last executing test programs: 19m3.532065916s ago: executing program 3 (id=1274): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x2, 0x4, 0xd, 0x2, r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000021c0)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x1302, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}]}]}, @NFT_MSG_NEWSETELEM={0x1e54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2f0, 0x3, 0x0, 0x1, [{0x2ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0x278, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaf, 0x1, "46aba0726c74cf81667c64857e9abfaf534cbf9ebd91e81ad261ab3449b1b10836fdb54f5a67cd4e434de2ddeba9a14d8be039da46e66dabe226a54968b97292d33f3e7fe783d3823b54910bfea87986fe5242ce7023a1deeae850221d457ed052c9d71a2e604b8973c350838f2e581102eb662accfdfc83652cfebd94e8d3be8184b5fc1939dfe8bb0ca1c2f8102a8726dae5cb88ed655bb94e719fbce9f68413c17cb713d19d41e27ebb"}, @NFTA_DATA_VALUE={0x96, 0x1, "34c3461d69d7f9730ac8c14a3541b4e0c01a4e9fa1632fbcf6bcaa8b29f9cb80f77924afd52c4ccb53316b78410be43c8af132efac8e878c3de17d15074fe065b5edba36fa98690277c1954bb78034024563098e74a84ed53bf73593b5f7a040f6b30408466f1953c1116072d3e02ae37766e7f02789c1c7df81163d2ec378411a7616bd0a96500e26c6319db6f7f0e34dcb"}, @NFTA_DATA_VALUE={0x99, 0x1, "346c5aed03055e1163015d3fbddff581f1cace501a89ddfd7971dceafc809bea7a4553ab61f13176bdc059a61958a72a4f1027a46e60bd19d4cfc9077a4b084744faa0360d9f11f24f5f4f7b3908bbbd02d22bec205e19218aa0cef511ef2b56e947f28c69823544a83e9155b6e659637b2e87bc29a70eacd69b2162acc4689f13ab10b72f4b1162cf693ca61a5b1bf928b4b92ca7"}, @NFTA_DATA_VALUE={0x7e, 0x1, "68864be41d9e4dd50907b99906a14d2f243da8efb952213664ebcc284ad31ea016055a5b740742564eb11c8885216394de248f4c227df8e99f1203e2f4e5b8e7b48360056523b7f2948b8d77e770244e1191562b21c4194a0cad8e4aa0f0f150240fc8c938bb5aa626df09a7ac13a736197bcf3a40ee686605f5"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x101}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1b38, 0x3, 0x0, 0x1, [{0x15d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x48, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x398, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "6902422f515b8ef3ff8dab274abd79cb40f950a55da7140ced0f1d35aac2c9a5753823fc1cfc95ef43bdb6deb4402892078347e91c493aae5490a30856f694de337eacedbdc9d5ac42a642ca2558c576c2bb3ecab2c8369e396972d5d6d9bcbb629b477b666008b1d7528d0f04b3433d34da1d5deb5c43a3d6dd3f430c7232da5559fab6c6293caf91bf766a864a486aaa2ddaa32b16d1557dc9db08e26967776d8e3f074d989ce11cf46847bc7d41bf19f9c6d7ce28714f2ed428353057f839ee7981c9734134d1759913ae17e81ce1069cfce553be815435f82e7ce9cd559ee0114d"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9c, 0x1, "542b90f252f871e771ee09c5edcaa66b9837ec3a766c4f07c852a38fd2358a39a61b1e83d8c61e2ec12ca418eed382509f567930992d51a3fc5a390eec226e21c20e1fde89d4fba56a6215458db6be75dc74aac1211f79dfb599ad22b6a24dc9b89a4c13769c33f666d9ee21fd311c6265aabb70e3b2e09f8c51a513fca9cb014c7015ad1163adc15f1e43f9b523ab23866db5396d60ee0c"}, @NFTA_DATA_VALUE={0x75, 0x1, "04e9001331516cdb9eda38deeee63d77d728abe9e6016fa82ce08b7e09979564fbf19ab0ee0bec11ec3b3b9678c0510e26ca993d7486ddb387e51acc20310de1fadeb9d4ad1533ed3805054f574239950559b2f98e687a6636604cda19f7ea3db151460baaa436e19835519c20a785e95f"}, @NFTA_DATA_VALUE={0x2a, 0x1, "ac39904f3fd10ff87b07b12a97c3b994f8c4b0088bd12ffd475eb34f19c37ce0e5e05b37af2b"}, @NFTA_DATA_VALUE={0xe0, 0x1, "2fbc76793a9c54d83eaf8552cb4af2345beca3b9f7de63634c31429f2445eea87de574c2f9c28eda55b3908bb9e47c1b13293f1304485b402353b962f782c2bf0cbec85ef2cf164a4e1b4a8935cdc81e480504f0cf198c769f46d600396b943fd0a7648efe04f662a3ab01f9ae1df2a6c9e9dd94121d680090a365a9f9b6a1db7420843ad91b02b6643ac4fa31ab7658fab8a0e23f9ffc3feedab5f52b2b84b5f681185cbbf3caf18dfffb8666dbb1a5e3115da7f364a28c5097c2ec6670a884c8cbe4e643413f43b6419064787db89edea78bc02b49dff2cededfc0"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY={0x1198, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "d9eb7484ee8ce5d48dbfae4809e991c98307ddb99010c661a44678d68cf3dd5f7ac7088442eeb1a196c55b1b4b96e503371a78a7545b78366ec633f8e76da7ca039000fe1a83e790d9a04eb2f26b2fee784ac7a0e115532f6c8b4fdcc5d6357d3845ce9c817a36d53ac38f1c926bca3a8c1323cdbd4c4ed7f45f6a17698dea949dad6684756a8f2feee7494975e811"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x85, 0x1, "0082673311c21f33e0483af3f63d9576157ee93961375dfcef0704dfbf2875580666da616850921121e75af0c74b79f973ecd5ba2d8f227c0a9a14f7ba76e94f4c53a5c10916b2ade2cd25c942a45bb677e7e78d6ab9b358b96d29f32450d5afb69292046f0a1f0ab0d3b7ea8becc3e1e086b74ed8d01fce84f8d3ad57c5ee5e54"}, @NFTA_DATA_VALUE={0x1004, 0x1, "a1521a88c293eab532f164c22249a795a8139919881b280a5f43f60731c3f66fa6026c3c8e5140ed72979a1c1c769e615ae8c944348e8299cfbeed7c412a448c164cde8a7df6a5afb3c98f56adce2d25dfdfcff0656a90b2f00413a815da32f7114908a0d6c312222dcdd33da9a5734f20855b196cff3ff6006eb651b5d17c3bdd5dacc7abf69bb82e28f4e709c0625ae21f46b8e378bf08795c59bf287d1779ee616885bc7e9ed0011932afba54362e72d1a19691645369235c6ec1447bd3c72d7b7c98e61b25427d7d7a601889fabd65e37c1169d04f3e726950fb43d26fbe7dab48e646bed8215bf2e2a84576d8a71d04fa3856094f39027d0a6507a045e33edbca88b1d3ed7c493f65c4d17637f3c967680d135acd81b7392396ccaa2fe3d635f8e13aa154656254f38dd3a147547614f9c3cd658f687c4b830fa10a028336e7a7778c3e77136353c5ca35d13b0aedbb9256600aea830f2d9198daefbddfc776a52b0cb10175b6271f8c4f6936aa2e800f3c98bd31baed305dd33cc4295bdff925aacc5e6b6fe579b87ef197e6cf6a49e9fca370ccd035676ec2838b3a992f1ce3d6d475e38943066f7d8de6ca6650e2c1d39c260b88659fc7983430bfc65e60b9eadf074d646481474db0805cab0c1874cd4f8deda74300e4ae72daa92d9ead1d6f08a666c654f1528a5c7b306cad85af28a66f343127c1cc44109609e9c8045eebffa28249adef53c59296c2c2edd9efc14227bc3cc99de427cde828e4d5968c324fb8b684f99e20b101855e879c445eec058b77041cf4e7f7fcddc151044acbe44eb92871490303d2e7712ad1082ebb54cf512cd667259a5b834415dc5d084455ea4ac01c7473efb4e1818565f2608f2d4634bb60b9ad2e504f46d9ddac9bbd9d8dd9aba351874d794ada258343a93d5a384ef83b2dd2f5faa83523fd1c49d366f349208099c5bd1c91b1b11a78ff0c49406528d38e56ae8557bfdddbaf59829896ae48395638dc703ea77fdf4bba7a26ea1ffd4dd21bd2fd1f2dbb3909b8e01fc3eb451cd037e7ee6ed4348b4de56601e7c7afdf22adb07a0774f41ecd160a6ca74540354a5a71869947c47bbb699bf050520ba6a51bb09740665eef3d6a71d6dd686a3aba43fdfcb1c8a58ec852a7f5039ff729ed4a9a64847044dc32e42ba4abdeacd2f6fe9d2d6ed585df56ff8222ee9df22bee54680a722d5569acd2b76d28bcce7615cde96cd1ba38de43c61557b0b8cc7756970abc5e10655c9aeb41cacf9b9a1eb5ac3a01f2979a4ff1a65e8a021d4127efd596ee844d5e5b6bea21ca98b0625b8ef29d2bcbe34011b8af9f3470ddcc2fad2a5d970b4e9078911e2b18fb41dbdffaaee3feef8d690c5cbe951b55c8683569b30c183467025fd871644685558ee2c78b99c39406fd2683f2b584908fbb7b833ef96b7aa96d64a731bb3b76ca51f2e5912b3e60d1da44008fe9a792b2cea5d411f2a5b6580e23db75547bf79db76f27ed6961179d116b08b137c163cb0fad3a9ef26fd75af6443be5c1b09c69654b1a3fd5f6dfb4ddf162e20dd113df0fd494c243aec378bf4de4b5ea81c470e7a01a4219fba134ef42429c94fa95e4f99814f9f5b754fa9f0d74d0f8650f673dc61676490b41bd9701a0f8d84756469fb6139ca437dfb4e89e99bd8bac432b8e8b2bf2a77e60af1e668a273ff01cc586ca81294d2070e1c09e1afc058a7f30fa40a29dde3f1991b383d9214c724db7a1948c29ff3244c86b16a7195c23f4016cbabdb62d57f359eb460816cc9c947e90bbb5bc8642f9b703196f5758a8ceb0105540415a8a1c2bc4e664b47bfba09e9ee049941682fd3ead899e83278056dbeb24deb082304d36375add559b3f9af4eb8a8bf9ea888ed3d71a24e9d1fbaca8e7dfe5228d60440be64329a2e6a9774c4987f9cbbadd6ad3d2ab086c4eb41753145a2e0549dcf688f37ab77fa53ad4cf168cbbcad95a6100242cadb4727262ff1fb3db12f6a67ff988675f1cc6fc0407902a11b0dacd7c8599cae6cb9d8325031895b4b0c9130c64933f9d1cdf794a36567ddf93fd19abb518cb39419467adeb3b9b986b951fdaa8bf03642f54b6434ca850d8ac593d4f7eed4e6e1aec1b0de7d55641c72af2c9de185cbd05a35f4036285b8f54a5b2a451b5563029e1654cf7da1fae52e852263ac9bbc90f8bc9859adfbd7f9ed966d9aca355048fcd763d7b7e998e2c920510674b0948339e7d48be1155d8eac9b698509610cb429c209429d7b21624bd7f8e8cfa5a0cd96e618b68236b1edf8e070ab16f8e75e4dd5d74c93f2f1924091aaf4518d33af214e166e5f9e86c21ab003404abcff00cfb9dd78c3f3e7a242cf1f7726b2ddee476d53d72ad5a52ce82cd01753ec44d21cc63666952ab6ae6a7b9825977fbacf39db06235d7ac58f85f8d8bcbb278f4889ea3ea31d670bff88e9f4e9bf85b67ce3c294ca68350948d23e91979b634d45d95641d8012bec622b89bfbe7808d4746624261ac9de8f3e5fe09a7b27db11948b2e78acfc1544e37d20561c3b73f7d701afe2ad2c25b48fc725833e6d9e3b8ce9a0bf97fdb825b5edef2f78c2f7c7751011b2ddf100ac28e5fd6cd7b7df323a457937eb479ce0c0541bc1083969f2797de319f24e58c6f9c66b73792a569b265813c129bbd64ac7869aa33ce98d342f0e07efc12a988c32fa706595cceb65761726abd5209d799ef51f8376c5e89258b4b9692c216ca3765adbac5cf8d8f16b0df237e2552927ce02ec6d9e7b9676634ca44afaff14b7624c4128c55048068faa7b404769006b2a2d455157e466af79ac2727201be923b9953f09f72c8a50fd9409e296b5a5f628b33a3e3a2e016519a5a996baeab246ea0ef342095b16658e4ca88457a425299bdf90b6e3bf11bcef8c2fc1ee14da0e74b507ebb798ef08112d8c8e9666e5ac7dd1c4c00f3ea3d130c84dd57a1cfb42fb49c2e71e4db9e97636c0e02033651d2ec8028b5e5d83bf9c70498c9a7100922b1b8e60ec6d9c6c909fd2b28794393df57ee8cf2004e6e793e2e07d7f2583c0385de4357d7249d6310661df97aab38b55535b86da46617eaf6debb28cea8e1c262a6ea48ce7d2acbc1ace0bf6a752ceef5e43c47bf2a9a6885116a8ba29070710ae8397848752e4c44913e0deede0a707f3f7357a4293f727cdc0e99fd5ffc275da2095ac14e3677f3379afeb23f38b7678a4b630aa0a68985af7e11d7c5ac2de459341921662d371efdc003bd59150b155a728d98915d5af5952cbd1d269a4af94a84d620b3e6a36c9bac2df4510d9976ea9e1ab3d5f5bebd3b256f6db603e7eac736c6b627be9ba871a15e6a6096d6e7509715f17122e5f9a5cdbba0ec2937d1f627db3397f183abae8e678afb5e40f5b719a9c5055737e30727feead48c9051b02273cbe4063d13492886b274b49be278d5cf87539bee642c94fc0a856dc6142c0334eb988abb41895d70a29db4e7041fb66dde6da5c2aaf24b05a4f6e4c955ac1cceed28dcffeac1240548073de8dbb51b08101cb81f2cc28d51b777a239188699d0265b80a1e4e79961a3d4f8eb7955da76b94a73c2c289c95d157c769d65224f1af099b75669a82ea3636a428c5caa321cd289cd610262ac6ff409cf3acf27e7c79218f95801aa99a24d24d83c1f4e60031c8bab8065df0eadeb878ca6ec678a11e258e4cfff5c6590c9cc188e1b8eaad8a6cc7858f542dc50098ecf37c61b712cc758ca06af81eb47fdf386e730dc6563cd4e66ea45a7cc6fb52be3aa9174729338b687690facf08e6c459c6aac9eb0155d09f712c1f1a0ca5667a4693710e9baaa25ebfe5a732e98335b575a473de2e90c269151bfd9530480abc0669fea2e7d47a536aebfd61ac44838d63cb8e29f1c1d5ba21a2df198165e850ac2c71e0df22cad7fc9864abc07fcef2df76fd0f43e373d457780a010680984965b91639ea8f3e316356ea34833d2416b6c82a2690e448a023c68d434d034d3dc4d7495227a9101d512f340709b4eff7a4f7a437f8cf0d28a76350f4496014a4c35df28a9215153029eb8ffddc1ec243ef33038ca94b289e26a7f7d6d3c5676fafde750a7cc3fd4049655b5459aa91f99e59138a909bd24b2c09bdb3f096e983e7f31b5b38516b3f1d286f2d5c1c1c2c55a95308f26682e7544a5341b5d45702d8731e264673c1ba59f83634f0a2aec3d8bb9ce26db2bcd0ae5a4282ecf855c9329516f181581feaa3cff4e41deffdfebb51eb994f3829edd1ab5e7d50599d5c827ecda556b002399b56356784b8b1220ec3b9dee9446c89be4f51b47c68d6ab641247205dfd6c1f98601dd10b205be6c9a7b48d07c1598a6c127baa8ed2ab70bc1199e715637218aecfd8cd97cd771bcb803909e3397492102d481912713f03992d61313a5e771736f5dcf71e76bfa36c58bb99e626cc515c527825df33d63c1a4158053bb2e69df4b13ad21d1a7980356a8196c7a550c3606f902253aa4785a690c78ff3c22b77db36a347e8d2e47d45dce91b8d011c13456b1959fc0494e68b2c11f41717e4dfe74a00ac5e42a5dfe4815dcbb0b34b5749be260b35899f92404a72afbed33f6d3ba67906f2cc20b43c406b6d2e663e7e9efe4ccbef609e3897c2a914cccaa0a08ecc6a675424a353f75c59defb374f8365aa60420ceb22f7b58fd245799b932c7f55724b37a22e4c5fe7f065b12056713b86054e1905dc5250c85a9c518224c466697427ff12500f3c3a3b8bb8eb2da3bb8dd95a33801e23483d71083cae01712a74c90898e1740e8a863ca524be22ce8f3106d377b6c0255c8292961924682fa846870b62f35a9d044467f8f974531a6481f477e55a483e678ecca94fe7c2a1f2a47699e73391ec8d4ac8c04f00fad2db2c3afcb7fd77a7db48677b30a23135fed568f568ce5874299ea8bb3f4fb61b87df20e471c5b245be699bca9fae0394cca5027fa5c7732deb53c5134b812e5b66e95a69adec4018a7579b93ce99a54ba6fe2b98d80b8cf3d1eacb9b7b5fa1f4ead21e204bab278bd71582a052cce1a98babef50f4abbf0bb352623ff8366c4176b1d85f339d7b50e166e981bdd11afa41207a133e170497b43c5199d48b6ff67fc4d6d4818c6ee28df9df923bcb14b8f9f0e56e02e4b22cf6f21c5a4c9937cfb08c2935716f8cd810c1b69a9280ddbb3e9d020203c39d89dd111faa6772bed44223e105de1e6406ae9e2b7d5c7b9d01da4d5f9c455c7613be9088afe2c479d2cf3abd991b16372b19ee8c031ec61821c8b813596377a0e3f086d25da1fd039d8876fb38294f0a62b581a3d47e25edbaccb2a13dfeeb55e7b03ff0636fe07173f45cc75619ed5d29ceb2e3c8e566f8f9921a31333c825995e5807328a4daacfaa6b05827ad6ce2181ff3dee2b3503f894efb8e7c62e18b0c0d24d13353ae243b57a1a724ea843dff4635f211033793a7e7efc8db1b6441b7914cc417e7ec4fa9f88dfc6983dc5f9c6a6d412e64853bfec2ea2c3af934e0563ee7d8dac98b4e7a636a42e24935ec67acc93785f5efb5a71522c760e79fbbecc0112767baf902094133eb2b17e025ee4227ad612c8c37253dc64bd0182e1da030ea19d4587a1f588fb397932c638fbe512f98b55df435a4479843467a8f14b1a15693a0b13184a762cf9b9b0033acfd66832cfb720a2cbbd40f726e3b73dc0eb72d7a9d58c130423cc13a86984729bd668ce9404b229264186af6be99bbd9ea64877332c9d039d425dd06f930b42a34de4d0ba3dae600abc"}, @NFTA_DATA_VALUE={0x62, 0x1, "11ba6b8bf1e32697bb7687fd0003225374965a8ff60d15732e0d05a215cec6db229531b593da221830a91425976c76b7cf90f3ce092a19d27e6a82416c47500c021873608bc8e168a16c0e10a67e610b0b76bb1882b97bb24da1642cb478"}]}]}, {0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x5a, 0x6, 0x1, 0x0, "d43b992d548d5f34329cb5719421c77da2aa3c181fc9c82b6ea049acd6c8700abaa107c559f6d2319596511aa77de8086b06d89e55e95b3e62070ddc4b60767357357e126318efcb34474d19f5e9dcd7a0e762d846e2"}, @NFTA_SET_ELEM_USERDATA={0x25, 0x6, 0x1, 0x0, "caf8a7a9cd29ac718e5d31a8f9c6d7fe31e5ad84dff2ccc04c505619ec5f401c4c"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0xe4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x52, 0x1, "bc9bbe67c7bcd67b5dbcbf787c5bc300c67600a192c21d89d6f400a81ea17c18ac1887ffbd11624dae591b8e2376bc22607288b45a1064f83f24cdd4f8372eb45e0edd796839c476ae054463d4ff"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_DATA={0xcc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc6, 0x1, "51b952d6e9a4fbb64b6b6e331384e52ce272f89d372dcbc07e6b48ab03a794d09e21c7e80d982784a5c914bc38d8964d227d436ae1ddf0eade8ac1cb7cd8a579885398352dbff1fc407e7e5fe74525109a4a046061545736452a65781f3a6e392345649e71423fc084f79be1eee7f51023bcbb65a2355dfbf7526206b7dfa57fe5cb131ba2262cf88d4745b2588750838e25f9f9280ba8266dbbdc632fcacc6d69d1a54138de54aa31ef9e23dfa6a9b5b75989ff8ec3919becaaa7317e97f281ff7e"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9e}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}, {0x240, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6664}, @NFTA_SET_ELEM_KEY_END={0x208, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "0dbc18ee1ed6724936460fd9362912ebb1c876545b996461b1ace17fcdc82d1729020f10b9a28a63c87f24e11805a22c6feef070d13464bb12212d9000a25f1b87b49c0ef11e6b15b27af7833f8733b0f190e23ea6e96d854adab0eb181875dae7d592f9f6dd11b91b0fa4eb28c145017c19fc816285bbc2bf0f485e89650fc450dec4a51ab9428c7a6c160e095f5f7784ee78233bb4104bf915aa9c9bc9c559f1ffc0f6cc7af28522012d6e94fa2644190f21e57d82e293e73bee996227599351c61f90d366043db4e81cec96cc716fd2427fad5340f4ab1fb9ea149751d1191275d3d3981af9d0b346a1f5590afe"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x61, 0x1, "3337e5f544a66f0fc0a3c76da8489369f925cd9ae8d2132ad07f20be02cddaada93c23cc7707d12ec86aecabd02cff1c62eb4d0cf78d19717010b357c8cfcaa21db398765b516c9fe37b234cb85bbe7b672d98d765e63b41ebd0aac21d"}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_USERDATA={0x71, 0xc, "a52d35c3836c43644fbdcb929f53c0e01f01b7d0bb8a9f401d71bf326429a1bfec8f96a1f8552d29fd3b200bd69b3d17c3cb9ff3360b5cc8388ff851fe12538d776187db94ba9d84bfcef96d4baa2ecd6afc8371cd192b352496bf2e4fd25af74df6237bc39a4261c5c7e2a290"}]}, @NFT_MSG_NEWRULE={0xe8, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xb9, 0x7, 0x1, 0x0, "e6923b6859e36fc5378d4f9344168843b0bfdc1fd05065822f258f4f8bc338f248f1fbe5de72bf1c608c89522c05bd255638aaca9844f7d28d74d71614bd488c3e327e168777dff33512bb2a9d5b07658ff2286cf34fdcce12c6b57e65d07d0cbd47bb0309efff51678f5d8a6ccc6c88dad1beb15a455952a6f04c1c06893246a63394209b2d1e886eaf52eb373b716d57b336aeebf979303b9a92c27825d3cbd78dc900f047d46a6840174e7acb49e0dc6ffb471f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x20f8}, 0x1, 0x0, 0x0, 0x20000851}, 0xc000) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002240)={0x81, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000002280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f00000022c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000002300)={r3, r4, 0x8000000000000000, 0x8}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000002340)={0x5, 0xe2c0, 0x2, 0x0, 0x0, [{{r2}, 0x7}, {{r2}, 0x9}]}) fcntl$notify(r1, 0x402, 0x80000000) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x810, r1, 0xf933b000) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000023c0)) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000002400)={@empty}, 0x14) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000002440)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f00000024c0)={0x10, 0x1, r5}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r2, 0xc0106440, &(0x7f0000002540)={0x1, 0x7ff, &(0x7f0000002500)}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000002980)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002940)={&(0x7f00000025c0)={0x360, 0x13, 0x8, 0x70bd2a, 0x25dfdbfc, {0x2b, 0x2, 0xb, 0x1, {0x4e21, 0x4e21, [0x4, 0x3, 0x7, 0x80000000], [0x56, 0x10001, 0xffffffff, 0x5], 0x0, [0x600000, 0x9]}, 0x3, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "58644b9f72acf65933dde83b10c9def4c454924b961b672b2d1ef5b50c776acc4ceb7e7591c3bee1a432b8684be85a4c3921b95224f35178b6cdc5a006f8c9df264519ec46e36889b190cdf89869ae138e3f8fefd3818657475225f4a3904e2d30be35b3c0266bb7981944457771b055fefa3f56e57d169b8609368c1f088532dea130b98fac4ed1011a512f76552291f016a363dde34199b3411f1a6ddbe6e62d94aab00bd4987aaa426b3da2cf502b6999ef633de995a7a59b1ab3e8a874df2c0a8db7460b4404016e1ebe"}, @INET_DIAG_REQ_BYTECODE={0x102, 0x1, "777a809940ff6251d0f8b36c6f0f4073afd3a278da2ccf50607cea4a0b1aaff286da6763c3d2e9575bdc8ea208d49cad5aae6a31496aa3cda06dcb3145118c06e6094783ef1677fecb536a922f1cce1d813e3700b840668708f8fba9ac19fadaa45c8397eef065afed0253f7ca3ecb8d6e4a84d107a04842a872fcbe93e59e878548cc179f667eb78edaacefd2fb404ae381eb0c60c87dea98e7e00a0bbb9fe8093d6e97dc9e1e9ad4cf1557dd6586764c74f603ed8a0e801ee139f7a5980524b47f027c30bf158c0468f253a8f0b38936ee3b49311b8e6b4a1da722e7d25009c7071bd226dd558779c59e7d02018ae30f7132baff169354dc17cb7476c7"}, @INET_DIAG_REQ_BYTECODE={0x95, 0x1, "4f07dec0c802312ea803fbcb0f4d019653ac861aaa5fe0bf557254dde65c257d65f014475614df81d822be4d0f2127b3526fed9707c4746a77086ae147a7ef646cccf19949f54d9a52a2809a9bfb0357ef14a65a01470d2c5aabe2eb266dc7423ca67e2211188a90d1a4011ab04f36767a8be2071a35d691cfb3df7037f38681175fe7e95cf7f76e8aeb4ae927f7f5c371"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "8ae49650d3957a9d53388de673a0a55e4ad657a71d5e9b012d7981d0d7021fb86fa417863fc87168487ca458d42024da02d6ccdd1f11fa636a05e24fe2849dd1a06637304378096fc2a0796db45fedadf54f189186bd872e8689bff699cdf1364fd301fbca3af5ee4955851fcae0fb2051a6546873c47fc5326250222ff03e5753bf991a9f2fed31432f07eea535183bc6a58206fe8ef231bdf810328084f8e42fac41"}]}, 