last executing test programs: 51m50.364305831s ago: executing program 32 (id=1323): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x8, 0xff58, 0x3, 0x9, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x68, 0x0, 0xcc, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100}}}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400200000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 51m2.061508901s ago: executing program 33 (id=1488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r2 = syz_io_uring_setup(0x873, &(0x7f00000000c0)={0x0, 0x369e, 0x100, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) eventfd(0xc) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000d40)={0x0, [{0x3, 0xe8, 0xffffff52, &(0x7f0000000140)="cbee31f55eee7f81621a666d463243177a40f070a32d657d53c4577825"}, {0x3, 0x440, 0x3, &(0x7f00000002c0)="381537ec0d2c889d53f23d1281efe95b318f6d47627c83275228f4a094efa35befeb1fdb41f41b0ce2240656394c33676d675edbeac7dd9816560e4aa5f6bc8b05b1d8cb2be3e717c5baa4a05013151498f74f8649f797622c8c8a57ce40535f7b62eff6ce113aa3656f63e5ce5890f9c9d7a40b11ae44bbf631679f498380d1cd1b7f358a232679"}, {0x0, 0x6d0, 0xfffffff9, &(0x7f0000000440)="c01f53d00d9000cb7b08596cf2109ab2eb27e45cb08bee70fa041d0c9cfd7b5c2819c7693eb0fcabcb4605454d03181df240f5f9a6dd399dd3db3d0afa9b3d452090e4e245efd16683fafa1ef35272a6d70d7ca1aae63cf174aa41aea96421b8b11a1c7554f8228dcf98b0d85bd0d41b396de9f8b6f5a645821ed14ba759de53ed2e0cc1fed50e8f26191eed662235ef711d1e58bae253677393a3874c1820e6775014fd7278be847e04f5b23483a9cfa3e1e4edcd727d2510b0ab98b044abdd1d50780a5598e476ffc5578360552c34b17cf575371c20aa7f7f"}, {0x1, 0xb0, 0x9, &(0x7f0000000240)="a96b588de4d24e2fefaa984a4edee67740b1ea694a88"}, {0x3, 0x3a8, 0x80000001, &(0x7f0000000540)="e2edfc40de766b54322695a6668b9400c3b98d77b78680c33a25a36392ccba3ce8c612cf6297a2855290125becc30a77c6f52d4f91b71b1d4a918ff84e7dcbe16f3bf6fa71808c256e92f087b120c05875b43924b139de330e13345e556aa22c36b289f684951d446675fe4f35075e85454be234e9"}, {0x3, 0x228, 0x80000000, &(0x7f00000005c0)="6ecde0dad5ca639261d6e8f34163f0cc82dbf62a9d6402adba07f6c2f7945083ae29224834d0c57b98ea4ad9165d48d5f7f8efafb3b5efc273972dff1dc75f10c13f6f23fa"}, {0x1, 0x7c0, 0xfffffffb, &(0x7f0000000700)="2c08bba027e49296aa195bd392af10098286c853c6fe0242d7745c4fa9002f048d87663c6ed941384ade44f3279fa64dd951238bb68f703d2fa01271fd486ee9ee200cbea57531ae4bf0c60cec8c277996d92ed1ebe3aafa9ecb9619c53ae091839625a3fd8109e930b7095398a7865ff1872a8b9e8d852d7ce8713d1e78d4ade4aa79145881616d87956c2cac2fd3be33f020a37ff8ea734d7f15292d2723bb622ce6d20526d1732ac5319d0826f3132cba180e8f833aec1c437bf25d483a867d9b1b8ccf866e381ee728f1ee79ed3b9605ccfa6ef08dae1968c6f70bd7ec6cd7fc1016dc16d5eade3391b685b9001bc78454e2f66f12c9"}, {0x1, 0x1e0, 0x10001, &(0x7f00000003c0)="8d2dcbfd1e3cb96738d7283d73c86ad4dde748f57f824b1fd727532f7788f052c5e01c4faf0d0705f62a4f7b809ebd8be2e63607a60c6515e21f8c1c"}, {0x3, 0x2b8, 0x7, &(0x7f0000000800)="3a6a0df0d68a183b366b980df6dc331c3d3d10297fb19f69d3ddf15e12a40594771df2b423aebf320418192e40a1ffb5d6fe55701fcf1d77ea4d1ca9705c7ffb0fc67643858033ff6cbcf4ea14744279bedf3fd8acbd75"}, {0x2, 0x260, 0x81, &(0x7f0000000880)="089540a4fa4491f8b5160e8118b98caf4fea24f011645599b1e7730e0a80fc7bca4aa3f7ec335eb4a82cf5d39557b0e34395dd9ac30fff9a0dc35cf5458994642eb7c0d3a42a65f459e0a95d"}, {0x3, 0x6a8, 0x6, &(0x7f0000000900)="5e1343ea3b2f1dec7771fbd38c1616a30eb5f06f8d402d10ee7c2aff9fd2e4900be7b8dfb3cad3bf388cac6ea6efe9a302a8842a5a979334bb38b34add20f299390d2d0e6743ec93b82a51173d78430d694686334c42ca988fbb2079ab0b28cfa206cca43ac5f744d7ae644ea24248ba40b29e4723bfec767ddd7593a898980d6f7c480b22885d5071576c17a9675ac0812d3a7d595062d5fe50baf7d43dd5555eee99cf1eda98086226eb961a6e21e2b6cf162eebbb66c233a007d14c9177a7d18145e1bb3141faa0a0fbc23517456b4987e1cf4f"}, {0x3, 0x5b8, 0x8, &(0x7f0000000a00)="6f21ffa1a2f3b2f1adefe8a65752a11a2fdb352dcfe16d93cf9b715098e4a3205d15547842cdf228b8b60d9c561e1bd7a70719fc8e4e11a877f54934c53ba96fa807b164d07299116861f1f6a92d26ac4232ef7bbfbf284b138fe90c3e36b1f658b5cfed23708b721a94bb040deb15565cc26edfd801786a6cefcbfdbb0c66509bf1d79f95b14bc8268cc68d2ee8b3db416b04aaec9083dbbfed51de128d3dae4fbf8402e329ffdb2776d3a8ced48375307833da8992a2"}, {0x2, 0x410, 0x50517114, &(0x7f0000000ac0)="10ec108fbbb62258efaf349c6183b584ec2c402c86925017f11e683be703517c55a83174c77bd39f677e2a0159e08b00a0ae8e89e17fb34e3d0f05a65f8a68341eda37a8bc4baa383456ebf181e05b6e602332e967e47cba065da434f00a017f58b22bdd11cf428c71ea15eb14c1448213ee6cffb8fc40232cab6b86f5e44188979f"}, {0x2, 0x6b0, 0x6, &(0x7f0000000b80)="844554760162e456a5d53b36df367257304404fc2fefbe7a2817f0f2ce47f8264474493ae0daab8e8f810ffe81ed2a99a77dacdf53c994501eadb697ae460d9c7eae00a390565b3673c462eff9623ce8d441837bbcb52d061fcec1b0e1d5dd3bc662c3315d2ca1cf1bc64fdd9723e996b98502099da7166598fc953eeec608bdd5e455676a1a70fb32f7efdc1322fca7ac19b7aa6407e4c08ab775ab644c5c9fdd0581e61ee8ea49cfd9ea83871a095af11164883239aa237ae45a044e233853f8723f0be2364153a277cea750f78a591c8af51c08eb"}, {0x3, 0x180, 0x23ea, &(0x7f0000000c80)="80349ba314d2c4242e3d3be5aa8b7d70f4c79188753f07c0b4d33e094579e05c9e391d38f1a4065f7a8146e2d0772541"}, {0x2, 0x240, 0x2, &(0x7f0000000cc0)="ec63cfce4c8d45c82eeb540584cb43c3bc979a42af2e11afc663a6b97f9ead41db6cbadeb19d7c63507ea64a02ad6e2e2f1433418a10719e2d40a021b489c5bdcdeb349889d1a20a"}]}) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000000)=""/97, 0x61}], 0x2}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x2000c8c7}) io_uring_enter(r2, 0x3d16, 0x0, 0x0, 0x0, 0x0) 47m14.111331423s ago: executing program 34 (id=2196): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x40000000, 0x0, 0x1, 0x13fffe, 0x0, 0x0, 0x1c, 0xc, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04c728964a02447a75d00a69ea917deb7ba193b1e7772fd29f30e6aecb600", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) 35m39.782880511s ago: executing program 35 (id=4622): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x13, 0x5, 0x70, 0x0, 0xd, 0xb, 0x0, 0x0, 0x0, 0xce, '\x00', 0x4, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x19, 0x8001, 0x9, 0x1fb, 0x0, 0xfffffe0000000003, 0xfa11, 0x10000}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r6 = timerfd_create(0x9, 0x80000) timerfd_gettime(r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r7], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000) r8 = socket$kcm(0xa, 0x922000000003, 0x11) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) getdents64(r9, 0x0, 0x0) getdents64(r9, 0xfffffffffffffffe, 0x29) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x20044004) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a00000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a3200000000140000001100010000000000"], 0x94}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000180)={&(0x7f0000000500)=@phonet={0x23, 0x2, 0x4, 0x61}, 0x80, 0x0}, 0x50) unshare(0x2040400) open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) 32m10.296974439s ago: executing program 1 (id=5344): socket(0xa, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}}, 0x20}}, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) write$binfmt_elf64(r1, 0x0, 0x78) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) eventfd(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffb) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x5a93, 0x10100, 0xfffffffd, 0x307, 0x0, r8}, &(0x7f0000000180), &(0x7f0000000300)) 32m9.207155757s ago: executing program 1 (id=5350): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@loopback, 0x0, 0x3, 0x0, 0xfd, 0x0, 0x1}}, 0xe8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0x110, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xff}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x81}}]}, 0x110}, 0x1, 0x0, 0x0, 0x38207bfc33481614}, 0x4004001) close(r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r6, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r7, @ANYRES16=r11, @ANYBLOB="0101006af301a59eed0fe4bd5b9cbc6b48667126006e0000000200000008000300a3", @ANYRES32=r12, @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r13 = syz_open_dev$video4linux(&(0x7f0000000040), 0xd94, 0x103442) ioctl$VIDIOC_SUBDEV_S_SELECTION(r13, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x4, {0x106, 0xe61, 0xfffffffd, 0x1}}) getsockopt$inet_mreq(r9, 0x0, 0x24, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000200)={0x3, 0x6, 0x7ff, 0xfffffffe, 0x1, 0x4, 0x2}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r14 = dup(0xffffffffffffffff) sendmsg$inet(r14, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{}], 0x1}, 0x0) read$FUSE(r14, &(0x7f0000006a40)={0x2020}, 0x2020) 32m7.53667498s ago: executing program 1 (id=5354): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0xe, 0x5, 0x8001, 0xffff, 0x1000, 0x0}) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x9, 0x0, 0xb, 0x7, 0xfffffdfffffffffb, 0xfa11, 0xffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x10) unshare(0x66040080) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r5 = gettid() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x204040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r7) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 32m6.824071311s ago: executing program 36 (id=5354): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0xe, 0x5, 0x8001, 0xffff, 0x1000, 0x0}) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x9, 0x0, 0xb, 0x7, 0xfffffdfffffffffb, 0xfa11, 0xffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x10) unshare(0x66040080) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r5 = gettid() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x204040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r7) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 4m56.083264977s ago: executing program 9 (id=11850): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x3) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) connect$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x12) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x6) 4m55.767838305s ago: executing program 9 (id=11851): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006be000/0x4000)=nil, &(0x7f00006be000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006bd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000721000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0xfc6b}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x5b) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x6020400) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x80, &(0x7f0000000540)=0x1, 0x0, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000006380)=[{{0x0, 0x0, &(0x7f0000003c80)=[{0x0}, {0x0}, {&(0x7f0000000980)}, {0x0}, {&(0x7f0000003b00)}, {0x0}], 0x6, &(0x7f0000003d40)=[{0x10, 0x116, 0xf9b}], 0x10}}, {{0x0, 0x0, &(0x7f0000005740)}}, {{&(0x7f0000005a00)=@llc={0x1a, 0x324, 0x40, 0x6, 0x2, 0xc, @remote}, 0x80, 0x0, 0x0, &(0x7f0000005c00)=[{0x78, 0x0, 0x1, "a568c11a639cefbe03a41b6d59ad8c52d04f56b8f19c4ec5e6c79c454693778586fcdc5dc81449b94c1fb55ed35fe33be4b294238b3988fe661fb78c69eabfefad44cc5b258ee11e056c9c103614d64bee8624257851f1f7b3197328ac4a39d6dd45"}, {0x10, 0x112, 0x85da}], 0x88}}], 0x3, 0x4000894) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r4, 0x7277, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xdaa9, 0xc000, 0x8, 0xc1}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000100010ac05470200000000000109024300010000000009040000010300000009210000000122a00009058103"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x24, 0x36, {0x36, 0x7, "ad6667e44bb2cd263ca19db35b64ef7517ef18a5c7f872b2a6ba743febfd81b6a5ceb58e9c8690a139a795dbb34c976e696cd965"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m51.29993738s ago: executing program 9 (id=11862): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) (async) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffd0002}]}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x200000000000011, 0x3, 0x7) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045515, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "b630"}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xb, 0x0, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x0, 0x8, [0xa, 0x25, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x38, 0x21, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x390) (async, rerun: 32) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) (async, rerun: 32) r9 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000240)='\xbf%#\xc2\xe5Hc*8\x00', 0x0) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (rerun: 64) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000001000000000000000200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000100b702000014000000b70300f02ab91a00850000002a000000100000000000000045090100002000009500000000000000bf9820000000000056090000000002008500100019000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 4m51.100257951s ago: executing program 9 (id=11863): r0 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="08030300000000000000"]}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000000000007b8f00000000fcdbff250000", @ANYBLOB="1000000000000000280012800b000100627269646765", @ANYRES32=0x0, @ANYRES64=r0, @ANYRESDEC=r0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x48, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x269, 0x2, 0x2, 0x9, 0x7db8, 0x200, 0x10b]}}, @NL80211_TXRATE_GI={0xfffffffffffffd52}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x3ffffffffffffcd0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c64d2, &(0x7f0000000180)={r9, 0x80000}) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0aac0f000dac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB="136de6cf17564b840000"]}, 0x0) (async) syz_usb_control_io$rtl8150(r0, &(0x7f0000000780)={0x14, &(0x7f0000000680)={0x20, 0x3d, 0xaa, {0xaa, 0xa, "10a0a6aa7eff549e3b165b0b905db14a9eb0d5b185337c0d5e502407fdb51bd66fcace95a9a8c4ffb9b949864fdae92bdbb60b5a9ce6b535724cd6f74538c8c0492def53eeaad63ea2d99c5b5c6bff9695e22ecd2d7689a3368ae0c03c6135524518270eafc4e86cebc655208b669aefb4e458872fedc20238db7f59bc274a893e1c620996f4b8a8f4de170a2b314f071fa44f71c3c0626f43c0e0e1e7608fccbb1c991ed73ae5ed"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}}, &(0x7f0000001740)={0x2c, &(0x7f00000007c0)={0x0, 0x7, 0xdc, "f1042d9cb40261619910c14d844a83c4dab657d272f7e8873462d7d60915ce43e705e921950909d536a2ada5646716a930e441635a0c2dfe0ce6ff629d9423d50106ce7032668f55712dafde0cbaa7f43fed0517981e2f42a707ec6ff05a4e321fe0b8d3971b454bb90920dcae4b1d05c27ad6a874abc11d6787332f7e30eb57b13f7508a352b6338d9bfde83881193d4bc7bba4e4f2fa713df3197205f360f25a805f46a9d062096220db2c5ac2dc6ee031f4baecf054bb2a5de0aae5042ea63b6fdd3cfdf456776e6a7670dcc18cea0d9b9a67e06e46e36d7239c0"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000980)={0xc0, 0x5, 0x2, "7efa"}, &(0x7f00000009c0)={0x40, 0x5, 0x2, "99bf"}}) (async) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) r13 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "0f2cc732"}]}}, 0x0}, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r11, 0x3ba0, &(0x7f0000000240)={0x48, 0x13, r12}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_connect(0x0, 0xc50, &(0x7f0000000ac0)={{0x12, 0x1, 0x201, 0x9e, 0xfd, 0xe5, 0x40, 0x423, 0xc, 0xa3bc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3e, 0x3, 0x1, 0x8, 0x80, 0x2, [{{0x9, 0x4, 0xfc, 0x1, 0xa, 0x5a, 0xb4, 0x27, 0x4, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "c626f840"}, {0x5, 0x24, 0x0, 0x8d}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x3c, 0x1000, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0xac9a, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xb, 0x3, 0xcf}, @obex={0x5, 0x24, 0x15, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x28}]}], [{{0x9, 0x5, 0xf, 0x8, 0x20, 0xd2, 0xc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd9, 0x400}, @generic={0x1e, 0x7, "151fa2b6e13d161e051e1cf0f1510daca9c1f2150ed91641588cf45f"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0xd8, 0x0, 0x4, [@generic={0xb8, 0xe, "b1bb19d3abd43f4006c40e6259feda3dd3a59c1725b06163d0c46ec3d18e1608b2cd2a3bc46e5ed8ef3cb4e48764ebb90927527be8804457e140707d53e2650203549914f639cdcc6bfc3562c8efc3cefb5602ac62189336a71305010476aad80dbfa8b29add70fe62a6886af73568e44621ba51160f167efdd2780b3fcaaebef90f4cdf758f58a825f5ad30cae61c720f64a745e64e6ba9a7f98ac6e802846a2df3187f15235569dfea47866bcae0a7b0e6cba04819"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0xc, 0xd, 0x2, [@generic={0x40, 0x30, "4b9dad88c97a61c76e88054622de1292c99759ce5cfd7f1b3b306141ea80526366f11d860d4cd9ead674720666c782215a530c5f15e0c822379a57991d44"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0xc, 0x36, 0xc, [@generic={0x7c, 0x2, "b1ddd3cc2a7cc268b8b2c9d6a3edc78ef46d2bae451ce6670495b53baf0ea8124e7d840f187cfe1b8658ca9ca219901dbeec9f155137ee1eeafa5b4bac9ca796f346edb431d845076a1a951b576079ea0b6ee4d5490507e83ec7540391d22c6f52b7c869cfdd696ed3178d487f39443202050669e9003e91cc1b"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x7, 0x1, 0x0, [@generic={0xf1, 0x31, "823e57d40e94569b610c01ee0f38b22c77c7515024bb24ad52688c540e966751a4724d9f4a7657b3abad1fbe4f8d2febef0298d673f4df39ec9314bd4705983f607128500632d6cee05b49af2b1d887d5a945158f33b62a7ff64f93098411817682bfd69a48e7ba4323454eadd7d77674a2012d36fc2cdb12ba881b5cd0edbb96a885f069a3ac9ad6bb4092b49c0026ff20f54aac037ffdee7dfdcebc1ec146fd34f6f43cbe22c4b78048decd3a64ee61555d3ef237e748b44957248c25a4d7f981fabfa8ee1443cb140463b6ab02d8a22ffe8d5d8d26a4afe11e2e26a7249c166553ee1f7ccdf7605cc9088a98902"}, @generic={0x57, 0x1, "b2ad061ce12184e79df4ccd3eb1f769d6675dbabc7d71f91a2fe1af5e2c14408068bb4f83a3797a4bb69d039de79163253d4db7a6048f854581940928f9578b56943d50fa0e272895ae281a75174daf614628c66ec"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x10, 0x1, 0x4, 0x1b, [@generic={0xa7, 0x9, "e9c0c9ac05741ed43c40e46885d12e5fad59994123320f4938ee682fc6ca9d40cfbc72630405d24e9e85c20acceb5e370c8ee0f3bebcf59a7b258dc66c97c4992b7818807829584665360db988109d01a0005240b6c157db017523232385e63aeefb0cf381ce27ad3fff65693931a8fa24565679637a0ffe68c33de6647fe65c9fe46bf5c73dbaae72a4e54d3028d93a21e3108c9e2a75b91720b1fd78e56088ff3bb8c069"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0xb, 0xf, 0x4, [@generic={0xcf, 0x2, "214ccb6ba065e29766c175adb0455a48d58e711a76b83e4975c9e5a2a0f54347146e2c34d8845d99a163fe05b606ba78fbe0ee7c338286de69fd53399a956eaa7cb021bed6d2714074755925336e626c2cd36b1da7a2538c9285d537ef564fd02dc8a1ef1ba372a58b53bf4eb4fe6c26031d9f1d4351736e36e057b8ed8edc933df5f269006928a71c4bb5cc1336c4dc9e58da9ae30cc36db17ee9377725e9dd2f8eab828c8174b7a978a88bfa706e426f58788edc683223353e594065d1eb7d331035d4c3b23ecb2fe4f95529"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0xf5, 0x1, 0xff, [@generic={0x16, 0x23, "96e4bb1cbb5d7403dde7a88decd8f5b1e0b94b4c"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x62, 0x2}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x0, 0xbb, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x0, 0xb8, 0x3, [@generic={0xe3, 0x2, "ccd54d2f00fde9fc0d1d59e326de9130b9e843ad2c7a65ea29f25421c0d3a15077a844232908fa91665daed5b1f881af13520cf55948c35b3ee71bad7d7ada98f6314d3b43d6c5e8f71216f3fa4fdae1f778439fa8fa6def2a574ca80d529c8ec4617b130a4005b7fd0bd6251679ec74ad3688c2cf045dceeb7638f938295cf60d644b6654724becec3a357f366d726ca1248ff16cbf5151c425401382cfa112bf53f0abd557a9ba209945a2e366e071d7133ae13fd7960f7d44e9d2660b99cc1ea1d68727bee184c4378dec07df7af036857866626d9651d9fcadbb96a08aaf6c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x4}]}}]}}, {{0x9, 0x4, 0xfc, 0x7f, 0x4, 0x98, 0x3a, 0xcc, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x6, 0x6, 0x7}]}], [{{0x9, 0x5, 0xd, 0x4, 0x400, 0xdf, 0xa5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb3, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4d, 0x5}]}}, {{0x9, 0x5, 0xa, 0xa, 0x8, 0x8c, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x8}, @generic={0xe0, 0x31, "b3569ef3d6775c57051ec60053f5afeb811d1a98af4bc4a0d7ef54c640e0f2eb600bbd6299c472505b144e509c2641c1af36bbf852e7df992e7ae26873b284b472f4916900baad07cec8160b67dcaad63329997fe9e206aaba729716575332469c263dbb7fa35a39e492373bd533f74a522b3785cfceab9dde441ab2d9008a9270b0fcbf060b42d97641faf5f31f665f6ca71c0d0b3f4ce7c69dd397ab99595690ccac451b0c294ee943833557b011194c3d19979fb8e29ab06f938c88ea6863d516710008af85e25ea87fb326d3843ab8de3db1275ed11e7d08b7c3b9a1"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0x40, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x7f, 0xc, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x8}]}}]}}, {{0x9, 0x4, 0x75, 0x2, 0xf, 0xff, 0x50, 0x55, 0x9, [@generic={0x1f, 0x6, "7d3b9becde64d7945050af11e2ccf6b720c0692d689cf65b4de4403a25"}], [{{0x9, 0x5, 0xf, 0x0, 0x20, 0xfe, 0x4, 0xac, [@generic={0x8a, 0xc, "2b8b8c62b3cbe48430ef284c56a00dd148d58269b35eac725c2edbc13df4cd371c4f9dfd47bd2aef98af56171b2ea4845fc7b30af59dac085791db08aebdf3420db6926a3eb98df47c3e9dd4a48b8a4b721286c2f471008393c15cbc51f26b45647e8722c9b5e28a6a12381665a58310a50b46207cc901f7e612937f761c28ef937f87e035734565"}, @generic={0x3a, 0x23, "bda749eea0eb6379051fc598326233bced7b0d813d83078018a271ee471cc59ad641a0463a8593f12109bfba463ce0d992a00aa4652b89ff"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x8, 0x9, 0x0, [@generic={0x20, 0x23, "9ec4a7d52c8b9684bb072527727b0250bc18ffe27507c09f9ac4c301e749"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x4, 0xc, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7e, 0x3}]}}, {{0x9, 0x5, 0x4, 0xc, 0x270, 0x9, 0x2, 0x6, [@generic={0xa7, 0x24, "29a9176e5509f304b3c6d3a39d86319ef1d0319d7bfa0e10873fa4ef1487d1c7d1e83ea7d15eb9576263c0301178ede3b942cf0a90a99bacaf2c1d24eca598a5a7ac0f9e6c22f2aaf54598a7ab48f702a98a06719b1a05ee03f755dbb677e7500f4225619fb4fe7464f8ff63ac9b692975bf4100d8ee9158113608435e713dd6ef0d22216f1e4a76933d29292cd16b6c0f7e685fb0a2ac7dff9c575137f8711b0696cdeb2e"}, @generic={0xb0, 0xe, "5f51f0e42ddb48cd4e24b2a84bcbdb0c8132a88b33b6fef8500618b991812dbc08d9f082d49feab905e40acc881ab54bc489e510bdd8f47027cab6360731e56e84d5735960ea2891e0891dc40a69a4bd7e4078a23c692128c79e7e1135d8d94138fa445744d7bcf2b5d1a70ea9647facf5170da7a08d24e088b0a07ac6f831e491c56f9c7673c9f34371401956d4c0b4a43a4aa00a353b4ff42722ce78e1ffaf57b7d0bc0d5293af122e39ca720e"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x9, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x933}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xf, 0x26, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x2, 0xfe, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x54}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x5a, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}, @generic={0x6b, 0x25, "05bc5a8a630a5c04067bb04c182f9ecfb9b7360c7c8d9fc74a11a2f6d2518539bff4fbe08a3009163c7dca814a9e97e17ad37ba79da317e2009e15ab20d0304d5cb3bd22296f3f21cd73287f2212ebbbeb3d606029d4b5bdab2334f5dbcb95747191b1b21e587219ca"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0x6, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x3, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x8}, @generic={0xcf, 0x7, "1fa75d869f05c0c8c65bc6eb9990bb587602b04e2a3619b5a9037db44fb63ca344a07c7b23b9cd42e7437da2167bc3b8ee129f68b4c32e37192017875b57636fc4dee61cf9c90dddb0cab12ec0920b37611ed0eea2f730a4dfc8ec05ab63d2b3b6607413ca2775291623a828ae1a4b15570cb944e3ef26518f6e5d6e4a268b651ec1a038ded7ede9d89eabda10b9e7c6a50c10e88287325f0653a49b14cf147fe4e9991515357fa7cd01a7467a4191acf623fd6d2dd8c8ae6784a937e8bac83fee14ff619dd2a45b5b2986fccd"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0xb, 0x33, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x3}]}}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0xeb, 0x87, 0x3, [@generic={0x80, 0x23, "fd94f6c9a51930a9f72c09a698f39b72731b2d847bc188b0555bc7b61e1f645ba32877dec479b6302925d2d4d962e546f4a53a78899bbff69a421d885e5821da7d5866d36f65faf683cc66ae00daa2ac5610c056b1216a59e5dba1abe6d0fb9e7a1e8c6333bee9499f351e87b0d65a88e39348743ca807de16359712be3b"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x81, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0xb, 0x3}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xf970}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x0, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x9, 0x5, 0x4, 0x20, 0xff}, 0x10, &(0x7f0000000040)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0xfb, 0x0, 0x9, 0x6e, 0xfe}]}, 0x3, [{0x85, &(0x7f0000000080)=@string={0x85, 0x3, "dea6e8e01e3158898ca735129816ebca0546c4fe409e307fdfcba8cd1669e684a48474f93bb1b37373e7a54d779f8b47c3069be35e00295fa87f05601ab6aa1d1613308706a576ced2bcb1436ef39ad9065306b909d0d2efef3117a235a987e209970a4a269f6e9bd6c0df3af3f57a8bd4a0d2d5281c0a010b6f55d783c42aa0e6a2b0"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x6d, &(0x7f0000000180)=@string={0x6d, 0x3, "db4e8ee4457d8f5645b79d0e2a395dd008b86864d7a26b07f0a43fde13a625649309e189742e7e3866fa9debadb52a49588154b596b787ba5c02550480738f56c4970636e2ea9280eceafca88381cdacdd3dcda8fac7ee7177a81c73c45c048c42e453e7d3afaa29e64491"}}]}) 4m47.757100477s ago: executing program 9 (id=11875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) fcntl$setlease(r1, 0x400, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m46.923728677s ago: executing program 9 (id=11878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0xf, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x892a, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000005) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x40896) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r7 = syz_pidfd_open(r6, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x10a) wait4(r6, 0x0, 0x8, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = getpid() setpgid(r9, r6) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r11, 0x4188aec6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r7, &(0x7f0000000140), 0x0, 0x2000003, 0x0) ioctl$BLKRASET(r8, 0x1262, &(0x7f0000000080)=0x36f) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 4m31.828539779s ago: executing program 37 (id=11878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0xf, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x892a, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000005) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x40896) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r7 = syz_pidfd_open(r6, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x10a) wait4(r6, 0x0, 0x8, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = getpid() setpgid(r9, r6) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r11, 0x4188aec6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r7, &(0x7f0000000140), 0x0, 0x2000003, 0x0) ioctl$BLKRASET(r8, 0x1262, &(0x7f0000000080)=0x36f) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 4m4.893364778s ago: executing program 5 (id=11950): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, 0x0, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r6, &(0x7f0000000240)={0x78, 0x24, 0x0, {0x2000000007, 0x870, 0x0, {0x0, 0xfffffffffffffffb, 0x55, 0x7ffffffffffd, 0x0, 0xfffffffffffffffc, 0x6, 0x0, 0x1ff, 0xa000, 0xa0000000, 0x0, r7, 0x0, 0x3ff, 0x1000000}}}, 0x78) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a00010026bd700000000000020020", @ANYRESOCT=r8], 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000026c0)="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", 0x2000, &(0x7f00000011c0)={&(0x7f0000000140)={0x50, 0x0, 0x6, {0x7, 0x2d, 0xf5d, 0x100, 0x2, 0x3ff, 0x2, 0x5, 0x0, 0x0, 0x80, 0x10000}}, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, 0x2, {0x5}}, &(0x7f0000000200)={0x18, 0x24, 0x5, {0x3}}, &(0x7f0000000240)={0x18, 0x0, 0x348, {0x7}}, &(0x7f0000000340)={0x18, 0x0, 0x8c8e, {0x8}}, &(0x7f00000003c0)={0x28, 0xffffffffffffffda, 0x9, {{0x0, 0x7fffffffffffffff, 0x2}}}, &(0x7f0000000400)={0x60, 0x0, 0x40, {{0x23e, 0x9, 0x6, 0x1, 0xc9, 0x0, 0x1, 0x3}}}, &(0x7f0000000480)={0x18, 0x0, 0x1836d66b, {0x9}}, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x2, {0x0, 0x1c}}, &(0x7f0000000740)={0x78, 0x0, 0x10001, {0xf, 0x5, 0x0, {0x5, 0x9, 0x1ff, 0x4, 0x4, 0x3, 0x0, 0x8, 0x9537, 0xc000, 0x989, 0x0, 0x0, 0x7, 0x9}}}, &(0x7f0000000840)={0x90, 0x0, 0xb, {0x6, 0x1, 0x0, 0xfffffffffffff6a0, 0x58b, 0xfff, {0x0, 0x3, 0x1, 0x2, 0x0, 0xa, 0x8, 0x8000, 0x200, 0x8000, 0x75d5, 0x0, 0x0, 0x0, 0x78c3}}}, &(0x7f0000000900)=ANY=[@ANYBLOB="48000000000000000400000000000000000000000000000004000000000000100600000045060000ffffffffffff000001000000000000000180ffffffffffff0000000004000000"], &(0x7f0000000bc0)={0x328, 0x0, 0x1, [{{0x5, 0x3, 0x0, 0xc8c, 0x10001, 0x3, {0x2, 0x7ffb, 0x6, 0x70000, 0x6, 0x40, 0x0, 0xff, 0x7, 0x6000, 0x65, 0xee00, 0x0, 0xfffffc01, 0x7}}, {0x4, 0x80, 0x1, 0x0, '{'}}, {{0x4, 0x0, 0x80, 0x549b135a, 0x5, 0xf, {0x2, 0x9, 0xdd, 0xaa, 0x1, 0x0, 0x8, 0x8040, 0x5, 0xa000, 0x9, 0x0, 0xee00, 0xce, 0x8}}, {0x2, 0x7ff, 0x8, 0xffffffff, '\x87\x00fl\xe1tf\x00'}}, {{0x5, 0x1, 0x5ce, 0x80000001, 0x5, 0xfffffffc, {0x0, 0x8, 0x1, 0x101, 0x1ff, 0x7f, 0x8aa, 0x8, 0x13af, 0xc000, 0x222f, 0x0, 0x0, 0x5, 0x7a}}, {0x1, 0xffffffffffffffff, 0x0, 0x4}}, {{0x5, 0x1, 0x7, 0x2, 0x3, 0x100, {0x6, 0xe, 0x0, 0x3, 0x7, 0x8000000000000001, 0x6, 0x51, 0x7, 0x8000, 0x81, 0x0, 0x0, 0x0, 0x6}}, {0x8, 0x3, 0x8, 0x0, 'deflate\x00'}}, {{0x2, 0x3, 0xff, 0x0, 0x81, 0xffff, {0x1, 0x2, 0x5, 0x6, 0x8, 0x1, 0x0, 0x7ff, 0x7fff, 0x6000, 0x2, 0x0, 0x0, 0x7f, 0x1}}, {0x2, 0x10001, 0x5, 0x202, '\xaa\xaa\xaa\xaa\xaa'}}]}, &(0x7f0000000f80)={0xa0, 0x0, 0x9, {{0x3, 0x1, 0x1000, 0x368808c8, 0x2, 0x10001, {0x3, 0x6, 0xffffffffffffff3b, 0xfffffffffffffff9, 0x8a2, 0x1, 0x7, 0x7ff, 0x1, 0x0, 0x58, 0x0, r3, 0xffff, 0x7}}}}, &(0x7f0000001040)={0x20, 0xfffffffffffffff5, 0x8001, {0x80, 0x4, 0x5, 0x21}}, &(0x7f0000001080)={0x130, 0xfffffffffffffffe, 0xdb4, {0x6, 0x1, 0x0, '\x00', {0x80, 0x1, 0x8, 0x0, r5, r7, 0xc000, '\x00', 0xffffffffffffffff, 0x4, 0x401, 0x3, {0x6, 0x9}, {0x7, 0x2}, {0x9e, 0x6}, {0x7, 0xd7}, 0xffffffff, 0x27, 0x401, 0x6}}}}) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000080)=0x3ff) (async) write$dsp(r9, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e23", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff024000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f0000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100fefffffffbdbdf2500000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 4m4.688120316s ago: executing program 5 (id=11951): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000500)=""/156, 0x9c}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'veth1_virt_wifi\x00', 0x10}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000580)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000020305000000000004000000000000010800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x20, 0x2, 0x3, 0x201, 0x0, 0x1000000, {0x0, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffffffff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48050) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x40}}, 0x0) 4m2.446069511s ago: executing program 5 (id=11952): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in=@multicast1}, @mark={0xc}]}, 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0_to_bridge\x00', &(0x7f0000000440)=@ethtool_flash={0x17, 0x10001, './file0\x00'}}) 3m59.327949477s ago: executing program 5 (id=11954): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8518000010010000180a00000000000000000000000000009500000201000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x12, &(0x7f000000cf3d)=""/195}, 0x23) 3m59.101692185s ago: executing program 5 (id=11957): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m57.603726004s ago: executing program 5 (id=11960): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x111, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0xfffffffffffffffd, &(0x7f0000000100)=0x3) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) unshare(0x24020400) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r7, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8], [0x5]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)=r10) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0) sync() socket(0x10, 0x803, 0x0) 3m41.122901872s ago: executing program 38 (id=11960): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x111, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0xfffffffffffffffd, &(0x7f0000000100)=0x3) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) unshare(0x24020400) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r7, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8], [0x5]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)=r10) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0) sync() socket(0x10, 0x803, 0x0) 2m52.134633245s ago: executing program 8 (id=12044): r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(streebog512,lrw-twofish-3way)\x00'}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xc0010004, 0x0, 0x8}]}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r6, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/111, 0xfffffffffffffd73) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x13) r7 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_aout(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="0b010700"/17], 0x20) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f00002c4000/0x3000)=nil, 0x3000, 0x2eed7ced6e69210c, 0x28011, r8, 0x83e11000) r9 = socket$inet6(0xa, 0x2, 0x80000000) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r9, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1, 0x2000000}, 0x1c) r10 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m50.506026199s ago: executing program 8 (id=12047): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f00000002c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f00000008c0)=""/198, 0xc6}, {&(0x7f0000000640)=""/176, 0xb0}, {&(0x7f0000000540)=""/14, 0xe}, {&(0x7f00000009c0)=""/195, 0xc3}, {&(0x7f0000000ac0)=""/247, 0xf7}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/222, 0xde}], 0xc, &(0x7f0000000780)=""/205, 0xcd}, 0x2}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004600), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file7\x00', 0x2000, 0x0) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000001c0)={0x5, 0x1, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x0, 0x3, 0xfffe, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x0, 0x80000000]}}) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) r6 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 2m47.263622154s ago: executing program 8 (id=12053): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f0000000200), 0x0, 0x2, 0x0) (async) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x5, 0x0, 0x20000009, 0x3, 0x4000fff, 0x401, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000001600)={0xb, @meta={0x53353543, 0x4683d24c, 0x821d, 0x7388, 0x60e77b49}}) (async) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1000}], 0x1, 0x8) r5 = socket(0x40000000015, 0x1, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) sendto(0xffffffffffffffff, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dc00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc206759c245451686164eff751e4df899500000000000000", 0xb9, 0x4800, &(0x7f0000001580)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x8000002}, 0x80) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x2a020400) (async) unshare(0x16060400) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}], 0x1, 0x27, 0x2) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) (async) r7 = socket(0xa, 0x3, 0x8000) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000400)={0x4, 0x2}) (async) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0xb71}, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2m46.839970556s ago: executing program 8 (id=12054): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x93, 0x8b, 0x63, 0x40, 0x6cd, 0x108, 0xc75f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x2, 0x41, 0xa1, 0xad, 0x0, [], [{{0x9, 0x5, 0x5, 0x0, 0x3ef, 0x7, 0x3, 0x74}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0xb, 0x5}}]}}]}}]}}, 0x0) (async) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003070103ff2505a8a4400001020301090224008240d34ff40f587e0201000000020905010220000702090905820240001b0509"], &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2, 0x18, 0x9, 0x8, 0x1}, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="050f27000307100202451000141004cbbd1e8b020dea0200"], 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44a}}]}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2f) (async) userfaultfd(0x80001) (async) r1 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) (async) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x70, r4, 0xa08, 0x70bd26, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x8048000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) io_uring_enter(r1, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) (async) connect$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 2m46.380329214s ago: executing program 8 (id=12055): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x123}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 2m41.000631237s ago: executing program 8 (id=12060): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, 0x0, 0x62, 0x7, 0x60000000, 0x0, 0x4, 0x100, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c2, 0x7) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x117, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000377a8840ba0d00109980010203010902120001000000000904"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000feffffff000000000100000018110000", @ANYRESOCT=r5, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000008000000bf09000000000000a5090100ffffff80bf00200000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) ioctl$LOOP_CTL_REMOVE(r9, 0x541b, 0xb) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r10, &(0x7f0000000080)="ab", 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x3}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x33, &(0x7f00000000c0)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m25.91288415s ago: executing program 39 (id=12060): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, 0x0, 0x62, 0x7, 0x60000000, 0x0, 0x4, 0x100, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c2, 0x7) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x117, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000377a8840ba0d00109980010203010902120001000000000904"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000feffffff000000000100000018110000", @ANYRESOCT=r5, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000008000000bf09000000000000a5090100ffffff80bf00200000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) ioctl$LOOP_CTL_REMOVE(r9, 0x541b, 0xb) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r10, &(0x7f0000000080)="ab", 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x3}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x33, &(0x7f00000000c0)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m14.242670539s ago: executing program 3 (id=12113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000020000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 2m13.696574856s ago: executing program 3 (id=12114): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) io_uring_setup(0x1440, &(0x7f0000000280)={0x0, 0xbaeb, 0x400, 0x2, 0x145}) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0xed1, 0x0, &(0x7f00000005c0)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="401608eff8", 0x5}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000009060102004e220000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2m12.631402281s ago: executing program 3 (id=12119): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sync_file_range(r0, 0xfffffffffffffffc, 0x2, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000040)={'wg0\x00', @ifru_hwaddr=@multicast}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbf, 0x3) madvise(&(0x7f000058d000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="13000000360081084e89a67e88d5d306c09b8e082a434f27aba3003b12c5e2ed26017ec0bd6e4c9731be3d8c98085cd6940f5c11d80e829df121136862d598000964c2db03d7983bb824417cccd47fbdd4ae77cb074b6a0fcac4d6d2ae21920200893263f854e8eb378cfc4eb836b6cb4372f95f273cd3174eedf5", 0x7b}], 0x1}, 0x8000) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r6, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r7, 0x0, 0x0, 0x800) 2m10.066454998s ago: executing program 3 (id=12128): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x123}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 2m6.468317597s ago: executing program 3 (id=12135): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "771a16b92ea6656b"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x4, 0x4) recvmmsg(r0, &(0x7f000000a900)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000b00)=""/201, 0xc9}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000e00)=""/148, 0x94}, {0x0}], 0x2}, 0x7fff}], 0x2, 0x10023, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000000)) 2m5.968534725s ago: executing program 3 (id=12138): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) r1 = socket(0x1a, 0x80805, 0x1fe) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xc}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, 0x0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000850}, 0x8980) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) fanotify_init(0xa00, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0xb6, &(0x7f0000000340)=""/182}]}) syz_emit_ethernet(0x6c, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000277000/0x800000)=nil, 0x800000, 0x1000006, 0x11012, r3, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket(0x14, 0x80000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m50.49542782s ago: executing program 40 (id=12138): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) r1 = socket(0x1a, 0x80805, 0x1fe) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xc}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, 0x0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000850}, 0x8980) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) fanotify_init(0xa00, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0xb6, &(0x7f0000000340)=""/182}]}) syz_emit_ethernet(0x6c, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000277000/0x800000)=nil, 0x800000, 0x1000006, 0x11012, r3, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket(0x14, 0x80000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m33.439733119s ago: executing program 0 (id=12203): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000500)=[@rdmsr={0x66, 0x18, {0x57d}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host_nat=0x6c00, 0x6, 0x9, 0x86}}, @in_dx={0x69, 0x20, {0x5de8, 0x7}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x88}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000440)=@raw=[@generic={0x1, 0x5, 0x3, 0x8000, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff00}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0x0, 0x2}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r6, 0x8b1b, &(0x7f0000000040)) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1m32.741275533s ago: executing program 4 (id=12205): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@local}, {@dev={0xac, 0x14, 0x14, 0x80}}]}]}}, @timestamp}}}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000100), &(0x7f0000000180)=0x4) syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 1m31.958106949s ago: executing program 4 (id=12208): syz_usb_connect(0x0, 0x2d, &(0x7f0000008340)=ANY=[@ANYBLOB="120150021e604240c21542f1b7ef0102030109021b00010d09a0040904b10401030c460909059903"], &(0x7f0000008a80)={0x0, 0x0, 0x0, 0x0}) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xa03d, 0x2, 0x1}, 0x18, 0x0) r1 = syz_clone(0x48000000, &(0x7f0000000180)="712ddafd5730a7b4d52c56caaa2f848f6f2affe8c99fa6f4797c7de459e03e6130dd00466e1360936cfed82a7fccd07d521706b758d5552b49ac9fb2057970f29cdca90129242a9c00049697b7d76bd573a25585dd4f5b8848faca53f468cb1e5067aa6c6fe1723d494926afe1ed7806861b1e8a25371051a0950a9e9a58b5644cef1293f8bc0123a43e75f043d4f44c89b6dc525751bff0f789065d6b94af51c90fa1ca56d67d941cfc09feb60d69f216b9518f7d348ed3930939687c867bd4f2f469451a26207f243e220422fc7dc5ccd08c501345a8396ce97aba58689bd41694c1ddf57229f4db7954dcc3443c9b0ac8284a3b94033fff9d0dc97358b4b1c6cc51545f9826377b1d56cc420d6fdc472b61e8956d50ea31ace546e3c33cb121e7f081b271263c60828885b01cd0fbb38f81e4868fd0190a7a786325de569e20b428c14799d2798a30ab98b0f7128b69e2685a53d85aeb3e04dc19ba1d2c184eb597d54ec9c33cd9b70949d2d31d59a7ccf2accb47c05a601f7583cfa3856ea7e81b955e3c7e9aa93444824891847ce38f17659c9db7996e4c1b23fd428090ec18520f2dcd4ac665d949b4fe3ea249f26be9893c9cd1ec8cfcc28493cd66d04f30092bdb63a5f848e3c916bf2d40fad04dfc136f92c8ffbe16c1db716e64b2d1a7c34c51c8738104336e67c467486a25844c3c0aa7f4390cc6d81ab4066b5c719263aa5415f5dddbdb01bd35922c7cda1a7f115a15ba35f27c7abd74d331887b6d52a63539bb1d90f40adf85e7ffc8a52c619012a5abfc9b02e16d83e62ce28689311a29d1b2c3677ee14d40894b78942108254d3bb51cb720dd076c47d783b943dfc08bfb8d2f1794cf87493fad9c434e9e6074f5bd3db9579b622a10354d37a71261bf2bda2c593949f5509f21d886aea0746bb368c74649e649fbb88421598c91408ac63ab79e04e4d2fa6817f432419e305f895592c02f2c3d1dca5df2b09cd7586bafda1a35b2aca3710cd4edec6eba2e62ecb4458d5281646e75928de9e3e1f4cf70b66d3e330604b066baee68adf91b9d10b86b0a0b90dafc74b91279c64fa213873b113516c48f271ef98216c222e0dfe3e989e714447d44b0661e7144609a377b94df7414809cb9f199fd5808be65ecde7227070aae634821bb155c660957033b9a8776efdfa5b1c08236aaafd36daf2c11b260744755a5f43b1145e67567be747330390eec1f14dc231eaf1a2c742ddce5bfdcfddbb24b86f0ce8333d051d29a311ec042dc4b7efa0ce9ddb98b99f08f45e5a7d19c6fd4a63e418cae6fe70e3e2df2f7f2e297400e44ed03c2e7e419e4b278bc7a1e9ff0268166aaca16ecfa22c62e4aca79fe113a2404bea348a39f2b093b39aa357b46f67b7bd50703186be0875e79d1d5caf5f3f2761c00487d92860a24ba5956044630f7a606bbbd26e8e7d61d4454bf8f199ebdab7d62508b3fe474c80df89a585c8eee48b21fedfd4484db316cb12a04ab84ab376c6d57cf2c007b52f635eff20a1ea46ba41c54102d5f5f775b767173ca908be19aa8a314fff775a64d4e0994ab1d1cf3c90d592882a50aec8e62317de7d171162cc4f7d07d78a965acb4cb60f345649f8c01c161aee8f976b3e6dd60994a4e96fbe5c4e2f77e96cc21a2b06032aadd92720ed3b46aa353ac64891fddf91f1fd36394d4bd22c35ae413d4f94fde1892fe31e38273dfa613c90c8b0268de9dc3c4b5482b8ae1b8608086e52da30e46885bacd10408cf7a586374839f851a67ce0129757c6fccd3a7cea7601bd0837a144b02ad41d244cc3ea8299e2c506c5e242ae8a5ec1cb03e7a974d7091dc5976906d4855bbbb3b1affa97ab99b0b64317bdab76c4e50e9f8c96984ee15997a3d12941a4d62273fe26db986fd399f59c50c0d199d37f220e6cb6a82ec506de783a205a8e94bb69c3b08abbc11de31b2a59f33b5ebee390b6c2ef200d2e0762d4ef0e25a8c5e2f4b11581d7a2c5085528d43bda84b67ad3f20100180614925825560abfc053dc71e91050cbc00476220b4e18841457c82e17b55b320acdfc4d2343165b9d8fc923196f394f2fff40e2b023741195d58b04fc565f0c6e83e4defcf6b46f8869afe2513d621c26231ac9e1b2f6514386af498145f003511f3742c58a95ab0995c8aadf9c69fc08af75bdfc867180eea925ab7f644fa23473d1c77eec5cff5fe92e63f766cc462c76fa3167e7b4f1091f85ae745553854b035e201e0ac51e2ba84b9307157433a59b80b8c6db32e9562cbf4ae4a062812dd0180d0516b13c8d7c420d9f70310be417b690ca42f1f67f9758b9b100316a4576a3bbfa1ee5152a3e932bde79d9aa42bd78bfbd8855c50b25b8b2fc6644e53691f5ba4f6f8e7d9fc5b950d9f986b77f2d514b50d37fa549f193cbe9438525bc694f37f3da7aa969b6dff27ec68e3165229c695434a5d29b1a9790bdbfb9f48be60e75390a1c343dabf0699493b18d6a348d7983e65672cbc69927cbbe0f8c372c363567cada174e8edd597ebc0c48954eeed934b2b0dee84567f4d08ddd973bad9d57471c698fb905e7101cbbf518625b01cb93bb27b182189749ea0f6f2a98f6b7ee99fd927201499c7d540a8c9bcf4354f4acfe1d6c75f2a518dd83fffa4552a3b85a1b9b6dcd7350fc1ecf22fc63f2e6edff57b54b9b5f3755e548f51814f1dd5df9c12777422b5b0a59ab97dd04062ce6c3b7ca5bda0f3d22b86512188bac551c90d6da0aab3d99b6d9d80ea4b8c097920b104128511ee7c7bd8091a58c760bc985813dfe49f56b578c740f5643af747981e705d9584d4796b55df68b6f7c856158626a5e988e0f48b63f975cc9943b374964e490eab88fe27a94bbc7a1fc9cb2df8e9626c6983872382c89df80ad4e3183804eee7f06ace51ed9ee1706818c021c4b0e5e6eb178816419cd0d968c805d8abb3e0f65340ad3766bb8639c4739fec2581ab01b21fae8775c1b955db3b0a991904ee5f8a0931db3540dddab06861a8f32a926f24ead74a5477ff899bb10903edb9c7a16e32ec0605e71677045ba55ca5c471524b9b33eccb18f118f0f234535aec23096d7d9cf5fad30d2e052264af198d5f60425a244482c98b7b41c551be7d3c020375a888e573c592c74d0dd9ca8cc5cde94a31c8737fe9c75cd3316c61c7777ad9592bf1c57bdde44cce75b7e9876fc3007eb6916109f083948d83c32f9be2775745130fbbefb24cdfecf4e8a96d7e27466a41959dbf15c2ae4f347ed964f23d0285a6421c5cd524638dfe5321bfe29b8a55f091bbb9d0b533992fae046b22da968f64226312e0e58e3a4f1b957a6ef7bbb55adaf7727f912a829c0bdd518cae676a449c6a686d842b183f928646bb78d74c60a11c9cf9ca31c89dfcadd4011917c6a438df282eebb96271257bca86b457ffe033b7c6576e3b282115e00f20dc92dcbf39d3e2bec281836fdcd42d820c38a23452dd9dc38f0163556d3490ef54be8a94e8fc83826de1a57d4bf2773418da38856975d8a38cd1f5bbecce46e07e82dcbf901c02d16a177aa91009743fec9d8e0ad08b7ff9ad25ae9de1f2652c2d64f451e218b22a793d59df4cd09c3b8c2a31e081ad3bd9fed9e8651599ae7f033835e6bd6ea7da6d890e0cccd7ec44d6dd583a1e095d51395e5bd59771911d781f5ecf5ce79a2286acfcf045342b110b637684f0865d88ad7ed2edc4b2e4c47da243b38183422efab1f34dc903c7b4f817ebf2681f3205668f00fc57cb8b35a269411bb18ebb7d69324989bec15db9e7042e4eba797cf9085381684ad12eab7c0898ad179a724c9032afc70d3a62ba228eb28a47af959c149dbd8d08f5d81ce19741d310871d7b9e406ac5fd615e225e78a962de3d74830b0993af8139ac3ed5870c258b6e5dee1a912d9b189192b733c91d10ab5c34f4e95b0aaffd6bf597485a1b2bffca5e8c27b248124cfb7fc48d70be189664e23ea5ba03ab9dca0d9f3e02d2bac6f572cea14be6c12fa25e7b684e6afd593d576e3641bb7b6e944e671d300849009ae6429d08d412be1ee1541ef7d6f03165d81eb6142fbf1fe016a2685177863fdf39a9679972ba9732310b0ae8e4d851419904dd4ae572262df605b67ebe2d0fc4f45768f38d541d17ad26bff85ad3d66a5e70b10362f78e2ae33850766950b2cc5a618742a39dfec4402666316372a48a19047712cebaa55fc710228cd34ff5af1c1ac82cdc50144fb051f32ef8e3efad81e7ac67dd6673d2627739241de142076c5f3c6e7bb92a4bbf6096d5673fdc51c6cb2a42b2427c27b16e4a0f8857e48e1af7756dcae6832aee02cfea8f6e089d8eee8e8b07b546ddead4831804a71519e650204b374f9e15ff257977873c2f9f98ffa09707d2907582dcfd450dfb1a5c0ec285b0ebcc84e3d33b04ac3ad9d57f9394674ca6b605234b0fb81249b809e390515b10f37c90bc1ba3cd9a32f8337bb9378250fe885445b235443fcea147f81b078eec57b2491271cce30eb9dc366c152eb6c4c825c6af3426451ec7b6bb718de51dadf3a72bb93cef9bc7fa59d70f5407df5a306850e288bdc9aae5e4f6e7b814b56b6097be6d13c0280d7f3c6e27b482a9c829341b9f8553ba3549a971ab2aea1af6f09c27d18b497b6872d75abe0074b2bed6c58a59f73b692e827fda4f9e56fdd90abf7ddfe2d3fdfc9acf07792a2f9432fbd3dc5b47cf9a11be9ff626182d2ef8510516a500484d2c7ae3e5899cf25ab4fab9884a54d5ad869c13aa8c8db390ce332063222db6a61b56b9574e50f81d905fe8377a7b1c9520d83aa3330cbb47af5ff3b185e8d87f772bdf1deb22360c5fbb90479d5c5aa5a054f8eea64a5b8368112e2ab2c01a83af3d28de9e6751484967c64698798ffdec58b9761dafb3368ad68643a703521d1c0ff81c938f43f94d6d1388425ba440124e3a3810b8bca15215c79a82ed92a6ad83372690ec965e9bdd87c4b472ca3ee63a8e00627f1d76371c464bc9c6444b15082014d01bdbee7dee7ec70a09dcbfe5b924a4b52088b7565cd489ca7f5d6dcca12709f3531569cc94b01f45ef0460d14c8f7e2393f25c71820f228dac3bfe92f4ae4c770ec5940c5fc4d7781c3a6d6a0dbdea51e9d961d56d250448abeaaa15c578647157b7f64211b047159177c62e733a477246c565e877e213267c4a07248ee0d832229b464f64a5d19b596bf0841f40f8043b438144af5aa646c3d6d12ddc839787a5eaf28b3ba2a4ad8fbe6091aa5784ec60ed023416eba91ad37e3b37c52d380ab116ffdd40dcaa8fb7bc6567d418dcace4eb54ecc9fed0a3e5293f720b82b5f2473b0ca0da690c4cb732d2744eca2f41977b82b54d2799368156d9f7c371fb169035e13f5ce2f580ef0c6312cbc492a1b63988e1251a3803f9a4a3ba3e9034f9bd00e2e7beadb71188490852b1970ec2080980ca63531d32051812e00dbab733a63dbb85a59eafa7e06770483c6659776228bc85a9869563c298a2e042687beac69b98389bf87ffc8315192c949fc803c7559101028f8f2ae98f7461fe7ab372a1dbf861bb533e5af6175cc5c48407f05f509497547b4bd2e4a6986b6804c995f795f77cfd37a4fa1c705c6d408710253a36b826ab9fc4d16335d9b64a02a6d4e47e7d611c4d652437699f1372696145c5f8c65ed1f161926736349046f103fee3f14b0f7d119b2cfe8bc9936bf928ff4dcba41ecf041ccd673be10f9c2d699793e0c5e97b94bf13c57e4231b13a8eaac9c7bfb7c6a08af9d20d28", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000001180)="e85721e5af86f5f4ad5c") migrate_pages(r1, 0xb, &(0x7f00000011c0)=0xc54b, &(0x7f0000001200)=0x1ff) landlock_restrict_self(r0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x80811501, 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x2, 0x16, 0x0, r3}, &(0x7f0000000dc0), &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x20}}]}}]}, 0x154}}, 0x8000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x38, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fffffff, 0x12}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) 1m28.649869187s ago: executing program 4 (id=12214): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="4f0f46ccb61752f276", 0x9}], 0x1, 0x0, 0x0, 0xc}, 0xc800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000dc0)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x24, r8, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0) set_mempolicy(0x4005, &(0x7f0000000180)=0x1004, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 1m28.219769713s ago: executing program 2 (id=12216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@void, @val={0x1, 0x0, 0x2, 0x0, 0x16, 0x1}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x1, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x5, 0x4, 0x2, 0x10, 0x2, 0x68, 0xff, 0x7, 0x6, 0x4, @multicast2, @dev={0xac, 0x14, 0x14, 0x2b}}}}}, 0x3a) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x7) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000001800)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK', [{0x20, '\xd7\x8fL\xa2o\x0f\t\'-\xaf\x006y\xc9 a;\x04\xca\xb2\x9f/5\xb1\xb6i\xff\a\x00\x00\x19\xff\xda\xc3\x8a\x99q\x1e\xd3\xad@\x9f#Mw&\xdf\xab\xfd\xf8\xee\xa0\xff2|\x14\x89\x8a\xf0&Of\xc3\x1d5F\xf6N!