last executing test programs: 12m55.515455063s ago: executing program 32 (id=20): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="9c020000200001"], 0x29c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 12m47.984087748s ago: executing program 33 (id=58): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f00000000c0)='0', 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r2 = dup(r1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002100)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x4, 0x10}}, 0x50) syz_open_dev$video4linux(&(0x7f0000000140), 0xa, 0x48000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x5) read$FUSE(r2, &(0x7f0000002180)={0x2020}, 0x2020) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xfffffffb) 12m22.129714566s ago: executing program 34 (id=217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x10a, 0xe120}]}) 12m13.567564186s ago: executing program 35 (id=258): mlock2(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000002c0)=[r2], &(0x7f0000000140), &(0x7f0000000800)=[r3], &(0x7f0000000100), 0x0, 0x400000000}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000080)={&(0x7f0000003000/0x4000)=nil, 0x80000000, 0x1, 0x80}) mlock2(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0) 12m4.344287894s ago: executing program 36 (id=293): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0xfffffffffffffffd}}, {{@in=@private=0xa010101, 0x4d5, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe4) socket$netlink(0x10, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000100)=0x200000000) r7 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x4000, 0x0, 0x0, 0x0) r10 = dup2(r6, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000000)=0x5) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffff7}, 0x1c) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008002"]) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x4, 0x3, 0x2, 0x800, 0x6, 0x7, 0xe4d, 0x6, 0xfffffffffffffff7, 0x7, 0x80, 0x1, 0x1ff, 0x0, 0x4], 0xdddd1000, 0x200200}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008002"]) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000040)={0x3, 0x0, [{0x895, 0x0, 0x7}, {0x9ef, 0x0, 0xd66}, {0x88d, 0x0, 0x8}]}) 11m27.813335715s ago: executing program 37 (id=477): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xe0b, 0x80, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xd, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xde}]}}]}, 0x3c}}, 0x0) 11m8.434805053s ago: executing program 38 (id=590): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0xaac8, 0x8, 0x9, 0x1, 0x1]}, &(0x7f0000000100)=0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x1e, 0x1, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r4, 0x0, 0x2) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xa) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x1012, 0x9, 0x80000000, 0x0, 0xfff}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) write$binfmt_misc(r3, &(0x7f0000000400), 0x2000011a) recvmmsg(r3, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/175, 0xaf}], 0x1, 0x0, 0xffffffffffffff22}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}}], 0x2, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x100084, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @local}, 0x1c) sendto$inet6(r7, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r7, &(0x7f0000002480)=[{{0x0, 0x300, 0x0}}], 0x1, 0x40002003, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x64, 0x38, 0x2c, 0x10, 0x17e9, 0xb889, 0xec5c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9f, 0x5, 0xc0, 0x5, [{{0x9, 0x4, 0xc3, 0x5, 0x1, 0xff, 0x0, 0x0, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x7, 0x80, 0xc8}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000000000000000e42617f7093dd0d01c481cfca2f5299fb8f841c5239f727f50a95e560359c80664b8ee4a310000df35310f18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080008000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r8, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x8, 0x0, 0x0}}, 0x10) 11m2.608988365s ago: executing program 39 (id=617): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) 10m58.108788802s ago: executing program 40 (id=633): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x6, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_io_uring_setup(0x24fb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r1, 0x0, 0x0, 0x0, 0x12101, 0x1}) io_uring_enter(r2, 0x5b43, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x100f, 0x7, 0x0, 0x0, 0x10000, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) setsockopt(r6, 0x2020084, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x9, 0x1, "eb"}, 0x9) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x88102, 0x0) write$cgroup_int(r7, &(0x7f0000000040), 0xfdef) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) 10m55.747579513s ago: executing program 41 (id=639): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0e81) write$sndseq(r0, &(0x7f0000000000), 0x0) 10m49.750074038s ago: executing program 42 (id=647): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a80016002900014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4c090) 10m39.057787968s ago: executing program 43 (id=658): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88800, 0x0) ioctl$TCXONC(r1, 0x5411, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r2 = gettid() capget(&(0x7f0000000100)={0x20071026, r2}, &(0x7f0000000140)={0x2, 0x80000000, 0x2, 0x5, 0x1, 0xff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x2000) dup(r3) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/65, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)={0x3, 0x0, [{0xb94057ac03ec97c1, 0x46, &(0x7f0000000540)=""/70}, {0x6000, 0x7c, &(0x7f00000004c0)=""/124}, {0x6000, 0x31, &(0x7f0000000340)=""/49}]}) 10m35.111690222s ago: executing program 44 (id=678): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r3], 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042c"], 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000000206030000000000010007000000050005000a0000000d000300686173683a6e6574000000000900020073797a32000000000c000780080013400000000005000400"/84], 0x54}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900"}, 0x3c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000071, 0x0, 0x0, 0x0, 0x0, 0x2, 0x451, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) openat$autofs(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 10m32.229560395s ago: executing program 45 (id=684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 10m13.830618487s ago: executing program 46 (id=727): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000200), 0x20002, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r2, 0x0, &(0x7f0000000180)=""/232}, 0x1c) syz_io_uring_setup(0x6c5d, &(0x7f0000000240)={0x0, 0x6e58, 0x80, 0x1, 0x3ad, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x7, 0x102, 0x6, {0x4, 0x0, 0x2b, 0x5}}) r3 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80) fcntl$notify(r4, 0x402, 0x8000003d) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syslog(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2b}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x10}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x10cf}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x25}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) 10m10.712951974s ago: executing program 47 (id=743): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETA(r0, 0x5432, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000080)={0x41, ""/65}) 10m7.288118243s ago: executing program 48 (id=754): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x10, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x32, 0x0, 0x1}}, 0x3c) 9m48.690461917s ago: executing program 49 (id=772): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000300)=""/194, 0xc2}], 0x2) 9m39.643418902s ago: executing program 50 (id=766): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffc3) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x3}, 0x0, 0x0) clock_settime(0x3, &(0x7f0000000280)={0x0, 0x989680}) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6c9b3be44e0e487, 0x100010, r2, 0xad2a3000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4, 0x2}) ppoll(&(0x7f0000000040)=[{r6, 0x60}, {r6, 0x508d}], 0x2, 0x0, 0x0, 0x0) ftruncate(r3, 0x51a9497) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000300)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000200)=0x0) write$P9_RSTATu(r1, &(0x7f0000010140)={0x237, 0x7d, 0x0, {{0x500, 0xf6, 0x0, 0x4, {}, 0x1b310000, 0x1, 0x0, 0x8000000000000001, 0x1f, '\x04\x06odev{cvf\x8ex%\xff\xff\v\xbc\x92\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x17, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x0fX\x05\x02\xb6n\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\n\x00\x00\x00\x00\x00\x00\x00t\x00\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf50xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f00000003c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x6}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0x503}, 0x18}}, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000380)={r4}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000000c0)={r4}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x0, {0x2, 0x0, @dev}, 'lo\x00'}) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x96, &(0x7f0000000080), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @multicast2}, {0x0, @dev}, 0x2, {0x2, 0x0, @empty}, 'lo\x00'}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=':/,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3/\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xaeqKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_\xc0\xe1\x9d>0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000f6ffffffffffff1100000008000300", @ANYRES32=r3], 0x30}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x4, 'r10}) ioctl$DMA_BUF_SET_NAME_A(r12, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x4, 0xfc, 0x80, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, 0x100000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0xffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7m44.261079178s ago: executing program 65 (id=1133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa050000000086dd6000004000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090"], 0x0) 7m41.808897742s ago: executing program 66 (id=1139): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x40000001) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x39, 0x0, 0x0) 7m35.701120182s ago: executing program 67 (id=1156): socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create(0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7m21.317692791s ago: executing program 68 (id=1202): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x220122100, 0x0, 0x0, 0x0, {0xa}, 0x0, 0xffffffffffffff6a, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket(0xf, 0x5, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="3310", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) unshare(0x22020600) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r9, 0xc048aeca, &(0x7f0000000040)=0x4) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000240)={0x6, 0x0, [{0xc0000001, 0xffffffff, 0x1, 0x0, 0x6, 0x6, 0x2}, {0x80000007, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x8}, {0x40000001, 0x8, 0x0, 0x3, 0x7fffffff, 0x5, 0xffff}, {0xb, 0xe5f, 0x1, 0x7, 0xdf4, 0x6, 0x7fffffff}, {0x0, 0x201, 0x1, 0x6, 0x80000000, 0x0, 0xffffffff}, {0xd, 0x2bb, 0x1, 0xd, 0x3, 0x7df, 0xffffffff}]}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x80002000}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x4101, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x100, 0x24) preadv(r10, &(0x7f00000028c0)=[{&(0x7f0000002700)=""/146, 0x92}], 0x1, 0xfffffff8, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 7m7.768652403s ago: executing program 69 (id=1264): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000090400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002c001280110001006272696467655f736c6176650000000014000580080025"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) r5 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8c) symlinkat(&(0x7f0000000000)='./file0/../file0\x00', r6, &(0x7f00000000c0)='./file0\x00') unlinkat(r6, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0/../file0\x00', 0x108) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x3, "3a8e0000009634b52ba75066c27891ca55e21f00", 0x42303159}) r9 = syz_open_dev$video(&(0x7f0000000180), 0x6, 0x400500) ioctl$VIDIOC_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000500)={0x0, @reserved}) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaacf3cccaf382f0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="dcc2000090c20000c0870406739a6f7c8d99f433d1ed972bc974202f81bb34d4be"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r12, 0xc0505350, &(0x7f00000003c0)={{}, {}, 0x4, 0x3}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1e003300c0140900ffffffffffff0802110000000fb81c82c70703013b000000225f89d9135a9b964365a2997ea05d6900404423edd71c0d2462d02ac13b4b5516b1bc11341594e2edb77af041b0df5b81728a7608be517172488e8a7101c90d"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 7m4.404303333s ago: executing program 70 (id=1279): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x80801) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x5517, 0x0}) 6m32.752422445s ago: executing program 71 (id=1459): syz_clone(0x809080, 0x0, 0x11, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a", @ANYRES64], 0x0) 6m15.26952723s ago: executing program 72 (id=1562): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001380), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0x2020) 6m11.259149608s ago: executing program 73 (id=1592): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) select(0x40, &(0x7f0000000300)={0xd, 0x6, 0x1000, 0x7, 0x0, 0x6, 0x8, 0x6}, 0x0, 0x0, 0x0) 5m59.601121676s ago: executing program 74 (id=1645): r0 = socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, 0x0, 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0x5, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 5m58.698226517s ago: executing program 75 (id=1651): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4810) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x5408, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, 0x4f, &(0x7f00000000c0)='/pro\x11\xcesys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,sPr\xbc@\xa3\x81&\xb3S\x87\xf9\xca\xdb\xdb\x01\x87\x82\xe1\x88\xfc\xb0\xe6e\xa8s`\xb0M\x88\x0f~!#\xb4'}, 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000740), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r9, &(0x7f00000002c0)=""/41, 0x29) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000201010200000000000000000000000108000840000000000800084000000000dc935487f62ba611b6b74453621eb5f026ce25d5f3"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0x0) 5m21.156128287s ago: executing program 76 (id=1855): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0xfffffffc}) 5m5.882088498s ago: executing program 77 (id=1933): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010101}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m34.939676406s ago: executing program 78 (id=2133): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x86100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000d80)={r1, 0xc, {0x2a00, 0x80010000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x7, 0x15, "dee8a2ab78fc179fd1f8a0e983dda1af1ea89d0a00fb0a01000000000000000003000000000000000000810000000400000000000000000000000000f500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f46e059e01177d3d458dd4992861ac000000000000000000f9b5a0672d9f9d5800", "90be8b1c559265406c09306003d8222000", [0xffffffffffffffff, 0x2]}}) openat$dlm_monitor(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x7a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c10"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 4m14.648629475s ago: executing program 79 (id=2275): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x280000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="c021010000"], 0x20) 4m7.635779185s ago: executing program 80 (id=2303): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="8375896b192cbcefad280f0b3c1bf120aa326a96ef0a18bb5ad3ab93510d9e8d", 0x20}], 0x1}}], 0x1, 0x4080050) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 3m32.382291959s ago: executing program 81 (id=2551): r0 = socket(0x1d, 0x3, 0xfffffffd) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="00f48000ba00"], 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b01, 0x0) unshare(0x22020400) r3 = socket$tipc(0x1e, 0x5, 0x0) poll(&(0x7f0000000080)=[{r3}], 0x1, 0x2) syz_usb_connect(0x0, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000ce088f082104990074230102030109022d00010000000009040000000202ff00052406000005240000000d240f0100000000ff00000000042402"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r4, 0xc17a) lseek(r4, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x6c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x6c}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x8, 0x40, 0x0, 0x0, {{0x2b, 0x4, 0x2, 0x6, 0xac, 0x65, 0x0, 0xfc, 0x2f, 0x0, @empty, @multicast2, {[@rr={0x7, 0x2b, 0x95, [@dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010101, @private=0xa010101, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0xb}, @local, @private=0xa010102, @multicast2, @private=0xa010102]}, @noop, @cipso={0x86, 0x29, 0x2, [{0x6, 0x9, "0492a2e3b6a746"}, {0x0, 0x5, "667b17"}, {0x1, 0xa, "22f3a0d8c7d5e3ee"}, {0x6, 0xb, "04627c0c7df95f02da"}]}, @rr={0x7, 0xf, 0xf8, [@dev={0xac, 0x14, 0x14, 0x3b}, @broadcast, @loopback]}, @lsrr={0x83, 0xf, 0x46, [@private=0xa010101, @local, @broadcast]}, @lsrr={0x83, 0x3, 0xd7}, @cipso={0x86, 0x21, 0x2, [{0x0, 0x10, "43becdc161cda42c6e0802f43467"}, {0x1, 0x3, "c6"}, {0x6, 0x8, "570327238032"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000025bd7000fddbdf25020000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002000000000000000000000c00018005c5a89f083ce608"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x20080) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x65, 0x10, 0x0, 0x20000000) 3m4.598758296s ago: executing program 82 (id=2688): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0c}, 0x1, 0x0, 0x0, 0x20000084}, 0x10) recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0) 2m54.592309683s ago: executing program 83 (id=2737): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="001720000000b07110"], 0x0, 0x0, 0x0, 0x0}) 2m51.107219s ago: executing program 84 (id=2750): r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$cdc_ecm(0x3, 0x70, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x0, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0xba, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "1619f8"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1414, 0xc00, 0x8, 0xfe}, [@ncm={0x6, 0x24, 0x1a, 0x5, 0x4}, @obex={0x5, 0x24, 0x15, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x4, 0xcc}, @acm={0x4, 0x24, 0x2, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x7f, 0xfd}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0xc, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x47, 0xe}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x7f, 0x4, 0x3, 0x20, 0x3}, 0x36, &(0x7f0000000240)={0x5, 0xf, 0x36, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x3, 0x9, 0x3, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x5, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x9, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x0, 0x76e3}, @ext_cap={0x7, 0x10, 0x2, 0x32, 0x6, 0x6, 0x3ff}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x5}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1b9f0}}, {0xd1, &(0x7f0000000300)=@string={0xd1, 0x3, "814f8110e637d6a2a1b65b242af02f3e47d925e5c5d166d5dcede0b9816929eb18e129a682c8989dcaa15018f867ae9d81eb367e1970890361ec5528679de691e2fc152a485ad5e0ac2543adb60854880229fbc3184333a1535fbd25cdf51277a25def9619add0f5bd615471f7fd7804711a17733fc1c12642c6baf5d55f71afec77e52397ed35a782bd527364e34509859be09a3c3ec440fe9f2025675bc335dec110578c4627dee506a8b7e8875c2b0cc1497d0178385491a34eae1494ef84ab7d4236f826b05af19e7324dc4eb3"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3409}}]}) r1 = socket(0x11, 0x800000003, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x0, 0x6], 0x0, [0x4]}}}}]}, 0x88}}, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x2}, 0x10}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x24, 0x8044}}], 0x1, 0x0) 2m6.309545573s ago: executing program 9 (id=2918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000306010203000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 2m6.210522359s ago: executing program 9 (id=2919): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x3) openat(r2, &(0x7f0000000080)='./file0\x00', 0x101040, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0x7, 0xffff}, {0x3, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "f7afbbc61e84889dcdd3f5e8bd9da81b5344cb4369c8c2d8d7fbc3b364fe8cdd13c54209594753b86a8b505afb620a3608232a1be713bf49e3711b76e652a186f5d94d01ce851167b8a4745c6655d78a8d48585eef61886c21e5478261cb58e0f4bcfe7cb5323a53b8416cefd9b6397a3026548d307c949fb5cc26ae8dd5d2a30be351e70369bbfef1f84d64a93d121151286ecb6821ed91e8ba567d917d8d68d99afeaed9eb0056bfa1cd9bc1dca85bd22a7e4af56782880446876410b9f7dd453be8a38a8f10d41421cf526ddb0a64c5ebdf22bb9e706f637c0a5a53d17ef9a3c9e27adea7fcca126b6a98451a70c370443590ef3004c75ccdc3688c7e008d"}]}}]}, 0x138}}, 0x4000810) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x40000cf, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc25c4111, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 2m5.805949147s ago: executing program 85 (id=2919): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x3) openat(r2, &(0x7f0000000080)='./file0\x00', 0x101040, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0x7, 0xffff}, {0x3, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "f7afbbc61e84889dcdd3f5e8bd9da81b5344cb4369c8c2d8d7fbc3b364fe8cdd13c54209594753b86a8b505afb620a3608232a1be713bf49e3711b76e652a186f5d94d01ce851167b8a4745c6655d78a8d48585eef61886c21e5478261cb58e0f4bcfe7cb5323a53b8416cefd9b6397a3026548d307c949fb5cc26ae8dd5d2a30be351e70369bbfef1f84d64a93d121151286ecb6821ed91e8ba567d917d8d68d99afeaed9eb0056bfa1cd9bc1dca85bd22a7e4af56782880446876410b9f7dd453be8a38a8f10d41421cf526ddb0a64c5ebdf22bb9e706f637c0a5a53d17ef9a3c9e27adea7fcca126b6a98451a70c370443590ef3004c75ccdc3688c7e008d"}]}}]}, 0x138}}, 0x4000810) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x40000cf, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc25c4111, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 1m49.929620586s ago: executing program 86 (id=2988): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)='/proc\x00s%nN\xd4\xa2\x88\x00\xd1l,K*\xe4Y\xe1e\xac\x81Z*Q[\x00\x00\x05\x00'/42}, 0x30) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x80, 0x0}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0xb0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x307, 0x0, 0x4, 0xfc}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xcd8}}}}}}}]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000940)={0x1, 0x0, {0x13, 0x39, 0xe, 0x1a, 0xa, 0x1, 0x4, 0x54}}) fchdir(r1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x18}}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000c80)=""/4079, 0xfef) getdents(r4, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000880)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f00000003c0)=""/46, 0x2e}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/197, 0xc5}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/179, 0xb3}], 0x6, &(0x7f0000000600)=""/12, 0xc}, 0x10}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)=""/126, 0x7e}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000000700)=""/131, 0x83}, {&(0x7f00000007c0)=""/112, 0x70}], 0x4}, 0x4}], 0x2, 0x40000000, &(0x7f00000008c0)={0x0, 0x989680}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x1f) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001a00010000000000000000000200000000000000000000000800010000e0000108000300", @ANYRES32], 0x34}}, 0x0) 1m39.069849887s ago: executing program 2 (id=3022): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x400}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 1m38.686761843s ago: executing program 2 (id=3025): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = socket(0x2b, 0x80801, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x8, 0x80252}]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000012}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x40045b0a, &(0x7f0000000040)) unshare(0x28000600) openat$dlm_plock(0xffffff9c, 0x0, 0x10000, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x80, 0x0) fsync(r3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m35.377017083s ago: executing program 2 (id=3036): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xffff0053}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf, 0x6}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) 1m35.080800884s ago: executing program 2 (id=3039): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x7b3a, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2142, 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100002c0050800500020005000000110001005581c18feb06e7f99bd136ccde000000080007000000000004000600"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14ffffffffffff00"/20], 0x14}}, 0x0) 1m35.003921921s ago: executing program 2 (id=3040): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000), &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 1m34.737421648s ago: executing program 2 (id=3043): socket$inet_sctp(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fstatfs(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x2b8, r1, 0x20, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '![-.-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+#^-#*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$-!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!:#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x47b}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '*]\x8c-(/-}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff56}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "ccd2f217189cbafd5cc2d8b6a0ec8f717aa193d62b668b41d2defdc81325e0cfddf58f182cd4a4fc9dc61ef08b8874e0c30d1679adafbd1d58488784ac1766d4f86bad18c71791d17a3913681866acb0be716d8d8ab5b764a6a7236578c0245dfb00b7264b278eae9e213feb1128f2f47ab20cc974baa6002b626edcc213b66beedbd13b249f12e9855b5ed08662a33fc1f1364b8635a7ac8f7049a6fb06ae0a57c333a7057f2514a7047e1c52e82e30643d4bd659471e3a2b2204b5822dfa9302b689b993ab8045b5d42b8762c5f7a7d3405e1bc2a29946c963852109d3c8"}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x61}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x880}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000140)=""/106, 0x6a}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0xba01}, 0x0) syz_clone(0x40000280, &(0x7f0000000600)="d753176088bf457c7ad5a1833c4bb8489f3c5e93d3cc8a05157aa887d4cc8863238417809f0b97bae28c05274fd860abccd9", 0x32, &(0x7f0000000640), &(0x7f0000000680), &(0x7f0000000780)="e4bed54d6fa979e2e2441ffac99bf9887408d418bd645db1f836f9b5a4bc3cc28d354177459e3941ef3626932d977a81d2688b6706c6f077e88fea4ef9825d5d3808dac913915f7544a64e6db9a3a37185ce95e8c4f77730919da7434a01a54ab3663cb008d79a8d257ad0fbe6") 1m34.297689149s ago: executing program 87 (id=3043): socket$inet_sctp(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fstatfs(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x2b8, r1, 0x20, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '![-.