0x360}, 0x1, 0x0, 0x0, 0x14}, 0x40) syz_open_dev$video4linux(&(0x7f00000029c0), 0x6, 0x672000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002a00)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000002a40)={0x8, @raw_data="3c8017f230f36e7be4dae8d010ba5d32d3a6b3b4d211cc7b55939e15ef6b9b4e0b64d1314b7ae232ef1ddf31beda561683ae6fa4f48a4d426fe9c4e700471de26de874546267de1102d1849adebc318ca49ca78114c46316cf8a1e64069b40f7b9b1ee019ac42b1f0b24a859cb69e34914b45977483f31f8dcd463063eac1af3c5e9ab791cf3c6fbf6f177dd2697e29100447322518d6b36635ebe7338c2dc3a2398f58ccd06a9c5579b4d97ac462376e7313725cc1fe3070ad4ee4be6201665e3af8dae02117d1e"}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002b80), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000002c40)={&(0x7f0000002b40), 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x1c, r8, 0xe2e, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40100}, 0x8) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000002c80)={0xe}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1030, 0xffffffffffffffff, 0x6eba0000) accept$packet(r2, 0x0, &(0x7f0000002cc0)) sendmsg$nl_route(r7, &(0x7f0000003000)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002dc0)=@dellink={0x200, 0x11, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10001, 0x8800}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_WEIGHT={0x8, 0xf, 0x2}, @IFLA_IFALIASn={0x4}, @IFLA_MAP={0x24, 0xe, {0xab, 0x6, 0xb, 0x1, 0x1, 0xcb}}, @IFLA_GROUP={0x8, 0x1b, 0x81}, @IFLA_VFINFO_LIST={0x198, 0x16, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x52fd, 0x8e6, 0x401}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @broadcast}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0xf4f, 0x9, 0x88a8}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3806, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5a0, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xf0000000, 0x10}}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0xe}}, @IFLA_VF_RATE={0x10, 0x6, {0x75c, 0x8, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xaec5, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xbe, 0x3}}]}, {0x4}, {0xb4, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x1, @multicast}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0xc9c, 0x3, 0x8100}}, {0x14, 0x1, {0x7, 0x341, 0x1, 0xccfc}}, {0x14, 0x1, {0x9cd8, 0x6e8, 0xdb5, 0x8100}}, {0x14, 0x1, {0x3, 0xbf3, 0x7a3a, 0x88a8}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0xd293, 0x9ea, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5f, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0xc6}}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x80000001}]}, 0x200}, 0x1, 0x0, 0x0, 0x40080}, 0x801) 19m3.440496937s ago: executing program 3 (id=1276): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000480)="46ed9352366812e740927a27efff427e1376789ad823452f4e39822db7ec0324ab8e1ea3fa5ade9248fa69b88bd47fe4c98517f70384d2f47d65e685f858fc1423df0ee12fb070ad37fe890dcce5e9542ef918b65cbf65c2a6b5b97cf74e09c994a52864bc031f86a97c16dba5adc87aa97701e7ba2e09a0ee37d0ce2a5732e5279a366d9d769505e1334c0f3b4e0a01d691ecef61c3a57d740ccfbe2c9aa0aff33a7b598c29c8ed16512632c6989c06c93f1e1986d6ed953e2d531b86b43d091d245aff5de11d698d0c8d6b4df3d383065e09b1ede6ecd094ff983350176eaf8b31b183300eb649", 0xe8, r2) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pipe(&(0x7f0000000640)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x181100, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$SNDCTL_DSP_SETDUPLEX(r5, 0x5016, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x14, 0x2, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}}, 0x45) 19m3.24235943s ago: executing program 3 (id=1278): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0xffffffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e234e230c0014"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 19m3.09446868s ago: executing program 3 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x1101) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x1101) (async) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000200)='./file0\x00') (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') (async) 19m2.97299217s ago: executing program 3 (id=1282): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[@rdmsr={0x66, 0x18, {0x9b5}}, @uexit={0x0, 0x18, 0x9}, @out_dx={0x6a, 0x28, {0xb5cd, 0x0, 0xff}}, @rdmsr={0x66, 0x18, {0x9f1}}, @uexit={0x0, 0x18}, @in_dx={0x69, 0x20, {0xd6bf, 0x7}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x2, 0xfffffffffffeffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x600e, 0x7, 0x4, 0x7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro32=0x440c, 0x80000000, 0x10001, 0x7}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee0000, 0xe158}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0x34a9}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0x90, {0x2, 0x5, [@nested_load_syzos={0x136, 0x20, {0x0, 0xa3f1}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x40a, 0x6}}, @nested_create_vm={0x12d, 0x18, 0x2}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x4d7, 0x7fff, 0x0, 0x4}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x5, 0xeb}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x423, 0xc}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x7}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @uexit={0x0, 0x18, 0x7ff}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x9}}], 0x398}) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000400)={0x25000, 0x26000, 0x7, 0xf1, 0x4}) (async) pwritev(r0, &(0x7f0000000740)=[{&(0x7f0000000440)="ba0cdbb985a0460a5aabb53d9fa33e97e27d1deee46057723e3b6d017938e5ce1fd4431914965582043ee0ab876469a28b7096812437b9bdb7c9f5df2b1d59a93403763cac327c3099c7efc860ec52207782a8328824aaf887d41eaa76d8900eb11c0c965ca02018fbdaff836dc0a572845151d00586f4ea2fcdf7d55c54a7a7e0ea990137ae9bcd9614045486a2bd989de69b285b8a0efc29732fae894d52dfa02bcead5f5cb955bdb6f2f53729fad25b1ae7ef7cf3022cf0491c147ebe13c47c4494453ec6d189f1549c", 0xcb}, {&(0x7f0000000540)="830b5c9f8b8d1ce814bc", 0xa}, {&(0x7f0000000580)="adc3b431d66b3a4bf5f87b8fddd46ee297a7d1068a45bdd69e1fab882d5027a168230b6b499a1389f32dfc66712112da17f7238afab47186b2c4ead6e6b84fe824bbcc47a37c02a1d37443d1683131a4522951635d8071c3c55c32abc5329d765de983c8a3007262f3b4f812ec2b78a06059b5daed1d2c226b53dc14ee681c08136390a3ef83708b44120d27ed7ee2d804089dbf9f8fb7ec6f0cf581fce1b473d47fb31defcf4637ef19e8ba52c7bcc6b16f9a7f32f2ed42faa636e9da58", 0xbe}, {&(0x7f0000000640)="d8edd5739efaf2b1c303400fd1c2a5dccfd476c4b9dbae08bf70e604544b8535cc9f177c49c8354798d2d4afce11556175bdad87645f1ca27bea9071a87aa391c8a06bb7ca30d0a50b7243b64349762f309e0dc40c29bcd6b9946197d34588305e145eee50ffd52e3e8b3ee3615578bf0b6be6bd1902f97569ea21daf96fd50556bbbd88b66dd694d2af7fbad0cf524ac969268a8fc6a426baa55aa23676898d5ed4d9292f0ea5b2", 0xa8}, {&(0x7f0000000700)="be112e564b74ec08f4ebe36e38fa7eaa57393e0569940f8194faf9e5a80b99e76e9a1e5aa7b7a127866ca05f70a569806528ebe4513ded", 0x37}], 0x5, 0x7fffffff, 0xffffffff) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_open_dev$vim2m(&(0x7f00000007c0), 0x5, 0x2) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000800)) (async, rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x58}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x14) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000009c0)={0x3, 0x1ff}) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40840) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000b40)) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1ee805fbf3b01338}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x110, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1000}, {0x8, 0x15, 0x6e}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x42c554ce}, {0x6, 0x11, 0x656}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xaca}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf05d0f43}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x8}}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000084}, 0x4004) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000d80)=0x1) (async, rerun: 32) r5 = openat2(0xffffffffffffffff, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x606240, 0x100, 0x8}, 0x18) (rerun: 32) ioctl$BLKCRYPTOPREPAREKEY(r5, 0xc040128b, &(0x7f0000000ec0)={&(0x7f0000000e40)="dadaf333ca5afc5927248430f6a3251720d32dc62205cd3b3031bab129939ce6e81a", 0x22, &(0x7f0000000e80)=""/48, 0x30}) (async) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000f00)={{r0}, {@val, @max}}) (async) symlinkat(&(0x7f0000000f40)='./file1\x00', r5, &(0x7f0000000f80)='./file0\x00') r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000001280)={&(0x7f0000000fc0)=@isdn={0x22, 0xd7, 0x5, 0x8, 0x8}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001040)="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", 0xfb}, {&(0x7f0000001140)="81d1b45e13db930fbad1fed74eae84efd2063b2712a6ff79ce01204685c7a65de9c27cfb3d8d619bbc0973cad469b3c182e3", 0x32}, {&(0x7f0000001180)="7f2f9a28099a9457e96b5b43fc4fc7de7354573a89637df620b67e3cabd6dc1157052f864d8ddd743c2114e8ae558ec83e77e274ea2e63d8179c506708", 0x3d}, {&(0x7f00000011c0)="72c7cc9a70abc36b5b25696aab86f71ac068c29a9d970b085265d2eda817e70c9e11b0d132da6fb156ee985c4388450bd33ab70f18b7cbfc497ec05844f88176f35949a0653ffb9aa13efbb5eac9cc0b2f2a1e3e2914", 0x56}], 0x4}, 0x20008000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000012c0), 0x180, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000001300)={"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"}) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x849) (async, rerun: 64) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000001700)={'\x00', 0x8e, 0x2, 0x6, 0x0, 0x7f, 0xc000, 0x40000, '\x00', 0x94}) (async) ioctl$VHOST_VDPA_SET_STATUS(r5, 0x4001af72, &(0x7f00000018c0)=0x6) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000001900), 0x0, 0x0) 19m2.674067377s ago: executing program 3 (id=1283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2084}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x5}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000005007110180000000000de85000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40c}}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x28, 0x10, 0x21, 0xfffffffd, 0x0, {0x3}, [@nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0xd4, 0x0, 0x1, [@typed={0xc, 0x65, 0x0, 0x0, @u64=0x8001}]}]}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x28, 0xb2b5ae0b, 0x7c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x7, 0x20, 0x1, 0xffff8a9b}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000800}, 0x840) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) write$tun(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 19m2.080679053s ago: executing program 32 (id=1283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2084}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x5}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000005007110180000000000de85000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40c}}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x28, 0x10, 0x21, 0xfffffffd, 0x0, {0x3}, [@nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0xd4, 0x0, 0x1, [@typed={0xc, 0x65, 0x0, 0x0, @u64=0x8001}]}]}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x28, 0xb2b5ae0b, 0x7c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x7, 0x20, 0x1, 0xffff8a9b}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000800}, 0x840) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) write$tun(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 10m21.645941026s ago: executing program 4 (id=3597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c701, 0x0) r1 = io_uring_setup(0x5bb0, &(0x7f0000000080)={0x0, 0xb2ec, 0x100, 0x0, 0x2f}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)}, 0x70040038) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000302000000082837d0c0ab243403"], 0x0, 0x0, 0x0}, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000300)={0x20000002}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r2, &(0x7f0000000080)={0x28000006}) syz_usb_connect(0x4, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, &(0x7f0000000140)={0x7, [0x58, 0x1000, 0x1, 0x1, 0x2, 0x1, 0x7, 0x7, 0x10, 0x1, 0x4, 0x1, 0x28, 0x385, 0xef9a, 0xfff, 0x3, 0xb2, 0x1, 0x0, 0x7fff, 0x4, 0x1ff, 0x0, 0xfffc, 0x0, 0x2, 0x10, 0x6, 0xd, 0x3f1, 0x79, 0x5, 0x5, 0x1, 0x6, 0x6, 0x1ff, 0x8000, 0x9, 0x0, 0x2, 0x423, 0xfff, 0x86, 0xe, 0x20, 0x9], 0xb}) r8 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x800, 0xe8000) r9 = socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0xa846, 0x10, 0x3, 0x178}, &(0x7f0000002380)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r9, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}, 0x0, 0x0, 0x1}) bind$tipc(r9, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f00000000c0)={0xff, {"63b7e4547fd7b3e408ad385a0cb87621", "6335e1c96bf20d805440390d7db0df8a", "1a32f8161de5c88ec40dd6c88aca6074"}, 0x6, 0x6}) pause() close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 10m17.745492234s ago: executing program 4 (id=3612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)={0x204, 0x801}) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="041c"], 0x8) r4 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x2e, &(0x7f0000001e80)=""/66, &(0x7f0000001f00)=0x42) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x1c}}, 0x8010) 10m16.052999952s ago: executing program 4 (id=3621): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000080)) syz_open_dev$vim2m(0x0, 0x8, 0x2) syz_open_dev$audion(0x0, 0x8, 0xa8c20) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000000)={0x0, 0xbc3, 0x83}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 10m13.589777238s ago: executing program 4 (id=3628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES64=r0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000a40000000000000010000000000001000000000000001c916bfd1db8ef0c59316a09e14497adfd06518a4cfd490d1c6ae286bd1400a7b6dd"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b50908000000d41e7baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x140000, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x40, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r9 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r9, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) io_uring_enter(r6, 0x627, 0xc1040000, 0x43, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000200), 0x8001, 0x995480) sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000001440)=ANY=[@ANYBLOB="b40500001100080028bd7000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="e80012800b0001006970367674690000d800028014000400fe8000000000000000000000000000aa0800020003000000080006000400000008000600f843000008000600f9ffffff14000500fe88000000000000000000000000010114000500fe800000000000000000000000000029140004000000000000000000000000000000000008000200040000000800020000000000080002000900000008000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0800250001000000"], 0x5b4}, 0x1, 0x0, 0x0, 0x4000}, 0x2000) r10 = socket$unix(0x1, 0x5, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r13, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r14 = dup(r10) write$6lowpan_enable(r14, 0x0, 0x0) 10m12.525222407s ago: executing program 4 (id=3632): syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000020050b3917400001188a655f026000030102a9090904000000010100000a240101000a0002010209040100000102000009040101010102000009050109ff030908040725010000000000000000000102000009040201010102000009058209000207000707250104080800"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 10m12.198828956s ago: executing program 4 (id=3635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x10, r2) ptrace(0x4208, r2) r3 = syz_open_procfs(r2, 0x0) lseek(r3, 0x36, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) mremap(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000208000/0x2000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 10m11.655481857s ago: executing program 33 (id=3635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x10, r2) ptrace(0x4208, r2) r3 = syz_open_procfs(r2, 0x0) lseek(r3, 0x36, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) mremap(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000208000/0x2000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 5m18.414702293s ago: executing program 1 (id=5104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x30) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000400000b284ad9acc94a06000000e600000001b200", @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f0bb49fb55615982130bfbd3e579ba102913030303034303030302c757365725f69643d", @ANYBLOB="23d3c6596e32d0e4e5a81589f3a102d1735568f335b423a33f6ba5d62226848f7b1b77dcfcc205f64091a0c2de1eb2ede0b01b1f070e33b9b4a71d7a847207167317b0671bad0d570fb20e4ddb42217dcc42034845b27c573c4f8fd4d8677769d11d0ad1659c85119263a438544290773aef44f1b4ceaadf3196fb1c27a78f5cd388cc5e7b6c15a20ba6318c70a7934d1835533ddde3ec6617a791288311e5795e65512addba33548b984284ca3c71929f4e5cce087f415491e7", @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x68c50012, 0x4, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x72) syz_fuse_handle_req(r5, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x90, 0xffffffffffffffda, 0x6, {0x1, 0x0, 0x2, 0x20006, 0x3c2, 0x100084, {0x6, 0x9, 0x5, 0xfe29257, 0x2, 0x6, 0x6, 0x80006, 0xfffffffe, 0x6000, 0x7, r7, 0x0, 0x10000a, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x28) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r9) close(r9) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r9, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r10, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x420701, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000001040)=ANY=[@ANYBLOB="c80300002600000229bd7000fedbdf251e00000008004700", @ANYRES32=r4, @ANYBLOB="de8528e2ca5a8662282e3f9253cd866e983ee88b6850b5e39167165db47f610081c5be1ba3d3b2b63d146afd089d0b8de96919fcfd9f59fce263ab4d054505e8545791b7101d3ac908929917d7d2a02a9ff1a9642171c6cda6c16393c48866db2254fb69d6ef029b4fe0e0e3caabe9c78fa83e5459eb49af3427f573cf409f5fc7a2549e0c147fb3e5afdc90d7d0c6db4554478d1b16af0cc3e71dd471b555bcbcd1f7db61befe7dec34b55141ffbd498fce69c409f6b3e7f22ca4676e114e4223d3233368dbb2484136ee96b3a739e2f68cdec5a000b98004001880b98d0f280bf9eb4f6e3e6da2ff7ec811a9e2147ef596414ec51712436ff299fde2507d4b879812a6a1220647679428db025d0ea74665b9d1279be0f813150c9eaa0dd18a3efdc705de2d81928c61ba96273a66b014547c56c054f62d4f103a99f5c6a1ad0b35b14b3e680bc0e41f441f9cf9f70af97623581057079a41eeb830e7bb3c1704000f8008006600", @ANYRES32=r7, @ANYBLOB="0400588004007b808000d1800400018008003800", @ANYRES32=r7, @ANYBLOB="5d003a00b67d7859deff92c84c6c47049e25a683838d0706b69e45cafa37505f12e5e8a27ba3d6ede0a780d6f7cae790ef5cdbe0d99e69e26d7b3e6cff6ff362269d136194464c30bd6afa1753220cfc89c69e523c2cf3651dd78f344b0000000800f700", @ANYRESHEX, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="96f104ece05efb291b0a3c1b3561203f12ebb93a15deb5418015bab4fcd314720de08c4d46f278fc932993a04df8e701fe08c35e485f38277c6504b8bdbd9498930fc045"], 