\"\xd4|\xa4\xe0\x81\x88\xa3b\xcbZ}O\x84\xaf\xf9\xad\x9e\xaa\r\x85\x9fF\xbbs\x1b\x8e*T\x86\xca'}, {0x20, '`\n\t\xe5[\x19'}, {0x20, '.\\'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8\x16\x82\xb6Z\xaep\xc3\xaan\xfd\x13\xf2\xc5\x97n\xdd \x96\x0en\xe9\xaa&LN\xf0\xed<\xa7(a\xa8H\xb3\xee\x13\xe8\xb3\x8c\xd6!\xb0iJ9(|Pp\xd5\xf5\x1b\xa5\xa4\x86\xfd\x1a\xc1C\xa3u\x9d\x9d\t\x8d&V\xfe\v\x9a\xc6\x9e \xf6\x88\xaa!p\xd3nF\b\x1e9\xd3=%\xd3)\xd0%\x18\xbd\x87\xdb\x96\xbe\xc1\xfb\x00\xe1\xd3\xee\xb2P\x93\x15\xf9\xd5^\x9b\xa9\xd9\xf0\xf3\xf1\xdf&A\xdb\x97r\x99\x12|\x0e\xc0\xed\x92\xc2;\xee\x19l\x16Ww\\\xeb3\xa7\xb4XO\x1a\xf0\"\x9d\x86\xebV\xb4\xd8=h,\x84C)F\x16\xa1O\xb2\xc0\xf3\xbdT\xd1\xe5/\xa7p\x9d: \xfcwL'}, {0x20, '/dev/loop#\x00,\xc5\x18\xf4tn\xbbq\xe9\x01 \x83zY\x14\xf5\xb69\x14\x11\xdc5\x95\xfb\x03~\x1b\x1d\v}\x11d 4\xbfA\x1e/\xfc\xc3\xb8\x02\xe7J\x00\v{\xd1\x9c\xe8C\x97@-g\xdee\x1b\xb8\x00\x00'}, {0x20, ',m\xe80#\xc0%\auq\x04I\x02\x10\xfd\xff'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed2414577"}, 0x23e) write$UHID_INPUT(r4, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) syz_usb_connect(0x6, 0x27d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x55, 0x8b, 0x59, 0xff, 0x5d8, 0x8105, 0xe89e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26b, 0x1, 0x2, 0x4, 0x0, 0xa8, [{{0x9, 0x4, 0x2a, 0x1, 0xa, 0x7e, 0xa, 0xcd, 0x14, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x2, 0x5, '_', 'C'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x3, 0xd, "f083", "6bb759"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xa1, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x1}, @as_header={0x7, 0x24, 0x1, 0xe8, 0x40, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x8, 0x4, "fb"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x1, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x54, 0xf3, 0x80}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xe8, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0xb214}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x3, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x54, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x608, 0x5, 0x3b, 0x3, [@generic={0x1d, 0x10, "3b9e3fe0a6ac0a182090a0e39ad0e5f121e1cadc405cbfaa00901e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x1, 0x0, 0x2}}, {{0x9, 0x5, 0xb, 0x3, 0x20, 0x40, 0x4, 0xd}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x8, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xa, 0x4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x7f, 0x5, 0x9, [@generic={0x89, 0x10, "9cc64b2636c7f8205efa012e8e7ba528e6ada2f12ba797e14f35bad3c591c356ace78f2d5f9dd3db95c558dac36f416bbccac795bfa548b7275dd4b926f478079e1a312e51f9f4c18f7814d75ffb0ed70f632e7af3a5852340a725b139dbb101a5c7694a83d1ae447895ed53d1f135a5cdff563c920e3b466405c97b44541d4459e59a643105f7"}, @generic={0xfa, 0x21, "b1e1244b5f15abb3d2ffb5090d8cb46d508cfd6d2df5137c8c2e3bcedc3d4ad11eb28fe2b999fd5bf49a7fe89c7a57c8308360db0918c09bcbb32583a00853ffb59c8fae8e835e7af4a9386ea29d82c96ef10f831b16b70397fdfe35d9f8f179dc3aefdbd85d1fdf73ad481ddf26a61a5e76457de955046787544a72442ed8119b76b5e8aaeb805cdd67c3dd22fa667afb5676134b33465073d2fc55c327749f0783cfcb45392fff9ac83f7b19fa061050bf6f0d40cb2ecd8affa6e57dbb7b4429555ef858f3fa4fb8b328952be62a1066cf78579544d81fe6471ba4f07e0bcbb6fd65770dbd63d2fe5952fa75ba895c908872492eff00bc"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x9, 0xb, 0x81}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x81, 0x6, 0x8, 0x40, 0x7}, 0x23, &(0x7f0000000340)={0x5, 0xf, 0x23, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "8bd8e12c0885dcde9f717a4d1e1f54b7"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x5, 0x9}]}, 0x8, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2401}}, {0x8b, &(0x7f0000001a40)=ANY=[@ANYBLOB="8b03939fd71d11861f080e35bb391b64daf5fdb2f230a109747a9a71e0c3afe521b4e8802d1f6567355516ba8dc154ccd22b6fa7bb2b1fd28fc70a5e87e957d6fc781e4d5ad809ea8c2b19e7c22d8c60209bf98c37bbbfe0f0a0842e1fec14adb2b55724a78b53f614726a823cdbba6f1c02ef6a824162779e8c92d6ab913f68c3b22dbde4fcf5185b500861ce72e0f4d935b62b6adb3b1d2c831aad0acb5211db38940774f9569c59b2b92f6205fb56873e3fcfa8078d8fd6a745d2580751c1af304a2b335d62ea37590f0571f089bcff83e24b5e1c5a21b9db188042fef4d8ac52c859b65e812780c68c27ffcddfd9dfa15052"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x827}}, {0x81, &(0x7f0000000500)=@string={0x81, 0x3, "9eca19ee55ba1aca225006e6e54101ee2b8378cb00a3bb07054f2e3dce8bbc7260bd036752d641b7c1a20125b4c5735a31d91b66a70beceb9dd4bbfd88fd5aea7c000a1af0fdae6172298dbfc4bcd963c9d226b6a8f9ca9f8c7899fce7d3afb31037ca97e694b7f55e7ac0e4adec3a0f25c200156e28f00ef79f4e94e6fa11"}}, {0x39, &(0x7f00000005c0)=@string={0x39, 0x3, "895e950505f1e63d9818091ecf5ab8581e8f568602f68d5677b9712c72905852cb0705689834075ac26ba0687d665c051f195744f47536"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x404}}, {0xd3, &(0x7f0000000640)=@string={0xd3, 0x3, "df276548573595d94b70ae7cc982718fd8518b2186a96c27bd9dc88d4f8d6b71c516df2148e5476ad2cc06aa2b07a73ecc27c4f54db4886890d336a1d2b88be2de76e9aefb9daa78e1ef1ced82cd17eae601f532b6d65e3cd745c74b6ac0e7a5943913d1062ba245997ad633bc5dba4c4bfc411e328a98fdf3735aee79a867ee80442b4b3914ca58a13042dbddaf5d5b24ef9148aba146c042d8b8552ca5c0762368cc247fbb6ed662bf7200f4b385cc632452b62f2e1b750fd9e4276342861570a6869b42b18a9f711a34ebe2deb0b666"}}]}) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000040)=0xbf8a, 0x5fb, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000000000)=0x7, 0x4) 1m27.793007765s ago: executing program 0 (id=12218): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xfff7, 0x1, 0x6, 0xa4, 0x8, 0xffffffffffffffff}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x5000) (async) fstat(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000004580)=0xffffffffffffffff) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000045c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r8 = syz_open_dev$audion(&(0x7f0000004600), 0x3f0e, 0x210502) r9 = syz_open_dev$swradio(&(0x7f0000004640), 0x1, 0x2) (async, rerun: 32) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004680), 0x2, 0x0) (rerun: 32) r11 = syz_open_pts(0xffffffffffffffff, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000046c0)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000047c0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000004800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000006840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r17 = syz_io_uring_complete(0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="8d9780e854313ef6bb0971669a1f9f50bb18c131a0e7f76d7cadf75783ad951c", 0x20}, {&(0x7f0000000100)="c0dbe9bfe5264db55af836475f61bc1c7e9115dfd280c9c996bce71b7abc", 0x1e}, {&(0x7f0000000140)="d2c7561b4a8628738d73f109ab1ecfc335ca06aee28a11d2de188449ea5485a81e941f4299c01318d998137c1cbc81211e52cc10891f34323c0566124c8c525d2dcc5381413721115906d941692b05d4d5cd389aacb360462c2fdaccf26e3bf11d170043cb9af38f744cdd32788b6b2cdcba98e8d3d397f8b94af8a8719aec1393b93106ad44cac31100a939c4c65bc705505ad15e62dbee62", 0x99}, {&(0x7f0000000200)="ac6a052179fbcf3efa7a773f3a1dcd443e7e9af23efc57b1e9da41935afd6def963801fd8cf07ded72238c28943a03940c798c493fce1ff4491f82e8bea0339492472ea1cfaca374b2ca3be68af17aa8033caeb6dba9537177b1a34ce35f077f680ab664d140ff781c9b8967ef4da02dfe2d6ada32981eac7dd78fda893c83d4ead6259e71f059e7c941e15b5cfe6c1aec", 0x91}], 0x4, &(0x7f0000006880)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r0, r4, r5}}}, @rights={{0x18, 0x1, 0x1, [r6, r7]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r8, r9, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r0, r13, r14}}}, @rights={{0x18, 0x1, 0x1, [r16, r17]}}], 0xb8, 0x4004080}, 0x8010) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r17, 0x40045532, 0xfffffffffffffffd) (async) r18 = syz_genetlink_get_family_id$ipvs(&(0x7f00000069c0), r17) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000006ac0)={&(0x7f0000006980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006a80)={&(0x7f0000006a00)={0x74, r18, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffc4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) ioctl$EVIOCSREP(r7, 0x40084503, &(0x7f0000006b00)=[0x8, 0x6]) r19 = syz_open_dev$sg(&(0x7f0000006b40), 0x6, 0x800) ioctl$SG_BLKTRACETEARDOWN(r19, 0x1276, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000006cc0)={'gre0\x00', &(0x7f0000006b80)={'tunl0\x00', r12, 0x1, 0x1, 0xff, 0x5, {{0x3f, 0x4, 0x2, 0x2, 0xfc, 0x67, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010101, {[@rr={0x7, 0x27, 0x5f, [@empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @remote, @remote, @multicast1, @private=0xa010101]}, @timestamp_prespec={0x44, 0x24, 0xab, 0x3, 0x5, [{@private=0xa010102, 0x1}, {@remote, 0x8}, {@multicast1, 0x3}, {@private=0xa010100, 0x8000}]}, @rr={0x7, 0x13, 0x55, [@loopback, @multicast1, @multicast1, @empty]}, @rr={0x7, 0x27, 0x17, [@empty, @rand_addr=0x64010101, @broadcast, @multicast1, @private=0xa010102, @multicast1, @private=0xa010101, @private=0xa010101, @loopback]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xf9, [@rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x3d}]}, @lsrr={0x83, 0xb, 0x56, [@loopback, @multicast1]}, @timestamp_prespec={0x44, 0x44, 0x9b, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x4}, {@multicast2, 0xd850}, {@broadcast, 0x9}, {@private=0xa010100, 0x7}, {@broadcast, 0x4}, {@multicast2, 0x7}, {@multicast1, 0xfffffff9}, {@multicast2, 0xe4c1}]}]}}}}}) (async) readv(r7, &(0x7f0000007d00)=[{&(0x7f0000006d00)=""/4096, 0x1000}], 0x1) connect$unix(r15, &(0x7f0000007d40)=@file={0x1, './file0\x00'}, 0x6e) r20 = syz_open_dev$dri(&(0x7f0000007dc0), 0x8000000000000000, 0x2000) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r8, 0xc0106450, &(0x7f0000007e00)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r20, 0x40086409, &(0x7f0000007e40)={r21}) 1m27.435652692s ago: executing program 0 (id=12220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x11d, 0x1b, 0x0, &(0x7f00000021c0)) socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x7, 0x6, 0x3d, @empty, @loopback, 0x10, 0x1, 0xfffffffa, 0x1}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x20000010) 1m27.226610965s ago: executing program 0 (id=12221): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x123}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 1m26.57269206s ago: executing program 7 (id=12222): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905", @ANYBLOB="868f54"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f000008c000/0x3000)=nil], &(0x7f0000002640)=[0x1], 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000001010000040003000000400001802c0004001400010002004e227f00000100000000000000001400020002000000e000000200000000002010000d0001007564703a73797a320000000069b6e7f56cfbc9bbfd40c9f0e75c607900a5f243c4fb689000ea58f514246e395e06191a4383a8505f8c0f2c4204bd18f50ebbdfc372c10db66c7d7d53cc1ba656de427c3ae40b1809c7c688dcb19ee8159017ad36c04d83d9c83f5f12a5817ceeacda5215442ef6504cb446786b00f6"], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r6, 0x1}, 0x14}}, 0x4000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0xd6, 0x9, 0x7f, 0x3, 0x5, 0x3, 0x6, 0x1, 0x30d, 0x38, 0x19b, 0x4, 0x7, 0x20, 0x1, 0x0, 0x1000, 0x2}, [{0x6, 0x1, 0x4, 0x7f, 0x2, 0x6}], "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", ['\x00', '\x00', '\x00']}, 0x454) r8 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000000140)=@generic={0x2, 0x8a7, 0x2f8d666a}) 1m25.726309464s ago: executing program 2 (id=12224): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x1003cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0x10000000}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f000000a4c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="e2ef7b486e", 0xfffffffffffffe39}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x2004c040) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r9, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x110, 0x110, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@broadcast}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'vxcan1\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) close(r8) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x1}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000300)={0x0}, 0x0) r10 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1m24.672418003s ago: executing program 4 (id=12226): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1", 0x27}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a40)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd2d, 0xffff7ffd, {0xa, 0x1, 0x0, 0xfd}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r11 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCGIFPFLAGS(r11, 0x8935, &(0x7f0000000180)={'veth1_to_batadv\x00'}) r12 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) 1m24.608093911s ago: executing program 6 (id=12227): socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@upd={0xe0, 0x12, 0x1, 0x70bd2c, 0x25dfdbfb, {{'xts-camellia-aesni\x00'}, '\x00', '\x00', 0x2400, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@migrate={0xec, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@empty, @in6=@empty, @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010100, @in6=@empty, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a8008000280", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xbc, 0x7f, 0x2, 0x3, 0x2, 0x0, 0x7, 0x0, 0x2ec, 0x40, 0x225, 0x2f205596, 0x9, 0x38, 0x1, 0x5, 0x5, 0x7}, [{0x2, 0x101, 0x3, 0x3, 0x4, 0x9, 0x7, 0xb02}]}, 0x78) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe1, 0xe1, 0x5, [@func={0xb, 0x0, 0x0, 0xc, 0x5}, @datasec={0x5, 0x3, 0x0, 0xf, 0x3, [{0x4, 0xfffffffa, 0x5}, {0x4, 0xce10, 0x5}, {0x1, 0xb456, 0x9}], "39c2a0"}, @restrict={0x8}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x3, [{0x8, 0x4, 0x10}, {0x10, 0x5, 0x8}, {0x1, 0x1, 0x1}]}, @var={0xd, 0x0, 0x0, 0xe, 0x5}, @datasec={0x2, 0x6, 0x0, 0xf, 0x2, [{0x3, 0xd00, 0x2f80000}, {0x9, 0x1, 0x7}, {0x5, 0x8, 0xd}, {0x3, 0x0, 0x8}, {0x2, 0x7fffffff, 0xffff7469}, {0x4, 0x5, 0xffffffff}], "ded0"}]}, {0x0, [0x0, 0x30, 0x30]}}, &(0x7f0000000140)=""/62, 0x101, 0x3e, 0x0, 0x5, 0x10000, @value=r6}, 0x28) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) 1m24.44969739s ago: executing program 0 (id=12228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000300)) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x5, {0x5, 0x23, ')3\r'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x6d6, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01f4f2be1c98df124fa17960c819444f0127000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="1c005e800800020007000000080003000100000008000100f4000000"], 0x38}}, 0x80) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000480)=""/4091, 0xffb}], 0x1, 0x59, 0x9) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000000000)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r7, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="58000000080027bd7000fedbdf596cddf1959d0c528f9a3eec0bb084888aa8923ebe6e928825080001000000000008003e0003000000e8ff004001000002084ce5710001000000000008000300000000000801030004000000084003"], 0x58}, 0x1, 0x0, 0x0, 0x240080d0}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r9, 0x303, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m23.928698891s ago: executing program 6 (id=12229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000003000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 1m23.475878742s ago: executing program 6 (id=12230): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r0, &(0x7f0000000000)=""/39, 0x82) (async) mknodat$null(r0, &(0x7f0000000100)='./file0\x00', 0x800, 0x103) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYRES16], 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) accept4(r1, &(0x7f0000000040)=@l2={0x1f, 0x0, @none}, &(0x7f00000000c0)=0x80, 0x0) 1m23.329466761s ago: executing program 7 (id=12231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x11d, 0x1b, 0x0, &(0x7f00000021c0)) socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x7, 0x6, 0x3d, @empty, @loopback, 0x10, 0x1, 0xfffffffa, 0x1}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x20000010) 1m22.728696552s ago: executing program 7 (id=12232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4100, 0x1004}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x6, 0xd, 0x6, 0x80000000}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x4, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x40, 0x6, {}, {0x7, 0x8, 0x0, 0x0, 0x5, 0x8, '|^b!'}, 0x0, 0x1, {0x0}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000040)={0x20000000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000f00)=ANY=[@ANYBLOB="c4040000", @ANYRES16=r9, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0600c5f35a94b858eada"], 0x4c4}, 0x1, 0x0, 0x0, 0xc0c0}, 0x24000844) r10 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f0006ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x20042894}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x101, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e7400090598ff7f000010010905", @ANYRES16], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x4, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120110038b282b08050bab17387c010203010902240001063510070904d804020e80db0909050502080400e20406090503030004ae176475d7fba7b58fc070c244085a06eb31365dfb301cac7ac41f52339dd4bcfafc05ad403c338ccf1f3742ddff4f161555d8ef944b32c9ccabfa2f3e4018781d85c905323285d7be545badea7798d3854871"], &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPTPEER(r6, 0x5441, 0xc) 1m22.400471424s ago: executing program 2 (id=12233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x8c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1f}, {0x4}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x27, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xfffffff7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x39}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfffffff9}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x68}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x8c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1f}, {0x4}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x27, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xfffffff7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x39}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfffffff9}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x68}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}}], 0x1, 0x48000) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000000)={&(0x7f0000000200)={0x1d, r5}, 0x10, &(0x7f00000003c0)={&(0x7f0000000080)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0xd, 0x1, 0x0, 0x0, "d9028cae80449cf906817ac40000000000000000010020000000000000000000000000010020000000000080ffffffff00"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) (async) sendmsg$can_raw(r4, &(0x7f0000000000)={&(0x7f0000000200)={0x1d, r5}, 0x10, &(0x7f00000003c0)={&(0x7f0000000080)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0xd, 0x1, 0x0, 0x0, "d9028cae80449cf906817ac40000000000000000010020000000000000000000000000010020000000000080ffffffff00"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 1m21.66770069s ago: executing program 2 (id=12234): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xec, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x9c, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}]}]}, 0xec}}, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 1m21.667272019s ago: executing program 0 (id=12235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r5, &(0x7f0000000000)=0x2b00, 0x12) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000200)={0x100, r7}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000000, 0x7, 0x2, 0xd, 0xd, 0x0, 0x236874ac}]}) 1m21.385489673s ago: executing program 4 (id=12236): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x400004, 0x511400) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x1413f000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.38519044s ago: executing program 2 (id=12237): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x107000) lseek(r0, 0x7f, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40, 0x0, 0x0, 0x6}, {0x20, 0x0, 0x6, 0xfffff00c}, {0x16, 0x3, 0x0, 0x9}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="62c8137e6bf0ca713057", 0xa}], 0x1}}], 0x1, 0x42) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m21.168015579s ago: executing program 4 (id=12238): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x123}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 1m21.024492682s ago: executing program 2 (id=12239): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) io_uring_setup(0x1440, &(0x7f0000000280)={0x0, 0xbaeb, 0x400, 0x2, 0x145}) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0xed1, 0x0, &(0x7f00000005c0)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="401608eff8", 0x5}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000400100000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m20.920514749s ago: executing program 6 (id=12240): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0xffffffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac0000000000000000040200", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1m20.814471575s ago: executing program 7 (id=12241): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001100800008004b00000000000800ce7a23b3b06d6bc60dfbfd4a0000000000631d885745c1bb80a43991ceb32d1a6c69e3707ac6befe0893e15eb87733420ee60a6718680f05"], 0x28}}, 0x40890) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x1800) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1300000065ffff080000000604395032"], 0x13) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x80000001, 0x9, 0x100000000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0) socket$netlink(0x10, 0x3, 0x15) lsetxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) truncate(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x7) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=0x0, @ANYRESOCT=r5, @ANYRESDEC=0x0]) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x1000, 0x30000, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x10}}, 0x50) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000480)=@ethtool_coalesce={0xf, 0x8, 0x100, 0xfffffff9, 0x1, 0x3ff, 0xfffffff2, 0x1, 0x6, 0x200, 0xf3a2, 0x80000000, 0x3ff, 0x2, 0x800, 0x6, 0x0, 0xb, 0x3, 0x7fffffff, 0x6, 0x81, 0x2}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0xb31c, 0x4) 1m20.37274693s ago: executing program 6 (id=12242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x11d, 0x1b, 0x0, &(0x7f00000021c0)) socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x7, 0x6, 0x3d, @empty, @loopback, 0x10, 0x1, 0xfffffffa, 0x1}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x20000010) 1m19.188534939s ago: executing program 7 (id=12243): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000080)) read$FUSE(r5, &(0x7f0000002900)={0x2020}, 0xff2c) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x40201) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r7, 0xc0505510, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000040)={0xf0f046}) socketpair(0x11, 0x3, 0x6, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_DELETE(r11, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x4011}, 0x2404c000) 1m13.359190544s ago: executing program 6 (id=12244): syz_usb_connect(0x0, 0x32, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xc9, 0x66, 0x7c, 0x40, 0x1d50, 0x60c6, 0xafe7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x77, 0x1, 0x25, 0x84, 0x53, 0x0, [], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0xff, 0x0, 0x6, [@generic={0x5, 0x5, "d57a3b"}]}}]}}]}}]}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m13.131465803s ago: executing program 7 (id=12245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x3, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0xa}, @fwd={0xc}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x5}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x4}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x9, 0x8}]}]}, {0x0, [0x2e]}}, &(0x7f0000000300)=""/143, 0x6b, 0x8f, 0x0, 0x4710, 0x10000, @value=r3}, 0x28) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, &(0x7f00000003c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000480)={0xed, 0x0, 0x180}) 1m1.022464083s ago: executing program 41 (id=12238): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x123}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 56.072033766s ago: executing program 42 (id=12235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r5, &(0x7f0000000000)=0x2b00, 0x12) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000200)={0x100, r7}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000000, 0x7, 0x2, 0xd, 0xd, 0x0, 0x236874ac}]}) 53.118405414s ago: executing program 43 (id=12239): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) io_uring_setup(0x1440, &(0x7f0000000280)={0x0, 0xbaeb, 0x400, 0x2, 0x145}) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0xed1, 0x0, &(0x7f00000005c0)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="401608eff8", 0x5}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000400100000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 52.901189835s ago: executing program 44 (id=12244): syz_usb_connect(0x0, 0x32, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xc9, 0x66, 0x7c, 0x40, 0x1d50, 0x60c6, 0xafe7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x77, 0x1, 0x25, 0x84, 0x53, 0x0, [], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0xff, 0x0, 0x6, [@generic={0x5, 0x5, "d57a3b"}]}}]}}]}}]}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 49.191229789s ago: executing program 45 (id=12245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x3, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0xa}, @fwd={0xc}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x5}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x4}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x9, 0x8}]}]}, {0x0, [0x2e]}}, &(0x7f0000000300)=""/143, 0x6b, 0x8f, 0x0, 0x4710, 0x10000, @value=r3}, 0x28) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, &(0x7f00000003c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000480)={0xed, 0x0, 0x180}) 1.926367111s ago: executing program 1 (id=12246): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') r2 = fsopen(&(0x7f00000003c0)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f00000004c0)='\n', 0x1}], 0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000080)={0x0, 0x0, '\x00', {0x0, @bt={0x4, 0x63, 0x1, 0x3, 0x43b41a35, 0x6, 0x4, 0x3ff, 0xe, 0x7e53, 0x3, 0x101, 0x3, 0x3, 0xb, 0x6, {0x5, 0xffffffff}, 0x3, 0x8}}}) close(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000d80)=""/4125, 0x101d}], 0x1}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000096}]}) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402", @ANYRESOCT=0x0], 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0xe) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 192.122705ms ago: executing program 1 (id=12251): socket(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x34200, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) open(&(0x7f0000000000)='.