-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+#^-#*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$-!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!:#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x47b}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '*]\x8c-(/-}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff56}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "ccd2f217189cbafd5cc2d8b6a0ec8f717aa193d62b668b41d2defdc81325e0cfddf58f182cd4a4fc9dc61ef08b8874e0c30d1679adafbd1d58488784ac1766d4f86bad18c71791d17a3913681866acb0be716d8d8ab5b764a6a7236578c0245dfb00b7264b278eae9e213feb1128f2f47ab20cc974baa6002b626edcc213b66beedbd13b249f12e9855b5ed08662a33fc1f1364b8635a7ac8f7049a6fb06ae0a57c333a7057f2514a7047e1c52e82e30643d4bd659471e3a2b2204b5822dfa9302b689b993ab8045b5d42b8762c5f7a7d3405e1bc2a29946c963852109d3c8"}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x61}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x880}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000140)=""/106, 0x6a}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0xba01}, 0x0) syz_clone(0x40000280, &(0x7f0000000600)="d753176088bf457c7ad5a1833c4bb8489f3c5e93d3cc8a05157aa887d4cc8863238417809f0b97bae28c05274fd860abccd9", 0x32, &(0x7f0000000640), &(0x7f0000000680), &(0x7f0000000780)="e4bed54d6fa979e2e2441ffac99bf9887408d418bd645db1f836f9b5a4bc3cc28d354177459e3941ef3626932d977a81d2688b6706c6f077e88fea4ef9825d5d3808dac913915f7544a64e6db9a3a37185ce95e8c4f77730919da7434a01a54ab3663cb008d79a8d257ad0fbe6") 1m27.98752107s ago: executing program 5 (id=3068): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x88, 0x0, @gue={{0x2}, 'J'}}}}}}}, 0x0) 1m27.753619294s ago: executing program 5 (id=3069): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0xfffffffffffffff9}) r1 = syz_usb_connect(0x1, 0x202, &(0x7f0000000780)=ANY=[], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="8c", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f00000002c0)=0xb0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x15, 0x0, &(0x7f0000000080)) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000300)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="20075e000000c44435a2e5410bdf8ace7d65e69c73f6c9c8bcc7702b247fa0a0891d0cf8fc13b2bcf8b14b85555abd7dbf876f53a5cb42667c6693311d248d14aafa04e0393a7fd7b806ff7b92968457c3156d4c0936eb5e11e421d2b79763c8514289cd7c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m24.660974402s ago: executing program 5 (id=3080): time(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xe7) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\tI'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0xa, 0x803, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5005, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x30, 0x39, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x1, 0x3, 0xf, {0x9, 0x21, 0xa4, 0x9, 0x1, {0x22, 0x93c}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x2, 0xfa}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x8e, 0x0, 0x7}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x4, 0x9, 0xa, 0xff, 0x7f}, 0x27, &(0x7f0000000100)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x2, 0x74, 0xbc82, 0x3b}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x88, "50836e54967d29877012e8f9cd12b1ae"}]}, 0x6, [{0x70, &(0x7f0000000180)=@string={0x70, 0x3, "d24e2470fea2ae498cec4d7e0438a541eebc2ee115a0ca9455a78a78084ce9a6d51f51fa5f96a21ad7d6adad4152958302ad15afcf42727e8c9112f388d6917fc2fc0c2d49d141cc6b56dde7cc7b68e02f83315c5fa62f138dadebb804e0a0345d693354d53f5d2e480b1e2e75c3"}}, {0x98, &(0x7f0000000200)=@string={0x98, 0x3, "22440baa9a3554e142ffbbd45ba9de4123d99e6cab30ff26497ba40a9b97cc2a0aee2035b3768f0fc5a53b57705634d1cb33b960c1735d374b273926fb158d6b4c64dad97968d5c7dae242f6fc3d4e0474ac5d985f87f3f7fcbb065d2d597036b365a5967f870c552c1632d0ed6f9dc2bd298635c05ed4ac52f90da02e2041856e685f80ae1499e5815eeb9353c3bb44d91a112b7837"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x827}}, {0x26, &(0x7f0000000300)=@string={0x26, 0x3, "af77ef7076e6e999c1be8f280256f06787599acd8b232b773a2c53f3376f12b3d6bc0e5e"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x14, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "ba"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x40050) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000000040)={0x3, 0x100, 0x5}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5, 0x7, 0x6}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x7f, 0x0, 0x88, 0x20, 0x7}, 0xcc, &(0x7f00000005c0)={0x5, 0xf, 0xcc, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x1, 0x1e}, @generic={0xbd, 0x10, 0x3, "95b328220d5eb6ed5a86733863b79f742f8a5682b3b6302d20429d93c6662951dc543f5107add9bbe104e2ae2861c7489e4740d34addba52a2f2c6c816e2a3ceca4351d704edf121e9105d1af3b04d3c1532e4aa7d268d510599f51e96b67b896654e9d52a5fa42bdc7d4e459c41143a65c351f18ebb8aa7f4cc98f8505b85cf4e5a2a0f3e006a7d6f9adc65903fa03671a289f2ef28accef87eda669ebd68a64ee7305f903de56f9fc32ce3993e0c87a016df0af10e9f6d0e1e"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2801}}]}) 1m21.493533591s ago: executing program 5 (id=3097): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x22c, 0x1398, 0x1398, 0x22c, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x120, 0x144, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'sit0\x00', {0x10, 0x6, 0x7, 0x3, 0xffff, 0x8001, 0x34000, 0x70, 0x18}, {0xfff}}}, @common=@inet=@ecn={{0x24}, {0x0, 0x30, 0x60, 0xff}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x8}}}, {{@ipv6={@private1, @empty, [0x0, 0xffffffff, 0xffffff00], [], 'bond0\x00', 'netpci0\x00', {}, {}, 0x0, 0x4}, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x32c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRESOCT=r2, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xd1) 1m21.429621481s ago: executing program 5 (id=3098): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0e81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000008c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000711015000000000095000000b22b7200774433bce2e66268f33e07c3138c0386595f634e59148318e1fcc7031da9b4129a70d773fe776866ea50ab987c0777da1e7cc9d59a633af3a470b2382e51973e536589e95da0f91fa50f98f44c44256a47e94bc5f5d4486c12d8f80126d6b1bfbc303b9eae601a1a555af98ae7bccdbd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r2, r2, 0x1a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x3]}}], 0xffc8) 1m21.042940479s ago: executing program 5 (id=3102): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'gre0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x0, 0x700, 0x10001, 0x3, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast2, @loopback, {[@end]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=ANY=[@ANYBLOB="38000000102bfa8fe6c1e814b5d92c3f156799bce000010028bd70000000000100000000adb09221a6f5725695fbacceed58756d09410c1fbd9f8130a40d44470b5879f5d5554c70e77176d3a32f2792447aefcbc384134e1101fcebc179dd04cbb4a475502db058ddf7e38fc91afb20e2ce5374bf9c113fbe8b4b06f946ae9d8bd82c33ca11121c5a3a1104e01ed645cbf88925832f2e57ac11261d025b97d2780a651423e6da620fa9031b103e2eb5ca7f80a61352b18906903e257b5778f472dd88fbeb619524c4bb", @ANYRES32=r4, @ANYBLOB="8008020000000000180016801400018010000600040000000100000003000000"], 0x38}}, 0x4040004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x4, 0xd, 0x6, 0xb6, 0x10, @private2, @empty, 0x80, 0x20, 0xfffffff6, 0x7}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000ac0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x700, 0x1, 0x8, 0x7e48, {{0x23, 0x4, 0x0, 0x6, 0x8c, 0x66, 0x0, 0xe, 0x4, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x24, 0x25, 0x3, 0x4, [{@empty, 0xb7a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x80000001}, {@loopback, 0x7}]}, @ra={0x94, 0x4}, @generic={0x89, 0xe, "ef990292b7a1054d9de8af2e"}, @noop, @rr={0x7, 0x13, 0xb8, [@private=0xa010101, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_prespec={0x44, 0x1c, 0x82, 0x3, 0xb, [{@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x43}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xff}]}, @timestamp_prespec={0x44, 0xc, 0x25, 0x3, 0x3, [{@private=0xa010100, 0x3}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000c40)={@empty, @initdev, 0x0}, &(0x7f0000000c80)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'pimreg\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000dc0)={'ip_vti0\x00', &(0x7f0000000d00)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x6, 0xa00, {{0x24, 0x4, 0x3, 0x8, 0x90, 0x64, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0x84, 0x3, 0x2, [{@broadcast, 0x80000000}, {@multicast1, 0xffffff27}, {@empty, 0x6}, {@multicast2, 0x9}, {@private=0xa010101, 0x5}]}, @ssrr={0x89, 0xf, 0x5, [@multicast1, @rand_addr=0x64010101, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xe0, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x8}]}, @timestamp={0x44, 0x14, 0xb9, 0x0, 0x4, [0x1, 0x1, 0x271, 0xffffffff]}, @ssrr={0x89, 0x13, 0xe5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010101]}, @ra={0x94, 0x4}, @end, @end, @end, @lsrr={0x83, 0x7, 0x2f, [@empty]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001000)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250f000000500001801400020064756d6d793000000000000000000000080003000200000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYBLOB="5a663d6a6deed7103af9dea7e326e3ac39ab9517ec95158c81f79044b9280804666699b1c88af70454fd325cca49d892deeb994832d9ca6a4c08a43e7264ea32aed587b7ee0626672401f52d0e1c35d1497c96d74905ebdff00e75ee5ae1b34a1a793085ef5c680991ea1754342ec8fe86818ab30f15026eaad6eb88f6978e06a50f0f201987754a56269dd2c70e1d8cb5f78c98ca5efe7b2d3811ede97f6e9c4ad1aa0f5b12086506a8f1bca484f8c685916c6180eadca32dd80192a5a6785381cc66980e1100834e83285f75cb44", @ANYBLOB="080003000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000000000030000180080003000000000008000300010000000800030001000000140002007465616d5f736c6176655f30000000001400018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="2000018014000200000000000000000000000000000000000800030001000000440001801400020073797a5f74756e00000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1400020074756e6c30000000000000000000000008000300030022004c0000000000020076657468315f746f5f6261746164760008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="1400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r13, @ANYBLOB="080003000300000034000180080003000100000014000200626f6e645f736c6176655f30000000001400020076657468305f766972745f77696669001400018008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB], 0x1a0}, 0x1, 0x0, 0x0, 0x80000}, 0x20000800) r16 = openat$vicodec1(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) fstat(r16, &(0x7f00000000c0)) r17 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r17, &(0x7f00000001c0)={0x2, 0xb, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg(r17, &(0x7f0000007fc0), 0x800001d, 0x1900) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000001f00)=""/4062, &(0x7f0000000040)=0xfde) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'veth0_to_hsr\x00'}) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=ANY=[@ANYBLOB="440000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012880b000100627269646765000014000280060009000b00000005002d000100000088cc4e369d2e93c6a5c258444b1609cf8ff234f26a6719a1c75842f7f2b828c4f0e23311fc0801d4f290aaf271349fb695e77e76443ba3cda721ee7cdf5b69788025662b52a56c80c4f666a04c5e69b21c784226f4db22e4db1acccf01"], 0x44}}, 0x80) 1m15.24834676s ago: executing program 1 (id=3121): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 1m14.177397439s ago: executing program 1 (id=3125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000001f80)={0xffffffffffffffff, 0x2, 0x4, r2}) r3 = io_uring_setup(0x30d8, &(0x7f00000000c0)={0x0, 0xf489, 0x400, 0x2, 0x238}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000004700)=[{0x1, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/244, 0xf4}], &(0x7f0000000480)=[0x26f, 0x7079, 0x6, 0x2, 0x100000000, 0x4, 0xd, 0x7fffffff, 0x4]}, {0x6, 0x1, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/3, 0x3}, {&(0x7f0000000500)=""/96, 0x60}, {&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000640)=""/158, 0x9e}], 0xffffffffffffffff}, {0x4, 0x1, 0x0, &(0x7f0000001840)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/76, 0x4c}, {&(0x7f00000017c0)=""/48, 0x30}, {&(0x7f0000001800)=""/50, 0x32}], &(0x7f0000001880)=[0x2, 0x41, 0x800]}, {0x1, 0x1, 0x0, &(0x7f0000001980)=[{&(0x7f00000018c0)=""/184, 0xb8}], &(0x7f00000019c0)=[0x5, 0x3, 0xd61]}, {0x2, 0x1, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/120, 0x78}, {&(0x7f0000001a80)=""/23, 0x17}], &(0x7f0000001b00)=[0x6, 0x4, 0xfffffffffffffbff, 0x8]}, {0x3, 0x1, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b40)=""/56, 0x38}, {&(0x7f0000001b80)=""/225, 0xe1}, {&(0x7f0000001c80)=""/10, 0xa}], &(0x7f0000001d00)=[0x46f, 0x8000000000000000, 0x7f, 0x7, 0x0, 0x4, 0x3, 0x3]}, {0x8, 0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000001d40)=""/244, 0xf4}, {&(0x7f0000001e40)=""/114, 0x72}, {&(0x7f0000001ec0)=""/186, 0xba}, {&(0x7f0000001f80)}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/93, 0x5d}, {&(0x7f0000003040)=""/10, 0xa}, {&(0x7f0000003080)=""/172, 0xac}], &(0x7f0000003180)=[0x2, 0x6, 0xffffffffffff8959, 0x65e]}, {0x2, 0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000031c0)=""/128, 0x80}, {&(0x7f0000003240)=""/97, 0x61}], &(0x7f0000003300)=[0x8000000000000001]}, {0x7, 0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/235, 0xeb}, {&(0x7f0000004440)=""/70, 0x46}, {&(0x7f00000044c0)=""/32, 0x20}, {0xffffffffffffffff}, {&(0x7f0000004500)=""/7, 0x7}, {&(0x7f0000004540)=""/3, 0x3}], &(0x7f00000045c0)=[0xffff, 0x4]}, {0x1, 0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000004600)=""/113, 0x71}], &(0x7f00000046c0)=[0x7fffffffffffffff, 0x9, 0x100000001, 0x2, 0x6, 0x1]}], 0xa) setsockopt(r4, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000120000000800080000000000180001804d25020076657468305f746f5f626174616476000800070001000000f425981edff79a04fd7e06fa369545b1529bc3115bbf4bf1e0b2e8e62fa6583c5d9454e47be670211d160b513ce74571a9fba39301008ad1397dc46655b18d396dd024989e6df5362867455f02a0"], 0x3c}}, 0x0) 1m13.062335066s ago: executing program 1 (id=3128): r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x851, 0x0) 1m12.81388344s ago: executing program 1 (id=3130): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4941) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000480)={0x0, 0x0, 0x6f, "76af7caf808b6e6a5f15f6312dc81bc7bff20f364477d1ec4e2625eed0aef03a3805642655d27596be8a149b7e982ac36cf609335cc3777f2d348525af5f0f804fb761ff231d2cc0508c970014103c0764cedb34ac26bc1bc529127accce9a9236816c753811e2aa313db7e22d03c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) read(r4, &(0x7f0000000300)=""/127, 0x7f) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) write$binfmt_script(r4, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x7d, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x110, 0x23}, 0x88) syz_fuse_handle_req(r3, &(0x7f000000c1c0)="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", 0x2000, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x184140, 0x1000, 0x800, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x32, &(0x7f0000001c80)=ANY=[@ANYBLOB="e904a20000000180c20000000800450000240000e0000011907800000000af0000b8bcc000000000"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="800800008509875c8883fb6d82d190e5ed1ecbbbee6e1091c32416d6266a61f8c6e6562234d4315b09e2586150dcd08b9a", @ANYRES16=r7, @ANYBLOB="00012bbd7000fcdbdf257f00000008000300", @ANYRES32=r8, @ANYBLOB="0a00340002020202020200000a00f5000802110000010000060048003b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x100c4}, 0x800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'geneve0\x00'}) 1m10.473403778s ago: executing program 1 (id=3140): r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x851, 0x0) 1m9.121761808s ago: executing program 1 (id=3142): socket$unix(0x1, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/247, 0xf7}], 0x1, 0x2, 0x3) read$hiddev(r0, &(0x7f0000000000)=""/188, 0xbc) 1m8.75349164s ago: executing program 88 (id=3142): socket$unix(0x1, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/247, 0xf7}], 0x1, 0x2, 0x3) read$hiddev(r0, &(0x7f0000000000)=""/188, 0xbc) 1m5.835758953s ago: executing program 89 (id=3102): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'gre0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x0, 0x700, 0x10001, 0x3, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast2, @loopback, {[@end]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=ANY=[@ANYBLOB="38000000102bfa8fe6c1e814b5d92c3f156799bce000010028bd70000000000100000000adb09221a6f5725695fbacceed58756d09410c1fbd9f8130a40d44470b5879f5d5554c70e77176d3a32f2792447aefcbc384134e1101fcebc179dd04cbb4a475502db058ddf7e38fc91afb20e2ce5374bf9c113fbe8b4b06f946ae9d8bd82c33ca11121c5a3a1104e01ed645cbf88925832f2e57ac11261d025b97d2780a651423e6da620fa9031b103e2eb5ca7f80a61352b18906903e257b5778f472dd88fbeb619524c4bb", @ANYRES32=r4, @ANYBLOB="8008020000000000180016801400018010000600040000000100000003000000"], 0x38}}, 0x4040004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x4, 0xd, 0x6, 0xb6, 0x10, @private2, @empty, 0x80, 0x20, 0xfffffff6, 0x7}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000ac0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x700, 0x1, 0x8, 0x7e48, {{0x23, 0x4, 0x0, 0x6, 0x8c, 0x66, 0x0, 0xe, 0x4, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x24, 0x25, 0x3, 0x4, [{@empty, 0xb7a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x80000001}, {@loopback, 0x7}]}, @ra={0x94, 0x4}, @generic={0x89, 0xe, "ef990292b7a1054d9de8af2e"}, @noop, @rr={0x7, 0x13, 0xb8, [@private=0xa010101, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_prespec={0x44, 0x1c, 0x82, 0x3, 0xb, [{@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x43}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xff}]}, @timestamp_prespec={0x44, 0xc, 0x25, 0x3, 0x3, [{@private=0xa010100, 0x3}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000c40)={@empty, @initdev, 0x0}, &(0x7f0000000c80)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'pimreg\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000dc0)={'ip_vti0\x00', &(0x7f0000000d00)={'syztnl1\x00', 0x0, 0x20, 0x7, 0x6, 0xa00, {{0x24, 0x4, 0x3, 0x8, 0x90, 0x64, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0x84, 0x3, 0x2, [{@broadcast, 0x80000000}, {@multicast1, 0xffffff27}, {@empty, 0x6}, {@multicast2, 0x9}, {@private=0xa010101, 0x5}]}, @ssrr={0x89, 0xf, 0x5, [@multicast1, @rand_addr=0x64010101, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xe0, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x8}]}, @timestamp={0x44, 0x14, 0xb9, 0x0, 0x4, [0x1, 0x1, 0x271, 0xffffffff]}, @ssrr={0x89, 0x13, 0xe5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010101]}, @ra={0x94, 0x4}, @end, @end, @end, @lsrr={0x83, 0x7, 0x2f, [@empty]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001000)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250f000000500001801400020064756d6d793000000000000000000000080003000200000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYBLOB="5a663d6a6deed7103af9dea7e326e3ac39ab9517ec95158c81f79044b9280804666699b1c88af70454fd325cca49d892deeb994832d9ca6a4c08a43e7264ea32aed587b7ee0626672401f52d0e1c35d1497c96d74905ebdff00e75ee5ae1b34a1a793085ef5c680991ea1754342ec8fe86818ab30f15026eaad6eb88f6978e06a50f0f201987754a56269dd2c70e1d8cb5f78c98ca5efe7b2d3811ede97f6e9c4ad1aa0f5b12086506a8f1bca484f8c685916c6180eadca32dd80192a5a6785381cc66980e1100834e83285f75cb44", @ANYBLOB="080003000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000000000030000180080003000000000008000300010000000800030001000000140002007465616d5f736c6176655f30000000001400018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="2000018014000200000000000000000000000000000000000800030001000000440001801400020073797a5f74756e00000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1400020074756e6c30000000000000000000000008000300030022004c0000000000020076657468315f746f5f6261746164760008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="1400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r13, @ANYBLOB="080003000300000034000180080003000100000014000200626f6e645f736c6176655f30000000001400020076657468305f766972745f77696669001400018008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB], 0x1a0}, 0x1, 0x0, 0x0, 0x80000}, 0x20000800) r16 = openat$vicodec1(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) fstat(r16, &(0x7f00000000c0)) r17 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r17, &(0x7f00000001c0)={0x2, 0xb, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg(r17, &(0x7f0000007fc0), 0x800001d, 0x1900) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000001f00)=""/4062, &(0x7f0000000040)=0xfde) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'veth0_to_hsr\x00'}) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=ANY=[@ANYBLOB="440000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012880b000100627269646765000014000280060009000b00000005002d000100000088cc4e369d2e93c6a5c258444b1609cf8ff234f26a6719a1c75842f7f2b828c4f0e23311fc0801d4f290aaf271349fb695e77e76443ba3cda721ee7cdf5b69788025662b52a56c80c4f666a04c5e69b21c784226f4db22e4db1acccf01"], 0x44}}, 0x80) 28.218451866s ago: executing program 4 (id=3345): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 27.206067649s ago: executing program 4 (id=3351): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000)="4f143330c428dbe2947e6cec5692bad8cab4d497a7d3fbe554d33771d05857e222946bcd7ead83c2494101c43acdf25462065d96600b3cd77b170377a5f6526d98e2761fe17d5e971f43026b0f689938e68ff0e46fbcbc14cc3dfe6ce313e589d40765b764113a938982483b6c122dbb9d95003fda7a4123b4eb2915c4c0fb5333c1636c2d9bd663be3368968d25687db65a9003ddcf0c03a3969f47b5aeb1f79ed69bcb471c2d030992a94186371033362da37b97063789c0c807bd048376109c71cc9248843c754d9d06bea059bff8721526d0056a34412c4c2140ea", 0xdd, 0x48880, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x40000cf, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 26.602962512s ago: executing program 4 (id=3354): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000040)={0x0, {{0xa, 0xfff5, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 26.232503604s ago: executing program 4 (id=3359): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x483, 0x3261, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x2}}, 0x18) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x137) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000061c0)="c0f61a5fb77193bea0c6599de09cf570067192ff7d5bf191681878eb121895cd4c4052feb0a5196b61ab6e28d35aec54bb2aee6802a27f50c4e8f36a2b1bb12d93dbcd320ed338fd1a8ed43a2dcb2bf11c773ae982800321c7dcd67fa8930472eee2990090cc2a92f3373d898573a2cd1712c18ea624e82422c96f0d8895bfc4541911ff3662cd28fd55d795d1a5f31c92defbed88d48db688f899fe88997b057ce3e898eaf9eb2e76a59c1d2c10610768b3296595221c2b063ca2aa664fa0a5456c4e2bcddc7f856e2e29ce1b8852997a4d24f918408bfa9969074de495dd4cc9591e48287d78a2b3e0de09b48eb5b6bf78c6afd134b09770c164000d1f300c92877afe8be5d381c38da3b5fb9bd540c2f43c7dd2ec8dcff2af3517ba839c827866d10608964445bdead091df1264f5591e91d2f31b2015dff1b3b7ff0a5dc8b15748278849ddf4389ca7112ec1ca45957e2809b3d763e336f7051ac4e832ec61d1b95b9266565293806933dd8e3b65eaa1b4fe7946056703426674379ccec7abff1c459b91248f3a1d9e8103ae395aa86dd4235a5c16d9bd12dcb1ea9565a7c3d58d247a51db6d9077ecf47152d0733d79a5c449480c40b1cf8e115df4de3404b73ad06ac4c0d03f3b51d1b89b05ded082a5db1f5fbd8d351015b93862b2cc0995fb318609237e404e8d78d8982af761c27ad1fbc8f4693194c5e6b99edcb7a6e9dd261a386d8ed4420a7c12cbdcc86ab19f4e7a6c0c9b80fa3f0549ae57b38a93f669a87584b81e56211b34263db87c2d244e422878aa93e2c24260c71d06f75da33079b48b7072859669c128ba03d1487336a4a04167f2a3fa928d002c8b3cafdedf7a479604aa8f94e6b7ba58395df3d136b783f7be6b0b6b7b4b735c88a53da064a493b16713726b39ce23f08af19a671fe81be1e9772d87ca9cb5dccc35759fe3f7935a3167924d0a7d1586821ffebe0fa57e72a24967f7958875c4bf56d779369074db0077ee58138400c2f646c645e0f453e9e39aaf48da67775f59f8e282db3dec88bbe20ca6e65e2c7e44ab0583840513bfab76d94d1512549ea6db4a5a64cbe6f76b0ecdb2f1f71aa6446bcf4f7249366474cb77ed70ccb2702134b9dc6c2bfaf27ac9a9c85b8d9c48d100ae8c0eaa34701d2125a405b1117307119b754ccbbbcb2c8b71eb76d1157ddc7fbe0c75652a4cfc31d785a489f2344d8b4c47ff1b772104f49658f62d6241ef7f782db0cc071788b3dfa74e69533cd0a02ffadacdfbc8b5a83b9d4b8db068b5a7370f947fc4a99158c6296a442beba2e23ac1ef68c50f19851f3fb68b67fb714a5e7e53bb5a7690286cac12f2b002e854d8595075fbd00622b29bd423c3dbaf600ad6f37c96dcde43de6290b053c76df5620ce17118e2230039304c88a0d207c7cd05dd3854c545cdbebe907cc4d3411a382afed5e080502363cebe68e2c8dc1f800ea4add827a83a9cdf0fe6d54eabfca5a0ba370a06a4af1c49a60cd19141a4d994fbcce888278ade6300bd40685267fcdf1317cdb3b06cae9e7d9edb08d5c98b6d7115c025fcc05058a515adcc23c65ce526aed3b8203f3c54986f65ba9ffe2a9bc26b2813a1fe339ba2a58515cb8375e2d62550bf35dfd4fbdb75a70bb9fdc47d3d0346a65b986b7efd12aab760124b6888480b341b16ef2fea93fe2fbdeb55706690aa2c02bd80b1ccb7b8f23720283df89b515e2020bc5364cc4aea5fdc250f10d46db93c128e2de7477f4c80ec016f7a872efdef50ae1730b3a1deb8085d82f4fd53015a518803cd02646c087d67b0fd7092852dd81ac93ca60346f23fd847cf7c4883cab81af956342da21fb399b69e1988d89f9693b0630fa8cc95714285940d20eda153f8f7b01e6b2b892327b5d1e754a36a3430c5c22c3b841357eb80e526d7792a8ab9c4b1d23d82e31f23ef38580c2b33ca72424fbfbbf237f315cf2e5d134783982cad204be087ef58da96c6bc5da2dc4bc78f293eed56157a10848c0a956de15b83daacede9ae1c54731149f9ce7231cd84e14f128f87361e1fc0cdb2940766f39c93b9ddc74bba0a32548cddb1ae20981576de2ef8a772b04ed90900b2da11ffc70bbdb7091b8b8ed600dc0c9d236277afd9bb97b035f3b8fc95ef3f30c056b67a195c5c9f44c0f2ca4debba0d6d8779903e8e34fdd6b766fbba6b57e722ad9a852dbbeca8eb9acb9929bdcb4d4fa57d54ef1c1a0fdc032a898d3334f5671c7df82361b7d616c1f87e23f7adf043edda83458051f073f2562904ed25ad9a7129f3c14286007c9e4c81ea56c6a7289d8e58782d949a19a2642dc89d107fb465d0a98128250e66eedd93cf063963b7f7a0e1d3b9f1dd212cc9edd662af45852dbbaec84c69a640be115a239b5abd46d990fa007988f6be78a8c1e426091ecb33822529f7fddfb34d9304466ea06bb546a34735021e98674ae4a5f5c0b4f153ad5434b81c6343c42ae79224fe5abfe8b9e6fba38164c3c318500c130323b2f9bbcdf6aceb664e10483e2084defa744cd745e565ac5a8b5c30166330dd95e70f2a072a5cf5462635f7e0a4f455bcb607426aede9fa06d708c7c0daaafe2b84896134ab3b379c6690c9049903156232e5b7ca9529d602968f1e1f7a73214aaf4a9575dd5147e5bef8f05907267580abdb728cf32f6845cdf3bc779451669e4972e0b787afac5a36bacc3c1bcce125e91e4bf9810d91d1f1a3d8316328dd2626040af09892f1241c6645537ebfbeb752afba5e8171f487edba97aa92404973d4e8d09254abd2b70bdadd9b98fa3c33355295a5c474e9b2f017a6636233a382e8ef4e73506880e2a588bf257b6bb11e57cd9e75e45ef609ba583f3a6b1f2f94c7a0443dc0a8906a13e0188b61550cd296e4c63faf45bf7aed852f68ffed377302da3f73d89e4274a64667636bf00e8e4408a8407e098aeeed98e545b9aef40896c8070a76aaa0042162979ec0b7b69b4ee701100d66d3e7d25a48c59989424522889b32e4f18676475782e86d652d2eb836c326b46b8544bb755eeb14727e5ca25875f7b9ae1c113068be55a1521cb4edefef34a7a4cabc3639e456c94f01d78c059c441ce2c468e7b39b56555ad5cd6a14df8e3518e4e1970fbd6f586ce46c51c4d9ad20c3f7f5048c071994e807f19b7176290a82406dd0ad3f0b64350bbce79b223f27ed99f819def43a33696c0739e09030460a5a5d04d251adfbde1af7a485894d3d30c79d49796a9a5e077aeddba1303f3e3a3187298c88da70885e2a9dc966eb69a6439e2d3b1934ae6e8ea328497d87a9dbbddbdbf12b0c582ca4ffe1f25cdcf89a6ccdb31880776ab808b4f050ae02adf70f64c73ab2a3b1c4da69950ab4f7bcf9cc22f81b99694a7783b792facd8197904c12d3776de5184afa143ee23eee82aab2ac79b25503e0692f3463e5c363e0b4b5f31af82898009f7da13d4f249a70de40314c003e7e59dfb233bc44d0316df3e45af806d216ca76a58417ff8abcdf7cfea2da8868c496cdec8f47c451ccdc8908c5e8c1039b6bfa8751637c29fdd9b7dc76279dea5ad7455af4db3394a34cb9be8b9bf1105862108f920c44d029c3372e77c44a25d06cba956da65ee40abe32b8b557e123fddaa87b4ed5ab3485eb11f13c61072720d4adbb937c336f2b60525933b6d49e7c6751f0769377bdcef02abe63639b17a6780a4afccc8067403aeea42726f253ec97994dcf55358e6faa3e622344dfc613f8be96714d5c49633d7b74b9a72883985782ea8691d26da620d905f3583adbd9d527d93f1ce623bcf70d98a0455ff80fb1d472c6fc6bf0390e81b8d755b196e94fb73bcc883f5f310043c5138c95c5d7079c24d5bc5876b422f46a2bb17aee407bf7a55dbbdb253e2865c1b91839737c37142a8fe8bdbc0a7bf89a392da717a5ed87af754052b1d0a1a37313b00cf3b4aad91ce7fa7777b1851121a63e374865b238ddf9a7ebd20641a719c68682b97e3c5126e732800c04cdb627bd415efbb7e5e19917bf4bd53f072b7ec2eaa0128b56e069a32e9f729718fa4a7212ab0fd1e5d3582a5723a704d84a88c235b44812849301ee8155cea471028beea1918cb1f4118728718674cca9dcc58bafcdb9379c57e9333ab348b30a801aa2f5c05c3107e52613cf0f591781ddb5e1e4844633057a26bb3179c31b5664db4bb8c6d762c7b9886317ab6e9e301de67f12085547ad2a20d1d63d361c2bcd66be2e25fe104f8b53b7cf89d90d456f063da31f60078b760ce340f9c9a8e8da113b6c6e3c53e666488d75ab209dbe31ecb531553f17446a29edc465ed22aee2d4c013ee8a4d935c0cd92bcba9e5a56a6c19ac114d12db58bcf5f931a7b282404af34fee464f4c28e16dab834de98dd57b107e45fa66b26c32fd94e848aef6e4a2a65fd4fbead1b1d445d6c343bf50d785e664220371e27566646e284c6a3b07c14c0c5b84b5cd1a01a84d655f8dd72ab8e3d0c48e67596f605cd4a50b5fde9b182792d7ee8ee457eb6666aadea80563b4d176933cc482f75cb98a8dde4a414041187cfb2abe3e5077f23c98bafd0afb8b023e0cb26efc1488dd98a51a19dc93412b5fd91c4e06439b6d2d20a174989f860de6b1be55923a11e5893d30fae74a625f777ef9362e64b529c964b5c0b5817a579a647ded28582c45f965e52e1f76084267c73f8fce8037b22c2496ee6674f56056d9c691eab831c831a27fccd90f961e949a51c90a80b677d11e70d01744f9632cc26b7e6476b8c92a688ec8e1280ea8b795eae7ee61e2735045b9ea516af752b35388a6c3ed98cfbc4e74c8d0717dc31eac87b6a9c06f0d4f412e8e1155ce48cec6d9c106f3013329596a2d43ffe7f942cb7b7449f38620a8a9e5138b5d5d03c8a563446e4dfb1905d841f7a350d6c67d85652297db21b3dd3291b795c90276ccc50eaf513f3ff9480b3d2c0096e92c93cbbea680833cfa630d72c4f5a21ef0f81910b8a5ef77d62175d3abf5b3417cce43e3c53bb84ee1f5e354b2d79c2b46e3bdb2ffb15420e7a28c800c2591cd331d71c645a6b1bc43f06703164c05f61b4abc0fecbaee510def6340c2bbcc32248655e9161c3e6f01520bb0c53be04c3a3ef4a2dc401663f6719ac758aa297f65d1681652e4ad042d754b054df9cede3ffef7ad2f52184ea6d93d6867cc262b0a413da11c02d0c7c49a663319333d8b29d56cbf630e66b6683ff7f3b1ce5c481d37151626eae761adb77642f802bf0f663f3c322ee17cf01a09f058dbf82d04bdd7c48f34f54392d1dd489891ce28373ae980f74897fe3f90db2a9ccdbe56160fd2517adbc953e88c5fa8981456b87ab9f122321816e0df119f6f6c505f0dcab1c8e6a7f4109055dd80001dd90ea984b80f0b0766bd9772d96ed42d95f219b4a8420d7cf04f28475d7f5d8a8a07b0930c40d0dfc2592f8f54e90a80e0a98d3055f4660b1530565c7f2d91d7d96142da19d644aa7c512e24f83e8305970f9d3fc3b9382ad141f63f2d5b265b7cda258119ca4f553fab11f2fd925a7a24c4021045073d867bb089ca7bcb702bcedbc28781e408cf8bd43498f8661a320d28c95c1fc42635c9e4c4de8787afc70bf5c8bf75e0a2937a9ca2b08c15453f24211168c7fb2a24218fc3f04160c2daaa46ef7fb710606a53228e134f20511169034cec55e77037a108060b8fd10ab9ae228d9ee4d5ab1380cfcb8611e6c9d5dc143db2bc856d967b0b9d0187ba8483f7adbd1092562b2b16420baa5ab6c1f7c02ae56f013e752d9f41df4b4f0b008bc25ff58f816e50bdce308e219068bc898a21f1dd26d7fe7760459629f3615bcf7582c87d296f041fb005a72c7ef4013ccd8ca3bea85db90ae6349f101adb9235dd343be423816b37db2661dde2b9db33800da7599e8a9194fcf06755e2659670c62aba1d5a01172a416a0296bade0b32e69b0ee60dd6cd1eecca4335eb0416df6ded75049a14660276df47bb4f224e087235742e90ddf6f57827a0cf26d71b9338f2ff5166bea85a7639de6ac97ec829a7d071fac1f4b27c6c23e952adb5536b45a68e75c1c1a6d44508be6f4b87c5bb880a6baad5faecd1fd6730783d8729c2d89b23a3f2f9b79b78f7fcb70a7812607b25b17ae857e65f205ad5dd87a34e52c6e9611f588236bdc59d816f277aa8cd4a19750461d3e82c8621181b803900d1df439babcf4909168d4125a7c962ceac2f834d79460f17f92f415a85ad7e12da4b76105bceb4641fc87da7797fee092828f6e9e42631fd5c87046ebe5c4044663a31a1b39a6f6a53ee2b7fbc3eede57619535b1011c10d2d5a97c781c44bb6e493287528bc5281496f1aee3c746e09aeef0b2d38bdd33e37446c1f7516767ecbe298b78ef8e03336a08a1a9e62805140573b034459a445240aff04593539aa97056957f3dec9c43e50a1bce1b9c8e860940e03ae39e8f76fb80ae746f7fa4ed0b050c9e08a788e666e9f18bc8e83c64ee3ea04eb9f1c1dd92b3be73d18cc53bca76ba4688b48c13982ae6d25fdd9b5b85612d5b706c9b9d7c6cca91141313356f0d7b859da0de669fb52a829014a0fdde51df658303ce085222a42ad624ee6c659ec94e0d0713b2d3c3becb53c6f76d30530e6129943e20361a7c9f7847f79cb871d866b5277eecc8c1626fe2719c9cf872c0fc78a98e6ca998555721e9abd5bf9e2d1848016e0bd3202c44575c688837136e71e85765d677e0f2b081707a4e7e22bef50b9280a1a5ea549022ef2a9fed989f156198975302608dffd03f8f1186a12585d4670ce868f0c96be37416b9132144f65c9abe8b00894d7a7e6d0a8554e09139ec2a0eb6d4f00c637684602c106257f5abe816e068e0f6f3e94a916ff41e23b6baa4876931209a6b0bce1f6fa8d1965665d3dc42e5c6b011bdb5144fa5fe4879779ac9dffe0843cf49806ecbb615b818e54c6dfe4d12ccae5b12b0ce87909c1e852e8d7587d1ee24c2575af61eb0b667c37b6d15b88121974598ac23cbc66503f95cf01a7a1e217f0712c4cc4e5fc22e83e3aa375eda531a73828eba91223d7de1194af730bbf2c1ed5ec47ecdf465b1794971010ff8c8771c488a1d3f98292b5d2ea9625e52589aaf7212fcdddcc0f1681b785911fcc64a6427358e4307a3d8bc583dd635ba5c41eeae96e0b6bc5236a1f539d291e568d5a0aee25ffbaa73d0cb84bf558cbf6d04b16ef7e97617b42d07100d82fda6f75dcade611e459bdb4773bf2b70e90a8add2bfe6ea6d3a4427940fef6c81931762dbea6678fc63e50c4430227b15cf184dbae4c3b2d8096292c17f701c560ac7cb33efe7d79d0c2a3c0c06e22d4e84e9e959697879f0d27df460046fc20394655cfa19793256cd9074f1c5f8ef530af537164e0e43184f921d56094fa7c7744af35821a5833c9b9d56fcf525a39fc795cf33f14705d0c7087c081bf11ad29e4d6c8f6cbbb3a0d873262b89cfc54d4cec42c3e13a5ba604df942bf8b4eef7cdae1c0e2970edb7ea6437618e6f8312a745ca8bbf0c42df103f42c824ab4e77e8b118e2b9a84568ed3d4aa3800011d02be29c032192719635a1c6c28315b27368f6ffe852bbd661c351cbfbf97b1b36d52371a4ce57e5eb6e4b13cd01b022de1770a5b1cab0fe548092a16e04de76fb8d29d69a1c55f8aa11b34bd6f018d283a9a7c0338b8c1900e21c0054616ade6b56d0fe3379f1a8dec38b85fa8e74e9bb5df4287d037f77bad30de89ea87b03d40c3a1618db1073c07032f6d22f8a264cbf0c1113689308a2fcd7299603a64f884cb03f8c5f0e61e4981d2baac3d50975cb917b815efe2f7eda88f1cef1f34997f0819a92051c1d9eac3ef05de25a2b4d5f65619b4ea377180c541f2afbfa5c8fdae59f8e3a7635d2b30c4c759c32e570b8d9ec03b4aab65503e81e545dd41f593615cfedcf009424ae4854de3a9111115cb254608bc2666b18c85698ac193a9799f1a1f6098288b42dd2684db37e0d3b023ac9b417263b1566acd6d951df147e83db8e909b39bb6a1aa3fcc1c1a20795521b84e0884254b2524ebf0321e5709e7a79f2d62309247b7b24ec71553a9ab9daccacac1a8bd6019b7703c0ed468379640ac6e764ededb2fefaa2f88e15fc97ec6f16007f540cd7a57c7726f4aa9ff6640cc7f5d71a6c12048f98a9071ffd594f17e42e7336ab6d0fd429328df1238e5eb4ebe4f9d8ef01fbcfe8f53eb3f6defd4c7cb40b3772ea2f2130b655d2ad3643977cafa991bbc6aa2aaa2879a3c2d1dace3ec034beb3d06f0a09429b3fd1ac06870dde4ab97b7d5d7ff1394577a6bea7a3a53ca883a16c98d574ddad00de5dfe9f75369be7686a4badf44f4d9b110846b6ffca67f63973186433f6bc3691b580cdc689c159064c55a974fb849f56fd2f9cbe4738e0a1a8a764467dc1d3723278ee1ea573fad98a5318104218d359d89579614592fa6ae7cc4720e6ed71706fdc4c707b03ff77454daf4505700f249aea0abc909763416d44a069a6d605118ac0c20a325577fe1d8af053673fc72e489d24405281f01b4e2e05e4fa14e68a53294e4b5d201c146ff994cfb7a776ad80828732ee647092c20fe46d917142880318136557c47ff7e31d26f35f407c1e6d4254aae442b233b89dd4c0adcfc92b0f821a5a9dce95a24bed9bb5cd17a5b59d3e82086cdd7a3755064e4de22d8f0f973f4235aa58c6214dab89325638d94d3dc25f3ac4d912ff74be6ad8ef49aa2becede5453a409cc8ed8065dacf28a1a7498f6dd07a3478af093574fdd2d0a4f98d12fe898e47cd0550f1fc42810ed2e4cfe5cc4faa67d965f252aab1bd5c536bf2c936706bc71aae98b93494d364faac72a9a60188a23f15ddf1238896e4848da876789b57ca53cd5b1041612a49de9a64a545a39375aa2a516c4af4744daf65a9c28ffb635ba56b96731b763934afa0651fd6fb65e9f71eb0e6fd54bcfd2bf0118b486e97db512290bdb1dcfca76ed974722e13e5acd0569d5f944de70adf728379094981ffaec43848367ec8cdcc227b266649ced47a03b22016ce42be3a33135229670244cc7b3325ee448c95236d0de4bbf641e1cbb0516edb3f8829e60f91d43f0fe45595d8a99e699252930c7b05ba2ba679f8f46c38f789a7750ffa4eaed19c4c1a33aff60c8926ae42497662a130b83b3211e9399e2565d9f082ec30e26e5b02ea91cf43b0a046f9fe596e5bb2a9c800d761008dc7fced2a510af6b02d3f702fc3e1a98c6a87661f0d353b81bc4435c0d4376cfc74c057bf23febb101252c4eb168d4e347e697c8d0c48a687fb2224d58e5dc68c38de930164aba51e7cb19051fe64603c6b602c02c5cc22c6da1c47d906fa1cbf67312658b201b8f89a377d61695daaeee18eb2fb8caf38280fa8b95cca721afdf33d2c3092af57204bca72c46aeae9e9fc46f0ce76b96bbbb59a8517cb72d68f8b189280b6ce1e2686204913bac1d9aecd77623b7f05475352e57f245197894d767e5f17611bbf1bfe2015c9750e9b3f5ad4ad57be1ac4988c30d90829946b05fc5bd709dbd2590da2e3666294f83336e52758bc12c9d02af342a91fdcfc9144021a783643a9845a4898ee03417329ee0e2dd7bd53f3b23f3f9a10ea643b91b3c2df8438efb22fc894bbcdc408a13dbded7002d9cef6e38bf6dfa16f52f0f24087281a3ae95fb4995131938f9ca80c5f466c7367665e5717c823b318f43e7a3e2e8fe9c2e74959ca3d53b79fa45ac778d0a99351a1919b1c9ddfda10d61487fc5a2b8227493b14e2ea9fa41db870deb1700eb46665424fbc3f21c5d7ad61089ad0f99aadcca2a97d46fd091cf21d95674c3cf48f2724a89299b5342ebf8b18770e61c449455f77cacc5b2e0123005cc296acfc28e42e3d3b426469e39def114d6071a3f015f94dd8eab597dc4cf6109f2aeba0639ffe3f66f15ddaa74460a884a5c067e1e6f8d961ff32518e7571d53ae36badcaca50258a15743e67fb35e062e697d44ccd4e416010dbe62a1d13319d3ce88dc7826514d0f84cf7ffd5f1dbdbe3534af35bba26c5f951e18b012234a3e1cd22199358ba66421a326af09d36d45c3497c4725c0e8557395376fa9dcbe4c595aef7f822cb160e72138cd610563c382769b64f5da2ae6f62cbf09d24490565d7b88f6fefc30f050e74327b7efc168f040f18110a61cc6ecf73c43c0e9e73fafcfc6079ee68839a8ed710160fdcfd987394a790e01c42c916169e8c6a7af905c15d51f87e88877386b8f8743efe4fffc2dc8fd73b4e8905b428d4cd87d90e93513f19a981b5037370cd634f23859cb7bd6b5632bd25c6873b7195691e0f76fb07fce6e72d4b2b467e57a325febf4bb842820fe6896b23aa2a3eb37697753a3693ee936692e6cd91eae410bf89192df913f2689adc73b7b35eaf8bf80928c0023b105cbd2be51a08a371be88926636bd590466c218b203fe311d73dd1a8b440133f1ebb8249b4e1f6723b7b18b508dc34acd9da927ea60d2dc361c2d14cd43ad3b0137ac32e8988d11d11de19065d02e8012a2ee24891541989d11da87de4383036b757769222af022e86803b64ccd03e4bfe3a9d3b8a5d6522d7b6ade88aca72bc436382cfcba22a426ecb21366d42588e9a68c0d61722617a4706852ef6e5eb42842d127f88dabcb8cd635d621a9082efe0cbb52fffb017c8cbf80e48ad1d8ac4c927bda50be7bbb6a302081951dd7c05142465ef8188774807ba482c155f7b56b663d24c4ad88140ddba388e4d6abda83048db46ad18328c63006d02844189a769167d94265148e06f3eca08dcd81691df655968de44c5931e62f5dcc4aa16b24ceb6e7a2c8783d9918a9be7c72dcd57fbf39f985ac29069241cbe3298d7651124f03bef8e2adcadb0c0e08efb096f72e5df2d3f8e2ea6f9cd2401533469e5099a6faa98acc2f73028eae115b3a771bc7ddd186ee7a634398e206ce9b1262b1dbb80575eac718eade048bc01ac1d410e21393dada6c1ced94c411fc19ccacdd175996501d66819b491fef65697f736ecc3a4c32f3675d1f90c8e4d44a1ba6048e77fa24d6998ad88da3cf5de223446d53dd72981c19d5915af69b9a7b9bdf35114ac1cee66b9f3f6df4b9a2d2c017d44443a28badca61b1e8db627d967827ebf32c8642b7de41508c15538b6cdf0284f1a94e8d9fcaa086236f11fb1689d57d500423a0c1d362a4fd57e5efa8858c237a0b58210b4df2b6f10fb01ff8b305cb69e65120c716970e1752cae51022a068b9ac2b7775ac415c56d31536c9f1eca654ec89d7ed00855b2d2564a74bf1a0a3b75cbeadad89fd4ce7e0a83a565c6d69077f026dd40ee186fb496d575c5f5d2f4f84e0efd6bca34f070b185903c7fcd6478f467b73687dee0b765477cc474cbe7f067d1f655efe1fac24a6cda9ed82dee343a36f5ce3894587937f31a14dff66e8384bb3c9adebb753f782570a894e09a38c096f523fbdfb7e0c09026fa023c8dc9e5822410d8343afd647a91130744017166a9b195996ee871eb284279fa725f7af7f853eb85bce100cfade5d458c4e166c839e4c1a86", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x10000000002, {0x7, 0x3, 0x0, {0x0, 0x200000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f00000006c0)=0xe4) sendmsg$nl_xfrm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@delsa={0x3a8, 0x11, 0x200, 0x70bd2b, 0x25dfdbfb, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d2, 0x2, 0x33}, [@algo_crypt={0x48, 0x2, {{'xts(salsa20-generic)\x00'}}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}, @tfcpad={0x8, 0x16, 0x5b}, @sa={0xe0, 0x6, {{@in6=@empty, @in6=@loopback, 0x4e23, 0xd, 0x4e21, 0x7, 0x14, 0x80, 0xe0, 0x2c, r5, r8}, {@in=@private=0xa010102, 0x4d3, 0x6c}, @in6=@local, {0x2, 0x7, 0x7, 0x8000, 0xc, 0x80000001, 0x100000001, 0x2}, {0x800, 0xb, 0x0, 0x800}, {0x7, 0xffffff3b, 0xfffffffc}, 0x70bd28, 0xfffeffff, 0xa, 0x4, 0xff, 0xbd79c36c4a6c1724}}, @tmpl={0x184, 0x5, [{{@in6=@empty, 0x4d4, 0x33}, 0xa, @in=@rand_addr=0x64010100, 0x3500, 0x4, 0x3, 0x0, 0x5fb2, 0x9, 0xc0b}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, 0xa, @in=@private=0xa010102, 0x3503, 0x2, 0x0, 0x30, 0x80, 0x9, 0x5fe}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3507, 0x4, 0x3, 0x4, 0x5, 0x20000000, 0xfffffff8}, {{@in=@loopback, 0x4d5, 0x2b}, 0x2, @in6=@empty, 0x3507, 0x0, 0x2, 0xc, 0x9, 0x5, 0x9}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4d2, 0xff}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x2, 0x61, 0xe, 0x70e9, 0xfffffff8}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d6, 0xff}, 0x2, @in=@loopback, 0x3500, 0x0, 0x1, 0x5, 0x4, 0x5, 0x3}]}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd27, 0x2}}, @policy={0xa8, 0x7, {{@in=@rand_addr=0x64010100, @in6=@remote, 0x4e24, 0xc1d, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x2, r5, r7}, {0x8, 0x2, 0x100000000, 0xfffffffffffffff9, 0x8001, 0x9, 0x401, 0x2b05}, {0x2, 0xd, 0x4, 0x8}, 0x1, 0x6e6bbe, 0x0, 0x1, 0x0, 0x2}}]}, 0x3a8}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001e40000005f68dd"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 23.573498268s ago: executing program 7 (id=3376): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstatat64(0xffffff9c, 0x0, 0x0, 0x3100) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r3, 0x2, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x80, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x10, r2, &(0x7f00000001c0)="73cfbb1f0a0f095c2d78a13aba1f8ad00cb3e1e46fa4f1db77dbb9b4d86e52d2f5b8a48b", 0x24, 0x7e2c, 0x0, 0x1}]) socket$unix(0x1, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001380)='/sys/kernel/notes', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x148, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x8000) r7 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000008, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000001d832, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) 23.012616941s ago: executing program 4 (id=3378): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000012003f151134dade9297020000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00$'], 0x44}}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="400624000000e90222e5f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22.661743163s ago: executing program 4 (id=3380): r0 = syz_io_uring_setup(0x5aac, &(0x7f0000000480)={0x0, 0xbbfa, 0x8, 0x0, 0x9}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x5, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x4, 0x0, 0xfec0, 0x1, 0x1, {0x4}}) r3 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0205710, &(0x7f0000000000)={0x1, 0xf654}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 22.247382222s ago: executing program 90 (id=3380): r0 = syz_io_uring_setup(0x5aac, &(0x7f0000000480)={0x0, 0xbbfa, 0x8, 0x0, 0x9}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x5, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x4, 0x0, 0xfec0, 0x1, 0x1, {0x4}}) r3 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0205710, &(0x7f0000000000)={0x1, 0xf654}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 22.212035257s ago: executing program 7 (id=3382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000280)=0x4ea) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '^^'}], 0xa, "0dfc88dc61cfdd96cae09cab6421dbc7f3d9a697b2615f6487fecefd741547108cc94ac4fd704a6ebdb6c7aeb04a313f4c378b7ea0ba51721d1779839ffe9d52c65b57cbfa161926f2fb4cfd889713fcefd2fafe4e8738d944f5cb414e05ff607a6846899f5aa51d0168a8568bf4e0"}, 0x7d) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r6 = eventfd2(0x1000, 0x800) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r6, 0x4}) close(r6) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000100002000000", 0x8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f00000000c0)={0x9, 0x0, 0x1002, 0x39, 0x1a, {0x100, 0xfffffff1}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x5, 0x2, 0x8000000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r2, 0x0, 0x8000002b) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) r7 = semget$private(0x0, 0x4, 0x80) r8 = socket(0x2000000015, 0x80005, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x4000, 0x0, 0x0) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000000)) 21.817310751s ago: executing program 7 (id=3386): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={'sha3-256\x00'}}) syz_usb_connect$cdc_ncm(0x4, 0x145, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x133, 0x2, 0x1, 0xea, 0xb0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "d5bfb53bb17d"}, {0x5, 0x24, 0x0, 0x4000}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xff, 0x8, 0x50}, {0x6, 0x24, 0x1a, 0x7, 0x39}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x1, 0x4, 0x0, 0x49}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xf8, 0x6}, @mdlm_detail={0x2d, 0x24, 0x13, 0x7, "c7693be5d1910bb44038e246ed190b676cf62e69756804924c705a5513f5d2e7e2d7bf9fe231b5d85a"}, @mdlm_detail={0x8c, 0x24, 0x13, 0x97, "81db7f96491d47e329791186592d76616cbfc2b7587f5a8576788119c3d2cbf0c154250368d08ca587b07fbae3c9d0c5793025b3472b60e31a1d269c6302a868500219c14eb8e8c1d0471ffbfbcf55fe8609225270ef5385ecee1cda964af5dc30a3a0389ed2774219c3515ea83edca18f400d05cdbc019009a2e2967d1c343ab2c8633c5ef423c5"}, @acm={0x4, 0x24, 0x2, 0xe}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xd4, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x1, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x1, 0x5}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x6, 0x3, 0x0, 0x20, 0x1}, 0x18, &(0x7f0000000180)={0x5, 0xf, 0x18, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x9, 0xf007, 0x50}, @generic={0x7, 0x10, 0x3, "8c65adf7"}]}, 0x3, [{0xef, &(0x7f0000000600)=@string={0xef, 0x3, "7d5efac8fb9c43fc6517609b77343b7f438eddb57de6cdf45b946c468226af12b97924efa25f9e86fea37beb3d1adf0f43b52bd178d2a190701a66b4edb05ea0f6bb49847b641604dfdedaaf8e24072a53e4ccfc42c8bb4ee518f009777903571fd27f196315b907a7d6984bebd470c7e1427e82d844118e765f7a5b5dfc53ccdab75602b4d883fa036b938a8388bb32698cc0b6be9c0ce6ad861bd6717bc8ef687470204115256757cfe76114424164329adb6f4e3e90b5dbcf543bf41fa78c1b3377ecf72f0d4a2bad45b87dd965e6764806a882f2b9f125b3b9ae54de8a1e5714936de3ef47bfe7a27ab12a"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x402}}, {0xb0, &(0x7f0000000700)=@string={0xb0, 0x3, "e680f1124da227fd1ac9d4baab1d91fdbf030b3f2915c235551c402c7dd4f62c8abb58505625bd5d72fb735f91fc7d1612a37895bf93ac093f2fdb90af6516f7055829f163bf33a3e10ea6ec269dd60961fdbfee656c6b4269c681c3b4a1185d3040c1f4ccb4c0e32cfb4c1dfe5b890906ced9c1519675fe2675d10622866729f7fa5c853907af0711d71eaf25797caf61eea1941fae5bfc0ab659e643c2dd50b605fc9d2c661f394f9ec7737e22"}}]}) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="400e490000000000000000000000ad3b33c49bb10f5df678c0963261b8a3b54b286e9215efccc7efd293bdbbefae56a98fbb8b3c014ee060cb2140c560b96316fab2b2eced7938c121b304fc65f452"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) poll(&(0x7f0000000080)=[{r3, 0xa182}, {r4, 0x12}], 0x2, 0x7) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x39, 0x2, 0x0, "d52b3d000000fa44966262631e8ac11e000000000000000000000000ebff00", 0xb5315258}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) (async) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={'sha3-256\x00'}}) (async) syz_usb_connect$cdc_ncm(0x4, 0x145, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x133, 0x2, 0x1, 0xea, 0xb0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "d5bfb53bb17d"}, {0x5, 0x24, 0x0, 0x4000}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xff, 0x8, 0x50}, {0x6, 0x24, 0x1a, 0x7, 0x39}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x1, 0x4, 0x0, 0x49}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xf8, 0x6}, @mdlm_detail={0x2d, 0x24, 0x13, 0x7, "c7693be5d1910bb44038e246ed190b676cf62e69756804924c705a5513f5d2e7e2d7bf9fe231b5d85a"}, @mdlm_detail={0x8c, 0x24, 0x13, 0x97, "81db7f96491d47e329791186592d76616cbfc2b7587f5a8576788119c3d2cbf0c154250368d08ca587b07fbae3c9d0c5793025b3472b60e31a1d269c6302a868500219c14eb8e8c1d0471ffbfbcf55fe8609225270ef5385ecee1cda964af5dc30a3a0389ed2774219c3515ea83edca18f400d05cdbc019009a2e2967d1c343ab2c8633c5ef423c5"}, @acm={0x4, 0x24, 0x2, 0xe}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xd4, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x1, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x1, 0x5}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x6, 0x3, 0x0, 0x20, 0x1}, 0x18, &(0x7f0000000180)={0x5, 0xf, 0x18, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x9, 0xf007, 0x50}, @generic={0x7, 0x10, 0x3, "8c65adf7"}]}, 0x3, [{0xef, &(0x7f0000000600)=@string={0xef, 0x3, "7d5efac8fb9c43fc6517609b77343b7f438eddb57de6cdf45b946c468226af12b97924efa25f9e86fea37beb3d1adf0f43b52bd178d2a190701a66b4edb05ea0f6bb49847b641604dfdedaaf8e24072a53e4ccfc42c8bb4ee518f009777903571fd27f196315b907a7d6984bebd470c7e1427e82d844118e765f7a5b5dfc53ccdab75602b4d883fa036b938a8388bb32698cc0b6be9c0ce6ad861bd6717bc8ef687470204115256757cfe76114424164329adb6f4e3e90b5dbcf543bf41fa78c1b3377ecf72f0d4a2bad45b87dd965e6764806a882f2b9f125b3b9ae54de8a1e5714936de3ef47bfe7a27ab12a"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x402}}, {0xb0, &(0x7f0000000700)=@string={0xb0, 0x3, "e680f1124da227fd1ac9d4baab1d91fdbf030b3f2915c235551c402c7dd4f62c8abb58505625bd5d72fb735f91fc7d1612a37895bf93ac093f2fdb90af6516f7055829f163bf33a3e10ea6ec269dd60961fdbfee656c6b4269c681c3b4a1185d3040c1f4ccb4c0e32cfb4c1dfe5b890906ced9c1519675fe2675d10622866729f7fa5c853907af0711d71eaf25797caf61eea1941fae5bfc0ab659e643c2dd50b605fc9d2c661f394f9ec7737e22"}}]}) (async) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="400e490000000000000000000000ad3b33c49bb10f5df678c0963261b8a3b54b286e9215efccc7efd293bdbbefae56a98fbb8b3c014ee060cb2140c560b96316fab2b2eced7938c121b304fc65f452"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) poll(&(0x7f0000000080)=[{r3, 0xa182}, {r4, 0x12}], 0x2, 0x7) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x39, 0x2, 0x0, "d52b3d000000fa44966262631e8ac11e000000000000000000000000ebff00", 0xb5315258}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) 18.549512931s ago: executing program 7 (id=3396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000340000000000000000000000000000000000000000074113368739e6644c95342277722505b60cf2686ec078be0255ee2a29fe60fb51956c5f0ce45f68870a7a268c1a37023fcfea4b911fc12b9"], 0x48}}, 0x0) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x2001048, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair(0x10, 0x2, 0xc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x20006, 0x0, 0x1, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x3}, {0x2, 0x7}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x3}) r5 = openat$sw_sync_info(0xffffff9c, &(0x7f00000000c0), 0x100, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4) ioperm(0x0, 0xfffc, 0x8005) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x300) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000780), 0x159401, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r6, 0x80304d65, &(0x7f0000000080)) write$P9_RREADDIR(r5, &(0x7f0000000180)={0x49, 0x29, 0x2, {0x8, [{{0x4, 0x4, 0x1}, 0x2, 0x4, 0x7, './file0'}, {{0x3, 0x0, 0x5}, 0x401, 0x81, 0x7, './file0'}]}}, 0x49) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)}}, {{&(0x7f0000000100)={0xa, 0x4e61, 0xf0, @mcast2, 0x9}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000200)="828dcafbeb1d96fd4847", 0xa}, {&(0x7f0000000240)="8fc3d6f6da174e96cf369cf7", 0xc}, {&(0x7f00000002c0)="c2e3ee595dc100f7cd70864e14130dc083eb2cde7d5aca823f95d8b4b2f31678f1460aca2d93f04bfea950e087564f0210bf87c56eb1a651bda41b5d24d64c5a9101cb892ee6bc6d0944fb0972aa0ed689504b5b1ad4c94a25ea45accd6da84056118b46b8aeb7c738e0cb2482e4c24f3a7ee203fe6b47290591ca7105bf44cc4218c24eb52cbc73da4af5167c48ac3ec3e4f76e1a4b6c4e1491ca7c7b63c80538bf", 0xa2}, {&(0x7f0000000380)="ae8f7d9a100ad676dbe4a16b28b581e88ba3e65b1806", 0x16}, {&(0x7f00000003c0)="19c3327b61343d68f5920b4c31e0de", 0xf}, {&(0x7f0000000540)="59d2d157b42eba125fa499d93dfe617bef053d589702a3f54dc051b8e6ac0d227d2fa8d5dec17f5449d5cd6b7e178290715ecac1d23767e315e295383337130b3f966f64aafc83c31da4f3f31fe1d8e3a6a477f06f2128fe7ea115f2def89945fc08525a62f78408e9c76e7861b9600b6effad59590c9c8a0678c29f70f7b0bb2b3c3bfdadeca12dbe2b5f640a0c5b018640c678a2a8c86d5e6fd806d96439fe705a3b2be3b4e1f7813b81f134cef08a98eead677504dd0b3efb3bea265813356cd039104e", 0xc5}], 0x6, &(0x7f0000000640)=[@hoplimit={{0x10, 0x29, 0x34, 0x1ff}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x101}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0xfff}}, @tclass={{0x10}}, @dontfrag={{0x10, 0x29, 0x3e, 0x9}}, @rthdr={{0x44, 0x29, 0x39, {0x2, 0x6, 0x0, 0x0, 0x0, [@remote, @local, @private2]}}}], 0x94}}], 0x2, 0x34000811) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000007c0)={0xa, [0x4, 0xbf, 0x5, 0x75dd, 0x8, 0x2, 0x9, 0x8, 0x10, 0x8]}, &(0x7f0000000800)=0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=r2], 0x1000f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) 18.341503571s ago: executing program 7 (id=3398): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff30}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xfbfb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x24004000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x3, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @generic={0x0, 0xd, 0xb, 0x6, 0x9}, @call={0x85, 0x0, 0x0, 0x53}], &(0x7f00000000c0)='GPL\x00', 0x1a41, 0x47, &(0x7f0000000100)=""/71, 0x41000, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0x9, 0x1000, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x2, 0x3, 0x8}, {0x0, 0x5, 0x0, 0x1}, {0x0, 0x2, 0x4, 0x9}, {0x4, 0x5, 0xf, 0x6}, {0x2, 0xc, 0x7, 0x8}, {0x3, 0x3, 0xa, 0xb}, {0x1, 0x5, 0x0, 0xb}], 0x10, 0x2, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0xd4, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_VF_PORTS={0x80, 0x18, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_VF={0x0, 0x1, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x16d9}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_PROFILE={0x2, 0x2, 'macvtap0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x82fd}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "4c85b087f711ecac4aa3e4f98c471656"}]}]}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20002800}, 0x0) 16.41362551s ago: executing program 7 (id=3404): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x80000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xfffffffffffffe04, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000740)=[@increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15.898319918s ago: executing program 91 (id=3404): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x80000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xfffffffffffffe04, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000740)=[@increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.897347646s ago: executing program 9 (id=3381): syz_io_uring_setup(0x7667, &(0x7f0000000100)={0x0, 0x0, 0x13580, 0x2}, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="700000001900010029bd7000fddbdf250a100000fc01c80300180000080017"], 0x70}}, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f00000000c0), 0x399, r1) r4 = syz_open_dev$loop(&(0x7f0000000600), 0x1, 0x8a100) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000000)=0xff, 0x4) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x0, 0x1, 0xa, 0x0, 0x700}}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280060002000100000008000200"], 0x44}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r11, 0x8}, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x64}}, 0x0) fsopen(&(0x7f0000000640)='hfs\x00', 0x1) close_range(r4, 0xffffffffffffffff, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) unshare(0x2a020480) r13 = socket(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r13, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) 5.22009218s ago: executing program 9 (id=3437): r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001940)="1f18e395312d0af6d9de516f9695d0191a15a3d0c6def581b80f341767d56ac6", 