 interface 89 has no altsetting 0 [ 92.238929][ T798] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 92.248387][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.257472][ T798] usb 5-1: Product: syz [ 92.262007][ T5900] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.272557][ T798] usb 5-1: Manufacturer: syz [ 92.277226][ T5900] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 92.286358][ T798] usb 5-1: SerialNumber: syz [ 92.293734][ T798] usb 5-1: config 0 descriptor?? [ 92.301294][ T5900] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 92.313721][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.324581][ T798] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 92.336418][ T5900] usb 1-1: config 0 descriptor?? [ 92.341797][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 92.347218][ T798] em28xx 5-1:0.89: Video interface 89 found: bulk [ 92.360230][ T5907] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 92.369472][ T24] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 92.378985][ T5907] usb 3-1: config 0 has no interface number 0 [ 92.385727][ T5907] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 92.396709][ T5907] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 92.410051][ T5907] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.421146][ T5907] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 92.434176][ T5907] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 92.443278][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.453651][ T5907] usb 3-1: config 0 descriptor?? [ 92.469908][ T5907] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 92.685867][ T5907] usb 3-1: USB disconnect, device number 5 [ 92.706968][ T5907] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 92.751184][ T5911] usb 4-1: USB disconnect, device number 4 [ 92.931953][ T798] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 93.112948][ T6234] binder_alloc: 6231: binder_alloc_buf, no vma [ 93.185433][ T5911] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 93.325286][ T5911] usb 4-1: device descriptor read/64, error -71 [ 93.565392][ T5911] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.575844][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.588710][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.620594][ T5893] usb 2-1: USB disconnect, device number 5 [ 93.715535][ T5911] usb 4-1: device descriptor read/64, error -71 [ 93.848185][ T5911] usb usb4-port1: attempt power cycle [ 93.899826][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 94.179569][ T5879] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 94.205505][ T5911] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 94.226751][ T5911] usb 4-1: device descriptor read/8, error -71 [ 94.315278][ T797] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.340681][ T5879] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 94.350323][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.361042][ T5879] usb 3-1: config 0 has no interfaces? [ 94.368455][ T5879] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 94.378804][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.392280][ T5879] usb 3-1: config 0 descriptor?? [ 94.425970][ T798] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 94.443409][ T798] em28xx 5-1:0.89: board has no eeprom [ 94.475307][ T5911] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 94.482861][ T797] usb 2-1: Using ep0 maxpacket: 16 [ 94.491961][ T797] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 94.500420][ T797] usb 2-1: can't read configurations, error -61 [ 94.506941][ T798] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 94.509021][ T5911] usb 4-1: device descriptor read/8, error -71 [ 94.526328][ T798] em28xx 5-1:0.89: analog set to bulk mode. [ 94.537378][ T24] em28xx 5-1:0.89: Registering V4L2 extension [ 94.602168][ T24] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 94.618165][ T24] em28xx 5-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 94.635672][ T5911] usb usb4-port1: unable to enumerate USB device [ 