\x00', 0x1000000, 0x0) 0s ago: executing program 1 (id=12252): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0x2, &(0x7f0000000040)="10de") fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$caif_seqpacket(0x25, 0x5, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0xa0, 0x24, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xd, 0xe}, {0x1f, 0x9}, {0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xeeea}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x5, 0xffff, 0x2, 0x10000}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x8, 0x7, 0x85d, 0x1, 0x7ff, 0x5, 0x5}}, {0xe, 0x2, [0x3, 0x3, 0x7, 0x3, 0x1]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x47}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x14}, 0x20004010) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8b, 0xe6, 0x59, 0x20, 0x19d2, 0x1113, 0x10da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x2, [{{0x9, 0x4, 0x4e, 0x10, 0x2, 0xff, 0xff, 0xff, 0x8, [], [{{0x9, 0x5, 0x0, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x4, 0x8}}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): 00200000000000 RDI: 0000000000000009 [ 3290.711462][ T970] RBP: 00007fe2b4fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 3290.711475][ T970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3290.711488][ T970] R13: 00007fe2b4416128 R14: 00007fe2b4416090 R15: 00007fe2b453fa48 [ 3290.711523][ T970] [ 3291.211024][ T420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3291.221610][ T420] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3291.238806][ T420] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3291.251237][ T420] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3291.262772][ T420] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3292.221333][ T996] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11899'. [ 3292.273629][ T1001] sctp: [Deprecated]: syz.7.11899 (pid 1001) Use of int in max_burst socket option. [ 3292.273629][ T1001] Use struct sctp_assoc_value instead [ 3293.402636][ T1272] Bluetooth: hci2: command tx timeout [ 3294.817333][ T1009] loop2: detected capacity change from 0 to 7 [ 3294.825355][ T1009] Dev loop2: unable to read RDB block 7 [ 3294.837022][ T1009] loop2: unable to read partition table [ 3294.849125][ T1009] loop2: partition table beyond EOD, truncated [ 3294.884169][ T1009] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3294.967710][ T5190] Dev loop2: unable to read RDB block 7 [ 3294.973367][ T5190] loop2: unable to read partition table [ 3295.007869][ T5190] loop2: partition table beyond EOD, truncated [ 3295.273004][ T1020] netlink: 132 bytes leftover after parsing attributes in process `#! ./file0 [ 3295.273004][ T1020] '. [ 3295.482414][ T1272] Bluetooth: hci2: command tx timeout [ 3295.884033][T29499] bond0: (slave syz_tun): Releasing backup interface [ 3296.053704][ T426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3296.114740][ T1040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3296.270128][ T426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3297.195550][T17514] bond1 (unregistering): Released all slaves [ 3297.252938][T17514] bond2 (unregistering): (slave veth3): Releasing active interface [ 3297.276445][T17514] bond2 (unregistering): Released all slaves [ 3297.521730][T17514] tipc: Disabling bearer [ 3297.547377][T17514] tipc: Left network mode [ 3297.558349][ T1272] Bluetooth: hci2: command tx timeout [ 3297.827756][ T1116] netlink: 'syz.7.11905': attribute type 11 has an invalid length. [ 3297.858074][ T1116] netlink: 448 bytes leftover after parsing attributes in process `syz.7.11905'. [ 3297.881577][ T1116] netlink: 'syz.7.11905': attribute type 1 has an invalid length. [ 3297.996149][ T1116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3298.113050][ T1131] bond3: (slave geneve3): making interface the new active one [ 3298.146640][ T1131] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 3298.183703][T18656] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3298.209763][T18656] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3298.395010][ T426] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3298.441950][T18656] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3298.533920][ T426] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3298.564571][T18656] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3298.597281][ T980] chnl_net:caif_netlink_parms(): no params data found [ 3298.626547][ T426] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3298.744525][ T426] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3299.492522][ T980] bridge0: port 1(bridge_slave_0) entered blocking state [ 3299.501874][ T980] bridge0: port 1(bridge_slave_0) entered disabled state [ 3299.511552][ T980] bridge_slave_0: entered allmulticast mode [ 3299.521372][ T980] bridge_slave_0: entered promiscuous mode [ 3299.558877][ T980] bridge0: port 2(bridge_slave_1) entered blocking state [ 3299.600168][ T980] bridge0: port 2(bridge_slave_1) entered disabled state [ 3299.613407][ T980] bridge_slave_1: entered allmulticast mode [ 3299.637926][ T1272] Bluetooth: hci2: command tx timeout [ 3299.644485][ T980] bridge_slave_1: entered promiscuous mode [ 3299.729586][ T1287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3300.009808][ T1301] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11911'. [ 3300.103205][ T1312] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.11913'. [ 3300.125304][ T980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3300.142305][ T1312] loop3: detected capacity change from 0 to 7 [ 3300.173905][ T980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3300.217235][ T879] Dev loop3: unable to read RDB block 7 [ 3300.229881][ T879] loop3: unable to read partition table [ 3300.237313][ T879] loop3: partition table beyond EOD, truncated [ 3300.247205][ T1312] Dev loop3: unable to read RDB block 7 [ 3300.269283][ T1312] loop3: unable to read partition table [ 3300.281878][ T1312] loop3: partition table beyond EOD, truncated [ 3300.289430][ T1312] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3300.725493][ T980] team0: Port device team_slave_0 added [ 3300.745806][ T980] team0: Port device team_slave_1 added [ 3300.785896][ T1345] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 3300.977922][ T980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3300.985215][ T980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3301.017017][ T980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3301.087063][ T426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3301.216655][ T980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3301.244907][ T980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3301.663795][ T980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3301.983298][ T426] 8021q: adding VLAN 0 to HW filter on device team0 [ 3302.155201][T17522] bridge0: port 1(bridge_slave_0) entered blocking state [ 3302.162472][T17522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3302.268949][ T980] hsr_slave_0: entered promiscuous mode [ 3302.290746][ T980] hsr_slave_1: entered promiscuous mode [ 3302.303966][ T980] debugfs: 'hsr0' already exists in 'hsr' [ 3302.310147][ T980] Cannot create hsr debugfs directory [ 3302.488696][T17522] bridge0: port 2(bridge_slave_1) entered blocking state [ 3302.495865][T17522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3302.925694][ T1440] loop2: detected capacity change from 0 to 7 [ 3302.963697][ T1440] Dev loop2: unable to read RDB block 7 [ 3303.006836][ T1440] loop2: unable to read partition table [ 3303.030769][ T1440] loop2: partition table beyond EOD, truncated [ 3303.075198][ T1440] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3303.350238][ T1475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3303.639340][T17514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3303.657847][T17514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3304.029967][T17514] team0 (unregistering): Port device team_slave_1 removed [ 3304.327346][ T426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3304.594115][ T1518] syzkaller0: entered promiscuous mode [ 3304.606893][ T1518] syzkaller0: entered allmulticast mode [ 3304.716875][ T1534] FAULT_INJECTION: forcing a failure. [ 3304.716875][ T1534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3304.749179][ T1534] CPU: 1 UID: 0 PID: 1534 Comm: syz.8.11924 Tainted: G L syzkaller #0 PREEMPT(full) [ 3304.749215][ T1534] Tainted: [L]=SOFTLOCKUP [ 3304.749223][ T1534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3304.749236][ T1534] Call Trace: [ 3304.749245][ T1534] [ 3304.749255][ T1534] dump_stack_lvl+0xe8/0x150 [ 3304.749291][ T1534] should_fail_ex+0x412/0x560 [ 3304.749322][ T1534] _copy_to_user+0x31/0xb0 [ 3304.749355][ T1534] simple_read_from_buffer+0xe1/0x170 [ 3304.749390][ T1534] proc_fail_nth_read+0x1bb/0x230 [ 3304.749424][ T1534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3304.749456][ T1534] ? rw_verify_area+0x2a6/0x4d0 [ 3304.749476][ T1534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3304.749506][ T1534] vfs_read+0x20c/0xa70 [ 3304.749525][ T1534] ? fdget_pos+0x246/0x320 [ 3304.749559][ T1534] ? __pfx___mutex_lock+0x10/0x10 [ 3304.749599][ T1534] ? __pfx_vfs_read+0x10/0x10 [ 3304.749622][ T1534] ? __fget_files+0x2a/0x420 [ 3304.749656][ T1534] ? __fget_files+0x3a0/0x420 [ 3304.749684][ T1534] ? __fget_files+0x2a/0x420 [ 3304.749723][ T1534] ksys_read+0x150/0x270 [ 3304.749747][ T1534] ? __pfx_ksys_read+0x10/0x10 [ 3304.749780][ T1534] do_syscall_64+0x14d/0xf80 [ 3304.749810][ T1534] ? trace_irq_disable+0x3b/0x150 [ 3304.749840][ T1534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3304.749862][ T1534] ? clear_bhb_loop+0x40/0x90 [ 3304.749888][ T1534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3304.749909][ T1534] RIP: 0033:0x7fd10995cece [ 3304.749929][ T1534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3304.749947][ T1534] RSP: 002b:00007fd10a7cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3304.749971][ T1534] RAX: ffffffffffffffda RBX: 00007fd10a7cf6c0 RCX: 00007fd10995cece [ 3304.749987][ T1534] RDX: 000000000000000f RSI: 00007fd10a7cf0a0 RDI: 000000000000000a [ 3304.750001][ T1534] RBP: 00007fd10a7cf090 R08: 0000000000000000 R09: 0000000000000000 [ 3304.750015][ T1534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3304.750028][ T1534] R13: 00007fd109c16128 R14: 00007fd109c16090 R15: 00007fd109d3fa48 [ 3304.750063][ T1534] [ 3305.821577][ T9298] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 3306.238027][ T9298] usb 9-1: device descriptor read/64, error -71 [ 3306.500936][ T9298] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 3306.564499][ T1589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3306.668898][ T9298] usb 9-1: Using ep0 maxpacket: 32 [ 3306.683218][ T9298] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3306.706118][ T9298] usb 9-1: config 0 has no interfaces? [ 3306.736157][ T9298] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 3306.751233][ T9298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3306.786904][ T9298] usb 9-1: config 0 descriptor?? [ 3309.142541][ T9298] usb 9-1: USB disconnect, device number 25 [ 3310.835411][ T1627] kAFS: unable to lookup cell '/,' [ 3312.243679][ T1615] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 3312.495372][ T426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3312.531728][T17514] IPVS: stop unused estimator thread 0... [ 3313.018672][ T1662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3313.039947][ T1662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3313.063690][ T1662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3313.086597][ T1662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3313.106065][ T1662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3313.128581][ T1662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3313.149148][ T1662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3313.171183][ T1662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3313.239314][ T1662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3313.268596][ T1662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3314.642088][ T426] veth0_vlan: entered promiscuous mode [ 3314.851940][ T426] veth1_vlan: entered promiscuous mode [ 3314.894233][ T980] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3314.988311][ T980] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3315.011021][ T980] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3315.256071][ T980] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3316.324174][T17514] bond0 (unregistering): Released all slaves [ 3316.526849][ T1775] syzkaller0: entered promiscuous mode [ 3316.532686][ T1775] syzkaller0: entered allmulticast mode [ 3323.286235][T17514] tipc: Left network mode [ 3323.419046][ T426] veth0_macvtap: entered promiscuous mode [ 3323.649033][ T426] veth1_macvtap: entered promiscuous mode [ 3323.698381][ T1827] loop2: detected capacity change from 0 to 7 [ 3323.731195][ T1827] Dev loop2: unable to read RDB block 7 [ 3323.736907][ T1827] loop2: unable to read partition table [ 3323.770166][ T1827] loop2: partition table beyond EOD, truncated [ 3323.815570][ T1827] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3324.072824][ T426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3324.173489][ T426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3324.531579][ T980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3325.195769][ T1870] fuse: Bad value for 'fd' [ 3325.420565][ T516] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3325.531847][ T516] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3325.650543][ T516] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3325.737561][ T516] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3326.076959][ T980] 8021q: adding VLAN 0 to HW filter on device team0 [ 3326.381055][T17538] bridge0: port 1(bridge_slave_0) entered blocking state [ 3326.388333][T17538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3328.018014][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3328.024480][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3329.357542][T17514] hsr_slave_0: left promiscuous mode [ 3329.483385][T17514] hsr_slave_1: left promiscuous mode [ 3329.770332][T17514] pim6reg9 (unregistering): left allmulticast mode [ 3333.649490][ T420] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3333.747984][ T420] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3333.763024][ T420] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3333.774755][ T420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3333.783375][ T420] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3335.222859][T18656] bridge0: port 2(bridge_slave_1) entered blocking state [ 3335.230136][T18656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3336.037983][ T420] Bluetooth: hci5: command tx timeout [ 3336.250260][ T2019] loop2: detected capacity change from 0 to 7 [ 3336.368840][ T879] Dev loop2: unable to read RDB block 7 [ 3336.424501][ T879] loop2: unable to read partition table [ 3336.468383][ T879] loop2: partition table beyond EOD, truncated [ 3336.579771][ T2019] Dev loop2: unable to read RDB block 7 [ 3336.616061][ T2019] loop2: unable to read partition table [ 3336.641611][ T2019] loop2: partition table beyond EOD, truncated [ 3336.717672][ T2019] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3337.761984][T17514] IPVS: stop unused estimator thread 0... [ 3337.980886][ T980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3338.120057][ T420] Bluetooth: hci5: command tx timeout [ 3340.203298][ T1272] Bluetooth: hci5: command tx timeout [ 3342.106450][T17526] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3342.283133][ T1272] Bluetooth: hci5: command tx timeout [ 3342.628426][ T1977] chnl_net:caif_netlink_parms(): no params data found [ 3343.308918][ T980] veth0_vlan: entered promiscuous mode [ 3343.620043][ T420] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3343.633370][ T420] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3343.657853][ T420] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3343.666073][ T420] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3343.674346][ T420] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3344.542714][T17526] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3345.721392][ T420] Bluetooth: hci3: command tx timeout [ 3345.919015][ T2175] netlink: 64 bytes leftover after parsing attributes in process `syz.7.11973'. [ 3346.042875][T17526] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3346.296723][T21397] syz_tun (unregistering): left allmulticast mode [ 3346.429155][T21397] bond0: (slave syz_tun): Releasing backup interface [ 3346.528367][T21397] syz_tun (unregistering): left promiscuous mode [ 3346.650951][ T980] veth1_vlan: entered promiscuous mode [ 3346.911860][T17526] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3346.944051][ T2233] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11975'. [ 3347.202276][ T1977] bridge0: port 1(bridge_slave_0) entered blocking state [ 3347.209907][ T1977] bridge0: port 1(bridge_slave_0) entered disabled state [ 3347.218987][ T1977] bridge_slave_0: entered allmulticast mode [ 3347.227029][ T1977] bridge_slave_0: entered promiscuous mode [ 3347.273511][ T1977] bridge0: port 2(bridge_slave_1) entered blocking state [ 3347.282387][ T1977] bridge0: port 2(bridge_slave_1) entered disabled state [ 3347.298420][ T1977] bridge_slave_1: entered allmulticast mode [ 3347.325378][ T1977] bridge_slave_1: entered promiscuous mode [ 3347.428637][ T980] veth0_macvtap: entered promiscuous mode [ 3347.496281][ T1977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3347.793833][ T1977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3347.813280][ T420] Bluetooth: hci3: command tx timeout [ 3347.874437][ T980] veth1_macvtap: entered promiscuous mode [ 3348.011963][ T1977] team0: Port device team_slave_0 added [ 3348.033951][ T1977] team0: Port device team_slave_1 added [ 3348.326367][ T980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3348.456197][ T980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3348.487899][T17526] bridge_slave_1: left allmulticast mode [ 3348.494448][T17526] bridge_slave_1: left promiscuous mode [ 3348.515763][T17526] bridge0: port 2(bridge_slave_1) entered disabled state [ 3348.538487][T17526] bridge_slave_0: left allmulticast mode [ 3348.544202][T17526] bridge_slave_0: left promiscuous mode [ 3348.560656][T17526] bridge0: port 1(bridge_slave_0) entered disabled state [ 3349.132575][ T2371] netlink: 180 bytes leftover after parsing attributes in process `syz.8.11978'. [ 3349.434840][T17526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3349.503535][T17526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3349.532053][T17526] bond0 (unregistering): Released all slaves [ 3349.661065][ T1977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3349.701943][ T1977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3349.744246][ T1977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3349.776530][ T1977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3349.784542][ T1977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3349.812935][ T1977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3349.869167][ T516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3349.895064][ T420] Bluetooth: hci3: command tx timeout [ 3349.909915][ T516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3350.093283][ T516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3350.122651][ T516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3350.278527][T17526] hsr_slave_0: left promiscuous mode [ 3350.297851][T17526] hsr_slave_1: left promiscuous mode [ 3350.304167][T17526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3350.350116][T17526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3350.392415][T17526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3350.413896][T17526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3350.489245][T17526] veth1_macvtap: left promiscuous mode [ 3350.536254][T17526] veth0_macvtap: left promiscuous mode [ 3350.568236][T17526] veth1_vlan: left promiscuous mode [ 3350.573603][T17526] veth0_vlan: left promiscuous mode [ 3351.220307][T17526] team0 (unregistering): Port device team_slave_1 removed [ 3351.267382][T17526] team0 (unregistering): Port device team_slave_0 removed [ 3351.621893][ T1977] hsr_slave_0: entered promiscuous mode [ 3351.654962][ T1977] hsr_slave_1: entered promiscuous mode [ 3351.689750][ T1977] debugfs: 'hsr0' already exists in 'hsr' [ 3351.695553][ T1977] Cannot create hsr debugfs directory [ 3351.767771][ T2159] chnl_net:caif_netlink_parms(): no params data found [ 3351.882538][ T2435] geneve4: entered promiscuous mode [ 3351.961099][ T420] Bluetooth: hci3: command tx timeout [ 3352.084825][ T1272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3352.100404][ T1272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3352.112379][ T1272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3352.127606][ T1272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3352.148320][ T1272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3353.435742][ T2159] bridge0: port 1(bridge_slave_0) entered blocking state [ 3353.453718][ T2159] bridge0: port 1(bridge_slave_0) entered disabled state [ 3353.462978][ T2159] bridge_slave_0: entered allmulticast mode [ 3353.471980][ T2159] bridge_slave_0: entered promiscuous mode [ 3353.689091][ T2159] bridge0: port 2(bridge_slave_1) entered blocking state [ 3353.696300][ T2159] bridge0: port 2(bridge_slave_1) entered disabled state [ 3353.742654][ T2159] bridge_slave_1: entered allmulticast mode [ 3353.778490][ T2159] bridge_slave_1: entered promiscuous mode [ 3354.014185][ T2772] netlink: 64 bytes leftover after parsing attributes in process `syz.7.11987'. [ 3354.063364][ T2784] hub 1-0:1.0: USB hub found [ 3354.092871][ T2784] hub 1-0:1.0: 1 port detected [ 3354.281197][ T420] Bluetooth: hci4: command tx timeout [ 3354.321673][ T2159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3354.501627][ T2159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3354.948891][ T2159] team0: Port device team_slave_0 added [ 3355.025479][T20983] usb 9-1: new low-speed USB device number 26 using dummy_hcd [ 3355.061326][ T2159] team0: Port device team_slave_1 added [ 3355.222372][T20983] usb 9-1: Invalid ep0 maxpacket: 32 [ 3355.240979][ T2159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3355.266966][ T2159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3355.339437][ T2159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3355.397901][T20983] usb 9-1: new low-speed USB device number 27 using dummy_hcd [ 3355.421586][ T2159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3355.429487][ T2159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3355.477474][ T2159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3355.584732][T20983] usb 9-1: Invalid ep0 maxpacket: 32 [ 3355.593609][T20983] usb usb9-port1: attempt power cycle [ 3355.800094][ T2548] chnl_net:caif_netlink_parms(): no params data found [ 3355.988618][T20983] usb 9-1: new low-speed USB device number 28 using dummy_hcd [ 3356.035107][T20983] usb 9-1: Invalid ep0 maxpacket: 32 [ 3356.088689][ T2159] hsr_slave_0: entered promiscuous mode [ 3356.095551][ T2159] hsr_slave_1: entered promiscuous mode [ 3356.130949][ T2159] debugfs: 'hsr0' already exists in 'hsr' [ 3356.136766][ T2159] Cannot create hsr debugfs directory [ 3356.187442][T20983] usb 9-1: new low-speed USB device number 29 using dummy_hcd [ 3356.239618][T20983] usb 9-1: Invalid ep0 maxpacket: 32 [ 3356.267949][T20983] usb usb9-port1: unable to enumerate USB device [ 3356.362628][ T420] Bluetooth: hci4: command tx timeout [ 3356.405982][ T1977] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3356.503915][ T1977] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3356.592725][T17526] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3356.764513][ T1977] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3356.794914][ T1977] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3356.869998][T17526] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3357.039171][T17526] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3357.061473][ T2548] bridge0: port 1(bridge_slave_0) entered blocking state [ 3357.073659][ T2548] bridge0: port 1(bridge_slave_0) entered disabled state [ 3357.087524][ T2548] bridge_slave_0: entered allmulticast mode [ 3357.095882][ T2548] bridge_slave_0: entered promiscuous mode [ 3357.169881][T17526] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3357.194243][ T2548] bridge0: port 2(bridge_slave_1) entered blocking state [ 3357.201840][ T2548] bridge0: port 2(bridge_slave_1) entered disabled state [ 3357.211432][ T2548] bridge_slave_1: entered allmulticast mode [ 3357.224934][ T2548] bridge_slave_1: entered promiscuous mode [ 3357.449767][ T2548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3357.496408][ T2548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3357.811821][ T2548] team0: Port device team_slave_0 added [ 3357.866816][ T2548] team0: Port device team_slave_1 added [ 3358.120060][ T3156] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11991'. [ 3358.142215][ T3156] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11991'. [ 3358.442682][ T420] Bluetooth: hci4: command tx timeout [ 3358.496910][ T3156] veth3: entered promiscuous mode [ 3358.577663][ T2548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3358.601215][ T2548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3358.645190][ T2548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3358.667891][ T2548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3358.675001][ T2548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3358.736724][ T2548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3358.958608][T17526] bridge_slave_1: left allmulticast mode [ 3358.964334][T17526] bridge_slave_1: left promiscuous mode [ 3358.987957][T17526] bridge0: port 2(bridge_slave_1) entered disabled state [ 3359.007891][T17526] bridge_slave_0: left allmulticast mode [ 3359.013601][T17526] bridge_slave_0: left promiscuous mode [ 3359.033789][T17526] bridge0: port 1(bridge_slave_0) entered disabled state [ 3359.063354][T17526] bridge_slave_1: left allmulticast mode [ 3359.087398][T17526] bridge_slave_1: left promiscuous mode [ 3359.093253][T17526] bridge0: port 2(bridge_slave_1) entered disabled state [ 3359.140934][T17526] bridge_slave_0: left allmulticast mode [ 3359.146651][T17526] bridge_slave_0: left promiscuous mode [ 3359.184065][T17526] bridge0: port 1(bridge_slave_0) entered disabled state [ 3359.536067][T17526] bridge0 (unregistering): left allmulticast mode [ 3359.660649][T17526] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 3359.670022][T17526] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 3359.698248][T17526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3359.707243][T17526] bond_slave_0: left promiscuous mode [ 3359.849195][T17526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3359.870975][T17526] bond_slave_1: left promiscuous mode [ 3359.877647][T17526] bond0 (unregistering): Released all slaves [ 3359.899349][T17526] bond1 (unregistering): Released all slaves [ 3360.366560][T17526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3360.399179][T17526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3360.410520][T17526] bond0 (unregistering): Released all slaves [ 3360.538032][ T420] Bluetooth: hci4: command tx timeout [ 3360.604977][ T2548] hsr_slave_0: entered promiscuous mode [ 3360.650491][ T2548] hsr_slave_1: entered promiscuous mode [ 3360.676561][ T2548] debugfs: 'hsr0' already exists in 'hsr' [ 3360.689944][ T2548] Cannot create hsr debugfs directory [ 3360.863130][ T3232] syzkaller0: entered promiscuous mode [ 3360.869087][ T3232] syzkaller0: entered allmulticast mode [ 3368.170459][T17526] tipc: Disabling bearer [ 3368.186046][T17526] tipc: Left network mode [ 3368.282009][ T1977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3368.663392][ T3355] loop2: detected capacity change from 0 to 7 [ 3368.685441][ T3355] Dev loop2: unable to read RDB block 7 [ 3368.703128][ T3355] loop2: unable to read partition table [ 3368.710007][ T3355] loop2: partition table beyond EOD, truncated [ 3368.716516][ T3355] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3369.033973][ T1977] 8021q: adding VLAN 0 to HW filter on device team0 [ 3369.150713][T17538] bridge0: port 1(bridge_slave_0) entered blocking state [ 3369.158078][T17538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3369.208708][T18273] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 3369.280953][T17538] bridge0: port 2(bridge_slave_1) entered blocking state [ 3369.288231][T17538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3369.305601][T17526] hsr_slave_0: left promiscuous mode [ 3369.337574][T17526] hsr_slave_1: left promiscuous mode [ 3369.349708][T17526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3369.389226][T17526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3369.399876][T18273] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 3369.411996][T18273] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 3369.425246][T18273] usb 9-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7 [ 3369.436965][T18273] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3369.449738][T18273] usb 9-1: config 0 descriptor?? [ 3369.455593][ T3372] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 3369.634120][T17526] hsr_slave_0: left promiscuous mode [ 3369.662427][T17526] hsr_slave_1: left promiscuous mode [ 3369.679719][T17526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3369.700251][T17526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3369.732560][T17526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3369.741083][ T3372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3369.752533][ T3372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3369.767174][T18273] usb 9-1: USB disconnect, device number 30 [ 3369.768022][T17526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3369.822205][T17526] veth1_macvtap: left promiscuous mode [ 3369.827996][T17526] veth0_macvtap: left promiscuous mode [ 3369.833701][T17526] veth1_vlan: left promiscuous mode [ 3369.844452][T17526] veth0_vlan: left promiscuous mode [ 3370.954836][T17526] team0 (unregistering): Port device team_slave_1 removed [ 3370.984776][T17526] team0 (unregistering): Port device team_slave_0 removed [ 3371.381566][ T1977] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3371.392551][ T1977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3371.846563][ T2159] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3371.977888][ T2159] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3372.210515][ T2159] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3372.342275][ T1977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3372.484149][ T2159] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3372.804973][T17526] IPVS: stop unused estimator thread 0... [ 3373.118684][ T1977] veth0_vlan: entered promiscuous mode [ 3373.163688][ T1977] veth1_vlan: entered promiscuous mode [ 3374.041244][ T2548] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3374.159504][ T1977] veth0_macvtap: entered promiscuous mode [ 3374.232947][ T2548] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3374.253373][ T2548] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3374.295760][ T1977] veth1_macvtap: entered promiscuous mode [ 3374.322005][ T2548] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3374.494045][ T2159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3374.646073][ T1977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3374.716599][ T1977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3374.800861][ T2159] 8021q: adding VLAN 0 to HW filter on device team0 [ 3374.852338][T18656] bridge0: port 1(bridge_slave_0) entered blocking state [ 3374.859586][T18656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3374.911579][T17526] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3374.965240][ T8222] bridge0: port 2(bridge_slave_1) entered blocking state [ 3374.972485][ T8222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3375.047603][T17526] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3375.074368][T17526] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3375.147026][T17526] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3375.385185][ T3608] loop2: detected capacity change from 0 to 7 [ 3375.394365][ T879] Dev loop2: unable to read RDB block 7 [ 3375.411939][ T879] loop2: unable to read partition table [ 3375.423003][ T879] loop2: partition table beyond EOD, truncated [ 3375.445562][ T3608] Dev loop2: unable to read RDB block 7 [ 3375.458068][ T3608] loop2: unable to read partition table [ 3375.464164][ T3608] loop2: partition table beyond EOD, truncated [ 3375.486346][ T3608] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3375.530161][ T2159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3375.589041][T17526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3375.618675][T17526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3375.853272][ T8222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3375.875069][ T8222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3375.914588][ T2159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3375.969930][ T2548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3376.116227][ T2548] 8021q: adding VLAN 0 to HW filter on device team0 [ 3376.241617][ T3288] bridge0: port 1(bridge_slave_0) entered blocking state [ 3376.248887][ T3288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3376.390088][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 3376.397471][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3376.450498][ T2159] veth0_vlan: entered promiscuous mode [ 3376.505627][ T2159] veth1_vlan: entered promiscuous mode [ 3376.557578][ T9298] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 3376.692301][ T2159] veth0_macvtap: entered promiscuous mode [ 3376.724472][ T2159] veth1_macvtap: entered promiscuous mode [ 3376.741746][ T9298] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3376.783106][ T9298] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3376.843073][ T9298] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3376.851591][ T2548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3376.876220][ T9298] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3376.915900][ T9298] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3376.946963][ T9298] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3376.955241][T18273] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 3376.970465][ T2159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3377.003256][ T9298] usb 9-1: Product: syz [ 3377.012874][ T9298] usb 9-1: Manufacturer: syz [ 3377.024058][ T2159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3377.051788][ T9298] cdc_wdm 9-1:1.0: skipping garbage [ 3377.081396][ T9298] cdc_wdm 9-1:1.0: skipping garbage [ 3377.114305][ T9298] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 3377.131846][ T8222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3377.150552][ T9298] cdc_wdm 9-1:1.0: Unknown control protocol [ 3377.162994][T18273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3377.200088][ T8222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3377.216397][T18273] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3377.260947][T18273] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 3377.271632][ T8222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3377.297620][ T8222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3377.306702][T18273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3377.367227][T18273] usb 4-1: config 0 descriptor?? [ 3377.571164][ T2548] veth0_vlan: entered promiscuous mode [ 3377.798319][ T2548] veth1_vlan: entered promiscuous mode [ 3377.825538][T17526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3377.868924][T17526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3377.945950][T18273] usb 4-1: USB disconnect, device number 98 [ 3378.055027][ T3286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3378.070707][ T3286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3378.160855][ T2548] veth0_macvtap: entered promiscuous mode [ 3378.225282][ T2548] veth1_macvtap: entered promiscuous mode [ 3378.292522][ T2548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3378.333576][ T2548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3378.478359][T17526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3378.502865][T17526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3379.109826][T17526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3379.327486][T17526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3379.394097][ C1] wdm_int_callback: 9 callbacks suppressed [ 3379.394124][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 3379.406609][ C1] wdm_int_callback: 9 callbacks suppressed [ 3379.406633][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 3379.409406][ T3685] usb 9-1: USB disconnect, device number 31 [ 3379.412474][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3380.095563][ T3286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3380.150824][ T3286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3380.358778][ T3758] netlink: 112 bytes leftover after parsing attributes in process `syz.4.12017'. [ 3380.800285][ T3777] loop2: detected capacity change from 0 to 7 [ 3380.862615][ T3777] Dev loop2: unable to read RDB block 7 [ 3380.912801][ T3777] loop2: unable to read partition table [ 3380.959269][ T3777] loop2: partition table beyond EOD, truncated [ 3381.001893][ T3777] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3381.284783][T17538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3381.340846][T17538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3381.403476][ T3789] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.12020'. [ 3381.517762][ T3790] loop4: detected capacity change from 0 to 7 [ 3381.556915][ T3789] buffer_io_error: 15 callbacks suppressed [ 3381.556937][ T3789] Buffer I/O error on dev loop4, logical block 0, async page read [ 3381.606884][ T3790] Buffer I/O error on dev loop4, logical block 0, async page read [ 3381.629457][ T3790] Buffer I/O error on dev loop4, logical block 0, async page read [ 3381.672092][ T3790] Buffer I/O error on dev loop4, logical block 0, async page read [ 3381.721997][ T3790] Buffer I/O error on dev loop4, logical block 0, async page read [ 3381.769170][ T3790] Buffer I/O error on dev loop4, logical block 0, async page read [ 3381.816888][ T3790] Buffer I/O error on dev loop4, logical block 0, async page read [ 3381.904167][ T3790] Buffer I/O error on dev loop4, logical block 0, async page read [ 3382.016602][ T3790] ldm_validate_partition_table(): Disk read failed. [ 3382.076718][ T3790] Buffer I/O error on dev loop4, logical block 0, async page read [ 3382.191298][ T3790] Buffer I/O error on dev loop4, logical block 0, async page read [ 3382.254788][ T3790] Dev loop4: unable to read RDB block 0 [ 3382.293519][ T3790] loop4: unable to read partition table [ 3382.334934][ T3790] loop4: partition table beyond EOD, truncated [ 3382.363153][ T3790] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 3383.552648][T19706] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3383.566036][T19706] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3383.575161][ T3836] rdma_op ffff888079cbc9f0 conn xmit_rdma 0000000000000000 [ 3383.575395][T19706] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3383.593977][T19706] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3383.601843][T19706] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3385.096771][ T3886] netlink: 68 bytes leftover after parsing attributes in process `syz.8.12030'. [ 3385.735656][ T420] Bluetooth: hci2: command tx timeout [ 3387.594323][ T3847] chnl_net:caif_netlink_parms(): no params data found [ 3387.709975][ T3959] program syz.4.12033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3387.738640][ T3957] netlink: 'syz.4.12033': attribute type 32 has an invalid length. [ 3387.783500][ T3957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12033'. [ 3387.798231][ T420] Bluetooth: hci2: command tx timeout [ 3388.064817][ T3957] bond1: Setting coupled_control to off (0) [ 3388.326570][ T4029] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12034'. [ 3388.629676][ T3847] bridge0: port 1(bridge_slave_0) entered blocking state [ 3388.668098][ T3847] bridge0: port 1(bridge_slave_0) entered disabled state [ 3388.675470][ T3847] bridge_slave_0: entered allmulticast mode [ 3388.706658][ T3651] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 3388.735862][ T3847] bridge_slave_0: entered promiscuous mode [ 3388.752361][ T3847] bridge0: port 2(bridge_slave_1) entered blocking state [ 3388.772294][ T3847] bridge0: port 2(bridge_slave_1) entered disabled state [ 3388.788157][ T3847] bridge_slave_1: entered allmulticast mode [ 3388.806514][ T3847] bridge_slave_1: entered promiscuous mode [ 3388.901993][ T3651] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3388.927426][ T3651] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3388.950268][ T3847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3388.978108][ T3651] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 3388.992001][ T3847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3389.002139][ T3651] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3389.079364][ T3651] usb 9-1: config 0 descriptor?? [ 3389.215767][ T3847] team0: Port device team_slave_0 added [ 3389.234453][ T3847] team0: Port device team_slave_1 added [ 3389.334823][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.341689][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.439507][ T3847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3389.446523][ T3847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3389.475244][ T3651] lg-g15 0003:046D:C222.00A7: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.8-1/input0 [ 3389.597738][ T3847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3389.606657][ T3699] usb 9-1: USB disconnect, device number 32 [ 3389.785863][ T4140] fido_id[4140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 3389.878128][ T420] Bluetooth: hci2: command tx timeout [ 3390.250527][ T3847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3390.257735][ T3847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3390.322440][ T3847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3390.955835][ T3847] hsr_slave_0: entered promiscuous mode [ 3391.012210][ T3847] hsr_slave_1: entered promiscuous mode [ 3391.147289][ T30] audit: type=1800 audit(1771591695.674:3819): pid=4227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.12044" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 3391.264011][ T4227] F2FS-fs: Conflicting test_dummy_encryption options [ 3391.959807][ T420] Bluetooth: hci2: command tx timeout [ 3392.667497][ T3699] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 3392.827425][ T3699] usb 1-1: Using ep0 maxpacket: 32 [ 3392.853208][ T3699] usb 1-1: too many configurations: 96, using maximum allowed: 8 [ 3392.898979][ T3699] usb 1-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 3392.970860][ T3699] usb 1-1: config 172 has 0 interfaces, different from the descriptor's value: 1 [ 3393.117525][ T3699] usb 1-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 3393.171971][ T3847] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3393.236358][ T3699] usb 1-1: config 172 has 0 interfaces, different from the descriptor's value: 1 [ 3393.448486][ T3699] usb 1-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 3393.613374][ T3699] usb 1-1: config 172 has 0 interfaces, different from the descriptor's value: 1 [ 3393.684815][ T3699] usb 1-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 3393.711252][ T3699] usb 1-1: config 172 has 0 interfaces, different from the descriptor's value: 1 [ 3393.760192][ T3699] usb 1-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 3393.807501][ T3699] usb 1-1: config 172 has 0 interfaces, different from the descriptor's value: 1 [ 3393.832133][ T3847] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3393.899190][ T3699] usb 1-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 3393.952919][ T3699] usb 1-1: config 172 has 0 interfaces, different from the descriptor's value: 1 [ 3394.012018][ T3699] usb 1-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 3394.090083][ T3699] usb 1-1: config 172 has 0 interfaces, different from the descriptor's value: 1 [ 3394.102752][ T3699] usb 1-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 3394.137089][ T3699] usb 1-1: config 172 has 0 interfaces, different from the descriptor's value: 1 [ 3394.204859][ T3699] usb 1-1: New USB device found, idVendor=046d, idProduct=ca0d, bcdDevice= a.35 [ 3394.241665][ T3699] usb 1-1: New USB device strings: Mfr=198, Product=187, SerialNumber=252 [ 3394.298593][ T3699] usb 1-1: Product: syz [ 3394.325274][ T3699] usb 1-1: Manufacturer: syz [ 3394.355347][ T3699] usb 1-1: SerialNumber: syz [ 3394.373776][ T3847] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3394.612189][ T3847] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3395.347454][ T5915] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 3395.552241][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3395.626617][ T5915] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 3395.647753][ T3847] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3395.689711][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3395.713940][ T3847] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3395.756475][ T5915] usb 5-1: config 0 descriptor?? [ 3395.808998][ T5915] smsusb:smsusb_probe: board id=8, interface number 0 [ 3395.820179][ T3847] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3395.848536][ T5915] smsusb:smsusb_probe: Device initialized with return code -19 [ 3395.902198][ T3847] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3396.272746][ T4415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3396.319377][ T4415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3396.458054][T18273] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 3396.492767][ T3847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3396.643456][ T3847] 8021q: adding VLAN 0 to HW filter on device team0 [ 3396.699870][T17538] bridge0: port 1(bridge_slave_0) entered blocking state [ 3396.707136][T17538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3396.752090][ T4433] tipc: Started in network mode [ 3396.759382][ T4433] tipc: Node identity 7f000001, cluster identity 4711 [ 3396.766720][ T4433] tipc: Enabling of bearer rejected, failed to enable media [ 3396.885564][ T3288] bridge0: port 2(bridge_slave_1) entered blocking state [ 3396.893014][ T3288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3397.043021][ T4433] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 3397.135514][ T4433] tipc: Enabled bearer , priority 10 [ 3398.194014][ T3699] usb 1-1: USB disconnect, device number 12 [ 3398.269446][ T4456] binder: 4455:4456 ioctl 4004f506 200000000080 returned -22 [ 3398.579982][ T3685] tipc: Node number set to 2130706433 [ 3399.042447][ T3847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3399.084291][ T30] audit: type=1326 audit(1771591703.624:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.0.12057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39219c629 code=0x7ffc0000 [ 3399.235497][ T30] audit: type=1326 audit(1771591703.634:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.0.12057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39219c629 code=0x7ffc0000 [ 3399.312494][ T3847] veth0_vlan: entered promiscuous mode [ 3399.336065][ T30] audit: type=1326 audit(1771591703.754:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.0.12057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe39219c629 code=0x7ffc0000 [ 3399.381703][ T3847] veth1_vlan: entered promiscuous mode [ 3399.439896][ T30] audit: type=1326 audit(1771591703.754:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.0.12057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39219c629 code=0x7ffc0000 [ 3399.527747][ T3847] veth0_macvtap: entered promiscuous mode [ 3399.580187][ T3847] veth1_macvtap: entered promiscuous mode [ 3399.589404][ T30] audit: type=1326 audit(1771591703.754:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.0.12057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39219c629 code=0x7ffc0000 [ 3399.685308][ T3847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3399.741053][ T30] audit: type=1326 audit(1771591703.774:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.0.12057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe39219c629 code=0x7ffc0000 [ 3399.811043][ T3847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3399.875958][ T30] audit: type=1326 audit(1771591703.774:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.0.12057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39219c629 code=0x7ffc0000 [ 3400.047276][ T3286] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3400.128058][ T3286] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3400.173203][ T30] audit: type=1326 audit(1771591703.774:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.0.12057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39219c629 code=0x7ffc0000 [ 3400.209883][ T3286] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3400.256585][ T3286] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3400.353419][ T30] audit: type=1326 audit(1771591703.774:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.0.12057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe39219c629 code=0x7ffc0000 [ 3400.510172][ T30] audit: type=1326 audit(1771591703.774:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4466 comm="syz.0.12057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39219c629 code=0x7ffc0000 [ 3402.657879][ T3699] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 3402.881153][ T3699] usb 9-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 3402.940221][ T3699] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3402.962246][ T3699] usb 9-1: Product: syz [ 3402.966484][ T3699] usb 9-1: Manufacturer: syz [ 3403.002825][ T3699] usb 9-1: SerialNumber: syz [ 3403.080513][ T3699] usb 9-1: config 0 descriptor?? [ 3403.347593][ T3685] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 3403.547475][ T3685] usb 4-1: Using ep0 maxpacket: 32 [ 3403.618225][ T3685] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 3403.799448][ T3685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3403.874397][ T3685] usb 4-1: Product: syz [ 3403.889297][ T3685] usb 4-1: Manufacturer: syz [ 3403.917623][ T3685] usb 4-1: SerialNumber: syz [ 3403.954249][ T3685] usb 4-1: config 0 descriptor?? [ 3404.479549][ T3685] airspy 4-1:0.0: Board ID: 00 [ 3404.487495][ T3685] airspy 4-1:0.0: Firmware version: [ 3405.053125][ T3685] airspy 4-1:0.0: Registered as swradio24 [ 3405.079542][ T3685] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 3405.555185][ T4560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12064'. [ 3405.571148][T17538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3405.592736][T17538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3405.604796][ T4560] netlink: 'syz.0.12064': attribute type 1 has an invalid length. [ 3405.608379][ T4561] netlink: 'syz.0.12064': attribute type 1 has an invalid length. [ 3405.860960][ T4560] veth3: entered promiscuous mode [ 3405.974776][ T5915] usb 5-1: USB disconnect, device number 65 [ 3406.026919][ T9298] usb 4-1: USB disconnect, device number 99 [ 3406.282880][ T4614] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12065'. [ 3406.393749][ T4561] veth3: entered promiscuous mode [ 3406.606492][T17538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3406.656556][T17538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3408.447789][ T4675] loop2: detected capacity change from 0 to 7 [ 3408.482385][ T4675] loop2: [ 3408.497219][ T4675] loop2: partition table partially beyond EOD, truncated [ 3410.977483][ T3685] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 3410.999971][ T4722] netlink: 'syz.0.12077': attribute type 1 has an invalid length. [ 3411.157952][ T3685] usb 4-1: Using ep0 maxpacket: 32 [ 3411.186492][ T3685] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 3411.216207][ T3685] usb 4-1: config 0 has no interface number 0 [ 3411.243911][ T3685] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3411.280123][ T3685] usb 4-1: config 0 interface 1 has no altsetting 0 [ 3411.319712][ T3685] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3411.332207][ T3685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3411.360999][ T3685] usb 4-1: Product: syz [ 3411.365239][ T3685] usb 4-1: Manufacturer: syz [ 3411.391153][ T3685] usb 4-1: SerialNumber: syz [ 3411.433442][ T3685] usb 4-1: config 0 descriptor?? [ 3411.657935][ T3685] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 3411.709053][ T3685] cx231xx 4-1:0.1: Failed to read PCB config [ 3411.736374][ T3685] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 3411.787713][ T3685] usb 4-1: USB disconnect, device number 100 [ 3412.045317][ T4722] veth3: entered promiscuous mode [ 3412.207854][ T3685] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 3412.434854][ T3685] usb 4-1: Using ep0 maxpacket: 32 [ 3412.457796][ T3685] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 3412.476656][ T3685] usb 4-1: config 0 has no interface number 0 [ 3412.496839][ T3685] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3412.526968][ T3685] usb 4-1: config 0 interface 1 has no altsetting 0 [ 3412.550100][ T3685] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3412.567519][ T3685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3412.596187][ T3685] usb 4-1: Product: syz [ 3412.606414][ T3685] usb 4-1: Manufacturer: syz [ 3412.617580][ T9298] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 3412.626825][ T3685] usb 4-1: SerialNumber: syz [ 3412.661138][ T3685] usb 4-1: config 0 descriptor?? [ 3412.842598][ T9298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3412.894383][ T9298] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 3412.935792][ T9298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3412.978540][ T9298] usb 1-1: config 0 descriptor?? [ 3413.017630][ T9298] smsusb:smsusb_probe: board id=8, interface number 0 [ 3413.037304][ T9298] smsusb:smsusb_probe: Device initialized with return code -19 [ 3413.551377][ T4805] tipc: Started in network mode [ 3413.558912][ T4805] tipc: Node identity 7f000001, cluster identity 4711 [ 3413.591580][ T4805] tipc: Enabling of bearer rejected, failed to enable media [ 3413.652155][ T4805] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 3413.665404][ T4805] tipc: Enabled bearer , priority 10 [ 3414.667468][T18273] tipc: Node number set to 2130706433 [ 3417.708809][T19706] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3417.723808][T19706] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3417.736941][T19706] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3417.746474][T19706] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3417.755477][T19706] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3417.795661][ T3685] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 3417.856772][ T3685] cx231xx 4-1:0.1: Failed to read PCB config [ 3417.884456][ T3685] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -32 [ 3418.175041][ T4875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12086'. [ 3418.652623][T23419] usb 1-1: USB disconnect, device number 13 [ 3418.881925][T23419] usb 4-1: USB disconnect, device number 101 [ 3419.809943][ T420] Bluetooth: hci6: command tx timeout [ 3419.927575][T23419] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 3420.117701][T23419] usb 4-1: Using ep0 maxpacket: 16 [ 3420.145022][T23419] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3420.182623][T23419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3420.228919][T23419] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3420.279099][T23419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3420.287170][T23419] usb 4-1: Product: syz [ 3420.312153][T23419] usb 4-1: Manufacturer: syz [ 3420.316796][T23419] usb 4-1: SerialNumber: syz [ 3420.409193][T23419] usb 4-1: config 0 descriptor?? [ 3420.470544][T23419] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3420.515224][T23419] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 3420.594441][ T4869] chnl_net:caif_netlink_parms(): no params data found [ 3421.172495][T23419] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 3421.184458][ T4869] bridge0: port 1(bridge_slave_0) entered blocking state [ 3421.191974][ T4869] bridge0: port 1(bridge_slave_0) entered disabled state [ 3421.207439][ T5915] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 3421.215910][ T4869] bridge_slave_0: entered allmulticast mode [ 3421.237574][T23419] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 3421.248247][ T4869] bridge_slave_0: entered promiscuous mode [ 3421.258345][ T3699] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 3421.276013][ T4869] bridge0: port 2(bridge_slave_1) entered blocking state [ 3421.293898][ T4869] bridge0: port 2(bridge_slave_1) entered disabled state [ 3421.304209][T23419] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 3421.308455][ T4869] bridge_slave_1: entered allmulticast mode [ 3421.328765][T23419] em28xx 4-1:0.0: No AC97 audio processor [ 3421.339109][ T4869] bridge_slave_1: entered promiscuous mode [ 3421.357439][ T5915] usb 5-1: device descriptor read/64, error -71 [ 3421.381672][T23419] usb 4-1: USB disconnect, device number 102 [ 3421.416582][T23419] em28xx 4-1:0.0: Disconnecting em28xx [ 3421.451404][T23419] em28xx 4-1:0.0: Freeing device [ 3421.469642][ T3699] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 3421.511470][ T3699] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 3421.554939][ T3699] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 3421.596858][ T3699] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3421.597861][ T5915] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 3421.636013][ T3699] usb 1-1: config 0 has no interface number 0 [ 3421.663309][ T3699] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30 [ 3421.664870][ T4869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3421.699694][ T3699] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 3421.723716][ T4869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3421.745933][ T3699] usb 1-1: config 0 interface 255 has no altsetting 0 [ 3421.767585][ T3699] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 3421.787960][ T5915] usb 5-1: device descriptor read/64, error -71 [ 3421.794863][ T3699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3421.836032][ T3699] usb 1-1: config 0 descriptor?? [ 3421.865654][ T3699] usb-storage 1-1:0.255: USB Mass Storage device detected [ 3421.887937][ T420] Bluetooth: hci6: command tx timeout [ 3421.907976][ T5915] usb usb5-port1: attempt power cycle [ 3421.912974][ T3699] usb-storage 1-1:0.255: Quirks match for vid 1908 pid 1315: 20000 [ 3421.959481][ T4869] team0: Port device team_slave_0 added [ 3421.983100][ T4869] team0: Port device team_slave_1 added [ 3422.048472][ T4869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3422.055692][ T4869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3422.087722][ T4869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3422.120919][ T4869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3422.128550][ T4869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3422.163014][ T4869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3422.277548][ T5915] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 3422.308084][ T5915] usb 5-1: device descriptor read/8, error -71 [ 3422.415405][ T4869] hsr_slave_0: entered promiscuous mode [ 3422.446225][ T4869] hsr_slave_1: entered promiscuous mode [ 3422.463300][ T3699] usb 1-1: USB disconnect, device number 14 [ 3422.481833][ T4869] debugfs: 'hsr0' already exists in 'hsr' [ 3422.511080][ T4869] Cannot create hsr debugfs directory [ 3422.568166][ T5915] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 3422.616756][ T5915] usb 5-1: device descriptor read/8, error -71 [ 3422.738164][ T5915] usb usb5-port1: unable to enumerate USB device [ 3422.797758][T23419] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 3422.981381][T23419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3423.012389][T23419] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 3423.053932][T23419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3423.098752][T23419] usb 4-1: config 0 descriptor?? [ 3423.145798][T23419] smsusb:smsusb_probe: board id=8, interface number 0 [ 3423.176579][ T5287] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.12097'. [ 3423.186607][T23419] smsusb:smsusb_probe: Device initialized with return code -19 [ 3423.967906][ T420] Bluetooth: hci6: command tx timeout [ 3426.038921][ T420] Bluetooth: hci6: command tx timeout [ 3426.401903][T16621] bond0: (slave syz_tun): Releasing backup interface [ 3426.493860][ T5323] tipc: Started in network mode [ 3426.502031][ T5323] tipc: Node identity 7f000001, cluster identity 4711 [ 3426.525948][ T5323] tipc: Enabling of bearer rejected, failed to enable media [ 3426.766075][ T5915] usb 4-1: USB disconnect, device number 103 [ 3426.910648][ T3288] vlan2: left promiscuous mode [ 3426.944333][ T3288] bridge0: port 3(vlan2) entered disabled state [ 3427.029823][ T3288] bridge_slave_1: left allmulticast mode [ 3427.035741][ T3288] bridge_slave_1: left promiscuous mode [ 3427.044462][ T3288] bridge0: port 2(bridge_slave_1) entered disabled state [ 3427.085598][ T3288] bridge_slave_0: left promiscuous mode [ 3427.102177][ T3288] bridge0: port 1(bridge_slave_0) entered disabled state [ 3427.284435][ T3288] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 3427.309363][ T3288] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 3427.327206][ T3288] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 06:24:0a:54:62:e4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 3427.833532][ T3288] bond3 (unregistering): (slave geneve3): Releasing active interface [ 3428.008682][ T3288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3428.075851][ T3288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3428.114448][ T3288] bond0 (unregistering): Released all slaves [ 3428.186837][ T3288] bond1 (unregistering): Released all slaves [ 3428.214812][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12111'. [ 3428.250099][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12111'. [ 3428.331417][ T3288] bond2 (unregistering): (slave veth5): Releasing backup interface [ 3428.391781][ T3288] bond2 (unregistering): Released all slaves [ 3428.464968][ T3288] bond3 (unregistering): Released all slaves [ 3428.941670][ T3288] tipc: Disabling bearer [ 3428.992089][ T3288] tipc: Left network mode [ 3429.787474][T23419] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 3429.961181][T23419] usb 1-1: Using ep0 maxpacket: 32 [ 3430.028175][T23419] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 3430.083857][T23419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3430.116726][T23419] usb 1-1: Product: syz [ 3430.172489][T23419] usb 1-1: Manufacturer: syz [ 3430.177172][T23419] usb 1-1: SerialNumber: syz [ 3430.291339][T23419] usb 1-1: config 0 descriptor?? [ 3430.384582][ T4869] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3430.493150][ T4869] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3430.613745][ T5504] wg0: entered promiscuous mode [ 3430.650520][ T5504] wg0: entered allmulticast mode [ 3430.790451][ T4869] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3430.900343][ T4869] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3431.032605][T23419] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 3431.087838][T23419] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 3431.119082][T23419] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 3431.390785][T23419] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 3431.474782][T23419] usb 1-1: USB disconnect, device number 15 [ 3432.066144][ T5564] fuse: Unknown parameter 'f' [ 3432.140472][ T5564] fuse: Unknown parameter 'Qd9É%Úx$¿‚å„ׇƒg}BSS [ 3432.140472][ T5564] r1¬Ìwó‘âf¹ˆ|\¿¯¿6ÒñfØ' [ 3432.453820][ T4869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3432.623258][ T4869] 8021q: adding VLAN 0 to HW filter on device team0 [ 3432.763387][T18656] bridge0: port 1(bridge_slave_0) entered blocking state [ 3432.770662][T18656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3432.875543][T18656] bridge0: port 2(bridge_slave_1) entered blocking state [ 3432.882866][T18656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3433.165722][ T3288] hsr_slave_0: left promiscuous mode [ 3433.208471][ T3288] hsr_slave_1: left promiscuous mode [ 3433.235165][ T3288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3433.276603][ T3288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3433.639095][ T3288] pim6reg (unregistering): left allmulticast mode [ 3434.982586][ T3288] team_slave_1 (unregistering): left promiscuous mode [ 3435.096346][ T3288] team0 (unregistering): Port device team_slave_1 removed [ 3435.202182][ T3288] team_slave_0 (unregistering): left promiscuous mode [ 3435.308923][ T3288] team0 (unregistering): Port device team_slave_0 removed [ 3436.287761][ T4869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3436.556284][ T4869] veth0_vlan: entered promiscuous mode [ 3436.699158][ T4869] veth1_vlan: entered promiscuous mode [ 3436.883506][ T5670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12136'. [ 3437.107930][ T4869] veth0_macvtap: entered promiscuous mode [ 3437.182348][ T4869] veth1_macvtap: entered promiscuous mode [ 3437.416542][ T4869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3437.570377][ T4869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3437.729010][ T8222] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3437.770527][ T8222] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3437.847968][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 3437.887299][ T8222] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3438.027945][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3438.051754][ T8222] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3438.090637][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 3438.140776][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3438.221025][ T10] usb 1-1: config 0 descriptor?? [ 3438.289778][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 3438.347652][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 3438.437414][T17526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3438.499940][T17526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3438.851842][T18656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3438.907731][T18656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3440.659690][ T5790] loop2: detected capacity change from 0 to 7 [ 3440.705398][ T5790] loop2: [ 3440.709433][ T3288] IPVS: stop unused estimator thread 0... [ 3440.721156][ T5790] loop2: partition table partially beyond EOD, truncated [ 3442.441869][T18273] usb 1-1: USB disconnect, device number 16 [ 3444.175743][ T5864] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 3444.660306][T24134] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 3444.844531][T24134] usb 1-1: Using ep0 maxpacket: 16 [ 3444.854489][T24134] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 3444.924700][T24134] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3444.976124][T24134] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3445.052012][T24134] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3445.068146][ T5889] loop2: detected capacity change from 0 to 7 [ 3445.121390][ T879] loop2: [ 3445.127452][T24134] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3445.135044][ T879] loop2: partition table partially beyond EOD, truncated [ 3445.135487][T24134] usb 1-1: Product: syz [ 3445.135510][T24134] usb 1-1: Manufacturer: syz [ 3445.245966][ T5889] loop2: [ 3445.266966][ T5889] loop2: partition table partially beyond EOD, truncated [ 3445.307230][T24134] usb 1-1: SerialNumber: syz [ 3446.547542][ T3651] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 3446.762553][ T3651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3446.804945][ T3651] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 3446.817583][ T3651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3446.834021][ T3651] usb 5-1: config 0 descriptor?? [ 3446.874307][ T3651] smsusb:smsusb_probe: board id=8, interface number 0 [ 3446.939989][ T3651] smsusb:smsusb_probe: Device initialized with return code -19 [ 3448.897161][T24134] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3449.504775][T24134] usb 1-1: unit 8 not found! [ 3450.521862][T24134] usb 1-1: USB disconnect, device number 17 [ 3450.764059][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.771281][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.823016][T16936] usb 5-1: USB disconnect, device number 70 [ 3452.189754][ T6027] syzkaller0: entered promiscuous mode [ 3452.196248][ T6027] syzkaller0: entered allmulticast mode [ 3452.701148][ T6037] netlink: 'syz.7.12174': attribute type 8 has an invalid length. [ 3452.798781][T19706] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3452.815764][T19706] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3452.825679][T19706] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3452.834701][T19706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3452.845181][T19706] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3454.919464][T19706] Bluetooth: hci1: command tx timeout [ 3457.001427][ T420] Bluetooth: hci1: command tx timeout [ 3457.973665][ T420] Bluetooth: hci5: command 0x0406 tx timeout [ 3459.087654][T19706] Bluetooth: hci1: command tx timeout [ 3459.626890][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12180'. [ 3460.253587][ T6108] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12180'. [ 3461.158997][T19706] Bluetooth: hci1: command tx timeout [ 3461.331172][ T6051] chnl_net:caif_netlink_parms(): no params data found [ 3461.772040][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 3461.797592][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state [ 3461.808666][ T6051] bridge_slave_0: entered allmulticast mode [ 3461.826097][ T6051] bridge_slave_0: entered promiscuous mode [ 3461.854349][ T6051] bridge0: port 2(bridge_slave_1) entered blocking state [ 3461.871938][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 3461.889477][ T6051] bridge_slave_1: entered allmulticast mode [ 3461.922166][ T6051] bridge_slave_1: entered promiscuous mode [ 3462.209436][ T6051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3462.271823][ T6051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3462.427213][ T6051] team0: Port device team_slave_0 added [ 3462.455756][ T6258] netlink: 236 bytes leftover after parsing attributes in process `syz.7.12188'. [ 3462.476757][ T6258] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 3462.494640][ T6051] team0: Port device team_slave_1 added [ 3462.744103][ T6051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3462.762455][ T6051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3462.822705][ T6051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3462.852273][ T6051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3462.877671][ T6051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3462.947448][ T6051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3463.202208][ T6051] hsr_slave_0: entered promiscuous mode [ 3463.219352][ T6051] hsr_slave_1: entered promiscuous mode [ 3463.240408][ T6051] debugfs: 'hsr0' already exists in 'hsr' [ 3463.246209][ T6051] Cannot create hsr debugfs directory [ 3463.388613][ T3651] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 3463.547474][ T3651] usb 5-1: Using ep0 maxpacket: 16 [ 3463.561433][ T3651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3463.597537][ T3651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3463.667047][ T3651] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 3463.737451][ T3651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3463.763795][ T3651] usb 5-1: config 0 descriptor?? [ 3463.890203][ T3651] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 3463.943696][ T3651] usbhid 5-1:0.0: can't add hid device: -22 [ 3463.975442][ T3651] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 3464.082273][ T3651] usb 5-1: USB disconnect, device number 71 [ 3465.469734][T16936] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 3465.623256][ T6452] netlink: 68 bytes leftover after parsing attributes in process `syz.7.12195'. [ 3465.699641][ T6452] netlink: 68 bytes leftover after parsing attributes in process `syz.7.12195'. [ 3465.737799][T16936] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 3465.745973][T16936] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3465.799482][T16936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3465.834141][T16936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3465.871914][T16936] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3465.917578][T16936] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3465.946350][T16936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3465.970542][ T6051] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3465.986742][T16936] usb 5-1: config 0 descriptor?? [ 3466.005564][ T6438] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3466.439165][T16936] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 3466.446645][T16936] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 3466.503380][T16936] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 3466.527477][T16936] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 3466.563809][ T6051] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3466.602804][T16936] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 3466.644786][T16936] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 3466.659897][T16936] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 3466.667813][T16936] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 3466.675256][T16936] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 