0x20) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2a, 0xc5, 0x9e, 0x10, 0x402, 0x5632, 0xeaac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe0, 0x0, 0x2, 0x7e, 0x6d, 0x7d, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xff}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x40, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x40}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) 4.698978682s ago: executing program 3 (id=3440): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xffffffff80000002, 0x12) r2 = msgget$private(0x0, 0x104) msgrcv(r2, 0x0, 0x0, 0x1, 0x2400) msgrcv(r2, 0x0, 0x0, 0x3, 0x3000) msgsnd(r2, &(0x7f0000000300)={0x1}, 0x8, 0x800) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) 4.109632633s ago: executing program 8 (id=3443): syz_open_dev$usbmon(&(0x7f0000000000), 0x800000, 0x42) gettid() r0 = syz_io_uring_setup(0x3311, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x2, 0x4000}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 3.925326769s ago: executing program 8 (id=3444): mlockall(0x2) mkdir(&(0x7f0000000440)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) rmdir(&(0x7f0000000000)='./control\x00') mincore(&(0x7f00003cc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/15) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f00002f9000/0x3000)=nil, 0x7000) r1 = io_uring_setup(0x2213, &(0x7f0000000140)={0x0, 0x6f80, 0x1000, 0x2, 0x26f}) r2 = syz_io_uring_setup(0x2602, &(0x7f0000000040)={0x0, 0x874b, 0x2, 0x100003, 0x84, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000100)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x200003, 0x0) syncfs(r3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) mmap$IORING_OFF_SQES(&(0x7f000018e000/0x400000)=nil, 0x400000, 0x1000001, 0x40010, r2, 0x10000000) 3.787298605s ago: executing program 3 (id=3445): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='ext4_discard_blocks\x00', r1, 0x0, 0x3}, 0x18) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaa15cc14e96b30800450000740000000000019078ac1e0001ac1414aa03009078030000004600000000000000002900000a010102ac1414bb443cecc3e0000001000000040a010100000100007f00000100007fffac53010100000039ac14142a0000000de0000002000001017f000001000000088606000000000000"], 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000000)=0x2, 0x4) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="143e0c020104aaaa120007"], 0xf) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vcan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x4, @mcast2, 0x1ff}, 0x1c) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x201, &(0x7f0000000080)={&(0x7f00000000c0)=""/88, 0x58}) r7 = syz_pidfd_open(r3, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r8 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r11 = socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r11, 0x0, 0x0}) io_uring_enter(r8, 0x54, 0x0, 0xf, 0x0, 0x18) setns(r7, 0x8020000) socket$inet_udplite(0x2, 0x2, 0x88) 3.405642168s ago: executing program 8 (id=3446): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = syz_io_uring_setup(0x6cec, &(0x7f0000000300)={0x0, 0xd757, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000280)={0x0, 0x0, 0x3, '?wA'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r6 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r6, 0x0, 0x0, 0x0, 0x200440c0, 0x1}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@ccm_128={{0x303}, '\b\x00', "d3ba1ed01023e3315f2ead7629983d84", "2382d78c", "a35f8a02cd010bb6"}, 0x28) recvmmsg(r0, 0x0, 0x0, 0x100, 0x0) 3.405304692s ago: executing program 3 (id=3447): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x3, {0x2000, 0x2, 0x1000, 0x870}}) 3.24163377s ago: executing program 3 (id=3449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@nested={0x10, 0x12d, 0x0, 0x1, [@typed={0xc, 0xf3, 0x0, 0x0, @u64=0x91a1}]}]}, 0x24}}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000000c0)={0x62, 0x26, '\x00', [@generic={0x7f, 0x7c, "821cfd23ba248df03dd1ad49a75c1514a44b49e3fd9f3cc5a21b0494f2b6a7056c84a03900aaf18262a9436dbb47625d8f9a9ff5e71e18fbc280aa67a3c27344f7370e055a21561398bedca84e726ecbc32072dddfbb05f4c994805890d9f90f092d475be46b875f968484da4aa3a9d72be6261b36183c3d8f4134e4"}, @enc_lim={0x4, 0x1, 0x6}, @generic={0xdd, 0x3e, "44436791e59890581c028f0ba3a9181042302b17a5ab95b04d332ec64a373a39143e2cf70b5bdb766890f6f3920733b146e9997b221f91fd0cb660ef1b6f"}, @generic={0xd, 0x34, "ce4b4468927efe1e59ef81e9cf28eb23cb0c395b09dba559ebb948718cc9ca0e18527c669915a5ce9ea0837599d09e80fe67c2fc"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0x10, [0xfe6, 0x3, 0x200, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0xb8}, @pad1, @generic={0x28, 0x1, '_'}]}, 0x140) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0) 3.128040282s ago: executing program 3 (id=3451): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xf, @loopback}, 0x1c) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010800000000000000000a370000", @ANYRES32=0x0, @ANYBLOB="00000000080002000b00000014000100ff02"], 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x8}, &(0x7f0000000040)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}}, 0x0) 2.781541671s ago: executing program 0 (id=3454): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x60, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x40}, @device_a, @device_b, @random="730f654b6ee1", {0x6, 0xcb0}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xffff, @default, 0x2404, @val, @void, @val={0x3, 0x1, 0x5}, @void, @val={0x6, 0x2, 0x5}, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x0, 0xde, 0x2]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x54}}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_NMI(r7, 0xae9a) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) (async, rerun: 32) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x0) 2.197589244s ago: executing program 0 (id=3457): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x3c, r3, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x49a}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x2, 0x9, 0x0, 0xd]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x20000080) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.952638463s ago: executing program 9 (id=3458): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000090400"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x4c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x3f295be348863541, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000640)={'vxcan1\x00', 0x200}) r5 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x40000000}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r10, &(0x7f0000001140)=ANY=[], 0x1a3) write$binfmt_misc(r10, &(0x7f0000000040), 0xe09) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffe0c, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0xfd53) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r11, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r11, 0x4040534e, &(0x7f0000000140)={0x16f, @time}) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x5]}}) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x23, &(0x7f0000000340), 0x8) socket$kcm(0x10, 0x2, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x0) 1.6096392s ago: executing program 8 (id=3461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010003000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000020900020073797a31000000000900010073797a30000000000800054000000025400100000c0a01010000000000000000070000040900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1c4}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], 0x1, 0x400}) 1.524541636s ago: executing program 0 (id=3462): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @multicast, 'wg0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f0000000680)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x44}, 0xffffffffffffff53, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000004e0000000000000000040000da5c18b1c104b6f2a3f0c9acac00124476f6b6373f3c4e6624d2a87955b1ff7f000053bda5c4"], 0x10}}], 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r4, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002280)=0x40) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5c}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_hsr\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x8084}, 0x80) 1.42560437s ago: executing program 6 (id=3463): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (async, rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendmmsg$sock(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)='$', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)='\n', 0x1}], 0x1}}], 0x2, 0x40000) (rerun: 64) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='nicvf0\x00'}) (async, rerun: 32) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (rerun: 32) ppoll(&(0x7f0000000180)=[{r2, 0x10}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a1c95595915303d60ffdeffff000400"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x5b, 0x4) (async) shutdown(r0, 0x1) r4 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x480, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000280)=0x4) 1.391613682s ago: executing program 8 (id=3464): socket(0xa, 0xda47071041c90c82, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_flowlabel\x00') r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x19e6}, {0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x205}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.172386848s ago: executing program 6 (id=3465): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FIONCLEX(r0, 0x5450) 985.553595ms ago: executing program 9 (id=3466): r0 = openat$bsg(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x0) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/109, 0x6d}], 0x1}, 0x4}], 0x1, 0x40000002, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="180000"], 0x18}}], 0x1, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000040)) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0xf401}], 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000a8f3d2207205200385010102030109021b0001000000000904"], 0x0) 949.735407ms ago: executing program 0 (id=3467): r0 = socket(0x10, 0x8000000803, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c07000900"/54], 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xffffff5a) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)="bc2239ab89fac519afc702e9d770453fdbff5a60ae20d0bab305b28be4c47747e223131460eaac5264d9e787e75450afc21ac833eda5381f50023e495ca1d413ce736b6c953553960c9a5efc621fb2889fd1", 0x52}, {&(0x7f0000000000)="b76874", 0x3}, {&(0x7f0000000580)="d0a864573db1557740f1837bf63681d17a20b88766f7e667b30e89bef3ba483c5ecc7bbfeb752ff6965c8d6aba07e486a5045faab9da41b70b8bb35ea64973ac1383b560d2cadda2a69f0d76978355a3a24aec902a06df1931841e146b1e36e03694854ce777e1dc08ea02a75011ad7df251c4a4db4e59ffc3f3890c797b9f723f4696c6e4f5da61a2d0225ac7ffa97d9708149680cc18058b31ff87d876fae5469f8b544d7ef2ae5df5d5453a558500df80144f3f37ea225297c0eaf245c8ca82e444a87fcb637d7dea25eba47f1a1f0210760b82d2f2d345dbb25b5b1b9f2e10d2cc328f1eb99932a06353b39e9a5bcf56072f3fb99e86890baa11512c47d7eb3b8174fa28eee645cee8ca50ed79edf95f27678528145d622baf896437e81bacfc662af91d629c32ae7dfd3eceede6224e043aafe0a60cf9799aa424d6e1bac65252c61ad1b1d4d7bc1a0921ae7bdca59e96283430c18810702328d861ed5aefb7069dd01b0241438bc9893b9599b75777548ac2f90bb09dea5367f64b89ba608c6383b670c235fb19181653c39b61f6df373e86209fd84ea30d26de842893c775a7c6704922b4c1ae6baa10d33c13950ea1752cbdc331895d4f36f35a2540b4e432a03304af310475aad54addf11b2f5bcccc8fd41c133f98b258d949b83a6f044fc06724a705a1b8471ef1916e363baa30c995aed0413803e2d3806241bb950d4999de1da372925e6741e9dcf07e92750ae4cbe97cd8b9713375f766ed0af8415df7061fd088f5ed07625e70181959ac5af95949f2ae416c9ef9dfa00d8cdfdef6a45ac2980f8122ddc98fda5f15cbd550445a5b2db09d026b9d636e344b840af6d4da8aa8027994ec195f5933687aa73e6c94b682b64fcd49bc4484d2f783d3373ffff1efa10d2a550d6fdad22ebfc0371c5df727cec1af77be5fc670aee4ac3f0a0964c346775c1aa4a93427cadeb406d1cc4f625339dfc2d6c947b472a81b5b89ec0d99cc1b8b04a047a1d7179278880eef8d0372248e812450ea503161c522b0c16a36bee362f27a5882c65043849bcf8d80293237a03f1f95eb76b5d6c6fe7d47875d2d370e481c280562203baa5d88d1c840f50953495a86b2a77263d71d8ab02e66fac2de5dd7f41285ef1b6f4de0c9f8f31564a749627dfe9f29eb26dee91713e2244fa4c0519879fbdce2e70e355ef848221a2b342ef6d6b14b514d4a4a6d4841727f86ccbb8bdd5b2dabac717bfdeee70a2e281d50514775e064e1d1378af753b465cccb878a316af445880de620a5fee81aa7cf7ae451949880128652ee0fccfe8adcb8996cdaa2154d7ad5733bcbecd3b79a84f206978e1681e452d7eccf91a6de0269fe6c63fe0ceafda51d82f8be37b66ff3faebd15c38a4f5fb3e7eb1c3ff8c3da4d4e7eb4b46109904a8d160428561f188d0ff80158ec6ea4b0b18af35ebe1a24b4ff3d1ff0bc3783b2b3b0bb9e68a87443c764e4616056d4a918d80fa456ab428933878cdd6ce2fa3ac5fcc42a69275373621ad4df5f36b2fb50570fd94cdabc63af3ec34dad31bef7498e8551b28317740b3d93491ea2b81ec53016bda81826c1e0be65544c05c311534ea21fae4b3fbc42279e7546f09a3779bcd77dcf8358b7bc16960cf8cbfdb2b817ca5952003c5aa2798bd4ad33c2d67a9b9b47f0bf7705f544366606ed156e0ad1bc06901f57a1c07a126271f434eaffee3cd6568a3b4e34c39ff09bec051e68e6e85e07327bfad823f5b82df223ca40f7299cb620b7c63d5beff1bf8dc125836a67f85ae04fb039b579a2ff350a30e0c94a7bae17c953204264bf342ccbc175b7b026ecba3781596a744a7261f012838d5d7d5728f278cdd4e66d88f8d7c391f90f31fd3ebd8797e88a92f9cf0e06417958b250985f08fb9e7fd907a8e3abc352ea335350ccb5c256aa10ba1d29937fcf6158c29714ea04616fa703b48b452b594f6752ecadcf3d0b259b81cdde6e1449ae4e4d9418befd7a86803c3bce96d708ee2dc844198097960924bf66ba9f33f64a1f53ae0545d242375a032e1718b5ff2dbcfaa3f266735068eb8adb81cc329ef8d40efceb105f963cfd1d390be4b9de5eefb8e85f4052bc21964ea90f8dbdee123ebac3eaf4adeed33a10aec095d4a0d5ab373318560b46a57802d7e2e006803a50961679d68dd3e6de7aac8c4ded9f9685e54656e9cca933dcdd894a3a8e7ec21e17034a2e57994b32ea4cb3c8320f70c8d44668a135d3a860acd8accfbebe28f7f5c77c0bf64c9cfbac8a199b2c5591bed169256ef0fce75c37bc59a536b6b1a84d7815cbe2d24756583dcfdd542b5dca0146eadc5ee8c2dffdd85d941d3b0d96129565e156b9e8927e8c08a45ae8641765a1077ac9c249d5c6ef271eedd6e22b0874b7c8cf5ae3a6667e5df42db947fc927b221083759b560cbb4cdc58ccbcc5d51175d314d8a4b4e14dfcd50ad4be971f3ea92d37ee1b73eda76085a1915c2e7301a01b56f8b91a623c6bb7958847744ee72e9d7e29c3706dd3753b217ff8d65abe391daa31acac551835fdb1b296da7ffdb83a50903658c2bf977c2c2a65fd1020949bbd5c99cfc8d2a7b31176ccc95092fe22424d4169250e1704cf5bac36f98c0c95fd15d557ee7dfe303a16a673e83587b5c17fff9c20a6cafa6476c13fc69acc45a165bc2b89037ddf5cf6edae5285096f36671cc9b84840536aa198b4f303bfa8b135464bc8c5abff9d2c6cfad4d02cfdc9e14cd2618c824a1db39ab4afb4aa030939ab418eba9aea71d81a358bd53a7a2f697b9db38011ddc38f121a93a7553671f31c9f0a8800683598340fb272e0a2ee4a643672bfac111eb922fc3b37eda697be7e47afbc4e379e8fbf14629c9237b1502d78711ccb9fadef979b22543d00dfb573c6ae74fc2b3a4f2ce37a5d24bc6e032d3787d6e4789caa9695d75b0e17d08d8d5391dea4515a7b0a2ed57f60f747def2d878c850659133b5779d4b87ac0125875217f5a3fba5a506e36a11e217dca29dd83fd15e04b074774c9a621c1599a84e6a48ace4b899fb0cb6862d7488eee54289b4d33e0c4e1f14f4b1acb350f881aa07167c108262eb7a7cfb5bb4e58c5995f32475955aadb62462c250ec234a66dce96c8b17beafbf626c2dc523ab0ff095d30dd85fd1a1337067ad91912d4c66bfd3db836d65f9115923617e83a41f34d30a77682c1da3333e46951854375cc6ece2b27b64070972c0889d42b2a778e1943536d6db2c1e70bac7992a555192a50683f6df10f958f5ec2a064464b0866b0b7071eb5144e7e714f1f4f030498512b80e7584bbef5d4b41b5c480883605ebf17b0b026445e2a6998d30858ac7fff0e95514d48ff5ede8b7f46ecbd8f5c5c495e5258d20c56b9e7b6191a32f8c59894ee2f075cf0fc7474ee73a42ac6ca5d0011129d02900d2ffe81cd72ab921e588b50b6c5c865f830ae86587bfcef59e39eadf152d70efee0f12740907f1b20b51b1847122a5df71543a0ca85a06ad9349f30d9037757c2570ff28f6ea1ad500bc2c1ee67ba7acc88ed1d2fca6f0c7846930782c1bd6d81791d65c37112734e96580abd01357b94a002e1316b2162e28a9a94e6f44c571ba9437704d4745cbe1243312ffd1c15cf438a6369cc39474bb1e32ba1408acd4786b107fd16b7ad6b392fa0608825386ed2be6c774d5932e83f9593ace21a5da9870377cedb2372ff48433a1374949f2c5a1bb0c19c2cd4c181d796a71d0743de58573da489bdcb8bb399b446a11a86b049871f5ceb65f9d8f76b0d6c9d", 0xa81}, {&(0x7f0000000340)="c93807e9f43ce54b2cc01f95e1777ba0631d956d35d9bb2f0a494b8d437e667c4669fa08205e079c5c4397b1fc069bd13ba42dbe8eadb2776f130cc7b8da7aadce7059411141557bff816e6395c8f66967a9204865b288e232f02069669ae7946cb493627a9eb8f468a29ac5d5a9650ffb380f21eda68d8552b35901aeba", 0x7e}, {&(0x7f0000000440)="8e9b8c2e7e4718dbd06906de9c51fa7df3960abf74472391c175f44159393ba3b83457ee2b0e666c1779d878b5becc56ca8a4c155edd3980bf8072b8edf4bc59be0c3591bded1e56a9dff9922d5b6cf1046b98fd432abba991d650e1b1c867a9deff952d2374470d0bdbd558cec8cb4cc32225d501f1bc71b5c9543d3d5df9f6a08a66d18deed3377d9b255047b9", 0x8e}, {&(0x7f0000000280)="512f7935604a525905fbfb", 0xb}, {&(0x7f00000002c0)="8a514263eba29195ef196decaaf6db", 0xf}], 0x7}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001680)="f92663", 0x3}, {&(0x7f0000001700)="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", 0x901}, {&(0x7f0000002840)="f8b0de426566", 0x6}, {&(0x7f0000002700)="5b92", 0x2}, {&(0x7f0000002940)="bbf69779", 0x4}, {&(0x7f0000002a00)="a8908586", 0x4}, {&(0x7f0000002740)="b278", 0x2}, {&(0x7f0000002ac0)="dabf842b", 0x4}, {&(0x7f0000002b80)="785228f26b", 0x5}], 0x9}}], 0x2, 0x4000000) (async) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r3, &(0x7f0000000400)=[{&(0x7f0000000040)='U', 0x1}], 0x1, 0x3, 0xe89a, 0x12) (async) sendmmsg$inet(r2, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)='g', 0x1}], 0x1}}], 0x1, 0xf000000) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001140)={0x0, 0x2, 0xa017, 0xb1c}, &(0x7f0000001180)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000011c0)=@assoc_value={r4, 0x5}, 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x0, 0x0, 0x31, 0x0, "a1c1dd75a68473ba07d945c3b03e10951cd4b347113e55eb499419be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d27efd5f2fdf98328de9441031348589b763d46d14810acc5f7"}, 0xd8) timer_create(0x6, &(0x7f0000000180)={0x0, 0x41, 0x2, @thr={&(0x7f0000001040)="2856e6db218e840e6c2922e629cec5239f6cfc0610ccb18800e8cf6e613bc4650844964ccbe273e01119e78d9c01eec8161ddcc33758d72e3364e56143e61accada02e36b15fda31c3ed127f3faa19b783813a6166a23e0dfdcdd3881264319264c6fc2f28022552258824bdecc2cdcbfb6ff600fc9d9dfb07cdf1843fbb0f08c6c1e4e136826e99390efaa14a3b28bb74b5af19a216958ce53fa0ff86150f6588cbb6b656ebba8b25d9f0f782efb145149183020f983effbca6e0ded0213d08dedb9ad05e12de7b37f01d52", &(0x7f0000000200)="0ecfdf4cff75d75519b027fca849963fc7496eea088b3e25c02c9e0466060844970605e6a28b2be38d0177b838650390745d305c2afce3304736ad6473a64ceafe4459c8a852c9a3fff2a92c"}}, &(0x7f00000003c0)) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000001240)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}}}, 0x10) (async) write$binfmt_misc(r5, &(0x7f0000000400), 0x2000011a) (async) recvmmsg(r5, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/175, 0xaf}], 0x1, 0x0, 0xffffffffffffff22}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}}], 0x2, 0x0, 0x0) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, r6, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000300)={0x8, r6}) (async) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000340)={0x8}) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, 0x0, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000400)={0x8}) (async) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000440)={0x8}) (async) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000001200)={0x8}) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400000000000000000000334c", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028006001100000000000400120005001600020000000600030000000000"], 0x50}}, 0x0) 880.846867ms ago: executing program 6 (id=3468): r0 = openat$nullb(0xffffff9c, &(0x7f0000000100), 0x88140, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/110, 0x6e}) 851.362388ms ago: executing program 8 (id=3469): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000140)={{0x4, 0x80}, {0x4, 0x9}, 0xfffffff9, 0x7}) syz_usb_connect(0x3, 0x11e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x55}}, 0x10) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000200)={r10, 0x3, 0x6, @remote}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r10], 0x20}}, 0x0) recvmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f00000006c0)=""/256, 0x100}, {&(0x7f0000000d80)=""/4057, 0xfd9}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f0000001ec0)=""/235, 0xeb}, {&(0x7f0000000940)=""/175, 0xaf}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/4089, 0xff9}, {&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000000c80)=""/123, 0x7b}], 0xc}, 0x0) 689.682324ms ago: executing program 0 (id=3470): r0 = socket(0x2b, 0x80801, 0x1) (async) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="1be5cb0ead3e", 0x0, 0x1, 0x0, 0x0, 0x0}) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x78) 593.498872ms ago: executing program 6 (id=3471): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000061400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 545.75363ms ago: executing program 0 (id=3472): mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x1a3b01, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000380)={0x0, 'macvtap0\x00', {0x1}, 0x3ff}) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) r11 = syz_io_uring_setup(0x213d, &(0x7f0000000200)={0x0, 0x0, 0x10300}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2002}}) io_uring_enter(r11, 0x2def, 0x700, 0x0, 0x0, 0x0) r14 = dup3(r8, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)="fa"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c6313, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cmdline\x00') syz_open_dev$vcsn(&(0x7f0000000200), 0x6, 0x0) ioctl$VIDIOC_DQBUF(r9, 0xc04c5611, &(0x7f0000000400)=@mmap={0x1, 0x0, 0x4, 0x100, 0x4, {0x77359400}, {0x2, 0x1e, 0x0, 0x7, 0x4, 0x1, "dc7b1413"}, 0x300000, 0x1, {}, 0x6, 0x0, r5}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 365.09214ms ago: executing program 6 (id=3473): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x2000000, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x400003, 0x400003, 0xff, 0x38}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_acct\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r4], 0x4c}}, 0x0) 125.995038ms ago: executing program 6 (id=3474): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002c00000018000180140002"], 0x2c}}, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @mcast1, 0xd, 0x4}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/187, 0xbb}], 0x1}, 0x1}], 0x1, 0x10001, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xec, 0xb3, 0x4d, 0x20, 0xb95, 0x2791, 0xd2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x23, 0x86}}]}}]}}, 0x0) 0s ago: executing program 3 (id=3475): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008f3d, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='/', 0x1}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x197a, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) kernel console output (not intermixed with test programs): T5904] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 797.696470][ T5905] usb 5-1: device descriptor read/64, error -71 [ 797.704656][ T5904] usb 1-1: config 0 has no interface number 0 [ 797.711085][ T5923] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 797.723931][ T5904] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 797.733425][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.742088][ T5904] usb 1-1: Product: syz [ 797.746289][ T5904] usb 1-1: Manufacturer: syz [ 797.751037][ T5904] usb 1-1: SerialNumber: syz [ 797.757726][ T5904] usb 1-1: config 0 descriptor?? [ 797.766487][ T46] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 797.776223][ T46] usb 4-1: config 0 has no interface number 0 [ 797.796533][ T46] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 797.806838][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.818131][ T5905] usb usb5-port1: attempt power cycle [ 797.834946][ T46] usb 4-1: config 0 descriptor?? [ 797.844186][ T46] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 797.854575][ T46] dvb-usb: bulk message failed: -22 (3/0) [ 797.867579][ T5923] usb 7-1: Using ep0 maxpacket: 32 [ 797.868721][ T46] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 797.879248][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.898371][ T46] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 797.908085][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.918307][ T46] usb 4-1: media controller created [ 797.918371][ T46] dvb-usb: bulk message failed: -22 (5/0) [ 797.918442][ T46] dvb-usb: MAC address reading failed. [ 797.934274][ T5923] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 797.944801][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.965787][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 797.972053][ T5923] usb 7-1: config 0 descriptor?? [ 797.993101][ T5923] hub 7-1:0.0: USB hub found [ 798.006399][ T5904] radio-si470x 1-1:0.35: this is not a si470x device. [ 798.025325][ T46] dvb-usb: bulk message failed: -22 (6/0) [ 798.035646][ T46] dvb-usb: bulk message failed: -22 (6/0) [ 798.055710][ T46] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 798.076451][ T46] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input67 [ 798.095745][ T46] dvb-usb: schedule remote query interval to 100 msecs. [ 798.124992][ T46] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 798.165782][ T46] usb 4-1: USB disconnect, device number 76 [ 798.194922][ T5905] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 798.206072][ T5923] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 798.243438][ T5923] usbhid 7-1:0.0: can't add hid device: -71 [ 798.257754][ T5923] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 798.257888][ T46] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 798.278266][ T5905] usb 5-1: device descriptor read/8, error -71 [ 798.321903][ T5923] usb 7-1: USB disconnect, device number 60 [ 798.381639][ T5904] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 798.405665][ T5904] usb 1-1: USB disconnect, device number 63 [ 798.517348][ T5905] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 798.548590][ T5905] usb 5-1: device descriptor read/8, error -71 [ 798.670251][ T5905] usb usb5-port1: unable to enumerate USB device [ 799.051742][T23632] FAULT_INJECTION: forcing a failure. [ 799.051742][T23632] name failslab, interval 1, probability 0, space 0, times 0 [ 799.068261][T23632] CPU: 1 UID: 0 PID: 23632 Comm: syz.0.3245 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 799.078727][T23632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 799.088800][T23632] Call Trace: [ 799.092078][T23632] [ 799.095000][T23632] dump_stack_lvl+0x241/0x360 [ 799.099696][T23632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 799.104940][T23632] ? __pfx__printk+0x10/0x10 [ 799.109578][T23632] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 799.115601][T23632] ? __pfx___might_resched+0x10/0x10 [ 799.120936][T23632] should_fail_ex+0x3b0/0x4e0 [ 799.125660][T23632] should_failslab+0xac/0x100 [ 799.130458][T23632] kmem_cache_alloc_node_noprof+0x77/0x380 [ 799.136300][T23632] ? __alloc_skb+0x1c3/0x440 [ 799.140931][T23632] __alloc_skb+0x1c3/0x440 [ 799.145389][T23632] ? __pfx___alloc_skb+0x10/0x10 [ 799.150367][T23632] ? __pfx___might_resched+0x10/0x10 [ 799.155689][T23632] alloc_skb_with_frags+0xc3/0x820 [ 799.160858][T23632] sock_alloc_send_pskb+0x91a/0xa60 [ 799.166194][T23632] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 799.172124][T23632] ? packet_cached_dev_get+0x1c/0x2b0 [ 799.177684][T23632] packet_sendmsg+0x3fe8/0x6a40 [ 799.182553][T23632] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 799.187941][T23632] ? __pfx___might_resched+0x10/0x10 [ 799.193228][T23632] ? mark_lock+0x9a/0x360 [ 799.197653][T23632] ? __pfx_packet_sendmsg+0x10/0x10 [ 799.203027][T23632] ? aa_sk_perm+0x96d/0xab0 [ 799.207537][T23632] ? __pfx_aa_sk_perm+0x10/0x10 [ 799.212391][T23632] ? __might_fault+0xaa/0x120 [ 799.217161][T23632] ? __pfx_lock_release+0x10/0x10 [ 799.222196][T23632] ? aa_sock_msg_perm+0x91/0x160 [ 799.227145][T23632] ? __pfx_packet_sendmsg+0x10/0x10 [ 799.232433][T23632] __sock_sendmsg+0x221/0x270 [ 799.237202][T23632] ____sys_sendmsg+0x52a/0x7e0 [ 799.241986][T23632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 799.247402][T23632] __sys_sendmsg+0x269/0x350 [ 799.252044][T23632] ? __pfx_lock_release+0x10/0x10 [ 799.257156][T23632] ? __pfx___sys_sendmsg+0x10/0x10 [ 799.262270][T23632] ? __pfx_vfs_write+0x10/0x10 [ 799.267057][T23632] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 799.273742][T23632] ? lockdep_hardirqs_on+0x99/0x150 [ 799.278949][T23632] __do_fast_syscall_32+0xb4/0x110 [ 799.284149][T23632] ? exc_page_fault+0x590/0x8c0 [ 799.289000][T23632] do_fast_syscall_32+0x34/0x80 [ 799.293938][T23632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 799.300282][T23632] RIP: 0023:0xf743d579 [ 799.304345][T23632] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 799.324212][T23632] RSP: 002b:00000000f512657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 799.332626][T23632] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020002ac0 [ 799.341117][T23632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 799.349098][T23632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 799.357089][T23632] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 799.365057][T23632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 799.373053][T23632] [ 799.507706][ T46] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 799.519915][T23643] FAULT_INJECTION: forcing a failure. [ 799.519915][T23643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.533704][T23643] CPU: 1 UID: 0 PID: 23643 Comm: syz.0.3246 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 799.544170][T23643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 799.554274][T23643] Call Trace: [ 799.558100][T23643] [ 799.561058][T23643] dump_stack_lvl+0x241/0x360 [ 799.565865][T23643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 799.571194][T23643] ? __pfx__printk+0x10/0x10 [ 799.575831][T23643] ? __pfx_lock_release+0x10/0x10 [ 799.580913][T23643] should_fail_ex+0x3b0/0x4e0 [ 799.585636][T23643] _copy_from_iter+0x21f/0x1e70 [ 799.590536][T23643] ? __virt_addr_valid+0x183/0x530 [ 799.595689][T23643] ? skb_set_owner_w+0x246/0x380 [ 799.600659][T23643] ? __pfx_lock_release+0x10/0x10 [ 799.605762][T23643] ? __pfx__copy_from_iter+0x10/0x10 [ 799.611092][T23643] ? __pfx__copy_from_iter+0x10/0x10 [ 799.616423][T23643] ? page_copy_sane+0x154/0x260 [ 799.621323][T23643] copy_page_from_iter+0x7a/0x100 [ 799.626398][T23643] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 799.632259][T23643] packet_sendmsg+0x4465/0x6a40 [ 799.637181][T23643] ? __pfx___might_resched+0x10/0x10 [ 799.642628][T23643] ? __pfx_packet_sendmsg+0x10/0x10 [ 799.647878][T23643] ? aa_sk_perm+0x96d/0xab0 [ 799.652423][T23643] ? __pfx_aa_sk_perm+0x10/0x10 [ 799.657302][T23643] ? __fget_files+0x2a/0x410 [ 799.662193][T23643] ? aa_sock_msg_perm+0x91/0x160 [ 799.667188][T23643] ? __pfx_packet_sendmsg+0x10/0x10 [ 799.672428][T23643] __sock_sendmsg+0x221/0x270 [ 799.677148][T23643] __sys_sendto+0x363/0x4c0 [ 799.681777][T23643] ? __pfx___sys_sendto+0x10/0x10 [ 799.686863][T23643] ? __mutex_unlock_slowpath+0x21e/0x790 [ 799.692710][T23643] ? __fget_files+0x2a/0x410 [ 799.697614][T23643] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 799.704063][T23643] __ia32_sys_sendto+0xdd/0x100 [ 799.708963][T23643] __do_fast_syscall_32+0xb4/0x110 [ 799.714129][T23643] ? exc_page_fault+0x590/0x8c0 [ 799.719198][T23643] do_fast_syscall_32+0x34/0x80 [ 799.724077][T23643] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 799.730618][T23643] RIP: 0023:0xf743d579 [ 799.734897][T23643] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 799.754616][T23643] RSP: 002b:00000000f512657c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 799.763063][T23643] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 799.771502][T23643] RDX: 000000000001000a RSI: 0000000000000000 RDI: 0000000020000140 [ 799.779692][T23643] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 799.787784][T23643] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 799.795792][T23643] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 799.803900][T23643] [ 799.915977][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 799.922622][T23657] dccp_invalid_packet: P.Data Offset(100) too large [ 799.988751][ T46] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 800.001614][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 800.030006][ T46] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 800.041952][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.060625][ T46] usb 4-1: Product: syz [ 800.064839][ T46] usb 4-1: Manufacturer: syz [ 800.070647][ T46] usb 4-1: SerialNumber: syz [ 800.081037][ T46] usb 4-1: config 0 descriptor?? [ 800.092429][ T46] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 800.111752][ T46] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 800.120417][T23665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3251'. [ 800.165673][T23666] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3250'. [ 800.327947][ T5902] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 800.328368][T23673] tipc: Failed to remove unknown binding: 66,1,1/0:2129060416/2129060418 [ 800.390511][T23673] tipc: Failed to remove unknown binding: 66,1,1/0:2129060416/2129060418 [ 800.413338][T23673] tipc: Failed to remove unknown binding: 66,1,1/0:2129060416/2129060418 [ 800.491805][ T5902] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 800.501155][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.528778][ T5902] usb 5-1: config 0 descriptor?? [ 800.539308][ T5902] cp210x 5-1:0.0: cp210x converter detected [ 800.547941][ T5901] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 800.583888][T23682] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3254'. [ 800.618811][T23682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3254'. [ 800.645986][T23682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3254'. [ 800.723545][T23686] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 800.744270][T23660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.760667][T23660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.768909][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 800.777781][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.789661][ T46] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 800.795934][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.807798][ T46] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 800.816459][ T5901] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 800.826068][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.850087][ T5901] usb 1-1: config 0 descriptor?? [ 800.864846][ T5901] hub 1-1:0.0: USB hub found [ 800.875919][T23688] FAULT_INJECTION: forcing a failure. [ 800.875919][T23688] name failslab, interval 1, probability 0, space 0, times 0 [ 800.909726][T23688] CPU: 1 UID: 0 PID: 23688 Comm: syz.7.3256 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 800.920203][T23688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 800.930638][T23688] Call Trace: [ 800.933954][T23688] [ 800.936909][T23688] dump_stack_lvl+0x241/0x360 [ 800.941626][T23688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.946870][T23688] ? __pfx__printk+0x10/0x10 [ 800.951501][T23688] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 800.956914][T23688] ? __pfx___might_resched+0x10/0x10 [ 800.962332][T23688] should_fail_ex+0x3b0/0x4e0 [ 800.967055][T23688] should_failslab+0xac/0x100 [ 800.971763][T23688] __kmalloc_node_noprof+0xe1/0x4d0 [ 800.976975][T23688] ? __vmalloc_node_range_noprof+0x561/0x1380 [ 800.983046][T23688] __vmalloc_node_range_noprof+0x561/0x1380 [ 800.988935][T23688] ? mark_lock+0x9a/0x360 [ 800.993285][T23688] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 800.999622][T23688] ? n_tty_open+0x1d/0x150 [ 801.004038][T23688] vzalloc_noprof+0x79/0x90 [ 801.008534][T23688] ? n_tty_open+0x1d/0x150 [ 801.012945][T23688] n_tty_open+0x1d/0x150 [ 801.017194][T23688] tty_ldisc_setup+0xdf/0x280 [ 801.021879][T23688] tty_init_dev+0x275/0x4c0 [ 801.026385][T23688] tty_open+0x9d9/0xde0 [ 801.030551][T23688] ? kobject_get_unless_zero+0x22d/0x330 [ 801.036201][T23688] ? __pfx_tty_open+0x10/0x10 [ 801.040878][T23688] ? do_raw_spin_unlock+0x13c/0x8b0 [ 801.046172][T23688] chrdev_open+0x521/0x600 [ 801.050594][T23688] ? __pfx_chrdev_open+0x10/0x10 [ 801.055529][T23688] ? do_raw_spin_unlock+0x13c/0x8b0 [ 801.060731][T23688] ? __pfx_chrdev_open+0x10/0x10 [ 801.065689][T23688] do_dentry_open+0xbe1/0x1b70 [ 801.070469][T23688] vfs_open+0x3e/0x330 [ 801.074544][T23688] path_openat+0x2c84/0x3590 [ 801.079164][T23688] ? __pfx_path_openat+0x10/0x10 [ 801.084207][T23688] do_filp_open+0x27f/0x4e0 [ 801.088706][T23688] ? __pfx_do_filp_open+0x10/0x10 [ 801.093723][T23688] ? do_raw_spin_lock+0x14f/0x370 [ 801.098780][T23688] do_sys_openat2+0x13e/0x1d0 [ 801.103461][T23688] ? __pfx_do_sys_openat2+0x10/0x10 [ 801.108666][T23688] ? __fget_files+0x2a/0x410 [ 801.113258][T23688] ? __fget_files+0x2a/0x410 [ 801.117853][T23688] __ia32_compat_sys_openat+0x23f/0x290 [ 801.123409][T23688] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 801.129487][T23688] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 801.136076][T23688] ? lockdep_hardirqs_on+0x99/0x150 [ 801.141275][T23688] __do_fast_syscall_32+0xb4/0x110 [ 801.146387][T23688] ? exc_page_fault+0x590/0x8c0 [ 801.151242][T23688] do_fast_syscall_32+0x34/0x80 [ 801.156100][T23688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 801.162515][T23688] RIP: 0023:0xf7f24579 [ 801.166586][T23688] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 801.186194][T23688] RSP: 002b:00000000f50a6120 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 801.194609][T23688] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f50a6170 [ 801.202580][T23688] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73b0ff4 [ 801.210551][T23688] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 801.218521][T23688] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 801.226493][T23688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 801.234475][T23688] [ 801.239917][T23622] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3241'. [ 801.252162][T23688] syz.7.3256: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 801.279124][ T271] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 801.300683][T23694] binder_alloc: 23687: binder_alloc_buf, no vma [ 801.317521][T23688] CPU: 0 UID: 0 PID: 23688 Comm: syz.7.3256 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 801.327995][T23688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 801.332806][ T6702] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 801.338053][T23688] Call Trace: [ 801.338110][T23688] [ 801.338121][T23688] dump_stack_lvl+0x241/0x360 [ 801.338156][T23688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.338181][T23688] ? __pfx__printk+0x10/0x10 [ 801.338211][T23688] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 801.338237][T23688] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 801.338265][T23688] warn_alloc+0x278/0x410 [ 801.338285][T23688] ? __pfx___might_resched+0x10/0x10 [ 801.338316][T23688] ? __pfx_warn_alloc+0x10/0x10 [ 801.338334][T23688] ? should_fail_ex+0x295/0x4e0 [ 801.338368][T23688] ? rcu_is_watching+0x15/0xb0 [ 801.338393][T23688] ? trace_kmalloc+0x1f/0xd0 [ 801.338415][T23688] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 801.338440][T23688] ? __vmalloc_node_range_noprof+0x561/0x1380 [ 801.338466][T23688] __vmalloc_node_range_noprof+0x62f/0x1380 [ 801.338487][T23688] ? mark_lock+0x9a/0x360 [ 801.338530][T23688] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 801.386492][ T5901] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 801.389231][T23688] ? n_tty_open+0x1d/0x150 [ 801.389260][T23688] vzalloc_noprof+0x79/0x90 [ 801.389282][T23688] ? n_tty_open+0x1d/0x150 [ 801.389300][T23688] n_tty_open+0x1d/0x150 [ 801.389320][T23688] tty_ldisc_setup+0xdf/0x280 [ 801.389350][T23688] tty_init_dev+0x275/0x4c0 [ 801.389380][T23688] tty_open+0x9d9/0xde0 [ 801.389415][T23688] ? kobject_get_unless_zero+0x22d/0x330 [ 801.389443][T23688] ? __pfx_tty_open+0x10/0x10 [ 801.389468][T23688] ? do_raw_spin_unlock+0x13c/0x8b0 [ 801.389504][T23688] chrdev_open+0x521/0x600 [ 801.495175][T23688] ? __pfx_chrdev_open+0x10/0x10 [ 801.500125][T23688] ? do_raw_spin_unlock+0x13c/0x8b0 [ 801.505332][T23688] ? __pfx_chrdev_open+0x10/0x10 [ 801.510275][T23688] do_dentry_open+0xbe1/0x1b70 [ 801.515056][T23688] vfs_open+0x3e/0x330 [ 801.519138][T23688] path_openat+0x2c84/0x3590 [ 801.523755][T23688] ? __pfx_path_openat+0x10/0x10 [ 801.528724][T23688] do_filp_open+0x27f/0x4e0 [ 801.533261][T23688] ? __pfx_do_filp_open+0x10/0x10 [ 801.538295][T23688] ? do_raw_spin_lock+0x14f/0x370 [ 801.543358][T23688] do_sys_openat2+0x13e/0x1d0 [ 801.548056][T23688] ? __pfx_do_sys_openat2+0x10/0x10 [ 801.553257][T23688] ? __fget_files+0x2a/0x410 [ 801.557854][T23688] ? __fget_files+0x2a/0x410 [ 801.562460][T23688] __ia32_compat_sys_openat+0x23f/0x290 [ 801.568017][T23688] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 801.574093][T23688] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 801.580723][T23688] ? lockdep_hardirqs_on+0x99/0x150 [ 801.585925][T23688] __do_fast_syscall_32+0xb4/0x110 [ 801.591058][T23688] ? exc_page_fault+0x590/0x8c0 [ 801.595955][T23688] do_fast_syscall_32+0x34/0x80 [ 801.600936][T23688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 801.607279][T23688] RIP: 0023:0xf7f24579 [ 801.611347][T23688] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 801.630959][T23688] RSP: 002b:00000000f50a6120 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 801.639469][T23688] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f50a6170 [ 801.647444][T23688] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73b0ff4 [ 801.655419][T23688] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 801.663406][T23688] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 801.671387][T23688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 801.679378][T23688] [ 801.729393][T23660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.742371][T23660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.767064][ T5901] usbhid 1-1:0.0: can't add hid device: -71 [ 801.794935][ T5901] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 801.824278][ T5902] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 801.842293][ T5902] cp210x 5-1:0.0: querying part number failed [ 801.855779][T23688] Mem-Info: [ 801.869860][T23688] active_anon:6159 inactive_anon:9 isolated_anon:0 [ 801.869860][T23688] active_file:7144 inactive_file:3207 isolated_file:0 [ 801.869860][T23688] unevictable:768 dirty:180 writeback:0 [ 801.869860][T23688] slab_reclaimable:6729 slab_unreclaimable:128390 [ 801.869860][T23688] mapped:31341 shmem:1448 pagetables:963 [ 801.869860][T23688] sec_pagetables:0 bounce:0 [ 801.869860][T23688] kernel_misc_reclaimable:0 [ 801.869860][T23688] free:1332497 free_pcp:2075 free_cma:0 [ 801.873289][ T5902] usb 5-1: cp210x converter now attached to ttyUSB0 [ 801.942172][T23688] Node 0 active_anon:24836kB inactive_anon:36kB active_file:28484kB inactive_file:12820kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125272kB dirty:716kB writeback:0kB shmem:4256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12852kB pagetables:3852kB sec_pagetables:0kB all_unreclaimable? no [ 801.947256][ T46] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 801.982815][ T6702] usb 7-1: Using ep0 maxpacket: 16 [ 801.989798][ T5901] usb 1-1: USB disconnect, device number 64 [ 802.000473][ T46] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 802.008392][ T6702] usb 7-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.019958][ T6702] usb 7-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 802.038031][T23688] Node 1 active_anon:0kB inactive_anon:0kB active_file:92kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 802.061777][ T5902] usb 5-1: USB disconnect, device number 104 [ 802.068797][T23688] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 802.074983][ T6702] usb 7-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 802.148897][ T5902] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 802.159980][ T5902] cp210x 5-1:0.0: device disconnected [ 802.177437][T23688] lowmem_reserve[]: 0 2463 2464 0 0 [ 802.182749][T23688] Node 0 DMA32 free:1414588kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:24352kB inactive_anon:36kB active_file:28444kB inactive_file:12456kB unevictable:1536kB writepending:732kB present:3129332kB managed:2550496kB mlocked:0kB bounce:0kB free_pcp:2092kB local_pcp:1160kB free_cma:0kB [ 802.194158][ T6702] usb 7-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 802.230415][ T6702] usb 7-1: config 1 interface 0 has no altsetting 0 [ 802.258630][ T6702] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 802.277468][T23688] lowmem_reserve[]: 0 0 0 0 0 [ 802.282264][T23688] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:212kB inactive_anon:0kB active_file:40kB inactive_file:368kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 802.287483][ T6702] usb 7-1: New USB device strings: Mfr=0, Product=21, SerialNumber=1 [ 802.319769][ T6702] usb 7-1: Product: syz [ 802.329556][ T6702] usb 7-1: SerialNumber: syz [ 802.351431][T23686] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 802.360618][T23686] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 802.373436][T23688] lowmem_reserve[]: 0 0 0 0 0 [ 802.388376][T23688] Node 1 Normal free:3899296kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:92kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6144kB local_pcp:6144kB free_cma:0kB [ 802.442591][ T46] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 802.453569][ T46] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 802.461695][ T46] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 802.478065][T23688] lowmem_reserve[]: 0 0 0 0 0 [ 802.487507][T23688] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB [ 802.487632][ T46] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 802.507848][ T46] usb 4-1: USB disconnect, device number 77 [ 802.526243][T23688] 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 802.587307][T23688] Node 0 DMA32: 612*4kB (UME) 1136*8kB (UME) 845*16kB (UME) 710*32kB (UME) 297*64kB (UME) 173*128kB (UME) 135*256kB (UME) 78*512kB (UME) 29*1024kB (UM) 7*2048kB (UME) 294*4096kB (UM) = 1411680kB [ 802.588175][T23686] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 802.606770][T23688] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 802.629021][T23688] Node 1 Normal: 200*4kB (UME) 48*8kB (UME) 48*16kB (UME) 198*32kB (UE) 71*64kB (UME) 33*128kB (UME) 19*256kB (UME) 9*512kB (UME) 6*1024kB (UME) 4*2048kB (UM) 942*4096kB (UM) = 3899296kB [ 802.664664][T23686] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 802.672087][T23688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 802.682134][T23688] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 802.707170][T23688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 802.729729][T23688] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 802.774362][T23688] 12665 total pagecache pages [ 802.794692][T23688] 9 pages in swap cache [ 802.815137][T23688] Free swap = 124648kB [ 802.825287][T23688] Total swap = 124996kB [ 802.845084][T23688] 2097051 pages RAM [ 802.860925][T23688] 0 pages HighMem/MovableOnly [ 802.865672][T23688] 427641 pages reserved [ 802.901278][T23688] 0 pages cma reserved [ 802.922287][T23688] tty tty34: ldisc open failed (-12), clearing slot 33 [ 803.019873][ T6702] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 803.037811][ T6702] usb 7-1: USB disconnect, device number 61 [ 803.094004][ T5904] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 803.249601][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.277266][ T5904] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 803.303118][ T5904] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 803.321351][ T5904] usb 1-1: New USB device strings: Mfr=28, Product=0, SerialNumber=0 [ 803.350263][ T5904] usb 1-1: Manufacturer: syz [ 803.370978][ T5904] usb 1-1: config 0 descriptor?? [ 803.404971][T23727] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3262'. [ 803.414596][T23727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3262'. [ 803.615263][T23737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3263'. [ 803.803809][T23744] tipc: Failed to remove unknown binding: 66,1,1/257:432326783/432326785 [ 803.844124][T23744] tipc: Failed to remove unknown binding: 66,1,1/257:432326783/432326785 [ 803.857326][T23744] tipc: Failed to remove unknown binding: 66,1,1/257:432326783/432326785 [ 804.184520][T23758] netlink: 'syz.3.3268': attribute type 34 has an invalid length. [ 804.329468][ T5905] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 804.366361][T23767] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3257'. [ 804.438987][T23770] netlink: 'syz.3.3269': attribute type 10 has an invalid length. [ 804.547938][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 804.558855][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.574009][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.602099][ T5905] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 804.634135][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.658344][ T5905] usb 5-1: config 0 descriptor?? [ 804.680787][ T5905] hub 5-1:0.0: USB hub found [ 804.748609][ T46] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 804.901962][ T5905] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 804.919387][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.942627][ T5905] usbhid 5-1:0.0: can't add hid device: -71 [ 804.949256][ T5905] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 804.952728][ T46] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 804.971346][ T5905] usb 5-1: USB disconnect, device number 105 [ 804.999175][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 805.016074][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.048892][ T46] usb 4-1: Product: syz [ 805.053108][ T46] usb 4-1: Manufacturer: syz [ 805.062555][ T46] usb 4-1: SerialNumber: syz [ 805.194439][ T5902] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 805.277038][T23770] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 805.397219][ T5902] usb 7-1: Using ep0 maxpacket: 16 [ 805.404397][ T5902] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 805.417692][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 805.450799][ T5902] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 805.464569][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.474010][ T5902] usb 7-1: Product: syz [ 805.478610][ T5902] usb 7-1: Manufacturer: syz [ 805.483264][ T5902] usb 7-1: SerialNumber: syz [ 805.492801][ T5902] usb 7-1: config 0 descriptor?? [ 805.519939][ T5902] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 805.536989][ T5902] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 805.580731][ T5901] usb 1-1: USB disconnect, device number 65 [ 805.905894][ T46] cdc_ncm 4-1:1.0: bind() failure [ 805.937394][ T6702] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 805.947876][ T46] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 805.954777][ T46] cdc_ncm 4-1:1.1: bind() failure [ 805.997869][ T5901] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 806.026599][ T46] usb 4-1: USB disconnect, device number 78 [ 806.117368][ T6702] usb 5-1: Using ep0 maxpacket: 32 [ 806.137516][ T6702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.150931][ T6702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.188459][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 806.193804][ T6702] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 806.205807][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.227640][ T6702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.236925][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.248926][ T5902] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 806.268919][ T6702] usb 5-1: config 0 descriptor?? [ 806.274137][ T5902] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 806.281456][ T5901] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 806.298770][ T6702] hub 5-1:0.0: USB hub found [ 806.304368][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.330214][ T5901] usb 1-1: config 0 descriptor?? [ 806.337894][ T5901] hub 1-1:0.0: USB hub found [ 806.501788][T23785] __nla_validate_parse: 2 callbacks suppressed [ 806.501807][T23785] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3273'. [ 806.570409][T23836] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3275'. [ 806.972654][ T5902] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 806.982383][ T5902] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 807.046890][ T271] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 807.107016][ T5901] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 807.125418][ T6702] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 807.157527][ T5901] usbhid 1-1:0.0: can't add hid device: -71 [ 807.164029][ T6702] usbhid 5-1:0.0: can't add hid device: -71 [ 807.178219][ T6702] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 807.186230][ T5901] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 807.228452][ T5901] usb 1-1: USB disconnect, device number 66 [ 807.236315][ T6702] usb 5-1: USB disconnect, device number 106 [ 807.406409][ T5902] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 807.418012][ T5902] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 807.427792][ T5902] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 807.435044][ T5902] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 807.455719][ T5902] usb 7-1: USB disconnect, device number 62 [ 807.777533][T23881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3281'. [ 807.814512][T23881] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3281'. [ 807.845866][T23881] fuse: Bad value for 'group_id' [ 807.873779][T23881] fuse: Bad value for 'group_id' [ 807.911899][T23888] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 807.912364][T23886] IPVS: stopping backup sync thread 23888 ... [ 807.987418][ T5905] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 808.097457][ T5902] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 808.127672][ T5905] usb 5-1: device descriptor read/64, error -71 [ 808.226387][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 808.226406][ T29] audit: type=1326 audit(1732712015.692:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23902 comm="syz.3.3287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 808.271603][ T5902] usb 1-1: config 0 has an invalid interface number: 27 but max is 0 [ 808.280196][ T5902] usb 1-1: config 0 has no interface number 0 [ 808.294631][ T5902] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 808.321728][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.326481][ T29] audit: type=1326 audit(1732712015.732:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23902 comm="syz.3.3287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 808.356130][ T5902] usb 1-1: config 0 descriptor?? [ 808.375216][ T5902] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 808.389496][ T29] audit: type=1326 audit(1732712015.732:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23902 comm="syz.3.3287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 808.412552][ T5905] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 808.414217][ T5902] dvb-usb: bulk message failed: -22 (3/0) [ 808.434738][ T5902] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 808.475022][ T5902] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 808.479678][ T29] audit: type=1326 audit(1732712015.732:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23902 comm="syz.3.3287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 808.494936][ T5902] usb 1-1: media controller created [ 808.555137][ T5902] dvb-usb: bulk message failed: -22 (5/0) [ 808.568514][ T5905] usb 5-1: device descriptor read/64, error -71 [ 808.572900][ T5902] dvb-usb: MAC address reading failed. [ 808.604951][ T29] audit: type=1326 audit(1732712015.732:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23902 comm="syz.3.3287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 808.630300][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.681544][ T5902] dvb-usb: bulk message failed: -22 (6/0) [ 808.687205][ T29] audit: type=1326 audit(1732712015.732:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23902 comm="syz.3.3287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 808.712352][ T5902] dvb-usb: bulk message failed: -22 (6/0) [ 808.718971][ T5905] usb usb5-port1: attempt power cycle [ 808.732581][T23914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3290'. [ 808.750335][ T5902] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 808.790991][ T5902] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input68 [ 808.797197][ T29] audit: type=1326 audit(1732712015.732:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23902 comm="syz.3.3287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 808.848719][ T5902] dvb-usb: schedule remote query interval to 100 msecs. [ 808.883872][ T29] audit: type=1326 audit(1732712015.742:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23902 comm="syz.3.3287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 808.887736][ T5902] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 808.931224][ T29] audit: type=1326 audit(1732712015.742:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23902 comm="syz.3.3287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 808.977661][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.984002][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.000668][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 809.017237][ T25] dvb-usb: error while querying for an remote control event. [ 809.061872][ T5902] usb 1-1: USB disconnect, device number 67 [ 809.107501][ T5905] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 809.118262][ T5902] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 809.141759][ T5905] usb 5-1: device descriptor read/8, error -71 [ 809.157247][ T5923] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 809.207580][T23914] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 809.318314][ T5923] usb 7-1: Using ep0 maxpacket: 16 [ 809.369065][ T5923] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 809.376684][ T5923] usb 7-1: can't read configurations, error -61 [ 809.408058][ T5905] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 809.485123][ T5905] usb 5-1: device descriptor read/8, error -71 [ 809.576561][ T5923] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 809.623019][ T5905] usb usb5-port1: unable to enumerate USB device [ 809.762654][T23941] kernel read not supported for file / œ7³ÏüâW)ëÇ-ë: (pid: 23941 comm: syz.3.3294) [ 809.780040][ T29] audit: type=1800 audit(1732712017.252:2098): pid=23941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3294" name=20019C1437B3CFFCC3A25729EBC72DEB3A dev="mqueue" ino=120399 res=0 errno=0 [ 809.807938][ T5923] usb 7-1: Using ep0 maxpacket: 16 [ 809.833698][ T5923] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 809.841669][ T5923] usb 7-1: can't read configurations, error -61 [ 809.858060][ T5923] usb usb7-port1: attempt power cycle [ 809.887473][ T5905] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 810.049031][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 810.060004][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.081923][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.099553][ T5905] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 810.112435][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.129029][ T5905] usb 1-1: config 0 descriptor?? [ 810.146430][ T5905] hub 1-1:0.0: USB hub found [ 810.217483][ T5923] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 810.239538][ T5923] usb 7-1: Using ep0 maxpacket: 16 [ 810.251213][ T5923] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 810.267480][ T5923] usb 7-1: can't read configurations, error -61 [ 810.359585][ T5905] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 810.381707][ T5905] usbhid 1-1:0.0: can't add hid device: -71 [ 810.400970][ T5905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 810.409563][ T5923] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 810.448453][ T5905] usb 1-1: USB disconnect, device number 68 [ 810.455981][ T5923] usb 7-1: Using ep0 maxpacket: 16 [ 810.465631][ T5923] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 810.486608][ T5923] usb 7-1: can't read configurations, error -61 [ 810.500059][ T5923] usb usb7-port1: unable to enumerate USB device [ 810.924102][T23985] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 811.009781][T23990] tipc: Failed to remove unknown binding: 66,1,1/0:3058144898/3058144900 [ 811.022255][T23990] tipc: Failed to remove unknown binding: 66,1,1/0:3058144898/3058144900 [ 811.031460][T23990] tipc: Failed to remove unknown binding: 66,1,1/0:3058144898/3058144900 [ 811.137219][ T6702] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 811.187471][ T5905] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 811.300127][ T6702] usb 4-1: config 0 has an invalid interface number: 252 but max is 0 [ 811.311413][ T6702] usb 4-1: config 0 has no interface number 0 [ 811.317673][ T6702] usb 4-1: config 0 interface 252 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 811.330811][ T6702] usb 4-1: New USB device found, idVendor=04cb, idProduct=011b, bcdDevice=7c.8e [ 811.339958][ T6702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.356699][ T6702] usb 4-1: config 0 descriptor?? [ 811.368770][ T6702] gspca_main: finepix-2.14.0 probing 04cb:011b [ 811.377214][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 811.397939][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 811.409742][ T5904] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 811.429998][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 811.464077][ T5905] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 811.483915][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.499838][ T5905] usb 5-1: Product: syz [ 811.519411][ T5905] usb 5-1: Manufacturer: syz [ 811.524055][ T5905] usb 5-1: SerialNumber: syz [ 811.537869][ T5905] usb 5-1: config 0 descriptor?? [ 811.552553][ T5905] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 811.564644][ T5905] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 811.585300][ T5903] usb 4-1: USB disconnect, device number 79 [ 811.591647][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 811.606177][ T5904] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 811.627779][ T5904] usb 1-1: config 0 has no interface number 0 [ 811.633968][ T5904] usb 1-1: config 0 interface 2 has no altsetting 0 [ 811.668385][ T5904] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 811.684371][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.698201][ T5904] usb 1-1: Product: syz [ 811.712942][ T5904] usb 1-1: Manufacturer: syz [ 811.723080][ T5904] usb 1-1: SerialNumber: syz [ 811.745086][ T5904] usb 1-1: config 0 descriptor?? [ 811.972450][T23998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.988106][T23998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.021843][ T5904] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 812.029785][T24023] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3301'. [ 812.058477][ T5904] usb 1-1: invalid MIDI in EP 0 [ 812.164095][ T5905] em28xx 5-1:0.0: chip ID is em2874 [ 812.224996][ T5904] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 812.238027][T24031] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3303'. [ 812.250997][ T5904] usb 1-1: USB disconnect, device number 69 [ 812.375380][T24031] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 812.377806][T24040] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3305'. [ 812.410162][T24040] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3305'. [ 812.450591][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.504315][T24045] netlink: 'syz.3.3306': attribute type 1 has an invalid length. [ 812.530268][T24045] netlink: 'syz.3.3306': attribute type 2 has an invalid length. [ 812.607326][T24045] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 812.797974][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 812.874845][T24064] FAULT_INJECTION: forcing a failure. [ 812.874845][T24064] name failslab, interval 1, probability 0, space 0, times 0 [ 812.897036][T24064] CPU: 1 UID: 0 PID: 24064 Comm: syz.7.3311 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 812.907508][T24064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 812.917594][T24064] Call Trace: [ 812.920898][T24064] [ 812.923855][T24064] dump_stack_lvl+0x241/0x360 [ 812.928558][T24064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.933757][T24064] ? __pfx__printk+0x10/0x10 [ 812.938358][T24064] ? __kmalloc_noprof+0xb5/0x4c0 [ 812.943321][T24064] ? __pfx___might_resched+0x10/0x10 [ 812.948638][T24064] should_fail_ex+0x3b0/0x4e0 [ 812.953344][T24064] should_failslab+0xac/0x100 [ 812.958060][T24064] __kmalloc_noprof+0xdd/0x4c0 [ 812.962850][T24064] ? mpi_powm+0x138c/0x2420 [ 812.967377][T24064] mpi_powm+0x138c/0x2420 [ 812.971750][T24064] ? __pfx_mpi_powm+0x10/0x10 [ 812.976459][T24064] ? __kasan_kmalloc+0x98/0xb0 [ 812.981252][T24064] ? __kmalloc_cache_noprof+0x243/0x390 [ 812.986840][T24064] ? __asan_memset+0x23/0x50 [ 812.991462][T24064] dh_compute_value+0x1f2/0x3e0 [ 812.996345][T24064] ? __pfx_dh_compute_value+0x10/0x10 [ 813.001745][T24064] ? rcu_is_watching+0x15/0xb0 [ 813.006542][T24064] ? trace_kmalloc+0x1f/0xd0 [ 813.011158][T24064] ? __keyctl_dh_compute+0x7f5/0xf50 [ 813.016447][T24064] __keyctl_dh_compute+0x955/0xf50 [ 813.021564][T24064] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 813.027212][T24064] ? __pfx___might_resched+0x10/0x10 [ 813.032510][T24064] ? __might_fault+0xc6/0x120 [ 813.037186][T24064] ? compat_keyctl_dh_compute+0x20a/0x310 [ 813.042913][T24064] compat_keyctl_dh_compute+0x21f/0x310 [ 813.048459][T24064] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 813.054527][T24064] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 813.060519][T24064] __do_fast_syscall_32+0xb4/0x110 [ 813.065631][T24064] ? exc_page_fault+0x590/0x8c0 [ 813.070484][T24064] do_fast_syscall_32+0x34/0x80 [ 813.075334][T24064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 813.081658][T24064] RIP: 0023:0xf7f24579 [ 813.085723][T24064] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 813.105332][T24064] RSP: 002b:00000000f50a657c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 813.113748][T24064] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000100 [ 813.121752][T24064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 813.129760][T24064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 813.137728][T24064] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 813.145696][T24064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 813.153675][T24064] [ 813.234177][ T5904] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 813.404502][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 813.425463][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.440277][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.457184][ T5904] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 813.484767][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.515899][ T5904] usb 4-1: config 0 descriptor?? [ 813.534764][ T5904] hub 4-1:0.0: USB hub found [ 813.742545][ T5904] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 813.764773][ T5904] usbhid 4-1:0.0: can't add hid device: -71 [ 813.771909][ T5903] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 813.801623][ T5904] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 813.832948][ T5904] usb 4-1: USB disconnect, device number 80 [ 813.915213][ T5905] usb 5-1: USB disconnect, device number 111 [ 813.923167][ T5905] em28xx 5-1:0.0: Disconnecting em28xx [ 813.935542][ T5905] em28xx 5-1:0.0: Freeing device [ 813.940926][ T5903] usb 7-1: Using ep0 maxpacket: 16 [ 813.949224][ T5903] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.973501][ T5903] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 813.994007][ T5903] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 814.006239][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.020107][ T5903] usb 7-1: Product: syz [ 814.024563][ T5903] usb 7-1: Manufacturer: syz [ 814.030589][ T5903] usb 7-1: SerialNumber: syz [ 814.293528][T24083] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20003 [ 814.499926][ T5903] usb 7-1: 0:2 : does not exist [ 814.559201][ T5903] usb 7-1: USB disconnect, device number 67 [ 814.619601][T24121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3321'. [ 814.831126][ T8079] udevd[8079]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 814.868445][T24121] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 815.173909][ T29] audit: type=1326 audit(1732712022.642:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24139 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 815.230778][ T29] audit: type=1326 audit(1732712022.672:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24139 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 815.252983][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.320042][ T29] audit: type=1326 audit(1732712022.672:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24139 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=323 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 815.411756][ T29] audit: type=1326 audit(1732712022.672:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24139 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 815.524588][ T29] audit: type=1326 audit(1732712022.672:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24139 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 815.617926][ T29] audit: type=1326 audit(1732712022.672:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24139 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 815.639927][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.697320][ T29] audit: type=1326 audit(1732712022.672:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24139 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 815.739293][ T5903] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 815.773848][ T29] audit: type=1326 audit(1732712022.672:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24139 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 815.804653][ T29] audit: type=1326 audit(1732712022.672:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24139 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 815.879890][ T29] audit: type=1326 audit(1732712022.672:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24139 comm="syz.6.3324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 815.929684][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 815.948894][ T5903] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 815.967253][ T5903] usb 1-1: config 0 has no interface number 0 [ 815.982615][ T5903] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 816.014376][ T5903] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 816.034755][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.067974][ T5903] usb 1-1: config 0 descriptor?? [ 816.121264][ T5903] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 816.227215][ T5904] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 816.292327][T24182] sctp: [Deprecated]: syz.4.3335 (pid 24182) Use of int in maxseg socket option. [ 816.292327][T24182] Use struct sctp_assoc_value instead [ 816.433036][ T6702] usb 1-1: USB disconnect, device number 70 [ 816.441016][ T6702] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 816.449485][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.516646][T24187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3336'. [ 816.539386][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.591058][ T5904] usb 7-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 816.600778][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.617457][ T5904] usb 7-1: config 0 descriptor?? [ 816.672395][T24187] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 817.273398][T24208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3337'. [ 817.321866][T24211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3338'. [ 817.477974][ T5904] usbhid 7-1:0.0: can't add hid device: -71 [ 817.484034][ T5904] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 817.533188][ T5904] usb 7-1: USB disconnect, device number 68 [ 817.591565][T24223] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 817.916223][T24240] binder: 24239:24240 ioctl c0306201 200003c0 returned -14 [ 818.043966][T24244] kvm: user requested TSC rate below hardware speed [ 818.077471][ T5923] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 818.207503][ T5904] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 818.227371][ T5923] usb 7-1: Using ep0 maxpacket: 32 [ 818.238448][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.259791][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.280324][ T5923] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 818.299519][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.327826][ T5923] usb 7-1: config 0 descriptor?? [ 818.344935][ T5923] hub 7-1:0.0: USB hub found [ 818.387703][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 818.400900][ T5904] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 818.410406][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.427236][ T5904] usb 4-1: Product: syz [ 818.437458][ T5904] usb 4-1: Manufacturer: syz [ 818.447894][ T5904] usb 4-1: SerialNumber: syz [ 818.465053][ T5904] usb 4-1: config 0 descriptor?? [ 818.481752][ T5904] as10x_usb: device has been detected [ 818.490224][ T5904] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 818.558644][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 818.591531][ T5923] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 818.607131][ T5904] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 818.648964][ T5923] usbhid 7-1:0.0: can't add hid device: -71 [ 818.665204][ T5923] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 818.681450][T24242] random: crng reseeded on system resumption [ 818.748096][ T5923] usb 7-1: USB disconnect, device number 69 [ 818.784254][ T5904] as10x_usb: error during firmware upload part1 [ 818.811552][ T5904] Registered device Sky IT Digital Key (green led) [ 819.420889][T24279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3355'. [ 819.496373][T24279] geneve2: entered promiscuous mode [ 819.521611][T24279] geneve2: entered allmulticast mode [ 819.546280][ T5905] usb 4-1: USB disconnect, device number 81 [ 819.578455][T24285] IPVS: stopping backup sync thread 24286 ... [ 819.584756][T24286] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 819.628610][ T5905] Unregistered device Sky IT Digital Key (green led) [ 819.632862][ T5905] as10x_usb: device has been disconnected [ 819.709479][T24288] netlink: 'syz.0.3357': attribute type 2 has an invalid length. [ 819.935897][T24304] binder: 24302:24304 ioctl c0306201 200003c0 returned -14 [ 819.958575][ T5901] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 820.153685][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.165228][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.202030][ T5901] usb 5-1: New USB device found, idVendor=0483, idProduct=3261, bcdDevice= 0.00 [ 820.231913][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.255469][ T5901] usb 5-1: config 0 descriptor?? [ 820.439814][T24324] FAULT_INJECTION: forcing a failure. [ 820.439814][T24324] name failslab, interval 1, probability 0, space 0, times 0 [ 820.453031][T24324] CPU: 0 UID: 0 PID: 24324 Comm: syz.7.3364 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 820.463481][T24324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 820.473574][T24324] Call Trace: [ 820.476890][T24324] [ 820.479848][T24324] dump_stack_lvl+0x241/0x360 [ 820.484573][T24324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.489813][T24324] ? __pfx__printk+0x10/0x10 [ 820.494449][T24324] ? lockdep_hardirqs_on+0x99/0x150 [ 820.499865][T24324] should_fail_ex+0x3b0/0x4e0 [ 820.504593][T24324] should_failslab+0xac/0x100 [ 820.509312][T24324] kmem_cache_alloc_node_noprof+0x77/0x380 [ 820.515158][T24324] ? __alloc_skb+0x1c3/0x440 [ 820.519789][T24324] __alloc_skb+0x1c3/0x440 [ 820.524241][T24324] ? rt6_nlmsg_size+0x3dc/0x590 [ 820.529121][T24324] ? __pfx___alloc_skb+0x10/0x10 [ 820.534790][T24324] ? notifier_call_chain+0x3bf/0x3e0 [ 820.540111][T24324] inet6_rt_notify+0xba/0x240 [ 820.544808][T24324] ? atomic_notifier_call_chain+0x16b/0x180 [ 820.550738][T24324] fib6_add+0x1e33/0x4420 [ 820.555118][T24324] ? __pfx_lock_acquire+0x10/0x10 [ 820.560168][T24324] ? __pfx_fib6_add+0x10/0x10 [ 820.564874][T24324] ? do_raw_spin_lock+0x14f/0x370 [ 820.569924][T24324] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 820.575762][T24324] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 820.581166][T24324] ? ip6_route_add+0x76/0x160 [ 820.585878][T24324] ip6_route_add+0x8b/0x160 [ 820.590410][T24324] rt6_add_route_info+0x271/0x430 [ 820.595462][T24324] ? __pfx_rt6_add_route_info+0x10/0x10 [ 820.601061][T24324] ? __pfx_rt6_get_dflt_router+0x10/0x10 [ 820.606730][T24324] ? __asan_memcpy+0x40/0x70 [ 820.611351][T24324] ? ipv6_addr_prefix+0xad/0x150 [ 820.616317][T24324] ? rt6_route_rcv+0x2f9/0x830 [ 820.621116][T24324] rt6_route_rcv+0x41c/0x830 [ 820.625780][T24324] ? __pfx_rt6_route_rcv+0x10/0x10 [ 820.631019][T24324] ? __ipv6_chk_addr_and_flags+0x66e/0x7c0 [ 820.636848][T24324] ? __ipv6_chk_addr_and_flags+0x17c/0x7c0 [ 820.642704][T24324] ndisc_router_discovery+0x12ce/0x3600 [ 820.648301][T24324] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 820.654221][T24324] ? csum_partial+0x22f/0x2b0 [ 820.658955][T24324] ? ndisc_rcv+0x466/0x6f0 [ 820.663404][T24324] icmpv6_rcv+0x1128/0x19e0 [ 820.667944][T24324] ? __pfx_icmpv6_rcv+0x10/0x10 [ 820.672819][T24324] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 820.677691][T24324] ip6_protocol_deliver_rcu+0x105b/0x1580 [ 820.683562][T24324] ? ip6_input_finish+0xdc/0x2d0 [ 820.688533][T24324] ip6_input_finish+0x187/0x2d0 [ 820.693408][T24324] ? __pfx_ip6_input_finish+0x10/0x10 [ 820.698805][T24324] NF_HOOK+0x3a4/0x450 [ 820.702899][T24324] ? NF_HOOK+0x9a/0x450 [ 820.707152][T24324] ? __pfx_NF_HOOK+0x10/0x10 [ 820.711761][T24324] ? __pfx_ip6_input_finish+0x10/0x10 [ 820.717164][T24324] ? ipv6_chk_mcast_addr+0x2e/0x840 [ 820.722378][T24324] ? ipv6_chk_mcast_addr+0x78f/0x840 [ 820.727688][T24324] ? ipv6_chk_mcast_addr+0x2e/0x840 [ 820.732919][T24324] ip6_mc_input+0x9c5/0xc30 [ 820.737443][T24324] ? __pfx_ip6_mc_input+0x10/0x10 [ 820.742489][T24324] ? skb_dst+0x72/0xd0 [ 820.746596][T24324] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 820.751815][T24324] NF_HOOK+0x3a4/0x450 [ 820.755903][T24324] ? skb_orphan+0x4b/0xd0 [ 820.760258][T24324] ? NF_HOOK+0x9a/0x450 [ 820.764445][T24324] ? __pfx_NF_HOOK+0x10/0x10 [ 820.769071][T24324] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 820.774307][T24324] ? __pfx_ipv6_rcv+0x10/0x10 [ 820.779022][T24324] __netif_receive_skb+0x1ea/0x650 [ 820.784171][T24324] ? __pfx_lock_acquire+0x10/0x10 [ 820.789222][T24324] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 820.795503][T24324] ? __pfx___netif_receive_skb+0x10/0x10 [ 820.801252][T24324] ? build_skb+0x52/0x2a0 [ 820.805612][T24324] ? tun_get_user+0x2177/0x4890 [ 820.810500][T24324] ? tun_chr_write_iter+0x10d/0x1f0 [ 820.815728][T24324] ? __do_fast_syscall_32+0xb4/0x110 [ 820.821078][T24324] ? do_fast_syscall_32+0x34/0x80 [ 820.826129][T24324] ? tun_rx_batched+0x160/0x8f0 [ 820.830990][T24324] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 820.836739][T24324] ? read_tsc+0x9/0x20 [ 820.840834][T24324] ? netif_receive_skb+0x131/0x890 [ 820.845962][T24324] ? netif_receive_skb+0x131/0x890 [ 820.851107][T24324] netif_receive_skb+0x1e8/0x890 [ 820.856046][T24324] ? tun_rx_batched+0x160/0x8f0 [ 820.860895][T24324] ? __pfx_netif_receive_skb+0x10/0x10 [ 820.866391][T24324] ? tun_rx_batched+0x160/0x8f0 [ 820.871295][T24324] tun_rx_batched+0x1b7/0x8f0 [ 820.875999][T24324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 820.882358][T24324] ? __pfx_lock_acquire+0x10/0x10 [ 820.887399][T24324] ? __pfx_tun_rx_batched+0x10/0x10 [ 820.892626][T24324] tun_get_user+0x30d6/0x4890 [ 820.897333][T24324] ? tun_get_user+0x2bbe/0x4890 [ 820.902238][T24324] ? tun_get_user+0x86e/0x4890 [ 820.907063][T24324] ? __lock_acquire+0x1397/0x2100 [ 820.912109][T24324] ? __pfx_tun_get_user+0x10/0x10 [ 820.917152][T24324] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 820.922636][T24324] ? tun_get+0x1e/0x2f0 [ 820.926830][T24324] ? __pfx_lock_release+0x10/0x10 [ 820.931891][T24324] ? tun_get+0x1e/0x2f0 [ 820.936065][T24324] ? tun_get+0x27d/0x2f0 [ 820.940352][T24324] tun_chr_write_iter+0x10d/0x1f0 [ 820.945387][T24324] vfs_write+0xaeb/0xd30 [ 820.949672][T24324] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 820.955224][T24324] ? __pfx_vfs_write+0x10/0x10 [ 820.960039][T24324] ? __fget_files+0x2a/0x410 [ 820.964637][T24324] ? __fget_files+0x2a/0x410 [ 820.969262][T24324] ksys_write+0x18f/0x2b0 [ 820.973626][T24324] ? __pfx_ksys_write+0x10/0x10 [ 820.978511][T24324] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 820.985140][T24324] ? lockdep_hardirqs_on+0x99/0x150 [ 820.990361][T24324] __do_fast_syscall_32+0xb4/0x110 [ 820.995501][T24324] ? exc_page_fault+0x590/0x8c0 [ 821.000366][T24324] do_fast_syscall_32+0x34/0x80 [ 821.005222][T24324] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 821.011553][T24324] RIP: 0023:0xf7f24579 [ 821.015612][T24324] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 821.035230][T24324] RSP: 002b:00000000f50a6540 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 821.043664][T24324] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000200003c0 [ 821.051659][T24324] RDX: 00000000000003b6 RSI: 00000000f73b0ff4 RDI: 0000000000000000 [ 821.059646][T24324] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 821.067623][T24324] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 821.075604][T24324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 821.083612][T24324] [ 821.326332][T24332] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3366'. [ 821.395631][ T5901] hid-generic 0003:0483:3261.0036: hidraw0: USB HID v0.00 Device [HID 0483:3261] on usb-dummy_hcd.4-1/input0 [ 821.408325][T24336] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3368'. [ 821.498365][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 821.498386][ T29] audit: type=1326 audit(1732712028.942:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24335 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 821.579915][ T29] audit: type=1326 audit(1732712028.942:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24335 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=317 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 821.607383][ T29] audit: type=1326 audit(1732712028.942:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24335 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 821.639683][ T29] audit: type=1326 audit(1732712028.942:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24335 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 821.671067][T24332] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 821.679546][ T29] audit: type=1326 audit(1732712028.942:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24335 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 821.923489][T24351] binder: BINDER_SET_CONTEXT_MGR already set [ 821.932138][T24351] binder: 24350:24351 ioctl 4018620d 20000040 returned -16 [ 821.941533][T24351] binder: 24350:24351 ioctl c0306201 200003c0 returned -14 [ 821.977307][ T5905] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 822.101309][T24360] input: syz0 as /devices/virtual/input/input69 [ 822.109289][T24357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'. [ 822.137311][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 822.144143][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.165971][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.185715][ T5905] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 822.197245][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.208424][ T5905] usb 4-1: config 0 descriptor?? [ 822.223549][ T5905] hub 4-1:0.0: USB hub found [ 822.237791][ T5901] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 822.351463][ T29] audit: type=1326 audit(1732712029.822:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24366 comm="syz.7.