0x3c8}, 0x1, 0x0, 0x0, 0x4004084}, 0x40080) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_SET_TSC_KHZ_vm(r12, 0xaea2, 0x3) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="640f0d00672e440f23de3e2e430f0765450fc72b67250010000066ba430066b8c80066ef450f01c02e0f01c8f3470f0966baf80cb870e4e389ef66bafc0ced", 0x3f}], 0x1, 0x10, 0x0, 0x0) 5m17.947520031s ago: executing program 1 (id=5107): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0xfffffffffffffc50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x40}]}}]}, 0x38}}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x2}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) (async) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) mremap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000c43000/0x2000)=nil) (async) mremap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000c43000/0x2000)=nil) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) (async) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r14, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r14, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r15, 0x4048ae9b, &(0x7f0000000140)={0x30003, 0x0, {[0x2, 0x1, 0x4e, 0x6, 0xa137, 0x4, 0x4, 0xd6]}}) 5m15.272589861s ago: executing program 1 (id=5113): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x556, 0x300, 0x550, 0x40, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9, 0x21}, {0x28fa, 0x20002, 0xffffffff}, {0xf4ef}, {0x4, 0x4000000, 0x7fe}, 0x1, 0x2, 0x0, 0xd617, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x80000001, 0x0, 0x4, 0x0, 0x100, 0x0, 0x4}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r1 = syz_open_dev$media(&(0x7f0000000380), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, &(0x7f00000002c0)=[{{0x80000000, 0x0}}, {{0x80000000}, {0x80000000, 0x0}}]}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x279, 0x80000) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x253fe68f, 0x300e, 0x7, 0x2, 0x7}}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000001c0)={{r3, r2, 0x1, [0x104, 0xf7df]}, {r4, r5, 0x4, [0x6, 0xfffff7ff]}, 0x2, [0x2, 0x3]}) r7 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f0000002f00)={0x0, 0xfffffffffffffd41, 0x0, 0x0, 0x62, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {0x0, 0x80000000}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000200)={{0x80000000, r8, 0x0, [0x4, 0x9]}, {r9, 0x0, 0x0, [0x8, 0xe7]}, 0x1, [0x3, 0xffffb4b5]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{r4, 0x0, 0x4, [0x9, 0x9]}, {r9, 0x0, 0x6, [0xd63, 0x9]}, 0x2, [0x94b3, 0xa1]}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a000b0000000000000000000a008000", @ANYBLOB="f9"], 0x1c}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 5m15.16148926s ago: executing program 1 (id=5114): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x6, 0xa, 0x0, 0x0, @str='\x80\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20000, 0x1a) file_getattr(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x18, 0x1000) 5m15.149699381s ago: executing program 1 (id=5115): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x81, 0x3, 0x2, 0x6}, {0xfff9, 0x3, 0x1, 0x6}, {0x8, 0x3, 0x7f, 0x3ff}]}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r3 = syz_clone(0x80100, 0x0, 0x62, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40)=r3, 0x12) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf253100000008000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32=r0, @ANYBLOB='\b\x00R\x00', @ANYRES32=r4, @ANYBLOB='\b\x00MH', @ANYRES32=r0, @ANYBLOB='\b\x00R\x00', @ANYRES32=r3, @ANYBLOB="0c009900010000007100000008000100390000000c0099000d0000001e0000000800db00", @ANYRES32=r0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0xd08526d9314b7b52}, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r6, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) 5m14.266203222s ago: executing program 1 (id=5119): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c000000100001002d8a5a32ec00000000070000", @ANYRES32=0x0, @ANYBLOB="02210000c80f0600140003006e657464657673696d3000000000000068001680640001800c00040009000000fef5ffff10000200"], 0x9c}}, 0x0) 4m59.178148692s ago: executing program 34 (id=5119): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c000000100001002d8a5a32ec00000000070000", @ANYRES32=0x0, @ANYBLOB="02210000c80f0600140003006e657464657673696d3000000000000068001680640001800c00040009000000fef5ffff10000200"], 0x9c}}, 0x0) 41.449252404s ago: executing program 0 (id=6378): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a4400001022b875e55a64eecb728bfee6576648e0a030109025c0002010000000904000001020d0000052406000105240000800d240f0105000000000000000006241a0000000905810300040000000904010000020d00000904010102020d0000090582020000c301010905038fda", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8, @ANYBLOB="4f0f38dcacb53089199e423fe41264e60811bf598ce0b60267cd59e849aa25271a3d8e3a8e52eec10f897030a14edddc2e8a6ac14735d9c8120a8d2476ec0ae7fef47c77a8fb463b508934b1c88393f82942787c879e74f9a55ad2be6305eb0e64f464d9ca1b1214be2cbc0d3a4ffb91c9159367160f8de548c70f31bb5b907434ca88135e3088441b32a6749ff4d4ffa8a39e0dbe64d8e8a9c94b0deac210545267c54056f596", @ANYRES8=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x10, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) r6 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000c40)={0x7d, 0x4, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x30}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4, 0x0, 0x9fffff}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000000c0)={0x28, 0x7, r2, r4, 0xffffffffffffff51, 0x6e7, 0x928}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 36.47364011s ago: executing program 0 (id=6401): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x7, "1d0ee5d8"}, @local=@item_4={0x3, 0x2, 0xa, "4d501821"}, @global=@item_4={0x3, 0x1, 0x6, "80568cea"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x1002, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) (async) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x1002, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x600a02) 33.394567947s ago: executing program 0 (id=6409): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f00000000c0)={0x91, 0x10000a}, 0x20) fchdir(r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x3, 0x6) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a4, &(0x7f0000000000)={{@any, 0xffffffff}, @hyper, 0x4, 0x0, 0x4000000f8, 0x9, 0x0, 0x4000000, 0x7}) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1000c890) 32.621638169s ago: executing program 0 (id=6415): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000074bd0016", 0xfe60) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$media(&(0x7f0000000180), 0x3e, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x200b}) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xa7f, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468105f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x2004c000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 27.004894171s ago: executing program 0 (id=6437): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000080)={0x80}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x55a9cb0bba415392, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000180)={0x0, 0x3, [0x1da2de91, 0xff, 0x1, 0x6, 0x4, 0x5]}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x1000, "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"}, &(0x7f0000001200)=0x1008) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000001240)=@assoc_value={r4, 0x3}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) preadv2(r5, &(0x7f0000001400)=[{&(0x7f0000001280)=""/56, 0x38}, {&(0x7f00000012c0)=""/45, 0x2d}, {&(0x7f0000001300)=""/83, 0x53}, {&(0x7f0000001380)=""/126, 0x7e}], 0x4, 0x5, 0x80, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001440), 0x6cf8f7708cd0fed2, 0x9}}, 0x20) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000014c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000001500)) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000001540)={@empty, 0x0}, &(0x7f0000001580)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000015c0)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f00000016c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001700)={{{@in=@broadcast, @in=@broadcast, 0x4e21, 0x80, 0x4e22, 0x1ff, 0xa, 0x20, 0x20, 0x8, r6, r7}, {0x0, 0xffffffffffffff00, 0x1, 0x3, 0x2, 0xffff, 0x0, 0x2}, {0xffff, 0x6, 0xc7, 0x6}, 0x6, 0x6e6bbe, 0x2, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0xa, @in=@local, 0x3501, 0x1, 0x1, 0xa, 0x7f, 0x8, 0x6}}, 0xe8) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r2, 0xc0106440, &(0x7f0000001840)={0x1, 0x3, &(0x7f0000001800)}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000001880)={0x0, @adiantum}) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f00000018c0)={0x6, 0xd, 0x0, 0x2, 0x8}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000001900)) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000001980)={0x5, 0x10, [0xffffffffffffffff, 0x1, 0x5, 0x7], &(0x7f0000001940)=[0x0, 0x0]}) io_uring_enter(r2, 0x5973, 0x5a5f, 0x50, &(0x7f00000019c0)={[0x5]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001a00)={'team0\x00', 0x0}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a40)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', r8, r2, 0x0, 0x0, 0x4}, 0x50) pread64(r9, &(0x7f0000001ac0)=""/64, 0x40, 0x19e) recvfrom$packet(r2, &(0x7f0000001b00)=""/56, 0x38, 0x120, &(0x7f0000001b40)={0x11, 0x24bd74ec43de9eb5, r8, 0x1, 0xfa, 0x6, @local}, 0x14) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000001b80)={r4, 0x1, 0x4e, "bb6f05776bf2a57b62865fe019b2dd8cfb7b924ebb9240e75fd1cdbd315801085353187a2a1d9c626a5372eddec467ad5007276c28dc627b673f1377c8b2f1d9a66be4e2187da7aa52c104f4c605"}, 0x56) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000001c00), &(0x7f0000001c40)=0xc) 26.851649546s ago: executing program 35 (id=6437): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000080)={0x80}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x55a9cb0bba415392, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000180)={0x0, 0x3, [0x1da2de91, 0xff, 0x1, 0x6, 0x4, 0x5]}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x1000, "341f5d74afc4bfb36187284855904da76a3fa029ad99cb01514cee49609b44b11062136b386e4e81b40c0168f9bdd657fcb5bbbb2d97b39b3a49419662e2282419ae0c2d73f3f1fb04820a68bf8597e8e39e6ba9e2a534964418065c9e967a82fa083a39c6e51bfb9b75aeb0f1828d8a3e08e4a44a5b4dbd29a62749a2dabb543899c0b00b5ab59e5d38fe8ff1569349ec54fdcdf8b3882ca90afb8aa44b9067b6fd729ed392272b5576529fd0aec2622d4c0ea7cd32f73960e8e151e2847a445c202b52ead0f178a3561174e850e04b4b2471449eb2a4651d4c35ae6b18f07efcca765fd9f0bfafff0fbd60d59fb352101b1e86c7c441ad42ed579b5ab8e0194c9d752c26f0f3d0f10b4405865b0b97af9429d028f17a78bba0f9af8e09e939f938fa4492c95d3b12a2087b9fc484fa49d6b2767ea5b711c85cb4bc24f97836cbeb1b37b247ee2d90e3e91c15e3cd1f70f86a433d640c860c6bc0ddf151d2385f459c94d94f6ac271660934d962c998ec637bdeced328eb9acb05534002b72d4b3a7de1ae39c0a85550fa9fa3a613c0f3c3055274ff81e14725f36243085108bbdec2990168badbbd2b6ca9bdd36ded1bcf22c70358f75497efe502da5584b18eef1be663cc1232fc9aefdb55e60458e2a15c95455363edbb49275c5768c04796a41de0c194daa303c4347aa34c6d62489e5877227cf582a6c26f07a88e2fcbfc9fad0829dd5e0af0562036e30ff85d25127b3433376cb194473a58757ddee2ed8beaac90f495e9d4818bf61444d8f4fe2c2690e83fbddb5647a3121352e050315724cc979c45c156b0f95b675675848f852df9dfec82ee54aaa3ef69ad03013ecd6d1907fc176e0d35b3156e3ff83d78006e4a2ea451bc0e5faf6ad01e13dafa00cfb34d1d54ddf79b34fe10175ab4e307f5ab7862d4faf196e65c81ccca2c6ffff0794566fa8664518db3e7daf034a72688a53f35fffff3c4870b3f375668f65508e8ac1f5493ca46a0d68468e0c3b972936542b08a3cd823e492b5113a3df2a25267f0faf1c126b9d919b2ebb2ac9c9471169349c183adfe4ed9c534b4235fbb3d2c0949a84bf9f8613fb56bf15d170b467b3a2117bef3d2a702ba5e53547e5164660525af1008a5bc22a955c82a075fcf895f345ab2350a2ff60e04c3d5bf748c0080a7efbdeb13a779b2c6a4f06c4fddeb90d94a87aead4b5413486fc22205b254e9d3bd74fa98af2a4b7445b295689e950a8175d20e06e4411f5879f175734501148bdf645e16da4f2f55185db0ac774d59042f1d39ab5858f7894d259fff3fa7f3668f65dedbb3fc404eeb3b25d9422edd52ec06f1242f7f04ba12507944bb61f4a9f77066fcf8616d09d043cb7234d7bcd50aef5fcf99e1d93c962bfd3753419e0258df8cd2c28739c8d12e00f8f5c76672dc38e6191c1c2104f46d8a5f2e737e4e257fae1aa70cad3221d0f281824185019e3f3adefa3c953a1d7f4c32f1aa484d541359e3adfde8bfb635f6dae7a9b968126b593002138b699d5fce2540911e39d85e776a84d3437b670b7417ebae7c7629957f5a1b5007e192a1901a5707c9efe43bddcee42f630ba595d49e39e58b568551bc34f124a82957333d80142f8a9f6b4a5499fcf986f74d771d9c032d41d26736ab0229eda10fa549b5d5790eea9ec685cd3306bfae6d0edcaaccf81f937654e41082cb1caa434f2a0992f24a2af4c0f93ba43a9dbefcf78b50e88fe906466506d01566c97f81e3ca439a2581f510b3018b93cdaaf833f17a33f3e3cca373fd4a76732f445404f5402df0713b2d61f8408a74cc04f612399b9313046da87d4e18443625e744049a1825fb6a2f60d9956986dab57fa475fed7f2e098345ad2892c373d75620e23fca8d84942d7a4ab2938243349b5fe3d1639f4403cd4dbe0bc865dc6434908f79fc7c6b244f5f824c2228ee199d0bcf83ea9acd7959229e0aed70d85d19e8db76023e638053e0a3b678df778579a7a71545e930d0a7363e552a15584900bfd49cd0cebaa9c84d4308f524a537bdbb44600129992c00ae73425743319881a081e2f31e15c21e2f250ea4f7cbfad1690eff5e592a727fccba0c7cf0020e659f537ed6cfe95eaa374e6aac41daa64961e98df9477bbe87e86242eedade3ebc53446589179729ad63233d9dc25296f6f933f3f1a19701e4e8d1968ea64b9f4d0be0962b3e04f74f917a0eeb4153d9793f01447668a5ad226046bc9f43820bc8ebc3aa1fc0e46223737b3b216fffac5af2bdf51fca0cd10a94980e31051414f6bb9f2aaa19823b3ba22005f6ba104d2f17c2ac7924949f3c9f79764fc01891d2f0bd9788bdc9e81dddf7df407babb83b95d43ed57fecde2bea71ca6c1bdf98be20317d12384d39f28ad3c43ca0bd958d38665544124d75819fbfec60fac65a483bd46e8912cf19a8af9cb7003431749ec26adb304cf1b41ac3977a2a6836de45540e7233365a7d7b29c37eb1b69fd196c5142ae0b0901c22b75db1c56c6469806a5c4e29469f1c9d21d4ca9fc20b4a39a334223035e72912e4c8717e95ef0451ab2e36a49ac0bba49424e13a48f9e57b2ccb594b39b6f387a3f7ca7bec97c061715d3de8b01b0dcc737b86d548706cab4c2adb4d4eff112c6ab35fd29892e3e19b320207fed11083d0a42c06e841d45467df28e3eb49d905c387118a4a2c7ec16f51642ed8db37854a38c00ebd7b708c2a409b06a6b75d2dcb069a92b452f1d91dd59ecc5a040a58769d155cbf407ae8a1f1a51c663c0a77a0969c3a0904f2360cb262c1bf368cd503ebd2155f04636607cfcf09468c183c36aa8a27e8914b6d6a387d19a3dd45a4ce7a005991edb085ec79446b6416f1b3b97efd840a0f90817b51e4e9ab5a585975c052e66a942224d4da6d67b272afbb10742c1dc16a9ceabb9637305607f55847f36d694a90b07d609a8c8fcf0d40886ea0a1e14c575f84deab92292488613ad61ea40c4692e1224aff4685646e92e63eb65a51a3773ccfffb1b3e2e4789c845f984112352f99ed159f23b39ef0b5f9657732d252778ed0350e0a56f8d2896a8fd26252ee1395add2a3d7ccd4860d97dbf6c80390b9346c4fc4605bfb08dac0a8f627fa9260adf49712e568c92b0e9ef074de1a60c4472687ccabbe9e9177bca7b69d564a562409f8a92b87664e731c4e7a3b923de0e75413af487cd32ea9f63405faf5c3a0cce131a90decf681f9301688d61c293aabd0c7599b7ca89e098c877dab9e419f8cd8f7d0a6073720ebe80962314dacc4ec6df943537036dc1b4f57d784605f35f96f5596d674320a12b8efc21dd5a028d6147bd2cdc2da3c886a4bdd5268711dee2498f99c52b940bb189897d41070b0135b8e89189d14710bc4cb09562c6cfda0eff411e1e9ca1d9b714cc116e7013981351b4c33be745aa55a2e56a17bcc47f2bbab9e59341dfc6a3d624a4e4efaae75070b109c97e7d242811352dc0083fd6480872b11bf4b1c253573f8c8c08d86424926991ae439e9beef432c8bb66c4518aef5b0b096f877a74b33b940d772b917936b6cd804529dd3bd450e88e91dae7d01a4aea5ef24205c64fcdea8bf58c579dab6d06567f100da7fdd3bd5856c94234dd26c75f1b8a315ba1323a7a49343d5899b5aa2654db3f5efd3db878052102ae43db84caa0c5f1851f9d1ff6cf19a936397c2a07a4187bee132f01bbfc350aec29dc03e31d9dbf031e939615c6811af69868de347ad119a30e8eb7e4eb4a2e4f835ebf0db1fb43c1c38e7171786f9d85c762b5247f1bf65d364ba3a6187b1b6e1cf97dc02cbc4d313fac037edc31bccc1674db77dcc7f27304c165694d1ebc0c006519600f67ac871477da48f77b0bd54423b0df627d79074ddc50b0df0276367d85a5cb9e4ffe3245675feee3dfb255dbcf017a97981e2271da61c2eeb1866ea473339ac8a6035bfb40d021992521abcd6050aa0f80ef0f55b24c93b1ff6ca10fdac493e82ff9fdae4bb464649a3caab1a8e1b0483306fcd60a079f1fac75dce32c6d208a3b0c0346a0f7dc57139643e8376352fd8a6455c67e4d7c30dbe7bd50ca5afa70c4ac7c56a091c44ea6f31762c294ce6dfe36877af94d7a2fbe4eaa73a2c951a688909a3931a291b039100ee3b896c27a73b0383f3bd57665d70593de34c9f9452147855a5729fda8a6dd622c49d6ab64f443f1ef15d38b90bb14065cb039070ce7797bfd82026c744f5374f591eeeaa72023f837a9d9a017d18a0b1763424c803c358ed45f4bc0c47815c7eb41c18d1048a5a018af7f1bb2620a6c0ec06342595d3bf44715bf506cd601f61fae3cb118edce14902900d8616f6e291d7e7c445bd2d4464fe23f556b1623fe0ba0880731841ded2f77061b29b6252b06bcb15038c3a7b9376a187ecab125ab92b1acb3496877e0532f2e89b63ee3b18ed39655940350b422b00942098879932b5721d90a7e6ba94f14f9e78e91dad03d2922af589e59d7b9b57396ae6c17e7601dc81d2de5e78dd8f2aaa8b3b3e753e9688337876bf8cfd65f32a4900f0d3f0f093c6e11c00f5ab45b132533b392073e2f2df44823f86185852a990caab2ac6f3be4b3d8268a8709b467edb7a29fd6d3b49ea0e6eae2e787a91b5110b557516dcc87c168779a6bd97705633cdfe632c16802ee495d79e44d1c2e5c4d6f2f21e0ea383f0a4cd140b5ac7f0d6e28e2015c380e4c19c475e28c6b71f8546d44b24dce5edfc2d5d92223a0921e57e24ca184b06c26572fb663558e65eafadb0b00fb073648e856e51893992c06305120ca1ec54b74594dc373212450c8afd7eab012de7da6d68312a6676f44bb42762a886defeb0909037b1af404795e82ca3c8b791eda6be25f9a30e2c15593422449fb13cd3e535939e82e2dd0ce02bb49f7d08b4dba80c1ecc0be4e23dc638077cd5e0a6903ac32bd3d66fb461f61cb26caf4c9d2fd9af27eaa735ad2005a585b54264f388d8a3c69c0c4b9ac461726c7b0828f69761913962321225c2081291648368636c6cce3affcf4c30275ae091a41137c971366e38c4f68fa20a7be1861758bd11af2442683c7cec3b819f35cc29dd7934b23b66c3dbdac8c650c88cadf785b16901bdf1bf863ae816e6156966daa38e3453d7c6ffcd0cf12d4a9184d05481ac05e4a90a6244b2d2e53ea98dc314840785b7764622762549c22fdb2381d01082f8e23d978aaca6289a6c4afd165743529f6f71d8e27f1aa92fb20a315a7f542472a6f122e8918d29afa3f1f4568cfdbacc08188bcd11a3c5e5c5a85409ffb85a322a34f8312a0e36f5766e5ecf90bf9b62b430d2a9e678d7af42dadf3a5f7081eec8256384c566428ce69afc66f43b4431856ba6f24f699b66455f9cb0e1b9aeb12a1fe840b65f9805501b0913655573fc2a5d78cf20ab14fd627a8629c218042a98b5c89dbeed5ee25bab368ca0ee5c6b5cecb6ab10bd1822aa5d096fc99708b32eb09a04f244456a8b71d3e2230e5289d528356b5643d2587d19d367d9f6ba0e53386dae9e11eeb4130f6877c262905f89d54dc776500d9ad6058c1be33a47987a79028d70aeec00d1a511f7cd04ed68d6de6ae51cded021cc41c921e07f9e5951d4e4d458a4638f7e61a7e20a7f14a7e73586914a2ac6bc70170716532eea1f735dad580443c60af25095d2b500d6421c879d396b90752b313a85b168278e9a1354c10a5b95c91f453af772f317027f85764b5d37c39257e62abd30f6a5782826caff45853246a85661043c2dea7e8a69362ea"}, &(0x7f0000001200)=0x1008) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000001240)=@assoc_value={r4, 