3466.695966][T16936] plantronics 0003:047F:FFFF.00A8: unknown main item tag 0x0 [ 3466.755139][T16936] plantronics 0003:047F:FFFF.00A8: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 3467.190938][ T6051] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3467.264882][ T6051] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3467.931169][ T6051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3468.031939][ T6051] 8021q: adding VLAN 0 to HW filter on device team0 [ 3468.100841][T18656] bridge0: port 1(bridge_slave_0) entered blocking state [ 3468.108057][T18656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3468.197795][ T420] Bluetooth: hci3: command 0x0406 tx timeout [ 3468.209177][T18656] bridge0: port 2(bridge_slave_1) entered blocking state [ 3468.216358][T18656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3468.327953][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12200'. [ 3468.392385][T18273] usb 5-1: USB disconnect, device number 72 [ 3468.759028][ T6540] fuse: Unknown parameter 'group_iG' [ 3468.980923][ T6051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3469.117761][ T6051] veth0_vlan: entered promiscuous mode [ 3469.134513][ T6051] veth1_vlan: entered promiscuous mode [ 3469.223072][ T6051] veth0_macvtap: entered promiscuous mode [ 3469.247191][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12202'. [ 3469.283635][ T6051] veth1_macvtap: entered promiscuous mode [ 3469.375282][ T6051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3469.450187][ T6051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3469.490128][T17520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3469.512641][T17520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3469.546629][T17520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3469.563041][T17520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3469.776825][T17526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3469.806181][T17526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3469.847890][T17520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3469.856682][T17520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3470.276427][ T6591] vivid-000: disconnect [ 3470.295342][ T6590] vivid-000: reconnect [ 3470.349015][ T10] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 3470.530501][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3470.562259][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 3470.593559][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3470.647784][ T10] usb 7-1: config 0 descriptor?? [ 3470.676785][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 3470.733482][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 3471.311331][ T6628] tipc: Started in network mode [ 3471.316319][ T6628] tipc: Node identity 7f000001, cluster identity 4711 [ 3471.327961][ T6628] tipc: Enabling of bearer rejected, failed to enable media [ 3471.352166][T16936] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 3471.402911][ T6628] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 3471.440135][ T6628] tipc: Enabled bearer , priority 10 [ 3471.533641][T16936] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3471.649295][T16936] usb 5-1: config 13 has an invalid interface number: 177 but max is 0 [ 3471.688466][T16936] usb 5-1: config 13 has no interface number 0 [ 3471.723106][T16936] usb 5-1: config 13 interface 177 altsetting 4 has an endpoint descriptor with address 0x99, changing to 0x89 [ 3471.796172][T16936] usb 5-1: config 13 interface 177 altsetting 4 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 3471.900700][T16936] usb 5-1: config 13 interface 177 altsetting 4 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3471.963894][T16936] usb 5-1: config 13 interface 177 has no altsetting 0 [ 3472.027185][T16936] usb 5-1: New USB device found, idVendor=15c2, idProduct=f142, bcdDevice=ef.b7 [ 3472.061443][T16936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3472.082979][T16936] usb 5-1: Product: syz [ 3472.094069][T16936] usb 5-1: Manufacturer: syz [ 3472.104378][T16936] usb 5-1: SerialNumber: syz [ 3472.421995][ T6647] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12211'. [ 3472.557497][T24134] tipc: Node number set to 2130706433 [ 3472.677432][ T5915] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 3472.904046][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3472.980091][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3473.013853][ T5915] usb 3-1: config 0 has an invalid interface number: 59 but max is 0 [ 3473.063473][ T5915] usb 3-1: config 0 has no interface number 0 [ 3473.118033][ T5915] usb 3-1: too many endpoints for config 0 interface 59 altsetting 32: 48, using maximum allowed: 30 [ 3473.186469][ T5915] usb 3-1: config 0 interface 59 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 3473.222100][ T6670] netlink: 268 bytes leftover after parsing attributes in process `syz.7.12212'. [ 3473.242689][ T5915] usb 3-1: config 0 interface 59 has no altsetting 0 [ 3473.270723][ T5915] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 3473.304867][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3473.343869][ T5915] usb 3-1: Product: syz [ 3473.364571][ T5915] usb 3-1: Manufacturer: syz [ 3473.379845][ T5915] usb 3-1: SerialNumber: syz [ 3473.399092][ T5915] usb 3-1: config 0 descriptor?? [ 3473.674335][T16936] usb 5-1: USB disconnect, device number 73 [ 3473.978122][ T5915] usb 3-1: USB disconnect, device number 8 [ 3474.767795][T22529] usb 7-1: USB disconnect, device number 48 [ 3474.809563][ T6730] syzkaller1: entered promiscuous mode [ 3474.848421][ T6730] syzkaller1: entered allmulticast mode [ 3474.969355][ T6730] loop8: detected capacity change from 0 to 8 [ 3475.012823][ T6730] Dev loop8: unable to read RDB block 8 [ 3475.036784][ T6730] loop8: unable to read partition table [ 3475.062456][ T6730] loop8: partition table beyond EOD, truncated [ 3475.102151][ T6730] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 3475.587451][T18273] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 3475.758602][T18273] usb 7-1: Using ep0 maxpacket: 8 [ 3475.778281][T18273] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3475.795883][T18273] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3475.827955][T18273] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3475.851055][T18273] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3475.878384][T18273] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3475.898393][T18273] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3476.125890][T18273] usb 7-1: GET_CAPABILITIES returned 0 [ 3476.169952][T18273] usbtmc 7-1:16.0: can't read capabilities [ 3476.572575][T22529] usb 7-1: USB disconnect, device number 49 [ 3476.917083][ T6824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3476.923046][ T6821] dummy0: entered promiscuous mode [ 3476.977998][ T6824] fuse: Unknown parameter 'fAƒt†ÁÛßlúBPd' [ 3477.081597][ T6817] dummy0: left promiscuous mode [ 3477.820159][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12225'. [ 3477.913843][ C0] vcan0: j1939_session_tx_dat: 0xffff88805686d800: queue data error: -100 [ 3478.441923][T19706] Bluetooth: hci4: command 0x0406 tx timeout [ 3478.647487][ T5915] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 3478.777449][T23419] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 3478.823298][ T5915] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3478.863020][ T5915] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3478.927569][ T5915] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3478.982556][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 3479.014922][T23419] usb 1-1: Using ep0 maxpacket: 16 [ 3479.047979][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 3479.051797][T23419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3479.132779][T23419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3479.187381][T23419] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3479.201776][ T5915] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3479.297475][T23419] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 3479.300505][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3479.306576][T23419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3479.427821][ T5915] usb 5-1: Product: syz [ 3479.442436][ T5915] usb 5-1: Manufacturer: syz [ 3479.465871][T23419] usb 1-1: config 0 descriptor?? [ 3479.557907][ T5915] cdc_wdm 5-1:1.0: skipping garbage [ 3479.624247][ T5915] cdc_wdm 5-1:1.0: skipping garbage [ 3479.705850][ T5915] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3479.744607][ T5915] cdc_wdm 5-1:1.0: Unknown control protocol [ 3479.820003][ T6850] syzkaller0: entered promiscuous mode [ 3479.871613][ T6850] syzkaller0: entered allmulticast mode [ 3479.907456][T18273] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 3479.970037][T23419] shield 0003:0955:7214.00A9: item fetching failed at offset 4/5 [ 3480.021140][T23419] shield 0003:0955:7214.00A9: Parse failed [ 3480.027050][T23419] shield 0003:0955:7214.00A9: probe with driver shield failed with error -22 [ 3480.134984][ T6856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12228'. [ 3480.188304][T18273] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3480.231251][T18273] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 3480.316313][T18273] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1279, setting to 64 [ 3480.367488][T18273] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 3480.397208][T18273] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3480.484726][T18273] usb 7-1: config 0 descriptor?? [ 3480.528318][ T6883] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 3480.550726][T23419] usb 1-1: USB disconnect, device number 18 [ 3480.759840][ T6929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12233'. [ 3480.807187][ T10] usb 5-1: USB disconnect, device number 74 [ 3480.827987][ T6929] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12233'. [ 3480.915169][ T6928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12233'. [ 3480.943303][ T6928] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12233'. [ 3481.342911][T18273] ath6kl: Failed to submit usb control message: -71 [ 3481.382084][T18273] ath6kl: unable to send the bmi data to the device: -71 [ 3481.436824][T18273] ath6kl: Unable to send get target info: -71 [ 3481.488836][T18273] ath6kl: Failed to init ath6kl core: -71 [ 3481.495949][T18273] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3481.527553][T18273] usb 7-1: USB disconnect, device number 50 [ 3482.186582][ T7000] loop2: detected capacity change from 0 to 7 [ 3482.247502][ T7000] loop2: [ 3482.271174][ T7000] loop2: partition table partially beyond EOD, truncated [ 3490.417469][T18273] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 3491.602034][T18273] usb 7-1: config 4 has an invalid interface number: 88 but max is 0 [ 3496.157686][T18273] usb 7-1: config 4 has no interface number 0 [ 3498.824501][T18273] usb 7-1: config 4 interface 88 altsetting 119 has an invalid endpoint descriptor of length 5, skipping [ 3500.026000][ C0] sched: DL replenish lagged too much [ 3500.938919][T18273] usb 7-1: config 4 interface 88 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3501.987784][T18273] usb 7-1: config 4 interface 88 has no altsetting 0 [ 3502.060185][T18273] usb 7-1: string descriptor 0 read error: -71 [ 3502.066569][T18273] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 3504.808924][T18273] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3506.494553][T18273] usb 7-1: can't set config #4, error -71 [ 3506.589325][T18273] usb 7-1: USB disconnect, device number 51 [ 3510.538033][T19706] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3510.552593][ T7071] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3510.565662][ T7071] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3510.598888][ T7071] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3510.606779][ T7071] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3510.732930][ T1272] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 3510.754276][ T1272] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 3510.817431][ T1272] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 3510.924260][ T1272] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 3510.933672][ T1272] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 3511.007557][ T7071] Bluetooth: hci2: command 0x0406 tx timeout [ 3511.122151][T19706] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 3511.140776][ T7083] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 3511.150224][ T7083] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 3511.170342][ T7083] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 3511.178425][ T7083] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 3511.683598][T19706] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 3511.720552][T19706] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 3511.743974][T19706] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 3511.756658][T19706] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 3511.765009][T19706] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 3512.838134][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.844510][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.869305][T19706] Bluetooth: hci7: command tx timeout [ 3515.740943][ T420] Bluetooth: hci7: command tx timeout [ 3515.746643][ T420] Bluetooth: hci10: command tx timeout [ 3515.758347][ T420] Bluetooth: hci9: command tx timeout [ 3515.765035][ T420] Bluetooth: hci8: command tx timeout [ 3518.397528][ T420] Bluetooth: hci8: command tx timeout [ 3518.403942][ T420] Bluetooth: hci9: command tx timeout [ 3518.411376][ T420] Bluetooth: hci10: command tx timeout [ 3518.417061][ T420] Bluetooth: hci7: command tx timeout [ 3520.108402][ T420] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 3520.156344][ T420] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 3520.178778][ T420] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 3520.206404][ T420] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 3520.214605][ T420] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 3520.517525][ T7071] Bluetooth: hci7: command tx timeout [ 3520.522995][ T7071] Bluetooth: hci10: command tx timeout [ 3520.535037][ T420] Bluetooth: hci9: command tx timeout [ 3520.540635][T19706] Bluetooth: hci8: command tx timeout [ 3522.277764][ T7071] Bluetooth: hci11: command tx timeout [ 3522.597678][ T7071] Bluetooth: hci9: command tx timeout [ 3522.604537][ T420] Bluetooth: hci8: command tx timeout [ 3523.245700][ T7071] Bluetooth: hci10: command tx timeout [ 3524.357915][ T7071] Bluetooth: hci11: command tx timeout [ 3526.437455][ T7071] Bluetooth: hci11: command tx timeout [ 3526.894217][ T7077] chnl_net:caif_netlink_parms(): no params data found [ 3527.154545][ T8222] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3528.193147][ T8222] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3528.517431][ T7071] Bluetooth: hci11: command tx timeout [ 3529.464921][ T8222] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3529.681744][ T7087] chnl_net:caif_netlink_parms(): no params data found [ 3530.194836][ T8222] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3530.231663][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 3530.239343][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 3530.246703][ T7077] bridge_slave_0: entered allmulticast mode [ 3530.267478][ T7077] bridge_slave_0: entered promiscuous mode [ 3530.305569][ T7098] chnl_net:caif_netlink_parms(): no params data found [ 3530.331743][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 3530.339563][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 3530.347059][ T7077] bridge_slave_1: entered allmulticast mode [ 3530.356030][ T7077] bridge_slave_1: entered promiscuous mode [ 3530.684922][ T7077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3530.711560][ T7077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3531.591013][ T7116] chnl_net:caif_netlink_parms(): no params data found [ 3531.769574][ T7077] team0: Port device team_slave_0 added [ 3532.112355][ T7077] team0: Port device team_slave_1 added [ 3532.811926][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state [ 3532.827860][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 3532.835282][ T7087] bridge_slave_0: entered allmulticast mode [ 3532.899978][ T7087] bridge_slave_0: entered promiscuous mode [ 3532.919271][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state [ 3532.926478][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state [ 3532.962008][ T7087] bridge_slave_1: entered allmulticast mode [ 3532.977237][ T7087] bridge_slave_1: entered promiscuous mode [ 3533.032616][ T7098] bridge0: port 1(bridge_slave_0) entered blocking state [ 3533.051353][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state [ 3533.083934][ T7098] bridge_slave_0: entered allmulticast mode [ 3533.107761][ T7098] bridge_slave_0: entered promiscuous mode [ 3533.132129][ T7098] bridge0: port 2(bridge_slave_1) entered blocking state [ 3533.139609][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state [ 3533.146972][ T7098] bridge_slave_1: entered allmulticast mode [ 3533.184348][ T7098] bridge_slave_1: entered promiscuous mode [ 3533.225005][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3533.241029][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3533.295866][ T7077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3533.339922][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3533.346970][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3533.437319][ T7077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3533.466904][ T7175] chnl_net:caif_netlink_parms(): no params data found [ 3533.802809][ T8222] bridge_slave_1: left allmulticast mode [ 3533.811291][ T8222] bridge_slave_1: left promiscuous mode [ 3533.817128][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 3533.834148][ T8222] bridge_slave_0: left allmulticast mode [ 3533.863938][ T8222] bridge_slave_0: left promiscuous mode [ 3533.874082][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 3536.690198][ T8222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3536.712441][ T8222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3536.729863][ T8222] bond0 (unregistering): Released all slaves [ 3536.751241][ T8222] bond1 (unregistering): Released all slaves [ 3536.801694][ T7098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3536.943576][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 3536.953628][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 3536.965295][ T7116] bridge_slave_0: entered allmulticast mode [ 3536.973884][ T7116] bridge_slave_0: entered promiscuous mode [ 3537.042093][ T7087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3537.086089][ T7098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3537.170602][ T7077] hsr_slave_0: entered promiscuous mode [ 3537.188191][ T7077] hsr_slave_1: entered promiscuous mode [ 3537.209519][ T7077] debugfs: 'hsr0' already exists in 'hsr' [ 3537.215506][ T7077] Cannot create hsr debugfs directory [ 3537.263136][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 3537.283444][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 3537.308991][ T7116] bridge_slave_1: entered allmulticast mode [ 3537.329716][ T7116] bridge_slave_1: entered promiscuous mode [ 3537.348955][ T8222] tipc: Disabling bearer [ 3537.358144][ T7087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3537.367590][ T8222] tipc: Left network mode [ 3537.702195][ T7098] team0: Port device team_slave_0 added [ 3537.837217][ T7087] team0: Port device team_slave_0 added [ 3537.934102][ T7098] team0: Port device team_slave_1 added [ 3538.029629][ T7175] bridge0: port 1(bridge_slave_0) entered blocking state [ 3538.036931][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 3538.061831][ T7175] bridge_slave_0: entered allmulticast mode [ 3538.089827][ T7175] bridge_slave_0: entered promiscuous mode [ 3538.112609][ T7116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3538.141706][ T7116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3538.160551][ T7087] team0: Port device team_slave_1 added [ 3538.310782][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3538.327459][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3538.367584][ T7098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3538.793824][ T7175] bridge0: port 2(bridge_slave_1) entered blocking state [ 3538.813705][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state [ 3538.830506][ T7175] bridge_slave_1: entered allmulticast mode [ 3538.848330][ T7175] bridge_slave_1: entered promiscuous mode [ 3539.032830][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3539.047950][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3539.127399][ T7098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3539.942887][ T7175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3539.975416][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3539.991155][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3540.024376][ T7087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3540.382266][ T7175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3540.402811][ T7116] team0: Port device team_slave_0 added [ 3540.410159][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3540.417169][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3540.457856][ T7087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3540.602159][ T7116] team0: Port device team_slave_1 added [ 3541.335908][ T7098] hsr_slave_0: entered promiscuous mode [ 3541.370322][ T7098] hsr_slave_1: entered promiscuous mode [ 3541.387698][ T7098] debugfs: 'hsr0' already exists in 'hsr' [ 3541.394008][ T7098] Cannot create hsr debugfs directory [ 3541.523306][ T7175] team0: Port device team_slave_0 added [ 3541.532928][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3541.545579][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3541.617435][ T7116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3541.650335][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3541.661088][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3541.687585][ T7116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3542.583674][ T8222] hsr_slave_0: left promiscuous mode [ 3544.692464][ T8222] hsr_slave_1: left promiscuous mode [ 3544.714550][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3544.723859][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3544.734072][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3544.748170][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3544.927743][ T8222] veth1_macvtap: left promiscuous mode [ 3544.933301][ T8222] veth0_macvtap: left promiscuous mode [ 3544.939369][ T8222] veth1_vlan: left promiscuous mode [ 3544.945360][ T8222] veth0_vlan: left promiscuous mode [ 3545.710930][ T8222] team0 (unregistering): Port device team_slave_1 removed [ 3545.760022][ T8222] team0 (unregistering): Port device team_slave_0 removed [ 3546.062529][ T7175] team0: Port device team_slave_1 added [ 3546.106889][ T7087] hsr_slave_0: entered promiscuous mode [ 3546.116260][ T7087] hsr_slave_1: entered promiscuous mode [ 3546.125467][ T7087] debugfs: 'hsr0' already exists in 'hsr' [ 3546.139721][ T7087] Cannot create hsr debugfs directory [ 3546.466859][ T7175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3546.487854][ T7175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3546.544639][ T7175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3546.720020][ T7116] hsr_slave_0: entered promiscuous mode [ 3546.726986][ T7116] hsr_slave_1: entered promiscuous mode [ 3546.760504][ T7116] debugfs: 'hsr0' already exists in 'hsr' [ 3546.766321][ T7116] Cannot create hsr debugfs directory [ 3546.853553][ T7175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3546.867606][ T7175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3546.924688][ T7175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3548.227119][ T7175] hsr_slave_0: entered promiscuous mode [ 3548.255858][ T7175] hsr_slave_1: entered promiscuous mode [ 3548.273301][ T7175] debugfs: 'hsr0' already exists in 'hsr' [ 3548.295114][ T7175] Cannot create hsr debugfs directory [ 3549.842726][ T8222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3550.080070][ T8222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3550.270713][ T8222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3550.511415][ T8222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3550.879796][ T7077] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3550.918750][ T7077] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3551.069917][ T7077] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3551.109359][ T7077] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3551.732452][ T8222] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3551.931430][ T8222] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3552.113594][ T8222] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3552.280467][ T8222] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3552.355483][ T7077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3552.516397][ T7098] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3552.552460][ T7098] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3552.597462][ T7098] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3552.648341][ T7098] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3552.891425][ T7077] 8021q: adding VLAN 0 to HW filter on device team0 [ 3552.956153][ T516] bridge0: port 1(bridge_slave_0) entered blocking state [ 3552.963468][ T516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3553.103126][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 3553.110379][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3553.441935][ T8222] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3553.710343][ T8222] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3553.892472][ T8222] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3554.035647][ T8222] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3554.194819][ T7077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3554.551307][ T7098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3554.827662][ T7087] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3554.862019][ T7087] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3555.035335][ T8222] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3555.098281][ T7087] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3555.123907][ T7087] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3555.274595][ T7098] 8021q: adding VLAN 0 to HW filter on device team0 [ 3555.330965][ T8222] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3555.566654][ T8222] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3555.585681][ T7077] veth0_vlan: entered promiscuous mode [ 3555.606997][T17522] bridge0: port 1(bridge_slave_0) entered blocking state [ 3555.614227][T17522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3555.843349][ T8222] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3555.935227][ T3288] bridge0: port 2(bridge_slave_1) entered blocking state [ 3555.942610][ T3288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3555.978388][ T7077] veth1_vlan: entered promiscuous mode [ 3556.551339][ T7087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3556.631948][ T7116] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3556.675202][ T7077] veth0_macvtap: entered promiscuous mode [ 3556.884048][ T7175] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3556.913688][ T7116] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3556.941630][ T7077] veth1_macvtap: entered promiscuous mode [ 3556.958609][ T7116] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3557.022220][ T8222] bridge_slave_1: left allmulticast mode [ 3557.037762][ T8222] bridge_slave_1: left promiscuous mode [ 3557.043820][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 3557.084146][ T8222] bridge_slave_0: left allmulticast mode [ 3557.097515][ T8222] bridge_slave_0: left promiscuous mode [ 3557.103415][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 3557.156164][ T8222] bridge_slave_1: left allmulticast mode [ 3557.165917][ T8222] bridge_slave_1: left promiscuous mode [ 3557.172101][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 3557.183261][ T8222] bridge_slave_0: left allmulticast mode [ 3557.191507][ T8222] bridge_slave_0: left promiscuous mode [ 3557.200839][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 3557.216941][ T8222] bridge_slave_1: left allmulticast mode [ 3557.224371][ T8222] bridge_slave_1: left promiscuous mode [ 3557.231785][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 3557.243987][ T8222] bridge_slave_0: left allmulticast mode [ 3557.251355][ T8222] bridge_slave_0: left promiscuous mode [ 3557.257161][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 3557.272294][ T8222] bridge_slave_1: left allmulticast mode [ 3557.278243][ T8222] bridge_slave_1: left promiscuous mode [ 3557.284033][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 3557.297235][ T8222] bridge_slave_0: left allmulticast mode [ 3557.303442][ T8222] bridge_slave_0: left promiscuous mode [ 3557.312795][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 3557.761347][ T8222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3557.777155][ T8222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3557.789901][ T8222] bond0 (unregistering): Released all slaves [ 3558.057958][ T8222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3558.072114][ T8222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3558.083269][ T8222] bond0 (unregistering): Released all slaves [ 3558.342363][ T8222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3558.354613][ T8222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3558.369053][ T8222] bond0 (unregistering): Released all slaves [ 3558.634193][ T8222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3558.655023][ T8222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3558.668933][ T8222] bond0 (unregistering): Released all slaves [ 3558.684460][ T7116] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3558.770122][ T7175] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3558.938532][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3558.956598][ T7087] 8021q: adding VLAN 0 to HW filter on device team0 [ 3559.073311][ T7175] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3559.177758][ T8222] tipc: Disabling bearer [ 3559.183390][ T8222] tipc: Left network mode [ 3559.193962][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3559.343993][ T7175] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3559.401757][T18656] bridge0: port 1(bridge_slave_0) entered blocking state [ 3559.408980][T18656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3559.470855][ T8222] tipc: Disabling bearer [ 3559.476399][ T8222] tipc: Left network mode [ 3559.486133][T17522] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3559.503306][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 3559.510596][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3559.568293][T17522] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3559.606614][T17522] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3559.641886][T17522] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3559.780612][ T7098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3560.382656][ T7175] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3560.405098][ T7175] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3560.418586][ T3286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3560.426488][ T3286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3560.470122][ T7098] veth0_vlan: entered promiscuous mode [ 3560.485642][ T7175] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3560.538766][ T7116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3560.575082][ T7098] veth1_vlan: entered promiscuous mode [ 3560.612618][ T7175] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3560.736673][T17514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3560.763080][T17514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3560.844366][ T7116] 8021q: adding VLAN 0 to HW filter on device team0 [ 3560.974747][T17514] bridge0: port 1(bridge_slave_0) entered blocking state [ 3560.981985][T17514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3561.021166][T17514] bridge0: port 2(bridge_slave_1) entered blocking state [ 3561.028406][T17514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3561.114553][ T7087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3561.237163][ T7098] veth0_macvtap: entered promiscuous mode [ 3561.340454][ T7098] veth1_macvtap: entered promiscuous mode [ 3561.427503][ T3651] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 3561.533181][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3561.611965][ T3651] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 3561.630834][ T3651] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 3561.650559][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3561.660445][ T3651] usb 2-1: config 0 has no interface number 0 [ 3561.672369][ T3651] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 3561.682653][ T3651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3561.691948][ T3651] usb 2-1: Product: syz [ 3561.696392][ T3651] usb 2-1: Manufacturer: syz [ 3561.706006][ T8222] hsr_slave_0: left promiscuous mode [ 3561.711677][ T3651] usb 2-1: SerialNumber: syz [ 3561.724660][ T8222] hsr_slave_1: left promiscuous mode [ 3561.742578][ T3651] usb 2-1: config 0 descriptor?? [ 3561.750187][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3561.761562][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3561.772404][ T3651] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 3561.786519][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3561.804191][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3561.835850][ T8222] hsr_slave_0: left promiscuous mode [ 3561.842913][ T8222] hsr_slave_1: left promiscuous mode [ 3561.856179][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3561.864105][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3561.873274][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3561.882738][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3561.900520][ T8222] hsr_slave_0: left promiscuous mode [ 3561.906901][ T8222] hsr_slave_1: left promiscuous mode [ 3561.914011][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3561.923827][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3561.933212][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3561.945663][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3561.966069][ T8222] hsr_slave_0: left promiscuous mode [ 3561.972519][ T8222] hsr_slave_1: left promiscuous mode [ 3561.979407][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3561.987046][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3561.996634][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3562.006319][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3562.016355][ T3651] usb 2-1: USB disconnect, device number 10 [ 3562.146962][ T8222] veth1_macvtap: left promiscuous mode [ 3562.155495][ T8222] veth0_macvtap: left promiscuous mode [ 3562.164613][ T8222] veth1_vlan: left promiscuous mode [ 3562.170164][ T8222] veth0_vlan: left promiscuous mode [ 3562.179334][ T8222] veth1_macvtap: left promiscuous mode [ 3562.184875][ T8222] veth0_macvtap: left promiscuous mode [ 3562.191341][ T8222] veth1_vlan: left promiscuous mode [ 3562.196663][ T8222] veth0_vlan: left promiscuous mode [ 3562.206900][ T8222] veth1_macvtap: left promiscuous mode [ 3562.212700][ T8222] veth0_macvtap: left promiscuous mode [ 3562.219194][ T8222] veth1_vlan: left promiscuous mode [ 3562.224499][ T8222] veth0_vlan: left promiscuous mode [ 3562.234286][ T8222] veth1_macvtap: left promiscuous mode [ 3562.241435][ T8222] veth0_macvtap: left promiscuous mode [ 3562.247051][ T8222] veth1_vlan: left promiscuous mode [ 3562.253294][ T8222] veth0_vlan: left promiscuous mode [ 3563.182903][ T8222] team0 (unregistering): Port device team_slave_1 removed [ 3563.190516][T16936] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 3563.212479][ T8222] team0 (unregistering): Port device team_slave_0 removed [ 3563.329329][T16936] usb 2-1: device descriptor read/64, error -71 [ 3563.407561][ T31] INFO: task syz.8.12060:4499 blocked for more than 144 seconds. [ 3563.415366][ T31] Tainted: G L syzkaller #0 [ 3563.437337][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3563.477769][ T31] task:syz.8.12060 state:D stack:25480 pid:4499 tgid:4494 ppid:22820 task_flags:0x400040 flags:0x00080002 [ 3563.507548][ T31] Call Trace: [ 3563.510907][ T31] [ 3563.513886][ T31] __schedule+0x1585/0x5340 [ 3563.537412][ T31] ? __pfx___schedule+0x10/0x10 [ 3563.542380][ T31] ? schedule+0x90/0x360 [ 3563.546676][ T31] schedule+0x164/0x360 [ 3563.578482][ T31] schedule_preempt_disabled+0x13/0x30 [ 3563.584037][ T31] __mutex_lock+0x7fe/0x1300 [ 3563.597335][ T31] ? __mutex_lock+0x5ac/0x1300 [ 3563.609950][T16936] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 3563.619407][ T31] ? usbdev_open+0x182/0x770 [ 3563.624077][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3563.642273][ T31] ? bus_find_device+0x27d/0x2d0 [ 3563.733320][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 3563.764197][ T31] ? usbdev_open+0xa7/0x770 [ 3563.773585][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 3563.787452][T16936] usb 2-1: device descriptor read/64, error -71 [ 3563.794146][ T31] usbdev_open+0x182/0x770 [ 3563.807332][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 3563.813053][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 3563.823920][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 3563.831388][ T31] chrdev_open+0x4cd/0x5e0 [ 3563.835960][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3563.841725][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 3563.862081][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3563.867102][ T31] do_dentry_open+0x785/0x14e0 [ 3563.883822][ T31] vfs_open+0x3b/0x340 [ 3563.888252][ T31] ? path_openat+0x2df0/0x3860 [ 3563.893074][ T31] path_openat+0x2e08/0x3860 [ 3563.898148][T16936] usb usb2-port1: attempt power cycle [ 3563.905856][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 3563.912556][ T31] ? stack_depot_save_flags+0x33/0x810 [ 3563.918332][ T31] ? __pfx_path_openat+0x10/0x10 [ 3563.923351][ T31] ? __x64_sys_openat+0x138/0x170 [ 3563.928701][ T31] ? do_syscall_64+0x14d/0xf80 [ 3563.933524][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3563.942795][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3563.948773][ T31] do_file_open+0x23e/0x4a0 [ 3563.953343][ T31] ? __pfx_do_file_open+0x10/0x10 [ 3563.961605][ T31] ? _raw_spin_unlock+0x28/0x50 [ 3563.966520][ T31] ? alloc_fd+0x64b/0x6c0 [ 3563.976938][ T31] do_sys_openat2+0x113/0x200 [ 3563.982226][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 3563.987777][ T31] ? exc_page_fault+0x6a/0xc0 [ 3563.992513][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 3563.998163][ T31] __x64_sys_openat+0x138/0x170 [ 3564.003075][ T31] do_syscall_64+0x14d/0xf80 [ 3564.008022][ T31] ? trace_irq_disable+0x3b/0x150 [ 3564.013099][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3564.020915][ T31] ? clear_bhb_loop+0x40/0x90 [ 3564.025658][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3564.031938][ T31] RIP: 0033:0x7fd10995cece [ 3564.036406][ T31] RSP: 002b:00007fd10a7adb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3564.051661][ T31] RAX: ffffffffffffffda RBX: 00007fd10a7ae6c0 RCX: 00007fd10995cece [ 3564.062965][ T31] RDX: 0000000000000082 RSI: 00007fd10a7adc00 RDI: ffffffffffffff9c [ 3564.071580][ T31] RBP: 00007fd10a7adc00 R08: 0000000000000000 R09: 0000000000000000 [ 3564.082718][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 3564.091195][ T31] R13: 00007fd109c16218 R14: 00007fd109c16180 R15: 00007fd109d3fa48 [ 3564.100222][ T31] [ 3564.107980][ T31] [ 3564.107980][ T31] Showing all locks held in the system: [ 3564.115788][ T31] 1 lock held by khungtaskd/31: [ 3564.174140][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3564.193647][ T31] 2 locks held by dhcpcd/5484: [ 3564.202454][ T31] #0: ffffffff8fbaccc8 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x641/0x7f0 [ 3564.213224][ T31] #1: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 3564.222981][ T31] 2 locks held by getty/5578: [ 3564.227992][ T31] #0: ffff88803650b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3564.238106][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 3564.250382][T16936] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 3564.261328][ T31] 5 locks held by kworker/1:11/16936: [ 3564.266954][ T31] #0: ffff88801e6c2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 3564.288586][ T31] #1: ffffc90005bcfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 3564.303727][ T31] #2: ffff888029f75198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 3564.314319][ T31] #3: ffff888029f45518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 3564.324689][ T31] #4: ffff888029d0ef68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 3564.334801][ T31] 3 locks held by kworker/u8:6/17522: [ 3564.340628][ T31] #0: ffff888032378948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 3564.353920][ T31] #1: ffffc9000c67fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 3564.373127][ T31] #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 3564.383901][ T31] 6 locks held by kworker/0:3/3698: [ 3564.394376][ T31] 5 locks held by kworker/u8:2/8222: [ 3564.400306][ T31] #0: ffff88801b6d6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 3564.414170][ T31] #1: ffffc90005427c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 3564.426400][ T31] #2: ffffffff8fbbcff0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 3564.436233][ T31] #3: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0xa00 [ 3564.446685][ T31] #4: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 3564.458169][ T31] 3 locks held by kworker/u8:8/3288: [ 3564.463513][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 3564.476637][ T31] #1: ffffc9000355fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 3564.490190][ T31] #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 3564.503644][ T31] 1 lock held by syz.8.12060/4499: [ 3564.509453][ T31] #0: ffff88802a180198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 3564.526488][ T31] 1 lock held by syz.3.12138/5733: [ 3564.533224][ T31] #0: ffff88802a180198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 3564.542598][ T31] 1 lock held by syz-executor/7087: [ 3564.548179][ T31] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 3564.558202][ T31] 1 lock held by syz-executor/7098: [ 3564.563476][ T31] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30 [ 3564.575989][ T31] 1 lock held by syz-executor/7116: [ 3564.581540][ T31] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 3564.591840][ T31] 1 lock held by syz-executor/7175: [ 3564.597097][ T31] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 3564.620494][ T31] 1 lock held by syz.1.12252/8865: [ 3564.625692][ T31] #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 3564.648736][ T31] [ 3564.679902][ T31] ============================================= [ 3564.679902][ T31] [ 3564.707366][ T31] NMI backtrace for cpu 1 [ 3564.707400][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3564.707435][ T31] Tainted: [L]=SOFTLOCKUP [ 3564.707442][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3564.707457][ T31] Call Trace: [ 3564.707465][ T31] [ 3564.707475][ T31] dump_stack_lvl+0xe8/0x150 [ 3564.707510][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 3564.707536][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3564.707566][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3564.707596][ T31] sys_info+0x135/0x170 [ 3564.707618][ T31] watchdog+0xfd9/0x1030 [ 3564.707654][ T31] ? watchdog+0x21a/0x1030 [ 3564.707692][ T31] kthread+0x388/0x470 [ 3564.707714][ T31] ? __pfx_watchdog+0x10/0x10 [ 3564.707743][ T31] ? __pfx_kthread+0x10/0x10 [ 3564.707764][ T31] ret_from_fork+0x51e/0xb90 [ 3564.707791][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3564.707817][ T31] ? __switch_to+0xc7d/0x1450 [ 3564.707844][ T31] ? __pfx_kthread+0x10/0x10 [ 3564.707866][ T31] ret_from_fork_asm+0x1a/0x30 [ 3564.707912][ T31] [ 3564.707944][ T31] Sending NMI from CPU 1 to CPUs 0: [ 3564.826949][ C0] NMI backtrace for cpu 0 [ 3564.826970][ C0] CPU: 0 UID: 0 PID: 3698 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 3564.826995][ C0] Tainted: [L]=SOFTLOCKUP [ 3564.827005][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3564.827018][ C0] Workqueue: usb_hub_wq hub_event [ 3564.827052][ C0] RIP: 0010:post_alloc_hook+0x1b8/0x280 [ 3564.827075][ C0] Code: 8e 48 c1 ed 03 49 c7 c6 c8 0e 1a 8e 49 c1 ee 03 eb 2f 48 8b 3d 21 48 f9 0b 49 c1 e5 06 4c 29 ef 4c 01 e7 b9 00 10 00 00 31 c0 aa 0f 1f 44 00 00 49 81 c4 00 10 00 00 49 ff cf 0f 84 eb fe ff [ 3564.827092][ C0] RSP: 0018:ffffc900053965f8 EFLAGS: 00010246 [ 3564.827107][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000b40 [ 3564.827119][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88809e6c74c0 [ 3564.827130][ C0] RBP: 1ffffffff1c341db R08: ffffffff901172b7 R09: 0000000000000000 [ 3564.827143][ C0] R10: ffffed1013cd8000 R11: fffffbfff2022e57 R12: fffa80009e6c7000 [ 3564.827156][ C0] R13: fffa800000000000 R14: 1ffffffff1c341d9 R15: 0000000000000001 [ 3564.827170][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 3564.827184][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3564.827198][ C0] CR2: 00007ffc416dacd4 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 3564.827215][ C0] Call Trace: [ 3564.827222][ C0] [ 3564.827233][ C0] get_page_from_freelist+0x24dc/0x2580 [ 3564.827272][ C0] ? stack_trace_save+0xa9/0x100 [ 3564.827298][ C0] ? prepare_alloc_pages+0x35d/0x650 [ 3564.827323][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 3564.827349][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3564.827372][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 3564.827398][ C0] alloc_pages_mpol+0x232/0x4a0 [ 3564.827422][ C0] allocate_slab+0x83/0x660 [ 3564.827444][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 3564.827473][ C0] ? __netdev_alloc_skb+0xc1/0x810 [ 3564.827497][ C0] ___slab_alloc+0x150/0x6b0 [ 3564.827520][ C0] ? __pcs_replace_empty_main+0x239/0x620 [ 3564.827543][ C0] ? __netdev_alloc_skb+0xc1/0x810 [ 3564.827569][ C0] __kmalloc_node_track_caller_noprof+0x304/0x7b0 [ 3564.827590][ C0] ? __netdev_alloc_skb+0xc1/0x810 [ 3564.827613][ C0] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 3564.827636][ C0] __alloc_skb+0x2c1/0x7d0 [ 3564.827666][ C0] __netdev_alloc_skb+0xc1/0x810 [ 3564.827687][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 3564.827714][ C0] ath6kl_usb_post_recv_transfers+0x207/0x6f0 [ 3564.827754][ C0] ath6kl_usb_power_on+0x6a/0x280 [ 3564.827782][ C0] ath6kl_core_init+0x1e1/0x10b0 [ 3564.827809][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 3564.827830][ C0] ? __pfx_ath6kl_core_init+0x10/0x10 [ 3564.827854][ C0] ? __asan_memcpy+0x40/0x70 [ 3564.827881][ C0] ? ath6kl_core_create+0x7fb/0x9a0 [ 3564.827909][ C0] ath6kl_usb_probe+0x14df/0x15d0 [ 3564.827945][ C0] usb_probe_interface+0x668/0xc90 [ 3564.827969][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 3564.827984][ C0] really_probe+0x267/0xaf0 [ 3564.828006][ C0] __driver_probe_device+0x18c/0x320 [ 3564.828029][ C0] driver_probe_device+0x4f/0x240 [ 3564.828050][ C0] __device_attach_driver+0x2d4/0x4c0 [ 3564.828071][ C0] bus_for_each_drv+0x258/0x2f0 [ 3564.828094][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 3564.828112][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 3564.828136][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 3564.828162][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 3564.828191][ C0] __device_attach+0x2c5/0x450 [ 3564.828209][ C0] ? __pfx___device_attach+0x10/0x10 [ 3564.828228][ C0] ? _raw_spin_unlock+0x28/0x50 [ 3564.828252][ C0] device_initial_probe+0xa1/0xd0 [ 3564.828270][ C0] bus_probe_device+0x12a/0x220 [ 3564.828292][ C0] ? device_add+0x726/0xb70 [ 3564.828321][ C0] device_add+0x7b6/0xb70 [ 3564.828349][ C0] usb_set_configuration+0x1a87/0x2110 [ 3564.828391][ C0] usb_generic_driver_probe+0x8d/0x150 [ 3564.828419][ C0] usb_probe_device+0x1c4/0x3b0 [ 3564.828440][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 3564.828457][ C0] really_probe+0x267/0xaf0 [ 3564.828478][ C0] __driver_probe_device+0x18c/0x320 [ 3564.828497][ C0] driver_probe_device+0x4f/0x240 [ 3564.828517][ C0] __device_attach_driver+0x2d4/0x4c0 [ 3564.828537][ C0] bus_for_each_drv+0x258/0x2f0 [ 3564.828561][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 3564.828583][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 3564.828607][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 3564.828632][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 3564.828658][ C0] __device_attach+0x2c5/0x450 [ 3564.828682][ C0] ? __pfx___device_attach+0x10/0x10 [ 3564.828701][ C0] ? _raw_spin_unlock+0x28/0x50 [ 3564.828728][ C0] device_initial_probe+0xa1/0xd0 [ 3564.828747][ C0] bus_probe_device+0x12a/0x220 [ 3564.828768][ C0] ? device_add+0x726/0xb70 [ 3564.828794][ C0] device_add+0x7b6/0xb70 [ 3564.828821][ C0] usb_new_device+0xa08/0x16f0 [ 3564.828850][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 3564.828878][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 3564.828903][ C0] hub_event+0x2a1c/0x4f30 [ 3564.828955][ C0] ? __pfx_hub_event+0x10/0x10 [ 3564.828986][ C0] ? process_scheduled_works+0xa25/0x1830 [ 3564.829011][ C0] ? process_scheduled_works+0xa25/0x1830 [ 3564.829035][ C0] process_scheduled_works+0xb02/0x1830 [ 3564.829072][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 3564.829099][ C0] ? assign_work+0x3d5/0x5e0 [ 3564.829124][ C0] worker_thread+0xa50/0xfc0 [ 3564.829164][ C0] kthread+0x388/0x470 [ 3564.829181][ C0] ? __pfx_worker_thread+0x10/0x10 [ 3564.829203][ C0] ? __pfx_kthread+0x10/0x10 [ 3564.829220][ C0] ret_from_fork+0x51e/0xb90 [ 3564.829244][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 3564.829267][ C0] ? __switch_to+0xc7d/0x1450 [ 3564.829290][ C0] ? __pfx_kthread+0x10/0x10 [ 3564.829307][ C0] ret_from_fork_asm+0x1a/0x30 [ 3564.829342][ C0] [ 3564.996214][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3564.996306][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3564.996411][ T31] Tainted: [L]=SOFTLOCKUP [ 3564.996445][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3564.996494][ T31] Call Trace: [ 3564.996517][ T31] [ 3564.996546][ T31] vpanic+0x56c/0xa60 [ 3564.996632][ T31] ? __pfx___schedule+0x10/0x10 [ 3564.996711][ T31] ? __pfx_vpanic+0x10/0x10 [ 3564.996817][ T31] panic+0xc5/0xd0 [ 3564.996891][ T31] ? __pfx_panic+0x10/0x10 [ 3564.996966][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3564.997047][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 3564.997129][ T31] watchdog+0x1023/0x1030 [ 3564.997224][ T31] ? watchdog+0x21a/0x1030 [ 3564.997328][ T31] kthread+0x388/0x470 [ 3564.997386][ T31] ? __pfx_watchdog+0x10/0x10 [ 3564.997468][ T31] ? __pfx_kthread+0x10/0x10 [ 3564.997530][ T31] ret_from_fork+0x51e/0xb90 [ 3564.997607][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3564.997675][ T31] ? __switch_to+0xc7d/0x1450 [ 3564.997762][ T31] ? __pfx_kthread+0x10/0x10 [ 3564.997830][ T31] ret_from_fork_asm+0x1a/0x30 [ 3564.997965][ T31] [ 3565.518662][ T31] Kernel Offset: disabled [ 3565.523020][ T31] Rebooting in 86400 seconds..