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 822.395298][ T29] audit: type=1326 audit(1732712029.822:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24366 comm="syz.7.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 822.407266][ T5901] usb 7-1: Using ep0 maxpacket: 8 [ 822.439407][ T5901] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 822.458407][ T5901] usb 7-1: config 0 has no interface number 0 [ 822.462825][ T5905] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 822.466214][ T5901] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 822.488067][ T5901] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 822.503794][ T29] audit: type=1326 audit(1732712029.832:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24366 comm="syz.7.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 822.526964][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.538376][ T5901] usb 7-1: config 0 descriptor?? [ 822.541490][ T5905] usbhid 4-1:0.0: can't add hid device: -71 [ 822.547742][ T5901] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 822.597507][ T5905] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 822.641009][ T5905] usb 4-1: USB disconnect, device number 82 [ 822.656497][ T29] audit: type=1326 audit(1732712029.832:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24366 comm="syz.7.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 822.732492][ T29] audit: type=1326 audit(1732712029.842:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24366 comm="syz.7.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 822.816324][ T5903] usb 5-1: USB disconnect, device number 112 [ 823.343473][ T2908] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.514519][ T5901] usb 7-1: USB disconnect, device number 70 [ 823.529548][ T5901] iowarrior 7-1:0.1: I/O-Warror #0 now disconnected [ 823.632357][ T2908] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.732383][T24390] binder: 24389:24390 ioctl c0306201 200003c0 returned -14 [ 823.881055][ T2908] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.125443][ T2908] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.248686][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 824.260881][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 824.282578][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 824.313105][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 824.330592][ T5858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 824.339666][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 824.368106][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.517785][ T5923] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 824.561320][ T2908] bridge_slave_1: left allmulticast mode [ 824.569970][ T2908] bridge_slave_1: left promiscuous mode [ 824.575769][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.617640][ T2908] bridge_slave_0: left allmulticast mode [ 824.623340][ T2908] bridge_slave_0: left promiscuous mode [ 824.651997][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.699711][ T5923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 824.723294][ T5923] usb 1-1: not running at top speed; connect to a high speed hub [ 824.754291][ T5923] usb 1-1: config 3 has an invalid interface number: 182 but max is 0 [ 824.773109][ T5923] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 824.794024][ T5923] usb 1-1: config 3 has no interface number 0 [ 824.824081][ T5923] usb 1-1: config 3 interface 182 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 824.854963][T24431] binder: 24430:24431 ioctl c018620c 0 returned -14 [ 824.857533][ T5923] usb 1-1: config 3 interface 182 altsetting 8 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 824.890908][ T5923] usb 1-1: config 3 interface 182 altsetting 8 endpoint 0xA has invalid wMaxPacketSize 0 [ 824.935349][ T5923] usb 1-1: config 3 interface 182 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 824.966195][ T5923] usb 1-1: config 3 interface 182 has no altsetting 0 [ 825.017883][ T5958] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 825.051374][ T5923] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 825.077295][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.097366][ T5923] usb 1-1: Product: syz [ 825.101584][ T5923] usb 1-1: Manufacturer: syz [ 825.117335][ T5923] usb 1-1: SerialNumber: syz [ 825.147606][ T5958] usb 7-1: device descriptor read/64, error -71 [ 825.489955][ T5904] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 825.607814][ T5958] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 825.647323][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 825.674798][ T5904] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 825.683210][ T5904] usb 4-1: config 0 has no interface number 0 [ 825.694212][ T5904] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 825.703639][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.713161][ T5904] usb 4-1: Product: syz [ 825.717965][ T5904] usb 4-1: Manufacturer: syz [ 825.722650][ T5904] usb 4-1: SerialNumber: syz [ 825.748298][ T5904] usb 4-1: config 0 descriptor?? [ 825.760440][ T5904] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 825.768222][ T5958] usb 7-1: device descriptor read/64, error -71 [ 825.888425][ T5958] usb usb7-port1: attempt power cycle [ 825.946119][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.975792][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.990108][ T2908] bond0 (unregistering): Released all slaves [ 826.031552][ T5923] usbtest 1-1:3.182: couldn't get endpoints, -71 [ 826.039183][ T5923] usbtest 1-1:3.182: probe with driver usbtest failed with error -71 [ 826.077747][ T5923] usb 1-1: USB disconnect, device number 71 [ 826.227707][ T5958] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 826.274082][ T5958] usb 7-1: device descriptor read/8, error -71 [ 826.397395][ T5858] Bluetooth: hci4: command tx timeout [ 826.447925][ T2908] hsr_slave_0: left promiscuous mode [ 826.463138][ T2908] hsr_slave_1: left promiscuous mode [ 826.473336][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.497593][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.514691][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.527345][ T5958] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 826.545430][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.560868][ T5958] usb 7-1: device descriptor read/8, error -71 [ 826.605443][ T2908] team_slave_0: left promiscuous mode [ 826.611692][ T2908] team_slave_1: left promiscuous mode [ 826.647885][ T2908] veth1_macvtap: left promiscuous mode [ 826.658535][ T2908] veth0_macvtap: left promiscuous mode [ 826.674559][ T2908] veth1_vlan: left promiscuous mode [ 826.681872][ T5958] usb usb7-port1: unable to enumerate USB device [ 826.692178][ T2908] veth0_vlan: left promiscuous mode [ 826.988652][T24463] binder: 24462:24463 ioctl c0306201 200003c0 returned -14 [ 827.197713][ T5904] gspca_topro: reg_r err -71 [ 827.207307][ T5904] gspca_topro: Sensor soi763a [ 827.240938][ T5904] usb 4-1: USB disconnect, device number 83 [ 827.362501][T24469] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3396'. [ 827.408633][T24469] ======================================================= [ 827.408633][T24469] WARNING: The mand mount option has been deprecated and [ 827.408633][T24469] and is ignored by this kernel. Remove the mand [ 827.408633][T24469] option from the mount to silence this warning. [ 827.408633][T24469] ======================================================= [ 827.834161][T24476] netlink: 85 bytes leftover after parsing attributes in process `syz.6.3399'. [ 827.866529][T24478] FAULT_INJECTION: forcing a failure. [ 827.866529][T24478] name failslab, interval 1, probability 0, space 0, times 0 [ 827.879253][T24478] CPU: 1 UID: 0 PID: 24478 Comm: syz.3.3400 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 827.889712][T24478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 827.899801][T24478] Call Trace: [ 827.903100][T24478] [ 827.906032][T24478] dump_stack_lvl+0x241/0x360 [ 827.910735][T24478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.915967][T24478] ? __pfx__printk+0x10/0x10 [ 827.920604][T24478] should_fail_ex+0x3b0/0x4e0 [ 827.925321][T24478] should_failslab+0xac/0x100 [ 827.930023][T24478] ? skb_ext_add+0x14d/0x910 [ 827.934614][T24478] kmem_cache_alloc_noprof+0x70/0x380 [ 827.939998][T24478] skb_ext_add+0x14d/0x910 [ 827.944425][T24478] ? br_validate_ipv4+0x4a3/0x820 [ 827.949456][T24478] br_nf_pre_routing+0xc35/0x1470 [ 827.954500][T24478] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 827.959956][T24478] br_handle_frame+0x9fd/0x1530 [ 827.964837][T24478] ? __pfx_br_handle_frame+0x10/0x10 [ 827.970209][T24478] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 827.976114][T24478] ? __pfx_br_handle_frame+0x10/0x10 [ 827.981399][T24478] __netif_receive_skb_core+0x14eb/0x4690 [ 827.987148][T24478] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 827.993219][T24478] ? mark_lock+0x9a/0x360 [ 827.997560][T24478] ? __lock_acquire+0x1397/0x2100 [ 828.002599][T24478] __netif_receive_skb+0x12f/0x650 [ 828.007709][T24478] ? __pfx_lock_acquire+0x10/0x10 [ 828.012734][T24478] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 828.019084][T24478] ? __pfx___netif_receive_skb+0x10/0x10 [ 828.024745][T24478] ? build_skb+0x52/0x2a0 [ 828.029094][T24478] ? tun_get_user+0x2177/0x4890 [ 828.034040][T24478] ? tun_chr_write_iter+0x10d/0x1f0 [ 828.039242][T24478] ? __do_fast_syscall_32+0xb4/0x110 [ 828.044530][T24478] ? do_fast_syscall_32+0x34/0x80 [ 828.049553][T24478] ? tun_rx_batched+0x160/0x8f0 [ 828.054408][T24478] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 828.060133][T24478] ? read_tsc+0x9/0x20 [ 828.064205][T24478] ? netif_receive_skb+0x131/0x890 [ 828.069315][T24478] ? netif_receive_skb+0x131/0x890 [ 828.074423][T24478] netif_receive_skb+0x1e8/0x890 [ 828.079360][T24478] ? tun_rx_batched+0x160/0x8f0 [ 828.084215][T24478] ? __pfx_netif_receive_skb+0x10/0x10 [ 828.089679][T24478] ? tun_rx_batched+0x160/0x8f0 [ 828.094531][T24478] tun_rx_batched+0x1b7/0x8f0 [ 828.099210][T24478] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 828.105535][T24478] ? __pfx_lock_acquire+0x10/0x10 [ 828.110557][T24478] ? __pfx_tun_rx_batched+0x10/0x10 [ 828.115781][T24478] tun_get_user+0x30d6/0x4890 [ 828.120462][T24478] ? tun_get_user+0x2bbe/0x4890 [ 828.125401][T24478] ? tun_get_user+0x86e/0x4890 [ 828.130169][T24478] ? __lock_acquire+0x1397/0x2100 [ 828.135196][T24478] ? __pfx_tun_get_user+0x10/0x10 [ 828.140237][T24478] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 828.145692][T24478] ? tun_get+0x1e/0x2f0 [ 828.149848][T24478] ? __pfx_lock_release+0x10/0x10 [ 828.154879][T24478] ? tun_get+0x1e/0x2f0 [ 828.159036][T24478] ? tun_get+0x27d/0x2f0 [ 828.163277][T24478] tun_chr_write_iter+0x10d/0x1f0 [ 828.168300][T24478] vfs_write+0xaeb/0xd30 [ 828.172541][T24478] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 828.178088][T24478] ? __pfx_vfs_write+0x10/0x10 [ 828.182858][T24478] ? __fget_files+0x2a/0x410 [ 828.187550][T24478] ? __fget_files+0x2a/0x410 [ 828.192165][T24478] ksys_write+0x18f/0x2b0 [ 828.196496][T24478] ? __pfx_ksys_write+0x10/0x10 [ 828.201353][T24478] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 828.207948][T24478] ? lockdep_hardirqs_on+0x99/0x150 [ 828.213161][T24478] __do_fast_syscall_32+0xb4/0x110 [ 828.218281][T24478] ? exc_page_fault+0x590/0x8c0 [ 828.223140][T24478] do_fast_syscall_32+0x34/0x80 [ 828.227993][T24478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 828.234323][T24478] RIP: 0023:0xf7f26579 [ 828.238399][T24478] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 828.258004][T24478] RSP: 002b:00000000f50a6540 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 828.266417][T24478] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000020000440 [ 828.274430][T24478] RDX: 0000000000000036 RSI: 00000000f73b0ff4 RDI: 0000000000000000 [ 828.282402][T24478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 828.290371][T24478] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 828.298339][T24478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 828.306322][T24478] [ 828.477365][ T5858] Bluetooth: hci4: command tx timeout [ 828.499333][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 828.579009][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 828.597526][ T5923] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 828.753766][ T5923] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 828.757161][ T5901] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 828.767332][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.785601][ T5923] usb 7-1: Product: syz [ 828.790012][ T5923] usb 7-1: Manufacturer: syz [ 828.794646][ T5923] usb 7-1: SerialNumber: syz [ 828.833770][ T5923] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 828.863317][ T5904] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 828.919557][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 828.926732][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.938490][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 828.966374][ T5901] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 828.977034][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.008817][ T5901] usb 4-1: config 0 descriptor?? [ 829.401899][T24418] chnl_net:caif_netlink_parms(): no params data found [ 829.669897][ T5901] usbhid 4-1:0.0: can't add hid device: -71 [ 829.707466][ T5901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 829.725781][ T5901] usb 4-1: USB disconnect, device number 84 [ 829.873135][T24418] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.898701][T24418] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.926500][ T5904] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 829.936234][T24418] bridge_slave_0: entered allmulticast mode [ 829.951515][T24418] bridge_slave_0: entered promiscuous mode [ 829.957829][ T5904] ath9k_htc: Failed to initialize the device [ 829.990059][T24418] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.018324][T24418] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.019680][ T5904] usb 7-1: ath9k_htc: USB layer deinitialized [ 830.025643][T24418] bridge_slave_1: entered allmulticast mode [ 830.058621][T24418] bridge_slave_1: entered promiscuous mode [ 830.079147][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 830.245623][T24503] FAULT_INJECTION: forcing a failure. [ 830.245623][T24503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.248221][T22170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 830.259001][T24503] CPU: 1 UID: 0 PID: 24503 Comm: syz.0.3406 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 830.276756][T24503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 830.286849][T24503] Call Trace: [ 830.290153][T24503] [ 830.293111][T24503] dump_stack_lvl+0x241/0x360 [ 830.297837][T24503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 830.303073][T24503] ? __pfx__printk+0x10/0x10 [ 830.307700][T24503] ? arch_stack_walk+0xfd/0x150 [ 830.312672][T24503] ? __pfx_lock_release+0x10/0x10 [ 830.317739][T24503] should_fail_ex+0x3b0/0x4e0 [ 830.322435][T24503] _copy_from_user+0x2f/0xc0 [ 830.327034][T24503] kvm_vm_ioctl+0x56c/0xd30 [ 830.331550][T24503] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 830.336577][T24503] ? kasan_save_track+0x51/0x80 [ 830.341428][T24503] ? kasan_save_track+0x3f/0x80 [ 830.346272][T24503] ? kasan_save_free_info+0x40/0x50 [ 830.351482][T24503] ? __kasan_slab_free+0x59/0x70 [ 830.356421][T24503] ? kfree+0x196/0x420 [ 830.360489][T24503] ? tomoyo_path_number_perm+0x679/0x860 [ 830.366135][T24503] ? security_file_ioctl_compat+0xc6/0x2a0 [ 830.371942][T24503] ? __se_compat_sys_ioctl+0xd6/0xc10 [ 830.377406][T24503] ? do_vfs_ioctl+0xf07/0x2e40 [ 830.382171][T24503] ? kvm_arch_vm_compat_ioctl+0x136/0x4d0 [ 830.387897][T24503] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 830.393976][T24503] ? mark_lock+0x9a/0x360 [ 830.398317][T24503] ? tomoyo_path_number_perm+0x206/0x860 [ 830.403956][T24503] ? __pfx_lock_release+0x10/0x10 [ 830.408983][T24503] ? tomoyo_path_number_perm+0x679/0x860 [ 830.414618][T24503] ? tomoyo_path_number_perm+0x679/0x860 [ 830.420270][T24503] ? tomoyo_path_number_perm+0x6f9/0x860 [ 830.425906][T24503] ? tomoyo_path_number_perm+0x206/0x860 [ 830.431553][T24503] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 830.437548][T24503] ? __pfx_lock_acquire+0x10/0x10 [ 830.442576][T24503] kvm_vm_compat_ioctl+0x26a/0x5a0 [ 830.447695][T24503] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 830.453329][T24503] ? __fget_files+0x2a/0x410 [ 830.457928][T24503] ? __fget_files+0x2a/0x410 [ 830.462557][T24503] __se_compat_sys_ioctl+0x502/0xc10 [ 830.467847][T24503] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 830.473653][T24503] ? __fget_files+0x2a/0x410 [ 830.478253][T24503] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 830.484234][T24503] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 830.490563][T24503] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 830.497151][T24503] ? lockdep_hardirqs_on+0x99/0x150 [ 830.502354][T24503] __do_fast_syscall_32+0xb4/0x110 [ 830.507471][T24503] ? exc_page_fault+0x590/0x8c0 [ 830.512326][T24503] do_fast_syscall_32+0x34/0x80 [ 830.517182][T24503] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 830.523521][T24503] RIP: 0023:0xf743d579 [ 830.527591][T24503] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 830.547202][T24503] RSP: 002b:00000000f512657c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 830.555622][T24503] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c040aed4 [ 830.563593][T24503] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 830.571566][T24503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 830.579561][T24503] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 830.587640][T24503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 830.595651][T24503] [ 830.640044][T22170] Bluetooth: hci4: command tx timeout [ 830.648552][T22170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 830.671109][T22170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 830.680699][T22170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 830.691815][T22170] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 830.701767][T22170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 830.832891][T24418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.910994][T24418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.071945][ T2908] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.132092][T24418] team0: Port device team_slave_0 added [ 831.185002][ T2908] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.222644][T24418] team0: Port device team_slave_1 added [ 831.305741][T24440] usb 7-1: USB disconnect, device number 75 [ 831.355676][ T2908] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.419507][T24418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.426494][T24418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.487557][T24418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.501132][T24418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.510700][T24418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.566149][T24418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.662909][ T2908] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.871804][T24418] hsr_slave_0: entered promiscuous mode [ 831.899993][T24418] hsr_slave_1: entered promiscuous mode [ 831.941439][T24418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 831.949892][T24418] Cannot create hsr debugfs directory [ 832.028516][ T5904] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 832.167228][ T5958] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 832.181821][T24508] chnl_net:caif_netlink_parms(): no params data found [ 832.197559][ T5904] usb 7-1: Using ep0 maxpacket: 8 [ 832.204663][ T5904] usb 7-1: config 194 has an invalid descriptor of length 131, skipping remainder of the config [ 832.223065][ T5904] usb 7-1: config 194 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 832.252819][ T5904] usb 7-1: config 194 interface 0 has no altsetting 0 [ 832.278771][ T5904] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 832.293846][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 832.329089][ T5958] usb 1-1: Using ep0 maxpacket: 8 [ 832.335983][ T5904] usb 7-1: SerialNumber: syz [ 832.339543][ T5958] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 832.376369][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.400437][ T5958] usb 1-1: Product: syz [ 832.409749][ T5958] usb 1-1: Manufacturer: syz [ 832.414401][ T5958] usb 1-1: SerialNumber: syz [ 832.438417][ T5958] usb 1-1: config 0 descriptor?? [ 832.465704][ T5958] gspca_main: se401-2.14.0 probing 047d:5003 [ 832.498636][ T2908] bridge_slave_1: left allmulticast mode [ 832.524725][ T2908] bridge_slave_1: left promiscuous mode [ 832.544391][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.567556][ T2908] bridge_slave_0: left allmulticast mode [ 832.581983][ T2908] bridge_slave_0: left promiscuous mode [ 832.587543][T24545] sctp: [Deprecated]: syz.6.3413 (pid 24545) Use of int in maxseg socket option. [ 832.587543][T24545] Use struct sctp_assoc_value instead [ 832.594207][ T5904] cdc_acm 7-1:194.0: Control and data interfaces are not separated! [ 832.631620][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.638015][ T5904] cdc_acm 7-1:194.0: This needs exactly 3 endpoints [ 832.650864][ T5904] cdc_acm 7-1:194.0: probe with driver cdc_acm failed with error -22 [ 832.683663][ T5904] usb 7-1: USB disconnect, device number 76 [ 832.717602][T22170] Bluetooth: hci4: command tx timeout [ 832.809772][T22170] Bluetooth: hci1: command tx timeout [ 833.437460][ T5901] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 833.460525][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.482752][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.498631][ T2908] bond0 (unregistering): Released all slaves [ 833.567632][T24508] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.575580][T24508] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.587541][T24508] bridge_slave_0: entered allmulticast mode [ 833.596081][T24508] bridge_slave_0: entered promiscuous mode [ 833.622332][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.636259][ T5958] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 833.646957][ T5958] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 833.656030][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.698560][ T5958] usb 1-1: USB disconnect, device number 72 [ 833.704738][ T5901] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 833.716114][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.733345][ T5901] usb 4-1: config 0 descriptor?? [ 833.880784][T24508] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.891961][T24508] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.900076][T24508] bridge_slave_1: entered allmulticast mode [ 833.908000][T24508] bridge_slave_1: entered promiscuous mode [ 834.153310][T24508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.166836][ T5901] viewsonic 0003:0543:E621.0037: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.3-1/input0 [ 834.191003][T24508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.367283][T24603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3421'. [ 834.521074][T24607] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 834.778629][T24508] team0: Port device team_slave_0 added [ 834.851167][ T2908] hsr_slave_0: left promiscuous mode [ 834.877811][T22170] Bluetooth: hci1: command tx timeout [ 834.887713][ T2908] hsr_slave_1: left promiscuous mode [ 834.916775][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.941323][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.969378][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.990558][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.040827][ T2908] veth1_macvtap: left promiscuous mode [ 835.052086][ T2908] veth0_macvtap: left promiscuous mode [ 835.065728][ T2908] veth1_vlan: left promiscuous mode [ 835.079828][ T2908] veth0_vlan: left promiscuous mode [ 835.124121][ T5923] usb 4-1: USB disconnect, device number 85 [ 835.851765][ T271] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 836.079787][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 836.208253][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 836.457356][ T5958] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 836.608469][ T5958] usb 7-1: device descriptor read/64, error -71 [ 836.857240][ T5958] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 836.879920][T24508] team0: Port device team_slave_1 added [ 836.958556][T22170] Bluetooth: hci1: command tx timeout [ 836.990240][T24508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.998089][ T5958] usb 7-1: device descriptor read/64, error -71 [ 837.027259][T24508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.099508][T24508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.125519][ T5958] usb usb7-port1: attempt power cycle [ 837.148117][T24508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.155103][T24508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.188529][T24508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.322418][T24508] hsr_slave_0: entered promiscuous mode [ 837.342872][T24508] hsr_slave_1: entered promiscuous mode [ 837.347274][ T5904] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 837.356145][T24508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 837.367461][T24508] Cannot create hsr debugfs directory [ 837.468011][ T5958] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 837.488972][T24418] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 837.499182][ T5958] usb 7-1: device descriptor read/8, error -71 [ 837.529441][T24418] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 837.541403][ T5904] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 837.553195][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.575087][T24418] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 837.583323][ T5904] usb 1-1: Product: syz [ 837.592823][ T5904] usb 1-1: Manufacturer: syz [ 837.604174][T24418] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 837.612436][ T5904] usb 1-1: SerialNumber: syz [ 837.643121][ T5904] usb 1-1: config 0 descriptor?? [ 837.747999][ T5958] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 837.789193][ T5958] usb 7-1: device descriptor read/8, error -71 [ 