0x3}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) preadv2(r5, &(0x7f0000001400)=[{&(0x7f0000001280)=""/56, 0x38}, {&(0x7f00000012c0)=""/45, 0x2d}, {&(0x7f0000001300)=""/83, 0x53}, {&(0x7f0000001380)=""/126, 0x7e}], 0x4, 0x5, 0x80, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001440), 0x6cf8f7708cd0fed2, 0x9}}, 0x20) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000014c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000001500)) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000001540)={@empty, 0x0}, &(0x7f0000001580)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000015c0)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f00000016c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001700)={{{@in=@broadcast, @in=@broadcast, 0x4e21, 0x80, 0x4e22, 0x1ff, 0xa, 0x20, 0x20, 0x8, r6, r7}, {0x0, 0xffffffffffffff00, 0x1, 0x3, 0x2, 0xffff, 0x0, 0x2}, {0xffff, 0x6, 0xc7, 0x6}, 0x6, 0x6e6bbe, 0x2, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0xa, @in=@local, 0x3501, 0x1, 0x1, 0xa, 0x7f, 0x8, 0x6}}, 0xe8) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r2, 0xc0106440, &(0x7f0000001840)={0x1, 0x3, &(0x7f0000001800)}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000001880)={0x0, @adiantum}) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f00000018c0)={0x6, 0xd, 0x0, 0x2, 0x8}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000001900)) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000001980)={0x5, 0x10, [0xffffffffffffffff, 0x1, 0x5, 0x7], &(0x7f0000001940)=[0x0, 0x0]}) io_uring_enter(r2, 0x5973, 0x5a5f, 0x50, &(0x7f00000019c0)={[0x5]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001a00)={'team0\x00', 0x0}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a40)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', r8, r2, 0x0, 0x0, 0x4}, 0x50) pread64(r9, &(0x7f0000001ac0)=""/64, 0x40, 0x19e) recvfrom$packet(r2, &(0x7f0000001b00)=""/56, 0x38, 0x120, &(0x7f0000001b40)={0x11, 0x24bd74ec43de9eb5, r8, 0x1, 0xfa, 0x6, @local}, 0x14) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000001b80)={r4, 0x1, 0x4e, "bb6f05776bf2a57b62865fe019b2dd8cfb7b924ebb9240e75fd1cdbd315801085353187a2a1d9c626a5372eddec467ad5007276c28dc627b673f1377c8b2f1d9a66be4e2187da7aa52c104f4c605"}, 0x56) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000001c00), &(0x7f0000001c40)=0xc) 8.624659314s ago: executing program 2 (id=6512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c701, 0x0) r1 = io_uring_setup(0x5bb0, &(0x7f0000000080)={0x0, 0xb2ec, 0x100, 0x0, 0x2f}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)}, 0x70040038) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000302000000082837d0c0ab243403"], 0x0, 0x0, 0x0}, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000300)={0x20000002}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r2, &(0x7f0000000080)={0x28000006}) syz_usb_connect(0x4, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, &(0x7f0000000140)={0x7, [0x58, 0x1000, 0x1, 0x1, 0x2, 0x1, 0x7, 0x7, 0x10, 0x1, 0x4, 0x1, 0x28, 0x385, 0xef9a, 0xfff, 0x3, 0xb2, 0x1, 0x0, 0x7fff, 0x4, 0x1ff, 0x0, 0xfffc, 0x0, 0x2, 0x10, 0x6, 0xd, 0x3f1, 0x79, 0x5, 0x5, 0x1, 0x6, 0x6, 0x1ff, 0x8000, 0x9, 0x0, 0x2, 0x423, 0xfff, 0x86, 0xe, 0x20, 0x9], 0xb}) r8 = syz_open_dev$dvb_demux(0x0, 0x800, 0xe8000) r9 = socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0xa846, 0x10, 0x3, 0x178}, &(0x7f0000002380)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r9, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}, 0x0, 0x0, 0x1}) bind$tipc(r9, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f00000000c0)={0xff, {"63b7e4547fd7b3e408ad385a0cb87621", "6335e1c96bf20d805440390d7db0df8a", "1a32f8161de5c88ec40dd6c88aca6074"}, 0x6, 0x6}) pause() close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 5.792394081s ago: executing program 7 (id=6526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80483, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000001c0)=@nfc={0x27, r6, 0x0, 0x1}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000500)="099a000105a3317cc59652d433762b1e9bbfb7426fc4716910dee61a8307700e00dbf94ee51db5e0ea720126ec5ec8e640183dd63a446f7dbb2c65a0eb09790e6847be445f80391847d03feb864b753b046e7e6f922a92cac5b56270aee12a791f91990bb2b009759f70671e4994b0985175909aaecff316231717fa56a235f19834b5466253270357c1c60104ac2407809a79846ab3501bd973eda946f176785bf28e8090aa34c6b6816a739cc73f4836bf957b46a6f5dca202530079822b4eb3e3cc024c10b9534379dbafcd1fc0e3208ed90b5ef2690de22bf9", 0xdb}, {&(0x7f0000000600)="b5963652309f47a85df107db264b55013985966e7d151fb2bb22a953dbb912582027f9e2a9fd4755f511f4a1a6c0ab24912bff9dbb27ce5393bda99feb149cad58fca955d1b75a85860201895fbf7abcf55becb041d247d7b3eba2dc3cb45345f30d59aa8f5b3610578f41757563d6675a35e326b4c9edde3e12a8ccdfb68876052aae833e7b02cce2976ca99ab56056d6b997e19e2bdddef42a7b47c7e3a00927ff31426aef17fbbcef8c5dab1d3ab4be6354fd870cfe848bdfb60015357e3b61a1ab6286df9dd3d21d7ed9205157090cf156bdf92de3bab0879f44c904ea2aaa1213c66819e8d8dc42c02468513491b5", 0xf1}, {&(0x7f0000000700)="133c07953b173efb499ceed06093b2c4a9eeccef759c92400c349173010a365ef416bae8e19b4941b95aa79d335e00411d52f0ac723a5f7940fdf0e2d7c1681d8ed9514cab231c58b68de6f384a701df99f76ab95905a8d4a4b454401ce074ed7c7677e5d66e9be3eed939fcf2a6c174f3411f9425fae44ae66e79b834810f288f1ac2556e9de6abc750c6654263d0e328b96d1f5a03a8faa0122cb495a0e965c5ae407436f27552c31ebcd165d794912f844892bede9d7d6eb34268f067186f18a4338778771bf2fd9727b3c227aa1241e78c389dd2b0f5ec9b81f477661029d11909309d98d3e049cf3382832b82f0c8abdded2f4ff8076313999bc2fc88a46016e9dcee005ad81fbff369834d773b98758f2f9992d804fd4d4812d8e12e2b4814a11d0b4f0f80e9532608eb5cfdc5df84c0eeae971cb4b45622e7e56a1d95bd64f9e588153db279b97f1b308aa5351fdbea0a9fee9cf80883ada7d6a435daeaf7e9d3c73b31a29bd6a509d75332a48dc31ed5d7de49c22e44da728289153e8912f4dbb6ce4dbf03f8c79adf2d64b825d66fb766623e8c6c7375589141018b0bf60c00dc04a3930f3dc085b03ff6ba1d2033c677387bd5123ddab12d5287d664775bfc7e60bbda31c1f835754912a7cb4eb58b16baed9055d3fe82e8a64d5edc2fc5cb4a459f8fac7412871e25e94ea5d4e6ecc709426e95aa25093b1b0d201ba689d218aa97bfea031cc09af43ef2937812a5cb7b5d06f55973b2ccd74afe4797fa1b0e5093ed3a7c89aab48343b40be6e7743b89292fd2415c32fa4219f6f2c23e71764edce6b99f80cdfaf93085afa63cd5284839a504ae4b355db5dcb87127712522deeae694f6540e3a8869dfc9b6e75f6f5a7c3ed62d4aa7140db226bb47ac0071201f031cd6e10ed182cb33917abe661516488ebdf3da9e5c484bf39277221ada83baf5195266f9ff92209b8276b0660684d94747637edd65252d723194060a35121b6aaf4b3acd58eec67b17830b80f662aaa149ab7a2db78572a1c28da42328fc65b5e11b3941e6b98a7518494e20cef2403fa1d928a828088baffde6491dde3d5b058c527c8be1d0ac3ca5643848b1b62805722c6c0d28b3635797c7ff8a1ce66d5a9d1d0c36d977ea8ce6d4cf98eebe457f89bb700110c4ad15ce1517850c0e6973fe05c3e05e7d32e2a2d0b06ec16e5640fa523b43c9829d919c98822bd582205865f817cf83d4f0742e01560ab8fae3e834dc092cef69b4b2f46ad4f2af7fda6691fc36360411d291ab7b365b988ed5d4593fbdc778ee1888978a60467b53c9c2483d0f0b28017d6ace7c82c209777bc379c7f93c9e356d0b936c4a77a13726741eed6d553197c9ba354f6adde87ed54aaf8abebd576e2d508d0c5ec24f4422ae9a1046595a1c3d987831450b856688d1285673cb82e744956c244a2b2571864f7d625ed9e71ec3a8d030acc0555a136d436704aadd68a611b40060b6a86c905ac76b62e2563a5b2ea54c5215440a77c32e9c9ff5dc27d6c6bcac9f19dd8d4ef2f49c438f26fa1353eab401df8e4e7cfe1d240ffffb6c9d4e882ca2c919582e41441612d53808743109ae3d4da6328916b2d8aae4a6ced3380b291c655a4be81d64bd87bdaf331dc099dcde0f7bd8afada8ee2f30781d08c554eaedada975748f74da0cb7c0a974c72fd45f888fb5f8cd7093726dc005baef923fa1a4a0f45e10b9cdd534c5071536c27acbbad11e75fda168948163e3be8402e24fdcfe0782f12090988f3f22a1beca4c7274d897d2e0a275aea2a1a50fd00f9a4c208e405ba2248e50735ea383c70b1d8a50affeb9cdb3fb3fc4ff1491f43dd63be1d371c5c3b97e355c98a4e3be95bf805719530ed90541981a67c8dc1dbb496f7b12aabf58de68dd85ae669cee100bcc6e0c1ecdefcc1d456b97b2a9103933d1e01dea5408509aaff0d0a8a843b2c174537f415ea16db0243a899b5f0bf909395934148d2633be0e835b915bba0cdac10b24a0ca72d9d5be97825d48ecd5b061eb1de54badb26bce8eadab00aa960558ae1c00b56fe1af1ed63a5e3a105fb100350baf0e5dc68863f542b179e8f0e94a599f84dc92edc2f9c59d7aba09a1966d7a39ac8506f9d79e989336756a00383de86ad3dcdc30de57107e57ab39482a93eec7a15a1b1db180d7a31f10dd4c925d56970a03d4691ecbeea9cbaf163355942c87d673d8bb2051705cc8cfc743a8b32360a8bc744d773b8dcac5f471caf382d09c3c02a8ea4c9bf336a561544f0155f5e19a7ce8af5233606df3fb09125a36f1e0926e4b512af62c8a5a5a7a41e6f4273a3058987054448d5976ba5d4313781cc0109b260cd0927a75e4ca05584c1f7d64abd7bbc3d2b3eaaa32571766abf49f987293be0e1c64e59195b032a0d68fef3a99e369d2c26bcafa4bf989d639ce72074a41f985f48556deae9043bf9cffa66894c5c036706d09c316e985110c4ea5a588a140507480a9f8bb3a53e580a5e953e8592df4290817b69bfbca54ede6e75ddf6250b73d9518b9f21fdb0ea8b322a4c06fcaaf8f1f40dc5e0ea31ded37fe4af61bbda23f5391f6be027191ff0f664bfdd415414fa2b4541a4dd1a99384b22be39adc05e5077baf6b83bebd3d685a686e1ca41d99ee3c98467570ef9b21e3363d3da077ffc69104f0ba06269daae6f09960214791eff5411b4e98507cc8c79900f31116a5b1dd313c354f1dc46a9170ceeaa167a4ebf9435101864fc8c731282404b623a157615047206823331a00bd66625fdb5487fc983ba6ea6672b6acda8fa2340382b23b73a38eac4a4b8c4eb365ebafa9aa2f0ef23eba894df8f634bbf5bbf87f45f3c89a1fd0f660d217734670fa7a160f0b020741a70f03466bc2ce9e960c98c3b7b5c3b74692cfad9b02e7124e4400d513cf76f4037e8c0eddbfd1b31e3553128561f25646ff8c6847d6822788087f9b04f10cb0c7a307ff7a4813d003ceede0e835eac9844e0ae77bef8607bfcbba5df685d35ba5cce9502c30fcc28a39569d70925ca923c1034cf1b9ee3a12a6bf43ee6f5db306ee5cbbc932bd63721b4298014bbe10e39240049f29705574418952327ba225ae00429f9406ce7276d5ed0298219ea4a65087a4bda9cba40cb4095701c5544c5133c25925fa932cb1b48ad2801157f3b5e7d05a9af1dd32271288480f0cb22d00d1bfc2684c5f4e8bf87f3c24a4f3bd4313d66c765ae093b17fcb322f9efaf23637a25471b0e5d92f09977bf49d97b77348e59236a65bb10769ce038eb101bc401dcb9e1fa24d280cd438852cf27e0638c21a8cb54654977454a5c01c4977dcdc580bdb0dec5e2367d87dff45fcad4703ad23ade8cd316cfdf8f7f5f79ed1e693d93cf0ced8cee85876085075b077f236b3749d73d1f06c8d39c976de4df06b4c41af3a4a3caf0af7b4e612d4e42e5f2497ee6b22152f9179b36ae44d55650ce28d26c5b7cb0c0a31792790cee2e726e46c3dabfafd75ea17946edc3f3067131595eca888f4e7084583b3d0e805b50f5278d06d3f1594f34df84579c8c22da58b0663992233f1d0443eb839254048e77c1d962a54d81b49eff39d6a3568f6f44392db9e9d9f7ee54ad520239480e51b5a5a6abc552f1747380b5d1e778cd83ea2dabb9c3f1035fde60beb813f01548f698a6858edd30838d7b67e67941f30399085bb10c0703b1090f3999989b76848d23c2b234e535d599e7ee789024c3d555607f38f6fb66cc87996bbafabba5517786387d8f3b5eb1d2d584c1c20eba57b70c3c1525d45840ea1e04b4ed7d1a4376ad8a9f710cd6337127650ea03e195f5032c9668b435e5335f6693521a381fea5aec74a2b43dd2cbd6ecd61e15a13e8cf3cebd6adbf6bf00236e32de6f9cda8bd518e1de62772efaaf04c6a24045b9bbfeaf339a9ffd79060e909146c587d31038cc0b03c292886512cd91ebb5c866f7e7bfbc2b31224b911eddf5358cd40c9c45cb36994769438b99542c22e8e8cc374e1db38fb6e85bc9fbc3dede30ce808e257234558d1c435d106e54fa8df12f5561294dd0a44c21943157f2a30c87dc734c67f2326ba004ed8f5b25c93884a99f7f74919dd4332d8c6235f9dc269a04b19d3c9a2a35cb68743147994a60ac7795344402a77b40ddf7f266de780e9ff2dd3e8b507698b1dcf96247a168984fad809076b4b7e36ff0cb10907696e7b12899a227d97f36e6a2e22b575b8bf1eb1eb3c497dc427b83262b41de3c4cce8d93753f686b303bcb624d39ede4112c5f0726cd84522c1a118125af96169b876ea5dd53ec1a56afcf8ef2b97974de9c2b94b59d5f92c2cece9dbadf395d5fce9cef4b63256ab628a70c62268cb93566f4e722313174bf8d2f72880f4d2415289df81faf1e8af3a54adca9c2403da7a05d740b94890b56887eed879bc8a87a3bd6d8ab72f753a1a9c0961187cec2270b027b2005280590d1ea854fc3b07fb94a1d9f04f9e931e6ccec7b6697c0547169ffd8a68b59d9d93b6bc94e801cc9d94bb53be0209d9cef7a8378b5ad71ce72983ed88362f99c11e7d4c26cecfce12a1f009880bcbb9a020a41c88f49f81978e225067fa096b64836a2ae1b78e7060746470297174b6fcff766a153838dfb5d387408043901bbc975bfda042e853bbce2d09771ff777b63f97e49939c00801a7d1c64a909ea55cf8b9402ee584dcc8e16bc15efa2110146ffa19973a6b65773000c29e219208f46ade8a730d1586b28d14080bd3a1310d636bb29228cd6ef655be159f6cfe3b92af01e51ea395387022e746dadd8a08ccde811e4ff542cb35e42a1cdc06b2f2385c3f451b5ee7d034ffb189ec1ec3cc14df915751fa3efd267a21754ed21ad79e7cf28b57629759e8440e98dfd19c0ae66f67ec8d9bdd41657ca7a0b9d096d6d413c9b17aa0d9f14daf975b125eb552c07b2ecc251c812c619aec9a017f54e586e3638cd2bc543d44012e7d7a4bb3bc1ec149f17df63123167b3bddc37dc19f2ea10d55e93b9620609fc2b51468f8978547a51b93d4ccfedd40c905027e7b32e5fd3ea4a5923139668cca5b607d0e26a8bb62d772d45b4d8be7a356fda867f537cca25ccdb52e30226019482694a8550ca121036e11db5699788d8674e428d3f2ae8b7e0d8b8a37276d301beade3ea3968f97f110a64ae32242dc22a0b0c6a625b9c86cbc439b28c81fb31ec31e5d6e64b2dd0577742a7b26944e33ad0f261fc4e7c6b9d856cc805fa059b37040caba01e32abd177b7661c3fe1b4f52286251736e5e40564a1664e522ea2267d955d0f1601d2ac9e78cfc720dd7596b74df0e5fef2383b850147cc10374ecd99012634255bb19e65eb19b53e3feb8d63fd9515fc57ddee97fc2ceb7d1cef9efdd478096d6d898b0c0487d49f47d5aeb4402c9a5f283cbea5392df90cd5a4100de281b639a19c7a93523d8b798ed224579d872ba02e6448f0154bbb1e057ccd8625f54f4be36c7950694d413b9a0998bb6b064ec68aec15646659724b671f4a66c5bdf138a9314b7cd838beef9337aac89738b9c5fdfc6d6a58313d49e043b2cc1c0db161fc35f9727b90268c8e24140651741c9334d50128d0add084a9c4a075e30337320aa68e2a5b5c2d60db5e9206e7c5d6913d83960bcb3f684bb44f61cdc213f3ff47c9e45a9055c491f3fb6391adb8e3d30b53879b1c7b1fc3397b3782f40f3ede136857de75d4af6e278c3bee477b0d034d1027c8da8a9ef528cde8a723abfb0b7a1fb6ac6c1284b6f7288ca86a42", 0x1000}, {&(0x7f0000001700)="853398ac1962ce14", 0x8}, {&(0x7f0000001740)="096d344c4ceb8e87b7ff46a8d575bc055b3bf0ec716ec73fd7277d9e606576e0925e733f3f4544ac0346b26fdce2b4a9a018df5f2041ff32b270573d66eb502844e35ac91743296133532d7edbb847311af31dc423f38b6f8f6fa18a94493e7aab02c46ff2742ab21e31efb77f4f1d384b708a7b87c9114c567eb72721108e5f8ba13f2ea46ab61ede3945585d1012e303232d20e9eb7f46cd", 0x99}, {&(0x7f0000001800)}], 0x6, &(0x7f00000018c0)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x97c}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x48}, 0x20000000) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0x11, 0x4, 0x3, 0x0, 0x0, 0x58, 0x8, 0x6, 0x4, 0x7f}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x100000000, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x4, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xc000, 0x1c42d3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.659106674s ago: executing program 6 (id=6527): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'pim6reg\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f0000000100)={0x1, {&(0x7f00000007c0)=""/194, 0xc2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f0000000a00)={0x1, {&(0x7f00000008c0)=""/38, 0x26, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f0000000ec0)={0x1, {&(0x7f0000000d80)=""/127, 0x7f, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f0000000640)={0x1, {&(0x7f0000000400)=""/234, 0xfede, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00005d2000/0x1000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) io_setup(0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 5.581208895s ago: executing program 7 (id=6528): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x4, 0x80000001, 0x8}, &(0x7f0000000640)=0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0x5, 0x2, 0x0, 0x4000000000008, 0xfffffff9, 0x6e, {0x5, 0xfffffffffffffffb, 0x1, 0x100000000004, 0x7, 0x81, 0xb, 0xfff, 0x8, 0x1000, 0x28001, 0x0, 0x0, 0x5, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r6, 0xc0606610, &(0x7f0000000040)=0x60) 5.420361726s ago: executing program 2 (id=6530): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820200020000000905", @ANYRES64], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x1, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1004}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x1, "03ff0000000000000000f51f000400"}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r5 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x501040, 0x81, 0xa}, 0x18) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000240)=@req3={0x7, 0x101, 0x1000, 0x1, 0x7ff, 0x3, 0x3}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x3, 0x5, 0xf, 0x5, 0x3ff, 0x7, 0x0, 0x80}, &(0x7f00000000c0)={0x38, 0x400000000d, 0xffff, 0x7, 0x3ff, 0x9, 0x9, 0x1}, 0x0, 0x0, 0x0) 4.787206954s ago: executing program 6 (id=6532): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xb26f5000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) creat(&(0x7f0000000140)='./file0\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141b41, 0x191) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x2000000) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x50) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000500, 0xee00, &(0x7f0000000000)) 4.583803703s ago: executing program 7 (id=6533): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x2}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x33) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000088a80000810000007a0900000400000000"], 0x0) syz_io_uring_setup(0x8f1, &(0x7f0000000140)={0x0, 0x114dc, 0x0, 0x0, 0x80100088}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$loop(0x0, 0xfffffffd, 0x14f600) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000240), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0xc000400) mknod$loop(0x0, 0xfff, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001440)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x0, 0x1a0, 0x1a0, 0x360, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [0xffffffff], 'ipvlan0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x560) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) 4.266829768s ago: executing program 8 (id=6535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30000000005e000740"], 0x1f4}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30000000005e000740"], 0x1f4}}, 0x0) 4.162371307s ago: executing program 8 (id=6536): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) syz_open_procfs$userns(r0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000085000000d000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.987038795s ago: executing program 8 (id=6537): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_getres(0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="d800000019008111e0020f060d8107040a60090000020000000055a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002002dc6080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7453801896034277ce06bbace8034cb393a5e83d42365f003724a237ee4b11602b2270000000014d6d9bc8742ee045d10511b53c74a81d530dfe1d9c322fe040000005025acca262f3d40fad75667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccb3", 0xd8}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x12a, 0xfffffffffffffffe}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB=' \r\t'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000017000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="0f30b858008ed8baf80c66b8a0aaf78166efbafc0c66edeacf00ec000f066766c74424000a0000006766c7442402de0000006766c744240600000000670f011424baf80c66b8a022b68566efbafc0ced0f01c50fc76c01650f14a7b12d", 0x5d}], 0x1, 0x4, &(0x7f00000001c0)=[@cr0={0x0, 0x20}, @vmwrite={0x8, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}], 0x2) mmap$KVM_VCPU(&(0x7f000002b000/0x2000)=nil, 0x0, 0x2, 0x8010, r8, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000001c80)={0x1, [{0x1, 0x0, 0x4, 0x0}, {0x7, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x38b8, 0x8, &(0x7f0000000940)="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"}, {0x2, 0x0, 0xe, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x4, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x2dd, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 3.456198096s ago: executing program 5 (id=6540): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x1ee6, 0x0, '\x00', {0x0, @bt={0x1, 0x0, 0x0, 0x2, 0x1000, 0xfffff37d, 0x100, 0x8000, 0x5, 0x1, 0x3d0e, 0xa1d9c6a, 0x0, 0x2, 0x0, 0x2c, {0x9, 0xff}, 0x60}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002540), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000002580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000025c0)={0x1c, r3, 0x6d5f37783c783095, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004000) fcntl$notify(r1, 0x402, 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010100}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x200}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004840}, 0x40000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 3.374268561s ago: executing program 7 (id=6541): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380002960000000904cc070002596105052406000105240206000d240f0190080000000007000806241a050011090401"], 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x6) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) recvmmsg(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x40000002, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.913168385s ago: executing program 2 (id=6542): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa08, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000000c0)={{@hyper, 0xffffffff}, @host, 0x0, 0x7, 0x1, 0x4, 0x0, 0x9}) (async) read$FUSE(r2, &(0x7f0000004f40)={0x2020}, 0x2020) (async) r4 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) (async) r5 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0xf, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x99f}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, &(0x7f0000004380)='GPL\x00', 0x6, 0x23, &(0x7f0000000040)=""/35, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2.896796547s ago: executing program 2 (id=6543): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x407, 0x2, 0x108, 0x0, 0x2, 0x207f, 0x10}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000300)) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x80, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x9, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x10002, 0x3, 0x3, 0x88, 0x2, 0xffffff80, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff734, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x1f3, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r4 = socket(0x10, 0x803, 0x0) write$uinput_user_dev(r2, &(0x7f0000001300)={'syz1\x00', {0x400, 0x36b5, 0x7d0, 0x8}, 0x40, [0x0, 0x7, 0x45d3, 0x7, 0x456, 0x2, 0xffffff34, 0x2, 0x80000001, 0x6, 0x7fffffff, 0x5, 0xf2290d18, 0x3ff, 0xe62, 0x2, 0x5, 0x3, 0x2, 0x2, 0x4, 0x1, 0x4, 0x1000, 0x100, 0x2, 0x6, 0x9, 0x9, 0x80, 0x4, 0x7fffffff, 0xc, 0x4, 0x2, 0x5, 0x49, 0x100, 0x9d, 0x4, 0x6, 0xc, 0x4, 0x40, 0x73, 0x5, 0x7ec, 0xffffffff, 0x1, 0x2, 0xb14d, 0xc8, 0x7fff, 0x8000, 0x53, 0xffffffff, 0x786b, 0xfe000000, 0x176, 0x401, 0x5, 0xb, 0x8], [0x4, 0x10000, 0x0, 0x7, 0xfffffffd, 0x3ff, 0x3, 0x2, 0x100, 0x8, 0x1, 0xa, 0x2, 0x401, 0x4, 0x7, 0x6, 0x4, 0x800, 0x0, 0x7ff, 0x8, 0x80, 0x9, 0x200, 0x1a, 0xd, 0x800, 0x92, 0x3, 0xffffffff, 0xfff, 0x7, 0x2, 0x800, 0x1, 0xeaa, 0xffffffff, 0xe, 0x40, 0x6, 0xffffffff, 0x40, 0x6, 0xaf, 0x3277, 0x1, 0x1, 0x5, 0x4, 0xf, 0xfffffeff, 0x80000000, 0x5e1d8d82, 0x7, 0x4, 0x3ff, 0x4, 0xfff, 0xa2, 0x7, 0x8, 0x6, 0x7], [0x4, 0x0, 0xfffffffe, 0x3e, 0x3, 0x2, 0x9, 0x4, 0x2, 0x400, 0x7fffffff, 0x8d1b, 0x9, 0x200, 0x4, 0x6, 0x7, 0x9, 0x3bc4, 0x0, 0x5c9, 0x2, 0x2, 0x0, 0x7, 0x7, 0x3dd52d93, 0x6, 0x43c4, 0x0, 0xa, 0xb77, 0x1, 0x0, 0x7, 0x5, 0xb, 0x0, 0x8, 0x5ed, 0x10, 0xe49, 0x7, 0x6, 0x400, 0xd6, 0x1, 0x41, 0x1000, 0x9, 0x800, 0x1, 0x3, 0xd, 0x2, 0x1, 0x80, 0x101, 0x400, 0x1, 0x200, 0x3, 0xc000, 0x1], [0x4, 0x4, 0x6, 0x8001, 0x1, 0x0, 0x6, 0x1, 0x9, 0xfffff001, 0xc1, 0x4, 0x7, 0x8, 0x10000, 0x8f80, 0x5, 0x6, 0x2, 0x1, 0x65d793c6, 0x800000, 0xffffffff, 0xdd, 0x0, 0x10, 0x4, 0xf930, 0x80, 0x72, 0x5c, 0x687, 0x7, 0x1000, 0xb43, 0x0, 0xc3b, 0x3596, 0x2, 0x2, 0x0, 0x80, 0x1, 0x2116, 0x1, 0x3e, 0x1, 0x800, 0x6, 0x0, 0xffff55a2, 0x928, 0x0, 0x80000001, 0x400, 0x5, 0x822, 0x2b2, 0x5, 0x5, 0x587, 0x2, 0xff, 0x5]}, 0x45c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) dup3(r6, r7, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x4, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x7, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x70) fcntl$notify(r0, 0x402, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 2.410882729s ago: executing program 6 (id=6544): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r4 = socket$inet6(0xa, 0x2, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r10 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) (async) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r10, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x58, r11, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x58}}, 0x4004000) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0x9, 0xb}, {0xfff7, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x83, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0x12, 0x8, 0x1, {0x5, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) sendmmsg$inet(r4, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="140000000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf92da325000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000290000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001000000000000001c000000000000000000000008000000", @ANYRES32=r9], 0x168}}], 0x1, 0x8000004) (async, rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x8c4) (async) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002500010324bd7006fdfaf5e567"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010069703667726500001800028014000700fe80000000000000000000000000001c08000300", @ANYRES32=r3, @ANYBLOB="6105aaf64a2007317632e2176eeb8214e593fb30a552acd1074c99ea6ad65df53755d92e05625b935a74465875561b25b677682810070095"], 0x50}, 0x1, 0x8}, 0x0) 2.286898848s ago: executing program 2 (id=6545): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000252fc000000000000000020000000000000060004400e1f00000500070088000000060005404e1f0000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a00)=ANY=[@ANYBLOB="300000001800010000000000000000000a800000ff03000600000000140001000000000000000000000000ce"], 0x30}}, 0x0) 2.267217237s ago: executing program 2 (id=6546): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1538, &(0x7f0000001b80)=ANY=[]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/70) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) r1 = inotify_init() socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}}, 0x0) sendfile(r5, r3, 0x0, 0x100000000) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c5) 2.266638157s ago: executing program 6 (id=6547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x7ff, 0xffff0000, 0x20800, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x3}, 0x50) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000100)) fcntl$setflags(r0, 0x2, 0x0) semop(0x0, &(0x7f0000000140)=[{0x1, 0xe2, 0x1c00}, {0x1, 0x7ff}, {0x2, 0xffff, 0x800}, {0x2, 0x40, 0x1800}], 0x4) lsm_list_modules(&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=0x18, 0x0) r2 = semget$private(0x0, 0x1, 0x4) semctl$GETPID(r2, 0x4, 0xb, &(0x7f0000000200)=""/2) r3 = syz_open_dev$audion(&(0x7f0000000240), 0x2, 0x89e763bb596e1b6a) sendto$inet(r3, &(0x7f0000000280)="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", 0xfe, 0x4001, &(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) fsopen(&(0x7f00000003c0)='openpromfs\x00', 0x0) semop(r2, &(0x7f0000000400)=[{0x0, 0x7f, 0x1000}, {0x2, 0x7, 0x800}, {0x0, 0x2, 0x400}, {0x1, 0x1, 0x800}, {0x2, 0xff, 0x1000}, {0x0, 0x9, 0x800}, {0x4, 0x5, 0x800}, {0x1, 0x0, 0x1800}], 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000440)={'veth1_to_team\x00', 0x800}) semctl$SEM_INFO(r2, 0x1, 0x13, &(0x7f0000000480)=""/176) r4 = semget$private(0x0, 0x1, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) fstat(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000700)={{0x2, r5, r6, r7, r8, 0x102, 0x2}, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0xa}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000780)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000800)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000880)=r9) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000008c0)=[0x1, 0x3, 0x2, 0x3, 0x73, 0x8, 0x7, 0x4]) r10 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r10, 0x0) connect$unix(r0, &(0x7f0000000900)=@file={0x1, './file1\x00'}, 0x6e) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000980), 0x10000, 0x0) getsockopt$EBT_SO_GET_INFO(r11, 0x0, 0x80, &(0x7f00000009c0)={'broute\x00', 0x0, 0x0, 0x0, [0x3d5b, 0x200, 0x9, 0x2b, 0x4, 0x1]}, &(0x7f0000000a40)=0x78) 2.197739612s ago: executing program 5 (id=6548): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xf0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'stack ', ',\\]+\x00'}, 0xb) add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0x18, 0xfffffffffffffffd) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x20008800) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000", @ANYBLOB="3d000e0080000000ffffffffffff080211000096b716"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff45"], 0x82) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x425c}], 0x1) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r9, 0x1, 0x15, 0x0, &(0x7f0000000240)) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x82, 0x0, 0x0, 0xff81, 0x0, 0x0, 0x0}) 2.136766726s ago: executing program 6 (id=6549): unshare(0x2c020400) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000440)=0x7ff, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="c5e5f084952b0107821800"/24], &(0x7f0000001400)='syzkaller\x00'}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc00090582", @ANYRESHEX], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_usb_connect$uac2(0x2, 0xe3, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x96, 0x100, 0x5, {0x8, 0xb, 0x2, 0x2, 0x1, 0xd29b629eeb91708e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7d0, 0x0, 0x3b, 0x80}, [@output_terminal={0xc, 0x24, 0x3, 0x4e, 0x302, 0x26, 0x3, 0xf7, 0x101, 0x8}, @multiply_unit={0x7, 0x24, 0xc, 0x4, 0xb3, 0xf, 0x6}, @extension_unit={0x7, 0x24, 0x9, 0x2, 0x81, 0x2}, @processing_unit={0xf, 0x24, 0x8, 0x5, 0x2, [0x0, 0x3, 0x2, 0x1, 0x2]}, @processing_unit={0x9, 0x24, 0x8, 0x6, 0x2, [0x1, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x1, 0x2, {0x8, 0x25, 0x1, 0x0, 0x30, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x0, 0xf8, 0x0, 0x4, 0x9, 0x129, 0xf}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x80, 0x3, 0x4, 0x9}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x81, 0x7, 0x7, "96f63e83"}, @as_header={0x10, 0x24, 0x1, 0x7, 0x0, 0x3, 0x3, 0x8, 0x78c, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x1, 0x53, {0x8, 0x25, 0x1, 0x1, 0x3c, 0x10, 0x7}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x0, 0x4, 0x7, 0x20, 0xa}, 0x10, &(0x7f00000000c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x46, 0xab, 0x4, 0xfff8, 0xe}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3c13}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44f}}]}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x67682, 0x0) unshare(0x100) r4 = dup(r3) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000000f1401000c000000fbdbdf2503758a972d0a8bfdd9848d22083eecf3336d1ea643a3441bd04a41"], 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008000) fallocate(r4, 0x80, 0x5, 0x967) getsockopt$MRT6(r4, 0x29, 0xce, &(0x7f00000004c0), &(0x7f0000000500)=0x4) 1.923912667s ago: executing program 5 (id=6550): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) (async) r0 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28c}, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x8aae, 0x4000, 0x0, 0x20000134, 0x0, r0}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async, rerun: 32) io_uring_enter(r0, 0x8184c, 0x0, 0x9, 0x0, 0x0) (rerun: 32) 1.893173209s ago: executing program 5 (id=6551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r1 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000540)={0x0, 0x3}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x40, 0x19, 0x2, "3da5"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_io_uring_setup(0x4aa, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) (async) close(r0) (async) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xd, 0xffffffff, 0x40000005, 0xb, "088aefdd2000"}) (async) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) recvmsg(r4, &(0x7f0000000140)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000240)=""/201, 0xc9}, {&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000400)=""/255, 0xff}, {&(0x7f0000000580)=""/101, 0x65}, {&(0x7f0000000600)=""/155, 0x9b}, {&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000a40)=""/183, 0xb7}, {&(0x7f0000000040)=""/15, 0xf}, {&(0x7f0000000b80)=""/93, 0x5d}], 0x9, &(0x7f0000000cc0)=""/88, 0x58}, 0x1) 1.049329388s ago: executing program 5 (id=6552): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000180)=0x66d, 0x4) r0 = socket(0xa, 0x3, 0x87) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="080002002a3c309ee065749552ab1c45551f82992ca221a8dd", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="33f5de", @ANYRESDEC=r0, @ANYRES32=0xee01, @ANYRES32=r2], 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x80000001}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r1, @ANYBLOB="01003bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000002c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r6 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000400)={0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_sctp(0x2, 0x1, 0x84) 693.798666ms ago: executing program 8 (id=6553): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f00000008c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0xfcff, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 517.022022ms ago: executing program 8 (id=6554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5c, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 365.337618ms ago: executing program 8 (id=6555): syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000080046000028000000000011"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000ff31ffffffffffdf00000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 283.58103ms ago: executing program 7 (id=6556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_wolinfo={0x5, 0x0, 0x2, "f9090800"}}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)="e4836d513bcab6b90efd3ebcdfc597b9a7e727a3ece8daadf4b04a69b21dfd745934e8870086d4dcd91c1c9a69f5d303d175b4bcc0da016fb4be47336b3557b59b09b0bce1bace8b3eb86e9f3e3b4244a7bd9bad12f2ae80c3f5a6a08634b6f70ef4d694f97312f4", 0x68}], 0x1, 0x0, 0x0, 0x54}, 0x4040884) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_aout(r3, 0x0, 0x6b1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x8ae6a2c0766de061, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 105.974379ms ago: executing program 7 (id=6557): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in=@broadcast, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x80, 0x1, r3, 0xee01}, {0xb, 0x3, 0x7, 0x3, 0x6, 0x8, 0x8, 0x5}, {0x4d, 0x7, 0x48, 0x88}, 0x2, 0x6e6bc0, 0x2, 0x1, 0x1, 0x2}, {{@in=@local, 0x4d3, 0x6c}, 0x2, @in6=@private1, 0x0, 0x0, 0x3, 0x17, 0x0, 0xb00, 0x596}}, 0xe8) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = io_uring_setup(0x2e01, &(0x7f0000000700)={0x0, 0xafd3, 0x1000, 0x2, 0x2d2}) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r5}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1) 61.112828ms ago: executing program 5 (id=6558): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x30, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x10000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048c0}, 0x2000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xef, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0xfe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) 0s ago: executing program 6 (id=6559): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7800, 0x40, 0x400, 0x2e, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x68, 0x0, 0x9, 0x29, 0x0, @empty, @loopback}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0xb}, {0x2, 0xb}}}, 0x24}}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x4000}, 0x18) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e3, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): ][T23987] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1374.368552][T23987] usb 3-1: config 0 has no interface number 0 [ 1374.377338][T23987] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1374.387091][T23987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.402553][T13914] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1374.413267][T13914] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1374.416555][T23987] usb 3-1: Product: syz [ 1374.423749][T13914] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1374.435592][T23987] usb 