94.639961][ T24] em28xx 5-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 94.658464][ T24] em28xx 5-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 94.677554][ T24] em28xx 5-1:0.89: Config register raw data: 0xfffffffb [ 94.685506][ T797] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 94.694990][ T24] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 94.710531][ T24] em28xx 5-1:0.89: No AC97 audio processor [ 94.743810][ T24] usb 5-1: Decoder not found [ 94.750668][ T24] em28xx 5-1:0.89: failed to create media graph [ 94.845670][ T24] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 94.853954][ T797] usb 2-1: Using ep0 maxpacket: 16 [ 94.865568][ T6254] ================================================================== [ 94.873637][ T6254] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 94.881007][ T6254] Read of size 8 at addr ffff88807ce74748 by task v4l_id/6254 [ 94.888455][ T6254] [ 94.890781][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 94.890793][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.890803][ T6254] Call Trace: [ 94.890810][ T6254] [ 94.890815][ T6254] dump_stack_lvl+0xe8/0x150 [ 94.890831][ T6254] print_report+0xba/0x230 [ 94.890843][ T6254] ? v4l2_fh_open+0xac/0x420 [ 94.890855][ T6254] kasan_report+0x117/0x150 [ 94.890866][ T6254] ? v4l2_fh_open+0xac/0x420 [ 94.890878][ T6254] v4l2_fh_open+0xac/0x420 [ 94.890890][ T6254] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 94.890903][ T6254] em28xx_v4l2_open+0x157/0x9a0 [ 94.890913][ T6254] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.890923][ T6254] v4l2_open+0x1bf/0x3a0 [ 94.890937][ T6254] chrdev_open+0x4cd/0x5e0 [ 94.890947][ T6254] ? __pfx_chrdev_open+0x10/0x10 [ 94.890956][ T6254] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 94.890970][ T6254] ? __pfx_chrdev_open+0x10/0x10 [ 94.890979][ T6254] do_dentry_open+0x785/0x14e0 [ 94.890993][ T6254] vfs_open+0x3b/0x340 [ 94.891003][ T6254] ? path_openat+0x2df0/0x3860 [ 94.891017][ T6254] path_openat+0x2e08/0x3860 [ 94.891033][ T6254] ? __pfx_stack_trace_save+0x10/0x10 [ 94.891043][ T6254] ? stack_depot_save_flags+0x33/0x810 [ 94.891054][ T6254] ? __pfx_path_openat+0x10/0x10 [ 94.891067][ T6254] ? __x64_sys_openat+0x138/0x170 [ 94.891078][ T6254] ? do_syscall_64+0x14d/0xf80 [ 94.891088][ T6254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.891098][ T6254] ? __lock_acquire+0x6b5/0x2cf0 [ 94.891111][ T6254] do_file_open+0x23e/0x4a0 [ 94.891125][ T6254] ? __pfx_do_file_open+0x10/0x10 [ 94.891142][ T6254] ? _raw_spin_unlock+0x28/0x50 [ 94.891151][ T6254] ? alloc_fd+0x64b/0x6c0 [ 94.891164][ T6254] do_sys_openat2+0x113/0x200 [ 94.891175][ T6254] ? __pfx_do_sys_openat2+0x10/0x10 [ 94.891186][ T6254] ? exc_page_fault+0x6a/0xc0 [ 94.891198][ T6254] ? do_user_addr_fault+0xc6f/0x1340 [ 94.891211][ T6254] __x64_sys_openat+0x138/0x170 [ 94.891223][ T6254] do_syscall_64+0x14d/0xf80 [ 94.891234][ T6254] ? trace_irq_disable+0x3b/0x150 [ 94.891246][ T6254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.891255][ T6254] ? clear_bhb_loop+0x40/0x90 [ 94.891265][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.891274][ T6254] RIP: 0033:0x7f6256aa7407 [ 94.891286][ T6254] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 94.891294][ T6254] RSP: 002b:00007ffcc13cd5a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 94.891305][ T6254] RAX: ffffffffffffffda RBX: 00007f62571f6880 RCX: 00007f6256aa7407 [ 94.891311][ T6254] RDX: 0000000000000000 RSI: 00007ffcc13cdf1d RDI: ffffffffffffff9c [ 94.891317][ T6254] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 94.891323][ T6254] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 94.891328][ T6254] R13: 00007ffcc13cd7f0 R14: 00007f625735d000 R15: 0000556c521594d8 [ 94.891342][ T6254] [ 94.891345][ T6254] [ 95.184970][ T6254] Allocated by task 24: [ 95.189104][ T6254] kasan_save_track+0x3e/0x80 [ 95.193768][ T6254] __kasan_kmalloc+0x93/0xb0 [ 95.198339][ T6254] __kmalloc_cache_noprof+0x31c/0x660 [ 95.203698][ T6254] em28xx_v4l2_init+0x10b/0x2e70 [ 95.208623][ T6254] em28xx_init_extension+0x120/0x1c0 [ 95.213894][ T6254] process_scheduled_works+0xb02/0x1830 [ 95.219427][ T6254] worker_thread+0xa50/0xfc0 [ 95.224002][ T6254] kthread+0x388/0x470 [ 95.228055][ T6254] ret_from_fork+0x51e/0xb90 [ 95.232648][ T6254] ret_from_fork_asm+0x1a/0x30 [ 95.237403][ T6254] [ 95.239710][ T6254] Freed by task 24: [ 95.243499][ T6254] kasan_save_track+0x3e/0x80 [ 95.248162][ T6254] kasan_save_free_info+0x46/0x50 [ 95.253190][ T6254] __kasan_slab_free+0x5c/0x80 [ 95.257936][ T6254] kfree+0x1c1/0x630 [ 95.261825][ T6254] em28xx_v4l2_init+0x1683/0x2e70 [ 95.266843][ T6254] em28xx_init_extension+0x120/0x1c0 [ 95.272114][ T6254] process_scheduled_works+0xb02/0x1830 [ 95.277640][ T6254] worker_thread+0xa50/0xfc0 [ 95.282218][ T6254] kthread+0x388/0x470 [ 95.286269][ T6254] ret_from_fork+0x51e/0xb90 [ 95.290845][ T6254] ret_from_fork_asm+0x1a/0x30 [ 95.295595][ T6254] [ 95.297898][ T6254] The buggy address belongs to the object at ffff88807ce74000 [ 95.297898][ T6254] which belongs to the cache kmalloc-8k of size 8192 [ 95.311928][ T6254] The buggy address is located 1864 bytes inside of [ 95.311928][ T6254] freed 8192-byte region [ffff88807ce74000, ffff88807ce76000) [ 95.325885][ T6254] [ 95.328200][ T6254] The buggy address belongs to the physical page: [ 95.334601][ T6254] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ce70 [ 95.343351][ T6254] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 95.351830][ T6254] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 95.359364][ T6254] page_type: f5(slab) [ 95.363329][ T6254] raw: 00fff00000000040 ffff88813fea8280 dead000000000100 dead000000000122 [ 95.371924][ T6254] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 95.380486][ T6254] head: 00fff00000000040 ffff88813fea8280 dead000000000100 dead000000000122 [ 95.389136][ T6254] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 95.397783][ T6254] head: 00fff00000000003 ffffea0001f39c01 00000000ffffffff 00000000ffffffff [ 95.406432][ T6254] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 95.415078][ T6254] page dumped because: kasan: bad access detected [ 95.421476][ T6254] page_owner tracks the page as allocated [ 95.427169][ T6254] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5806, tgid 5806 (sh), ts 63537716774, free_ts 63528147177 [ 95.446854][ T6254] post_alloc_hook+0x231/0x280 [ 95.451610][ T6254] get_page_from_freelist+0x24dc/0x2580 [ 95.457135][ T6254] __alloc_frozen_pages_noprof+0x18d/0x380 [ 95.462919][ T6254] allocate_slab+0x77/0x660 [ 95.467401][ T6254] refill_objects+0x331/0x3c0 [ 95.472058][ T6254] __pcs_replace_empty_main+0x2b9/0x620 [ 95.477584][ T6254] __kmalloc_cache_noprof+0x392/0x660 [ 95.482940][ T6254] tomoyo_init_log+0x112e/0x1fb0 [ 95.487888][ T6254] tomoyo_supervisor+0x353/0x1570 [ 95.492891][ T6254] tomoyo_find_next_domain+0x486/0x1aa0 [ 95.498417][ T6254] tomoyo_bprm_check_security+0x11b/0x180 [ 95.504117][ T6254] security_bprm_check+0x85/0x240 [ 95.509119][ T6254] bprm_execve+0x896/0x1460 [ 95.513607][ T6254] do_execveat_common+0x50d/0x690 [ 95.518613][ T6254] __x64_sys_execve+0x97/0xc0 [ 95.523271][ T6254] do_syscall_64+0x14d/0xf80 [ 95.527853][ T6254] page last free pid 5806 tgid 5806 stack trace: [ 95.534156][ T6254] __free_frozen_pages+0xc00/0xd90 [ 95.539258][ T6254] __slab_free+0x263/0x2b0 [ 95.543656][ T6254] qlist_free_all+0x97/0x100 [ 95.548230][ T6254] kasan_quarantine_reduce+0x148/0x160 [ 95.553671][ T6254] __kasan_slab_alloc+0x22/0x80 [ 95.558511][ T6254] __kmalloc_noprof+0x316/0x760 [ 95.563358][ T6254] tomoyo_realpath_from_path+0xe3/0x5d0 [ 95.568889][ T6254] tomoyo_path_perm+0x283/0x560 [ 95.573727][ T6254] security_inode_getattr+0x12b/0x310 [ 95.579083][ T6254] __x64_sys_newfstat+0x13b/0x270 [ 95.584091][ T6254] do_syscall_64+0x14d/0xf80 [ 95.588663][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.594538][ T6254] [ 95.596845][ T6254] Memory state around the buggy address: [ 95.602452][ T6254] ffff88807ce74600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.610501][ T6254] ffff88807ce74680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.618542][ T6254] >ffff88807ce74700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.626579][ T6254] ^ [ 95.632974][ T6254] ffff88807ce74780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.641019][ T6254] ffff88807ce74800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.649064][ T6254] ================================================================== [ 95.660331][ T24] em28xx 5-1:0.89: Registering snapshot button... [ 95.683209][ T5879] usb 1-1: USB disconnect, device number 6 [ 95.737148][ T797] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 95.752073][ T797] usb 2-1: can't read configurations, error -61 [ 95.760561][ T797] usb usb2-port1: attempt power cycle [ 95.768661][ T6254] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.775902][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 95.784834][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.794880][ T6254] Call Trace: [ 95.798153][ T6254] [ 95.801070][ T6254] vpanic+0x56c/0xa60 [ 95.805044][ T6254] ? __pfx_vpanic+0x10/0x10 [ 95.809536][ T6254] panic+0xc5/0xd0 [ 95.813254][ T6254] ? __pfx_panic+0x10/0x10 [ 95.817666][ T6254] ? preempt_schedule_thunk+0x16/0x30 [ 95.823028][ T6254] ? preempt_schedule_thunk+0x16/0x30 [ 95.828393][ T6254] ? v4l2_fh_open+0xac/0x420 [ 95.832984][ T6254] check_panic_on_warn+0x89/0xb0 [ 95.837912][ T6254] ? v4l2_fh_open+0xac/0x420 [ 95.842503][ T6254] end_report+0x73/0x180 [ 95.846750][ T6254] ? v4l2_fh_open+0xac/0x420 [ 95.851348][ T6254] kasan_report+0x128/0x150 [ 95.855849][ T6254] ? v4l2_fh_open+0xac/0x420 [ 95.860445][ T6254] v4l2_fh_open+0xac/0x420 [ 95.864855][ T6254] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 95.870834][ T6254] em28xx_v4l2_open+0x157/0x9a0 [ 95.875686][ T6254] ? do_raw_spin_lock+0x12b/0x2f0 [ 95.880701][ T6254] v4l2_open+0x1bf/0x3a0 [ 95.884938][ T6254] chrdev_open+0x4cd/0x5e0 [ 95.889340][ T6254] ? __pfx_chrdev_open+0x10/0x10 [ 95.894265][ T6254] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 95.900673][ T6254] ? __pfx_chrdev_open+0x10/0x10 [ 95.905597][ T6254] do_dentry_open+0x785/0x14e0 [ 95.910351][ T6254] vfs_open+0x3b/0x340 [ 95.914401][ T6254] ? path_openat+0x2df0/0x3860 [ 95.919158][ T6254] path_openat+0x2e08/0x3860 [ 95.923742][ T6254] ? __pfx_stack_trace_save+0x10/0x10 [ 95.929102][ T6254] ? stack_depot_save_flags+0x33/0x810 [ 95.934558][ T6254] ? __pfx_path_openat+0x10/0x10 [ 95.939486][ T6254] ? __x64_sys_openat+0x138/0x170 [ 95.944504][ T6254] ? do_syscall_64+0x14d/0xf80 [ 95.949257][ T6254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.955352][ T6254] ? __lock_acquire+0x6b5/0x2cf0 [ 95.960301][ T6254] do_file_open+0x23e/0x4a0 [ 95.964798][ T6254] ? __pfx_do_file_open+0x10/0x10 [ 95.969829][ T6254] ? _raw_spin_unlock+0x28/0x50 [ 95.974675][ T6254] ? alloc_fd+0x64b/0x6c0 [ 95.978999][ T6254] do_sys_openat2+0x113/0x200 [ 95.983670][ T6254] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.988863][ T6254] ? exc_page_fault+0x6a/0xc0 [ 95.993574][ T6254] ? do_user_addr_fault+0xc6f/0x1340 [ 95.998858][ T6254] __x64_sys_openat+0x138/0x170 [ 96.003708][ T6254] do_syscall_64+0x14d/0xf80 [ 96.008284][ T6254] ? trace_irq_disable+0x3b/0x150 [ 96.013301][ T6254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.019356][ T6254] ? clear_bhb_loop+0x40/0x90 [ 96.024023][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.029904][ T6254] RIP: 0033:0x7f6256aa7407 [ 96.034320][ T6254] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 96.053940][ T6254] RSP: 002b:00007ffcc13cd5a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 96.062354][ T6254] RAX: ffffffffffffffda RBX: 00007f62571f6880 RCX: 00007f6256aa7407 [ 96.070311][ T6254] RDX: 0000000000000000 RSI: 00007ffcc13cdf1d RDI: ffffffffffffff9c [ 96.078266][ T6254] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 96.086221][ T6254] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 96.094178][ T6254] R13: 00007ffcc13cd7f0 R14: 00007f625735d000 R15: 0000556c521594d8 [ 96.102153][ T6254] [ 96.105504][ T6254] Kernel Offset: disabled [ 96.109840][ T6254] Rebooting in 86400 seconds..