837.898223][ T5958] usb usb7-port1: unable to enumerate USB device [ 838.103906][T24418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.111378][ T5903] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 838.209811][T24418] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.249152][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.256330][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.272994][ T5903] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 838.283463][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.290620][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.299280][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.309960][ T5903] usb 4-1: config 0 descriptor?? [ 838.463546][T24418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.519890][ T5903] [drm] vendor descriptor length:c3 data:f3 31 7b ba b2 61 61 78 05 b7 bf [ 838.523627][T24508] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 838.536262][ T5903] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 838.556843][T24508] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 838.576988][T24508] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 838.590513][T24508] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 838.658672][T24418] veth0_vlan: entered promiscuous mode [ 838.689302][T24418] veth1_vlan: entered promiscuous mode [ 838.744297][ T5903] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 838.756991][ T5903] [drm] Initialized udl on minor 2 [ 838.764631][T24418] veth0_macvtap: entered promiscuous mode [ 838.792056][T24418] veth1_macvtap: entered promiscuous mode [ 838.832444][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.854257][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.867552][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.891712][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.902607][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.913502][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.924374][ T5903] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 838.933407][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.946383][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.949405][ T5903] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 838.965310][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.992173][ T5923] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 839.008200][ T5923] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 839.017338][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.027369][ T5923] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 839.037947][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.049455][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.059425][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.069951][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.077720][T22170] Bluetooth: hci1: command tx timeout [ 839.079864][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.095668][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.106743][T24418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.118093][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.128867][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.138944][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.149692][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.160007][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.170694][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.180677][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.191188][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.201332][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.211887][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.221899][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.232503][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.242453][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.253009][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.262960][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.273482][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.283477][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.294004][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.303915][T24418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.314470][T24418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.325553][T24418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.335438][ T5903] usb 4-1: USB disconnect, device number 86 [ 839.351807][T24508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.362093][T24662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.379278][T24662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.406322][T24661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3429'. [ 839.421098][T24418] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.430976][T24418] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.443512][T24418] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.454434][T24418] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.519459][T24508] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.617669][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.624834][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.645999][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.653255][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.725194][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.737909][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.829519][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.838253][ T5902] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 839.847043][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.904047][T24508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.985852][T24508] veth0_vlan: entered promiscuous mode [ 840.006236][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 840.019325][ T5902] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 64 [ 840.035470][T24508] veth1_vlan: entered promiscuous mode [ 840.042306][ T5902] usb 4-1: config 1 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 840.062199][T24676] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3381'. [ 840.073080][ T5902] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 0 [ 840.102261][ T5902] usb 4-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.116309][ T5902] usb 4-1: config 1 interface 0 has no altsetting 0 [ 840.129926][ T5902] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 840.135949][T24508] veth0_macvtap: entered promiscuous mode [ 840.146636][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.155959][ T5902] usb 4-1: Product: syz [ 840.162748][ T5902] usb 4-1: Manufacturer: syz [ 840.168031][ T5902] usb 4-1: SerialNumber: syz [ 840.198247][T24669] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 840.209555][T24508] veth1_macvtap: entered promiscuous mode [ 840.210001][ T5902] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 840.270326][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.293031][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.307222][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.333108][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.357184][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.369120][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.385256][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.407263][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.424773][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.436826][T24669] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 840.445887][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.457658][ T5902] usbtest 4-1:1.0: Linux user mode ISO test driver [ 840.464830][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.488010][ T5902] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 840.503128][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.526353][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.538314][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.549028][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.553942][ T5903] usb 1-1: USB disconnect, device number 73 [ 840.564160][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.585360][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.604825][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.620174][T24508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.679917][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.700032][ T5902] usb 4-1: USB disconnect, device number 87 [ 840.724180][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.735103][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.754883][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.765585][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.778417][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.788647][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.809245][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.826627][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.846160][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.856787][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.868028][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.879293][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.890304][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.900553][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.912180][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.922339][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.933286][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.943454][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.954773][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.965408][T24508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.976495][T24508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.978616][ T5904] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 841.011070][T24508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.061112][T24508] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.086125][T24508] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.102250][T24508] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.140982][T24508] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.157311][ T5904] usb 10-1: device descriptor read/64, error -71 [ 841.164853][T24681] ipvlan1: entered promiscuous mode [ 841.182073][T24681] ipvlan1: entered allmulticast mode [ 841.192025][T24681] veth0_vlan: entered allmulticast mode [ 841.348552][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.364923][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.425940][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.427643][ T5904] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 841.436999][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.447296][ T58] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 841.587372][ T5904] usb 10-1: device descriptor read/64, error -71 [ 841.598853][T12240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 841.617209][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 841.630263][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 841.650259][ T58] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 841.677660][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 841.695743][ T58] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 841.718222][ T5904] usb usb10-port1: attempt power cycle [ 841.725395][T24701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3442'. [ 841.736222][ T58] usb 7-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 841.748181][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.797771][ T58] usb 7-1: Product: syz [ 841.801991][ T58] usb 7-1: Manufacturer: syz [ 841.806619][ T58] usb 7-1: SerialNumber: syz [ 841.839336][ T58] usb 7-1: config 0 descriptor?? [ 841.859397][ T58] mct_u232 7-1:0.0: MCT U232 converter detected [ 841.879072][ T58] mct_u232 ttyUSB0: expected endpoint missing [ 841.905541][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 841.905559][ T29] audit: type=1326 audit(1732712049.362:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24699 comm="syz.0.3442" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x0 [ 842.088890][ T5904] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 842.128659][ T5904] usb 10-1: device descriptor read/8, error -71 [ 842.142391][T24689] netlink: 'syz.6.3439': attribute type 29 has an invalid length. [ 842.160422][T24689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3439'. [ 842.195407][T24689] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3439'. [ 842.197755][T24716] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 842.235164][T24689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.269006][T24689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.312826][ T5902] usb 7-1: USB disconnect, device number 81 [ 842.323566][ T5902] mct_u232 7-1:0.0: device disconnected [ 842.367734][ T5904] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 842.408037][ T5904] usb 10-1: device descriptor read/8, error -71 [ 842.524226][ T5904] usb usb10-port1: unable to enumerate USB device [ 842.857219][ T5904] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 842.979918][ T29] audit: type=1326 audit(1732712050.452:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24750 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 843.027516][ T5901] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 843.037441][ T5904] usb 9-1: Using ep0 maxpacket: 32 [ 843.047631][ T29] audit: type=1326 audit(1732712050.512:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24750 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=348 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 843.075279][ T5904] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 843.091251][ T5904] usb 9-1: config 0 has no interface number 0 [ 843.118398][ T5904] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 843.129120][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.149384][ T5904] usb 9-1: Product: syz [ 843.153600][ T5904] usb 9-1: Manufacturer: syz [ 843.158496][ T29] audit: type=1326 audit(1732712050.512:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24750 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 843.197967][ T5904] usb 9-1: SerialNumber: syz [ 843.215659][ T5904] usb 9-1: config 0 descriptor?? [ 843.229130][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 843.233386][ T29] audit: type=1326 audit(1732712050.512:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24750 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 843.240396][ T5901] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 843.297244][ T5901] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 843.317651][ T29] audit: type=1326 audit(1732712050.512:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24750 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 843.339748][ T5901] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 843.339785][ T5901] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 843.339808][ T5901] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 843.340362][ T5901] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 843.391181][ T29] audit: type=1326 audit(1732712050.512:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24750 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 843.424979][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.449946][ T29] audit: type=1326 audit(1732712050.512:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24750 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 843.458104][ T5904] radio-si470x 9-1:0.35: this is not a si470x device. [ 843.480816][ T29] audit: type=1326 audit(1732712050.542:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24750 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 843.503461][ T29] audit: type=1326 audit(1732712050.542:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24750 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7ffc0000 [ 843.542684][T24766] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3456'. [ 843.637925][ T5904] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 843.650249][ T5901] usb 4-1: usb_control_msg returned -32 [ 843.655998][ T5901] usbtmc 4-1:16.0: can't read capabilities [ 843.667507][ T5904] usb 9-1: USB disconnect, device number 67 [ 843.733026][T24766] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 843.991626][T24780] bridge0: port 2(bridge_slave_1) entered learning state [ 844.038474][T24780] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.690202][T24811] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 845.228328][ T5901] usb 10-1: new full-speed USB device number 66 using dummy_hcd [ 845.367720][ T5904] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 845.399430][ T5901] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.424520][ T5901] usb 10-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 845.452898][ T5901] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.476940][ T5901] usb 10-1: Product: syz [ 845.487963][ T5901] usb 10-1: Manufacturer: syz [ 845.503531][ T5901] usb 10-1: SerialNumber: syz [ 845.526373][ T5901] usb 10-1: config 0 descriptor?? [ 845.537626][ T5904] usb 9-1: Using ep0 maxpacket: 16 [ 845.555784][ T5901] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 845.558847][ T5904] usb 9-1: unable to get BOS descriptor or descriptor too short [ 845.571937][T24857] vlan2: entered promiscuous mode [ 845.594260][ T5904] usb 9-1: config 59 has an invalid interface number: 196 but max is 0 [ 845.608747][ T5901] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 845.618776][ T5904] usb 9-1: config 59 has an invalid interface descriptor of length 5, skipping [ 845.624147][ T5901] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 845.655258][ T5904] usb 9-1: config 59 has an invalid interface descriptor of length 2, skipping [ 845.687384][ T5904] usb 9-1: config 59 has an invalid descriptor of length 195, skipping remainder of the config [ 845.717423][ T5904] usb 9-1: config 59 has no interface number 0 [ 845.723862][ T5904] usb 9-1: config 59 interface 196 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 845.747212][ T5901] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 845.776721][ T5904] usb 9-1: config 59 interface 196 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 845.787248][ T5901] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 845.808678][ T5904] usb 9-1: config 59 interface 196 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 845.847315][ T58] usb 4-1: USB disconnect, device number 88 [ 845.867214][ T5904] usb 9-1: config 59 interface 196 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 845.907799][ T5901] usb 10-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 845.945592][ T5901] usb 10-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 845.961340][ T5904] usb 9-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=74.a5 [ 845.972567][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.986713][ T5904] usb 9-1: Product: syz [ 845.998260][ T5904] usb 9-1: Manufacturer: syz [ 846.007638][ T5901] usb 10-1: USB disconnect, device number 66 [ 846.010406][ T5904] usb 9-1: SerialNumber: syz [ 846.187405][ T5903] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 846.227379][ T58] ================================================================== [ 846.235575][ T58] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x2f/0x140 [ 846.244720][ T58] Read of size 8 at addr ffff88807d851b08 by task kworker/0:2/58 [ 846.252459][ T58] [ 846.254799][ T58] CPU: 0 UID: 0 PID: 58 Comm: kworker/0:2 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 846.265057][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 846.275140][ T58] Workqueue: events binder_deferred_func [ 846.280804][ T58] Call Trace: [ 846.284091][ T58] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 846.287044][ T58] dump_stack_lvl+0x241/0x360 [ 846.291746][ T58] ? __pfx_dump_stack_lvl+0x10/0x10 [ 846.296972][ T58] ? __pfx__printk+0x10/0x10 [ 846.301583][ T58] ? _printk+0xd5/0x120 [ 846.305758][ T58] ? __virt_addr_valid+0x183/0x530 [ 846.310899][ T58] ? __virt_addr_valid+0x183/0x530 [ 846.316036][ T58] print_report+0x169/0x550 [ 846.320563][ T58] ? __virt_addr_valid+0x183/0x530 [ 846.325696][ T58] ? __virt_addr_valid+0x183/0x530 [ 846.330829][ T58] ? __virt_addr_valid+0x45f/0x530 [ 846.335970][ T58] ? __phys_addr+0xba/0x170 [ 846.340494][ T58] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 846.346850][ T58] kasan_report+0x143/0x180 [ 846.351375][ T58] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 846.357735][ T58] __list_del_entry_valid_or_report+0x2f/0x140 [ 846.363929][ T58] binder_release_work+0xc7/0x480 [ 846.368978][ T58] binder_deferred_func+0x1275/0x1460 [ 846.374370][ T58] ? process_scheduled_works+0x976/0x1850 [ 846.380127][ T58] process_scheduled_works+0xa63/0x1850 [ 846.385715][ T58] ? __pfx_process_scheduled_works+0x10/0x10 [ 846.391735][ T58] ? assign_work+0x364/0x3d0 [ 846.396361][ T58] worker_thread+0x870/0xd30 [ 846.400977][ T58] ? __kthread_parkme+0x169/0x1d0 [ 846.406025][ T58] ? __pfx_worker_thread+0x10/0x10 [ 846.411163][ T58] kthread+0x2f0/0x390 [ 846.415257][ T58] ? __pfx_worker_thread+0x10/0x10 [ 846.420391][ T58] ? __pfx_kthread+0x10/0x10 [ 846.425000][ T58] ret_from_fork+0x4b/0x80 [ 846.429436][ T58] ? __pfx_kthread+0x10/0x10 [ 846.434058][ T58] ret_from_fork_asm+0x1a/0x30 [ 846.438860][ T58] [ 846.441885][ T58] [ 846.444214][ T58] Allocated by task 24852: [ 846.448716][ T58] kasan_save_track+0x3f/0x80 [ 846.453400][ T58] __kasan_kmalloc+0x98/0xb0 [ 846.458004][ T58] __kmalloc_cache_noprof+0x243/0x390 [ 846.463397][ T58] binder_ioctl_write_read+0xe7f/0xb560 [ 846.468961][ T58] binder_ioctl+0x436/0x1cc0 [ 846.473569][ T58] __se_compat_sys_ioctl+0x502/0xc10 [ 846.478883][ T58] __do_fast_syscall_32+0xb4/0x110 [ 846.484130][ T58] do_fast_syscall_32+0x34/0x80 [ 846.489013][ T58] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 846.495459][ T58] [ 846.498142][ T58] Freed by task 58: [ 846.502022][ T58] kasan_save_track+0x3f/0x80 [ 846.506930][ T58] kasan_save_free_info+0x40/0x50 [ 846.512168][ T58] __kasan_slab_free+0x59/0x70 [ 846.516957][ T58] kfree+0x196/0x420 [ 846.521135][ T58] binder_deferred_func+0x11df/0x1460 [ 846.526534][ T58] process_scheduled_works+0xa63/0x1850 [ 846.532540][ T58] worker_thread+0x870/0xd30 [ 846.537148][ T58] kthread+0x2f0/0x390 [ 846.541238][ T58] ret_from_fork+0x4b/0x80 [ 846.545676][ T58] ret_from_fork_asm+0x1a/0x30 [ 846.550462][ T58] [ 846.552786][ T58] The buggy address belongs to the object at ffff88807d851b00 [ 846.552786][ T58] which belongs to the cache kmalloc-64 of size 64 [ 846.566687][ T58] The buggy address is located 8 bytes inside of [ 846.566687][ T58] freed 64-byte region [ffff88807d851b00, ffff88807d851b40) [ 846.580249][ T58] [ 846.582595][ T58] The buggy address belongs to the physical page: [ 846.589039][ T58] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d851 [ 846.597818][ T58] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 846.605284][ T58] page_type: f5(slab) [ 846.609264][ T58] raw: 00fff00000000000 ffff88801ac418c0 ffffea0000a58840 dead000000000003 [ 846.617838][ T58] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 846.626406][ T58] page dumped because: kasan: bad access detected [ 846.632827][ T58] page_owner tracks the page as allocated [ 846.638705][ T58] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6900, tgid 6898 (syz.4.236), ts 106375053738, free_ts 106356240198 [ 846.657892][ T58] post_alloc_hook+0x1f3/0x230 [ 846.662656][ T58] get_page_from_freelist+0x3649/0x3790 [ 846.668188][ T58] __alloc_pages_noprof+0x292/0x710 [ 846.673374][ T58] alloc_pages_mpol_noprof+0x3e8/0x680 [ 846.678828][ T58] alloc_slab_page+0x6a/0x140 [ 846.683496][ T58] allocate_slab+0x5a/0x2f0 [ 846.687993][ T58] ___slab_alloc+0xcd1/0x14b0 [ 846.692666][ T58] __slab_alloc+0x58/0xa0 [ 846.696987][ T58] __kmalloc_cache_noprof+0x27b/0x390 [ 846.702350][ T58] sctp_add_bind_addr+0x89/0x3a0 [ 846.707366][ T58] sctp_copy_local_addr_list+0x311/0x500 [ 846.712989][ T58] sctp_bind_addr_copy+0xad/0x3b0 [ 846.718001][ T58] sctp_sf_do_unexpected_init+0xb0c/0x11d0 [ 846.723799][ T58] sctp_do_sm+0x1f1/0x60c0 [ 846.728207][ T58] sctp_assoc_bh_rcv+0x3f1/0x640 [ 846.733134][ T58] sctp_backlog_rcv+0x177/0x3f0 [ 846.737972][ T58] page last free pid 6897 tgid 6897 stack trace: [ 846.744282][ T58] free_unref_folios+0xf37/0x1a20 [ 846.749296][ T58] folios_put_refs+0x76c/0x860 [ 846.754049][ T58] free_pages_and_swap_cache+0x5c8/0x690 [ 846.759668][ T58] tlb_flush_mmu+0x3a3/0x680 [ 846.764244][ T58] tlb_finish_mmu+0xd4/0x200 [ 846.769004][ T58] exit_mmap+0x496/0xc40 [ 846.773259][ T58] __mmput+0x115/0x390 [ 846.777322][ T58] exit_mm+0x220/0x310 [ 846.781388][ T58] do_exit+0x9b2/0x28e0 [ 846.785530][ T58] do_group_exit+0x207/0x2c0 [ 846.790120][ T58] __x64_sys_exit_group+0x3f/0x40 [ 846.795222][ T58] x64_sys_call+0x26a8/0x26b0 [ 846.799909][ T58] do_syscall_64+0xf3/0x230 [ 846.804406][ T58] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.810297][ T58] [ 846.812696][ T58] Memory state around the buggy address: [ 846.818311][ T58] ffff88807d851a00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 846.826359][ T58] ffff88807d851a80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 846.834405][ T58] >ffff88807d851b00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 846.842453][ T58] ^ [ 846.846763][ T58] ffff88807d851b80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 846.854819][ T58] ffff88807d851c00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 846.862866][ T58] ================================================================== [ 846.874722][ T58] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 846.881953][ T58] CPU: 0 UID: 0 PID: 58 Comm: kworker/0:2 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 846.892280][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 846.902341][ T58] Workqueue: events binder_deferred_func [ 846.907977][ T58] Call Trace: [ 846.911245][ T58] [ 846.914167][ T58] dump_stack_lvl+0x241/0x360 [ 846.918842][ T58] ? __pfx_dump_stack_lvl+0x10/0x10 [ 846.924034][ T58] ? __pfx__printk+0x10/0x10 [ 846.928624][ T58] ? vscnprintf+0x5d/0x90 [ 846.932946][ T58] panic+0x349/0x880 [ 846.936834][ T58] ? check_panic_on_warn+0x21/0xb0 [ 846.941941][ T58] ? __pfx_panic+0x10/0x10 [ 846.946346][ T58] ? mark_lock+0x9a/0x360 [ 846.950667][ T58] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 846.956640][ T58] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 846.962612][ T58] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 846.968934][ T58] ? print_report+0x502/0x550 [ 846.973605][ T58] check_panic_on_warn+0x86/0xb0 [ 846.978536][ T58] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 846.984858][ T58] end_report+0x77/0x160 [ 846.989268][ T58] kasan_report+0x154/0x180 [ 846.993765][ T58] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 847.000097][ T58] __list_del_entry_valid_or_report+0x2f/0x140 [ 847.006249][ T58] binder_release_work+0xc7/0x480 [ 847.011272][ T58] binder_deferred_func+0x1275/0x1460 [ 847.016635][ T58] ? process_scheduled_works+0x976/0x1850 [ 847.022350][ T58] process_scheduled_works+0xa63/0x1850 [ 847.027903][ T58] ? __pfx_process_scheduled_works+0x10/0x10 [ 847.033878][ T58] ? assign_work+0x364/0x3d0 [ 847.038484][ T58] worker_thread+0x870/0xd30 [ 847.043072][ T58] ? __kthread_parkme+0x169/0x1d0 [ 847.048089][ T58] ? __pfx_worker_thread+0x10/0x10 [ 847.053185][ T58] kthread+0x2f0/0x390 [ 847.057247][ T58] ? __pfx_worker_thread+0x10/0x10 [ 847.062347][ T58] ? __pfx_kthread+0x10/0x10 [ 847.066925][ T58] ret_from_fork+0x4b/0x80 [ 847.071328][ T58] ? __pfx_kthread+0x10/0x10 [ 847.075906][ T58] ret_from_fork_asm+0x1a/0x30 [ 847.080675][ T58] [ 847.083825][ T58] Kernel Offset: disabled [ 847.088158][ T58] Rebooting in 86400 seconds..