3-1: Manufacturer: syz [ 1374.437715][T13914] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1374.451930][T23987] usb 3-1: SerialNumber: syz [ 1374.458055][T13914] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1374.471798][T13914] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1374.476226][T23987] usb 3-1: config 0 descriptor?? [ 1374.482309][T13914] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1374.506890][T13914] usb 6-1: Product: syz [ 1374.511159][T13914] usb 6-1: Manufacturer: syz [ 1374.530990][T13914] cdc_wdm 6-1:1.0: skipping garbage [ 1374.541937][T13914] cdc_wdm 6-1:1.0: skipping garbage [ 1374.556604][T13914] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1374.728239][T23987] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1374.749190][T29957] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1374.767770][T29960] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1374.775830][T23987] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1374.783734][T13914] usb 6-1: USB disconnect, device number 53 [ 1374.854074][T23987] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1374.875493][T23987] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 1375.320795][T29974] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6083'. [ 1375.334217][T29974] bond0: entered promiscuous mode [ 1375.339255][T29974] bond_slave_0: entered promiscuous mode [ 1375.346543][T29974] bond_slave_1: entered promiscuous mode [ 1375.354089][T29974] gretap0: entered promiscuous mode [ 1375.360151][T29974] hsr1: entered promiscuous mode [ 1375.829383][T13914] usb 3-1: USB disconnect, device number 49 [ 1375.999976][T29995] kvm_intel: kvm [29993]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 1376.142206][T30002] syzkaller0: entered promiscuous mode [ 1376.147830][T30002] syzkaller0: entered allmulticast mode [ 1376.159065][T30002] tipc: Enabled bearer , priority 0 [ 1376.168361][T30001] tipc: Resetting bearer [ 1376.188270][T30001] tipc: Disabling bearer [ 1376.885514][T30012] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 1377.162981][T13914] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1377.292736][ T5904] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1377.324017][T13914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.334477][T13914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1377.347388][T13914] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1377.357064][T13914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.366146][T13914] usb 3-1: Product: syz [ 1377.370523][T13914] usb 3-1: Manufacturer: syz [ 1377.375753][T13914] usb 3-1: SerialNumber: syz [ 1377.422239][ T5904] usb 6-1: device descriptor read/64, error -71 [ 1377.588501][T13914] usb 3-1: 0:2 : does not exist [ 1377.601715][T13914] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1377.657926][T13914] usb 3-1: USB disconnect, device number 50 [ 1377.682396][ T5904] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1377.812157][ T5904] usb 6-1: device descriptor read/64, error -71 [ 1377.922626][ T5904] usb usb6-port1: attempt power cycle [ 1378.272133][ T5904] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1378.295051][ T5904] usb 6-1: device descriptor read/8, error -71 [ 1378.356472][T30026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6098'. [ 1378.542203][ T5904] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1378.562850][ T5904] usb 6-1: device descriptor read/8, error -71 [ 1378.672823][ T5904] usb usb6-port1: unable to enumerate USB device [ 1378.732097][T13911] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1378.833984][T30033] syzkaller0: entered promiscuous mode [ 1378.839490][T30033] syzkaller0: entered allmulticast mode [ 1378.850325][T30033] 0: reclassify loop, rule prio 0, protocol 800 [ 1378.882097][T13911] usb 3-1: Using ep0 maxpacket: 32 [ 1378.888833][T13911] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1378.900676][T13911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1378.913041][T13911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1378.924454][T13911] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1378.942118][T13911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.953656][T13911] usb 3-1: config 0 descriptor?? [ 1378.968528][T30031] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1378.998284][T13911] hub 3-1:0.0: USB hub found [ 1379.202256][T13911] hub 3-1:0.0: 2 ports detected [ 1379.338126][T30042] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6104'. [ 1379.461596][T30046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1380.452781][T13914] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1380.613286][T13914] usb 6-1: Using ep0 maxpacket: 16 [ 1380.620091][T13914] usb 6-1: config 2 has an invalid interface number: 142 but max is 0 [ 1380.628504][T13914] usb 6-1: config 2 has no interface number 0 [ 1380.634842][T13914] usb 6-1: config 2 interface 142 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 1380.646629][T13914] usb 6-1: config 2 interface 142 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1380.657834][T13914] usb 6-1: config 2 interface 142 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1380.667945][T13914] usb 6-1: config 2 interface 142 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1380.678066][ T5904] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1380.688562][T13914] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 1380.698508][T13914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.707140][T13914] usb 6-1: Product: syz [ 1380.711387][T13914] usb 6-1: Manufacturer: syz [ 1380.716316][T13914] usb 6-1: SerialNumber: syz [ 1380.747263][T13914] usb 6-1: NFC: intf ffff888059d3f000 id ffffffff8f1d1c00 [ 1380.862209][ T5904] usb 7-1: Using ep0 maxpacket: 16 [ 1380.869326][ T5904] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.879623][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.890638][ T5904] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1380.904487][ T5904] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1380.914261][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.926288][ T5904] usb 7-1: config 0 descriptor?? [ 1380.945632][T13914] usb 6-1: USB disconnect, device number 58 [ 1381.350493][ T5904] nintendo 0003:057E:2019.0071: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.6-1/input0 [ 1381.423828][ T5904] nintendo 0003:057E:2019.0071: Failed to get joycon info; ret=-38 [ 1381.433953][ T5904] nintendo 0003:057E:2019.0071: Failed to retrieve controller info; ret=-38 [ 1381.445135][ T5904] nintendo 0003:057E:2019.0071: Failed to initialize controller; ret=-38 [ 1381.472762][ T5904] nintendo 0003:057E:2019.0071: probe - fail = -38 [ 1381.480051][ T5904] nintendo 0003:057E:2019.0071: probe with driver nintendo failed with error -38 [ 1381.749243][ T1597] usb 7-1: USB disconnect, device number 42 [ 1381.809010][T13909] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 1382.348349][T30078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6114'. [ 1382.446961][T13909] usb 3-1: reset high-speed USB device number 51 using dummy_hcd [ 1382.456281][T13909] usb 3-1: device reset changed ep0 maxpacket size! [ 1382.464195][T13909] hub 3-1:0.0: set hub depth failed [ 1382.464316][T23987] usb 3-1: USB disconnect, device number 51 [ 1382.652120][T23553] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1382.652426][T13914] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1382.703148][T23987] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1382.802133][T13914] usb 7-1: device descriptor read/64, error -71 [ 1382.804527][T23553] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1382.818299][T23553] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1382.828116][T23553] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1382.843866][T23553] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1382.853077][T23987] usb 3-1: Using ep0 maxpacket: 16 [ 1382.858280][T23553] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1382.866594][T23553] usb 6-1: Product: syz [ 1382.871043][T23553] usb 6-1: Manufacturer: syz [ 1382.875773][T23553] usb 6-1: SerialNumber: syz [ 1382.881694][T23987] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 1382.898143][T23987] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 1382.908684][T23987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.916915][T23987] usb 3-1: Product: syz [ 1382.921109][T23987] usb 3-1: Manufacturer: syz [ 1382.926146][T23987] usb 3-1: SerialNumber: syz [ 1383.042232][T13914] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1383.109791][T23553] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1383.150561][T30074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.164953][ T5904] usb 6-1: USB disconnect, device number 59 [ 1383.179464][T30074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.191737][T13914] usb 7-1: device descriptor read/64, error -71 [ 1383.199548][ T5904] usblp0: removed [ 1383.267469][T23987] usb 3-1: USB disconnect, device number 52 [ 1383.288321][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1383.323865][T13914] usb usb7-port1: attempt power cycle [ 1383.662328][T13914] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1383.682663][T13914] usb 7-1: device descriptor read/8, error -71 [ 1383.922173][T13914] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1383.972344][T13914] usb 7-1: device descriptor read/8, error -71 [ 1384.082439][T13914] usb usb7-port1: unable to enumerate USB device [ 1384.242558][T13914] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1384.259728][T30108] fuse: Unknown parameter '/NrootmXde:Q_V߹ D' [ 1384.422096][T13914] usb 3-1: Using ep0 maxpacket: 16 [ 1384.430464][T13914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1384.444049][T13914] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1384.455102][T13914] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1384.467019][T13914] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1384.477854][T13914] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1384.488816][T13914] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1384.496165][T13914] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1384.506800][T13914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.529993][T13914] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1384.632218][T30122] sch_fq: defrate 16 ignored. [ 1384.646289][T30122] input: syz0 as /devices/virtual/input/input166 [ 1384.731496][T13914] scsi host1: usb-storage 3-1:1.0 [ 1384.939018][T13914] usb 3-1: USB disconnect, device number 53 [ 1385.765634][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1385.765654][ T29] audit: type=1326 audit(1772888219.947:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30143 comm="syz.6.6132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9af799c799 code=0x0 [ 1386.517601][T30152] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1386.622183][T23553] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1386.802496][T23553] usb 7-1: not running at top speed; connect to a high speed hub [ 1386.872811][T23553] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1023 [ 1386.885747][T23553] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 4 [ 1386.937019][T23553] usb 7-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1386.955702][T23553] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.977092][T23553] usb 7-1: Product: syz [ 1386.987378][T23553] usb 7-1: Manufacturer: syz [ 1386.998968][T23553] usb 7-1: SerialNumber: syz [ 1387.608887][T30162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6136'. [ 1387.955135][T27695] wlan1: Trigger new scan to find an IBSS to join [ 1388.152095][T13914] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1388.197952][ T5904] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1388.307373][T13914] usb 6-1: Using ep0 maxpacket: 16 [ 1388.318603][T13914] usb 6-1: config 187 has no interfaces? [ 1388.334791][T13914] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1388.354481][T13914] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1388.363761][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 1388.369772][T13914] usb 6-1: Manufacturer: syz [ 1388.376672][ T5904] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1388.387374][ T5904] usb 3-1: config 0 has no interface number 0 [ 1388.407207][ T5904] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1388.428330][ T5904] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1388.445998][ T5904] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1388.480563][ T5904] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1388.497963][ T5904] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1388.513859][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.528175][T30190] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1388.536208][ T5904] usb 3-1: config 0 descriptor?? [ 1388.551280][T30190] block device autoloading is deprecated and will be removed. [ 1388.569903][ T5904] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1389.024604][T30196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6143'. [ 1389.170638][T23553] usb 7-1: 1:1 : unsupported format bits 0x200c [ 1389.190043][T23553] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1389.216471][T23553] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1389.236325][T23553] usb 7-1: unit 1 not found! [ 1389.249169][T23553] usb 7-1: unit 130 not found! [ 1389.375197][T23553] usb 7-1: USB disconnect, device number 47 [ 1389.460344][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1389.814724][T23553] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1389.972145][T23553] usb 7-1: Using ep0 maxpacket: 16 [ 1389.979106][T23553] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.994324][T23553] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1390.011872][T23553] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1390.031241][T23553] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.055249][T23553] usb 7-1: config 0 descriptor?? [ 1390.489660][T23553] microsoft 0003:045E:07DA.0072: global environment stack underflow [ 1390.502065][T23553] microsoft 0003:045E:07DA.0072: item 0 2 1 11 parsing failed [ 1390.514427][T23553] microsoft 0003:045E:07DA.0072: parse failed [ 1390.521022][T23553] microsoft 0003:045E:07DA.0072: probe with driver microsoft failed with error -22 [ 1390.822517][ T5904] usb 6-1: USB disconnect, device number 60 [ 1391.166136][T23553] usb 3-1: USB disconnect, device number 54 [ 1391.198579][T23553] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1391.402624][ T5904] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1391.482539][T13911] usb 7-1: USB disconnect, device number 48 [ 1391.527458][T30224] Cannot find set identified by id 65534 to match [ 1391.592314][ T5904] usb 6-1: device descriptor read/64, error -71 [ 1391.611926][T30227] usb usb8: usbfs: process 30227 (syz.2.6152) did not claim interface 0 before use [ 1391.853211][ T5904] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1391.992093][ T5904] usb 6-1: device descriptor read/64, error -71 [ 1391.999308][ T29] audit: type=1326 audit(1772888226.197:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30238 comm="syz.6.6155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9af799c799 code=0x0 [ 1392.102374][ T5904] usb usb6-port1: attempt power cycle [ 1392.462349][ T5904] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1392.492753][ T5904] usb 6-1: device descriptor read/8, error -71 [ 1392.650045][T30257] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6158'. [ 1392.732239][ T5904] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1392.752844][ T5904] usb 6-1: device descriptor read/8, error -71 [ 1392.862537][ T5904] usb usb6-port1: unable to enumerate USB device [ 1393.002864][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 1393.262159][ T9] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1393.412199][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1393.418930][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.430563][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.440510][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1393.449652][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.459936][ T9] usb 7-1: config 0 descriptor?? [ 1393.469427][ T9] hub 7-1:0.0: USB hub found [ 1393.725944][ T9] hub 7-1:0.0: 1 port detected [ 1393.914256][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.932693][T30267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.941949][T30267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.357755][ T9] hub 7-1:0.0: activate --> -90 [ 1394.412119][T23553] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1394.562885][T23553] usb 6-1: Using ep0 maxpacket: 8 [ 1394.569416][T23553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1394.581130][T23553] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1394.590898][T23553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.603882][T23553] usb 6-1: config 0 descriptor?? [ 1394.811650][T23553] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1395.121830][T23553] usb 6-1: USB disconnect, device number 65 [ 1395.372144][ T5904] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1395.480330][T30293] veth0_to_hsr: entered promiscuous mode [ 1395.486590][T30293] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 1395.523885][ T5904] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1395.535261][ T5904] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58398, setting to 1024 [ 1395.547193][ T5904] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1395.557608][ T5904] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1395.567183][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.580373][T30285] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1395.597440][ T5904] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1395.637807][ T9] usb 7-1-port1: cannot disable (err = -32) [ 1395.799962][ T9] usb 3-1: USB disconnect, device number 55 [ 1396.272806][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1396.292311][ T5904] usb 7-1: USB disconnect, device number 49 [ 1396.433525][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1396.446228][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.468401][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1396.488220][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1396.516092][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1396.539848][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1396.549293][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.568536][T30316] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6176'. [ 1396.573416][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 1396.615830][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1396.647224][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1396.661416][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1396.670965][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1396.690673][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 1396.792814][ T9] usb 3-1: USB disconnect, device number 56 [ 1396.800322][T30322] cdc_wdm 3-1:1.0: Error autopm - -16 [ 1397.137877][ T29] audit: type=1326 audit(1772888231.337:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30327 comm="syz.5.6178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7efd6b59c799 code=0x0 [ 1397.222237][ T9] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1397.376345][ T9] usb 3-1: config 3 interface 0 has no altsetting 0 [ 1397.386934][ T9] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=d0.db [ 1397.397628][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.406067][ T9] usb 3-1: Product: syz [ 1397.410372][ T9] usb 3-1: Manufacturer: syz [ 1397.415239][ T9] usb 3-1: SerialNumber: syz [ 1397.647686][ T9] usb 3-1: USB disconnect, device number 57 [ 1399.552209][T15307] Bluetooth: hci3: command 0x0406 tx timeout [ 1399.554751][T30342] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1400.443225][T30342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1400.449739][T30342] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1400.456407][T30342] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1400.469347][T30342] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1400.491707][T30348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6183'. [ 1400.501532][T30366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6183'. [ 1400.712659][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1400.867402][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.878457][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1400.887775][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.903283][ T9] usb 3-1: config 0 descriptor?? [ 1401.075490][T30381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.101298][T30381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.120678][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1401.134164][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1401.147986][ T9] usb 3-1: USB disconnect, device number 58 [ 1401.179998][ T29] audit: type=1326 audit(1772888235.377:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30383 comm="syz.0.6194" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff36619c799 code=0x0 [ 1401.332169][T23553] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1401.483705][T23553] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1401.493542][T23553] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 1401.505426][T23553] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1401.515056][T23553] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.524891][T23553] usb 7-1: config 0 descriptor?? [ 1401.642198][ T9] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1401.649935][T15307] Bluetooth: hci2: command 0x0c1a tx timeout [ 1401.804489][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1401.815639][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1401.825514][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.835807][ T9] usb 3-1: config 0 descriptor?? [ 1401.843390][ T9] hub 3-1:0.0: USB hub found [ 1402.049669][ T9] hub 3-1:0.0: 1 port detected [ 1402.512552][T15307] Bluetooth: hci5: command 0x0c1a tx timeout [ 1402.592420][T23553] ath6kl: Failed to submit usb control message: -110 [ 1402.599237][T23553] ath6kl: unable to send the bmi data to the device: -110 [ 1402.606496][T23553] ath6kl: Unable to send get target info: -110 [ 1402.613799][T23553] ath6kl: Failed to init ath6kl core: -110 [ 1402.621079][T23553] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1402.656074][ T9] usb 3-1: USB disconnect, device number 59 [ 1403.395764][T30401] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1403.414513][T30401] bond2 (unregistering): Released all slaves [ 1404.028198][ T5904] usb 7-1: USB disconnect, device number 50 [ 1404.592923][T15307] Bluetooth: hci5: command 0x0c1a tx timeout [ 1405.217279][T30432] input: syz0 as /devices/virtual/input/input167 [ 1405.352045][T30440] pim6reg: entered allmulticast mode [ 1405.360387][T30440] pim6reg: left allmulticast mode [ 1405.508540][T30444] kvm: pic: non byte write [ 1405.712200][T13911] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1405.864603][T13911] usb 7-1: config 0 has no interfaces? [ 1405.876740][T13911] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1405.895500][T13911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.904426][T13911] usb 7-1: Product: syz [ 1405.908851][T13911] usb 7-1: Manufacturer: syz [ 1405.914573][T13911] usb 7-1: SerialNumber: syz [ 1405.926286][T13911] usb 7-1: config 0 descriptor?? [ 1406.194460][T30440] x_tables: duplicate underflow at hook 1 [ 1406.201872][T30440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.210752][T30440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.224677][T30440] kvm: kvm [30438]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1406.233645][T30440] kvm: kvm [30438]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1406.263449][T23987] usb 7-1: USB disconnect, device number 51 [ 1406.463442][T13911] IPVS: starting estimator thread 0... [ 1406.471252][T30459] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20000 [ 1406.552142][T30462] IPVS: using max 38 ests per chain, 91200 per kthread [ 1406.672756][T15307] Bluetooth: hci5: command 0x0c1a tx timeout [ 1407.182181][T23553] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1407.248840][T30471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6219'. [ 1407.259010][T23987] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1407.343820][T23553] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1407.353962][T23553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.366074][T23553] usb 6-1: config 0 descriptor?? [ 1407.380386][T23553] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1407.414106][T23987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.435385][T23987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.445800][T23987] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1407.456533][T23987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.468078][T23987] usb 7-1: config 0 descriptor?? [ 1407.569764][ T29] audit: type=1804 audit(1772888241.767:4566): pid=30483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6223" name="/newroot/109/file1" dev="tmpfs" ino=579 res=1 errno=0 [ 1407.612441][T23553] usb 6-1: USB disconnect, device number 66 [ 1408.199407][ T29] audit: type=1326 audit(1772888242.397:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.5.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6b59c799 code=0x7ffc0000 [ 1408.264548][ T29] audit: type=1326 audit(1772888242.397:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.5.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6b59c799 code=0x7ffc0000 [ 1408.331564][ T29] audit: type=1326 audit(1772888242.397:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.5.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efd6b59c799 code=0x7ffc0000 [ 1408.383499][T30497] tipc: Enabled bearer , priority 0 [ 1408.407842][ T29] audit: type=1326 audit(1772888242.397:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.5.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6b59c799 code=0x7ffc0000 [ 1408.450202][T30497] syzkaller0: entered promiscuous mode [ 1408.463004][ T29] audit: type=1326 audit(1772888242.397:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.5.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6b59c799 code=0x7ffc0000 [ 1408.510569][T30497] syzkaller0: entered allmulticast mode [ 1408.520941][ T29] audit: type=1326 audit(1772888242.437:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.5.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7efd6b558bec code=0x7ffc0000 [ 1408.606820][ T29] audit: type=1326 audit(1772888242.437:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.5.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7efd6b558c4e code=0x7ffc0000 [ 1408.629755][ T29] audit: type=1326 audit(1772888242.437:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.5.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7efd6b59c799 code=0x7ffc0000 [ 1408.670311][ T29] audit: type=1326 audit(1772888242.437:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.5.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6b59c799 code=0x7ffc0000 [ 1408.735396][T30497] tipc: Resetting bearer [ 1408.766665][T30496] tipc: Resetting bearer [ 1408.801942][T30496] tipc: Disabling bearer [ 1409.182180][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1409.252069][ T1597] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1409.362105][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1409.377545][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1409.400753][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.419762][ T1597] usb 3-1: config index 0 descriptor too short (expected 157, got 72) [ 1409.429908][ T9] usb 6-1: Product: syz [ 1409.439381][ T9] usb 6-1: Manufacturer: syz [ 1409.444255][ T9] usb 6-1: SerialNumber: syz [ 1409.456737][ T9] usb 6-1: config 0 descriptor?? [ 1409.462934][ T1597] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1409.472506][ T1597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.480600][ T1597] usb 3-1: Product: syz [ 1409.494493][ T1597] usb 3-1: Manufacturer: syz [ 1409.499615][ T1597] usb 3-1: SerialNumber: syz [ 1409.519869][ T1597] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1409.538692][T23553] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1409.687694][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1409.969728][T30503] fuse: Bad value for 'fd' [ 1410.108822][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1410.129995][ T9] usb 6-1: USB disconnect, device number 67 [ 1410.199267][T23987] usbhid 7-1:0.0: can't add hid device: -71 [ 1410.205327][T23987] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1410.220412][T23987] usb 7-1: USB disconnect, device number 52 [ 1410.318508][T30528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6234'. [ 1410.339261][T30528] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1410.347823][T30528] team0: Device ipvlan0 is already an upper device of the team interface [ 1410.431345][T30534] netlink: 'syz.0.6236': attribute type 3 has an invalid length. [ 1410.485959][T30536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6237'. [ 1410.762324][T23987] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1410.845573][T23553] usb 3-1: Service connection timeout for: 256 [ 1410.855552][T23553] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1410.885540][T23553] ath9k_htc: Failed to initialize the device [ 1410.898075][T23553] usb 3-1: ath9k_htc: USB layer deinitialized [ 1410.948699][T23987] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.960429][T23987] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1410.972218][T23987] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1410.998709][T23987] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1411.008217][T23987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.016767][T23987] usb 6-1: Product: syz [ 1411.021155][T23987] usb 6-1: Manufacturer: syz [ 1411.026268][T23987] usb 6-1: SerialNumber: syz [ 1411.497887][T23987] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1411.507333][T23987] uvcvideo 6-1:220.0: No valid video chain found. [ 1411.519604][T23987] usb 6-1: USB disconnect, device number 68 [ 1411.756702][T23553] usb 3-1: USB disconnect, device number 60 [ 1411.982171][T23987] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 1412.132699][T23553] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1412.164710][T30557] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6242'. [ 1412.176199][T23987] usb 7-1: not running at top speed; connect to a high speed hub [ 1412.213378][T23987] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1023 [ 1412.234525][T23987] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 4 [ 1412.318716][T23987] usb 7-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1412.328757][T23987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.336976][T23987] usb 7-1: Product: syz [ 1412.341323][T23987] usb 7-1: Manufacturer: syz [ 1412.346299][T23987] usb 7-1: SerialNumber: syz [ 1412.353710][T23553] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1412.363985][T23553] usb 3-1: not running at top speed; connect to a high speed hub [ 1412.374743][T23553] usb 3-1: config 45 has an invalid interface number: 197 but max is 0 [ 1412.383534][T23553] usb 3-1: config 45 has no interface number 0 [ 1412.390383][T23553] usb 3-1: config 45 interface 197 has no altsetting 0 [ 1412.400236][T23553] usb 3-1: New USB device found, idVendor=07aa, idProduct=9601, bcdDevice=ed.b8 [ 1412.409575][T23553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.419126][T23553] usb 3-1: Product: syz [ 1412.423461][ T9] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1412.431284][T23553] usb 3-1: Manufacturer: syz [ 1412.436851][T23553] usb 3-1: SerialNumber: syz [ 1412.582238][ T9] usb 6-1: device descriptor read/64, error -71 [ 1412.650407][T23553] hub 3-1:45.197: bad descriptor, ignoring hub [ 1412.657260][T23553] hub 3-1:45.197: probe with driver hub failed with error -5 [ 1412.665825][T23553] dm9601 3-1:45.197: probe with driver dm9601 failed with error -22 [ 1412.695673][T23553] usb 3-1: USB disconnect, device number 61 [ 1412.832791][ T9] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1412.962329][ T9] usb 6-1: device descriptor read/64, error -71 [ 1413.073462][ T9] usb usb6-port1: attempt power cycle [ 1413.225833][T30561] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1413.412250][ T9] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1413.432692][ T9] usb 6-1: device descriptor read/8, error -71 [ 1413.702463][ T9] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1413.743698][ T9] usb 6-1: device descriptor read/8, error -71 [ 1413.862425][ T9] usb usb6-port1: unable to enumerate USB device [ 1413.875747][T30586] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1413.887410][T30586] team0 (unregistering): Port device team_slave_0 removed [ 1413.896262][T30586] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1413.905373][T30586] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1413.916885][T30586] team0 (unregistering): Port device team_slave_1 removed [ 1414.501175][T30600] sg_write: process 574 (syz.2.6254) changed security contexts after opening file descriptor, this is not allowed. [ 1414.645564][T23987] usb 7-1: 1:1 : unsupported format bits 0x200c [ 1414.660890][T23987] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1414.671302][T23987] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1414.684261][T23987] usb 7-1: unit 1 not found! [ 1414.691098][T23987] usb 7-1: unit 130 not found! [ 1414.759078][T30609] binder: BINDER_SET_CONTEXT_MGR already set [ 1414.765685][T30609] binder: 30603:30609 ioctl 4018620d 200000000180 returned -16 [ 1414.786149][T30607] tipc: Enabled bearer , priority 0 [ 1414.803289][T30607] syzkaller0: entered promiscuous mode [ 1414.808787][T30607] syzkaller0: entered allmulticast mode [ 1414.937003][T30608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.970984][T30608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.013148][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1415.057642][T23987] usb 7-1: USB disconnect, device number 53 [ 1415.134705][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1415.183759][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1415.198018][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1415.224972][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1415.254130][ T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1415.274225][ T9] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1415.295562][ T9] usb 3-1: Product: syz [ 1415.299774][ T9] usb 3-1: Manufacturer: syz [ 1415.305049][ T9] usb 3-1: SerialNumber: syz [ 1415.327034][ T9] usb 3-1: config 0 descriptor?? [ 1415.371309][ T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1415.419640][T30611] tipc: Resetting bearer [ 1415.601233][T30611] tipc: Disabling bearer [ 1416.157622][T30623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6260'. [ 1416.221563][T30623] vlan0: entered promiscuous mode [ 1416.248349][T30623] veth1: entered promiscuous mode [ 1416.451179][ T12] usb 3-1: Failed to submit usb control message: -110 [ 1416.471860][ T12] usb 3-1: unable to send the bmi data to the device: -110 [ 1416.491545][ T12] usb 3-1: unable to get target info from device [ 1416.506336][ T12] usb 3-1: could not get target info (-110) [ 1416.521489][ T12] usb 3-1: could not probe fw (-110) [ 1417.718090][T23553] usb 3-1: USB disconnect, device number 62 [ 1418.033509][T13911] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 1418.202357][T13911] usb 6-1: Invalid ep0 maxpacket: 16 [ 1418.332401][T13911] usb 6-1: new low-speed USB device number 74 using dummy_hcd [ 1418.357861][T30678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1418.482053][T13911] usb 6-1: Invalid ep0 maxpacket: 16 [ 1418.487552][T13911] usb usb6-port1: attempt power cycle [ 1418.842217][T13911] usb 6-1: new low-speed USB device number 75 using dummy_hcd [ 1418.862700][T13911] usb 6-1: Invalid ep0 maxpacket: 16 [ 1418.968046][T30686] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1418.979047][T30686] binder_alloc: 30685: binder_alloc_buf, no vma [ 1418.988011][T30686] cifs: Unknown parameter 'f,' [ 1418.997455][T30686] binder: 30685:30686 ioctl f517 0 returned -22 [ 1419.004416][T13911] usb 6-1: new low-speed USB device number 76 using dummy_hcd [ 1419.042852][T13911] usb 6-1: Invalid ep0 maxpacket: 16 [ 1419.048711][T13911] usb usb6-port1: unable to enumerate USB device [ 1419.263513][T30697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6282'. [ 1419.772079][T30716] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1419.778636][T30716] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1419.802338][T30716] vhci_hcd vhci_hcd.0: Device attached [ 1419.843689][T30717] vhci_hcd: connection closed [ 1419.844090][ T12] vhci_hcd vhci_hcd.6: stop threads [ 1419.845009][T13911] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1419.848830][ T12] vhci_hcd vhci_hcd.6: release socket [ 1419.869401][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 1420.002428][T13911] usb 3-1: Using ep0 maxpacket: 8 [ 1420.009237][T13911] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1420.017715][T13911] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1420.027626][T13911] usb 3-1: config 0 has no interface number 0 [ 1420.033885][T13911] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1420.046591][T13911] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1420.066274][T13911] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1420.078137][T13911] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1420.088473][T13911] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1420.096794][T13911] usb 3-1: Product: syz [ 1420.101185][T13911] usb 3-1: Manufacturer: syz [ 1420.111653][T13911] usb 3-1: config 0 descriptor?? [ 1420.142188][T23553] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1420.292065][T23553] usb 7-1: Using ep0 maxpacket: 32 [ 1420.299038][T23553] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1420.311401][T23553] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1420.318217][T23553] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1420.327392][T23553] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.337323][T13911] usb 3-1: USB disconnect, device number 63 [ 1420.348500][T23553] usb 7-1: config 0 descriptor?? [ 1420.605011][T23553] usbhid 7-1:0.0: can't add hid device: -71 [ 1420.611016][T23553] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1420.621849][T23553] usb 7-1: USB disconnect, device number 54 [ 1420.697299][T30733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6291'. [ 1420.771482][T30734] vlan3: entered allmulticast mode [ 1420.777074][T23987] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1420.785426][T30734] bridge1: entered allmulticast mode [ 1420.932073][T23987] usb 3-1: Using ep0 maxpacket: 8 [ 1420.947281][T23987] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1420.962090][T23987] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1420.971458][T23987] usb 3-1: config 0 has no interface number 0 [ 1420.981007][T23987] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1420.990456][T30748] binder: 30747:30748 ioctl c0306201 200000000100 returned -22 [ 1420.994485][T23987] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1421.011563][T23987] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1421.025858][T23987] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1421.035086][T23987] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1421.043297][T23987] usb 3-1: Manufacturer: syz [ 1421.049871][T23987] usb 3-1: config 0 descriptor?? [ 1421.255788][T30751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6296'. [ 1421.322070][ T5904] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1421.472033][ T5904] usb 7-1: Using ep0 maxpacket: 32 [ 1421.478859][ T5904] usb 7-1: config 2 has an invalid interface number: 13 but max is 0 [ 1421.487227][ T5904] usb 7-1: config 2 has no interface number 0 [ 1421.493576][ T5904] usb 7-1: config 2 interface 13 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1421.507431][ T5904] usb 7-1: config 2 interface 13 has no altsetting 0 [ 1421.517704][ T5904] usb 7-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=52.92 [ 1421.527182][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.535248][ T5904] usb 7-1: Product: syz [ 1421.539412][ T5904] usb 7-1: Manufacturer: syz [ 1421.544152][ T5904] usb 7-1: SerialNumber: syz [ 1421.662694][T23987] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input170 [ 1421.676614][T23987] input: failed to attach handler kbd to device input170, error: -5 [ 1421.767042][ T5904] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1421.835580][ T5904] usb 7-1: USB disconnect, device number 55 [ 1421.845032][T30759] syzkaller1: entered promiscuous mode [ 1421.869811][T30759] syzkaller1: entered allmulticast mode [ 1421.912443][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.13/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1421.988433][T13914] usb 3-1: USB disconnect, device number 64 [ 1422.834126][T30792] bridge0: port 3(hsr0) entered blocking state [ 1422.840705][T30792] bridge0: port 3(hsr0) entered disabled state [ 1422.847526][T30792] hsr0: entered allmulticast mode [ 1422.853859][T30792] hsr_slave_0: entered allmulticast mode [ 1422.859599][T30792] hsr_slave_1: entered allmulticast mode [ 1422.867769][T30792] hsr0: entered promiscuous mode [ 1422.892923][T23987] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1423.054088][T23987] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1423.079437][T23987] usb 6-1: config 0 has no interface number 0 [ 1423.099414][T23987] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1423.146433][T23987] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1423.180893][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.188843][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.199269][T23987] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1423.224138][T23987] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1423.254836][T23987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.297900][T23987] usb 6-1: config 0 descriptor?? [ 1423.329876][T23987] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 1423.525106][T23987] usb 6-1: USB disconnect, device number 77 [ 1423.582263][T13914] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 1423.773089][T13914] usb 3-1: Invalid ep0 maxpacket: 32 [ 1423.912175][T13914] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 1424.072061][T13914] usb 3-1: Invalid ep0 maxpacket: 32 [ 1424.086657][T13914] usb usb3-port1: attempt power cycle [ 1424.442789][T13914] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 1424.514686][T13914] usb 3-1: Invalid ep0 maxpacket: 32 [ 1424.662191][T13914] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 1424.721385][T13914] usb 3-1: Invalid ep0 maxpacket: 32 [ 1424.748894][T13914] usb usb3-port1: unable to enumerate USB device [ 1425.135739][T30822] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6314'. [ 1425.197716][T30824] syzkaller1: entered promiscuous mode [ 1425.207407][T30824] syzkaller1: entered allmulticast mode [ 1425.762124][T23987] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1425.912054][T23987] usb 7-1: Using ep0 maxpacket: 8 [ 1425.918939][T23987] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.929685][T23987] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1425.941447][T23987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1425.955323][T23987] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1425.964723][T23987] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1425.972897][T23987] usb 7-1: Product: syz [ 1425.977097][T23987] usb 7-1: Manufacturer: syz [ 1425.981721][T23987] usb 7-1: SerialNumber: syz [ 1425.989094][T23987] usb 7-1: config 0 descriptor?? [ 1426.044123][T23987] rc_core: IR keymap rc-imon-rsc not found [ 1426.049986][T23987] Registered IR keymap rc-empty [ 1426.056111][T23987] rc rc0: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1426.067015][T23987] input: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input171 [ 1426.201354][T13914] usb 7-1: USB disconnect, device number 56 [ 1426.355281][T23127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1426.425949][T30846] input input172: cannot allocate more than FF_MAX_EFFECTS effects [ 1426.562100][T23987] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1426.712200][T13914] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1426.714282][T23987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.730861][T23987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.743776][T23987] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1426.753753][T23987] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1426.761907][T23987] usb 6-1: Manufacturer: syz [ 1426.768559][T23987] usb 6-1: config 0 descriptor?? [ 1426.864103][T13914] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.875319][T13914] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1426.884552][T13914] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1426.893861][T13914] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1426.903122][T13914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.911126][T13914] usb 3-1: Product: syz [ 1426.916048][T13914] usb 3-1: Manufacturer: syz [ 1426.920653][T13914] usb 3-1: SerialNumber: syz [ 1427.257772][T13914] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1427.265299][T13914] uvcvideo 3-1:220.0: No valid video chain found. [ 1427.274193][T13914] usb 3-1: USB disconnect, device number 69 [ 1428.192149][T13914] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1428.362887][T13914] usb 3-1: Using ep0 maxpacket: 32 [ 1428.415361][T13914] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1428.429617][T13914] usb 3-1: config 0 has no interface number 0 [ 1428.436116][T13914] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1428.475029][T13914] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1428.485439][T13914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.493761][T13914] usb 3-1: Product: syz [ 1428.498327][T13914] usb 3-1: Manufacturer: syz [ 1428.504409][T13914] usb 3-1: SerialNumber: syz [ 1428.514013][T13914] usb 3-1: config 0 descriptor?? [ 1428.599186][T30866] tipc: Failed to remove unknown binding: 66,1,1/0:3838413988/3838413990 [ 1428.618575][T30866] tipc: Failed to remove unknown binding: 66,1,1/0:3838413988/3838413990 [ 1428.770584][T30869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.791330][T30869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.818365][T30869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.982540][T13907] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1429.036640][T30869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.177291][T13907] usb 7-1: Using ep0 maxpacket: 16 [ 1429.314225][T13907] usb 7-1: config 173 has too many interfaces: 43, using maximum allowed: 32 [ 1429.317631][T30860] team0: Device gtp0 is of different type [ 1429.406238][T23987] uclogic 0003:256C:006D.0073: failed retrieving Huion firmware version: -71 [ 1429.438786][T13907] usb 7-1: config 173 has 1 interface, different from the descriptor's value: 43 [ 1429.509692][T23987] uclogic 0003:256C:006D.0073: failed probing parameters: -71 [ 1429.550580][T13907] usb 7-1: config 173 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.632862][T23987] uclogic 0003:256C:006D.0073: probe with driver uclogic failed with error -71 [ 1429.688700][T13907] usb 7-1: config 173 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.723830][T23987] usb 6-1: USB disconnect, device number 78 [ 1429.734700][T13907] usb 7-1: config 173 interface 0 has no altsetting 0 [ 1429.742173][T13907] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1429.784657][T13907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.180769][T13907] usbhid 7-1:173.0: can't add hid device: -71 [ 1430.188371][T13907] usbhid 7-1:173.0: probe with driver usbhid failed with error -71 [ 1430.202877][T13907] usb 7-1: USB disconnect, device number 57 [ 1430.602131][T13911] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1430.775341][T13911] usb 6-1: config 0 has an invalid interface number: 22 but max is 0 [ 1430.783622][T13911] usb 6-1: config 0 has no interface number 0 [ 1430.789788][T13911] usb 6-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.801333][T13911] usb 6-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.811542][T13911] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1430.820933][T13911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.832422][T13911] usb 6-1: config 0 descriptor?? [ 1431.085816][T13914] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1431.096723][T13914] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1431.108227][T13914] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1431.125180][T13914] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1431.150795][T13914] usb 3-1: USB disconnect, device number 70 [ 1431.248018][T13911] elo 0003:04E7:0030.0074: item fetching failed at offset 6/7 [ 1431.256913][T13911] elo 0003:04E7:0030.0074: parse failed [ 1431.262614][T13911] elo 0003:04E7:0030.0074: probe with driver elo failed with error -22 [ 1431.416793][T30891] sctp: [Deprecated]: syz.2.6335 (pid 30891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1431.416793][T30891] Use struct sctp_sack_info instead [ 1431.449908][T13907] usb 6-1: USB disconnect, device number 79 [ 1432.291040][T30905] dummy0: mtu less than device minimum [ 1432.299372][T30905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6341'. [ 1432.374987][T23987] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1432.514498][T30917] x_tables: unsorted underflow at hook 3 [ 1432.570353][T23987] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1432.586001][T23987] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.610600][T23987] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1432.639754][T23987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.652500][T23987] usb 6-1: Product: syz [ 1432.656699][T23987] usb 6-1: Manufacturer: syz [ 1432.675263][T23987] usb 6-1: SerialNumber: syz [ 1432.814364][T30931] netlink: 'syz.2.6347': attribute type 2 has an invalid length. [ 1432.857632][T30931] : entered promiscuous mode [ 1432.952970][T30933] GUP no longer grows the stack in syz.2.6347 (30933): 200000005000-200000008000 (200000004000) [ 1433.021436][T30933] CPU: 1 UID: 0 PID: 30933 Comm: syz.2.6347 Tainted: G L syzkaller #0 PREEMPT(full) [ 1433.021471][T30933] Tainted: [L]=SOFTLOCKUP [ 1433.021479][T30933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1433.021492][T30933] Call Trace: [ 1433.021501][T30933] [ 1433.021510][T30933] dump_stack_lvl+0xe8/0x150 [ 1433.021544][T30933] fixup_user_fault+0x637/0x6f0 [ 1433.021582][T30933] fault_in_user_writeable+0x71/0xd0 [ 1433.021615][T30933] futex_lock_pi+0x800/0xb00 [ 1433.021686][T30933] ? __pfx_futex_lock_pi+0x10/0x10 [ 1433.021741][T30933] ? __pfx_futex_wake_mark+0x10/0x10 [ 1433.021785][T30933] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1433.021829][T30933] do_futex+0x292/0x420 [ 1433.021860][T30933] ? __pfx_do_futex+0x10/0x10 [ 1433.021886][T30933] ? __vm_munmap+0x2e6/0x3d0 [ 1433.021920][T30933] __se_sys_futex+0x3a8/0x450 [ 1433.021955][T30933] ? __pfx___se_sys_futex+0x10/0x10 [ 1433.021977][T30933] ? rcu_is_watching+0x15/0xb0 [ 1433.022029][T30933] ? __x64_sys_futex+0x21/0xf0 [ 1433.022057][T30933] do_syscall_64+0x14d/0xf80 [ 1433.022077][T30933] ? trace_irq_disable+0x3b/0x150 [ 1433.022104][T30933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.022124][T30933] ? clear_bhb_loop+0x40/0x90 [ 1433.022146][T30933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.022166][T30933] RIP: 0033:0x7ff8c079c799 [ 1433.022183][T30933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.022200][T30933] RSP: 002b:00007ff8be1d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1433.022221][T30933] RAX: ffffffffffffffda RBX: 00007ff8c0a16360 RCX: 00007ff8c079c799 [ 1433.022245][T30933] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 1433.022258][T30933] RBP: 00007ff8c0832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1433.022270][T30933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1433.022282][T30933] R13: 00007ff8c0a163f8 R14: 00007ff8c0a16360 R15: 00007ff8c0b3fa48 [ 1433.022313][T30933] [ 1433.623651][T30944] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1433.818042][T23987] usb 6-1: USB disconnect, device number 80 [ 1434.332093][ T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1434.482102][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1434.573028][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.592213][T23987] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1434.719335][ T9] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1434.738930][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.751280][ T9] usb 7-1: Product: syz [ 1434.755824][ T9] usb 7-1: Manufacturer: syz [ 1434.760647][ T9] usb 7-1: SerialNumber: syz [ 1434.770578][ T9] usb 7-1: config 0 descriptor?? [ 1434.784859][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1434.791236][ T9] usb 7-1: selecting invalid altsetting 1 [ 1434.800915][T23987] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1434.812861][T23987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.826439][T23987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1434.837731][T23987] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1434.858488][T23987] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1434.872064][T23987] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1434.882391][T23987] usb 6-1: Manufacturer: syz [ 1434.898831][T23987] usb 6-1: config 0 descriptor?? [ 1435.020237][ T9] gspca_stk014: reg_r err -71 [ 1435.025143][ T9] stk014 7-1:0.0: probe with driver stk014 failed with error -71 [ 1435.042380][ T9] usb 7-1: USB disconnect, device number 58 [ 1435.243324][T30970] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6356'. [ 1435.323906][T30970] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6356'. [ 1435.349720][T23987] appleir 0003:05AC:8243.0075: unknown main item tag 0x0 [ 1435.379761][T23987] appleir 0003:05AC:8243.0075: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1435.554000][ T161] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.567127][T30977] kAFS: unable to lookup cell '' [ 1435.603347][ T161] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.662832][ T161] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.671854][ T161] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1436.132167][T23987] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1436.302365][T23987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.324059][T23987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1436.352155][T23987] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1436.371557][T23987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.394398][T23987] usb 3-1: config 0 descriptor?? [ 1436.772093][T13907] usb 6-1: reset high-speed USB device number 81 using dummy_hcd [ 1436.828497][T23987] steelseries 0003:1038:12B6.0076: hidraw1: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 1436.902847][T13907] usb 6-1: device descriptor read/64, error -32 [ 1436.972097][ T1597] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1437.132623][ T1597] usb 7-1: Using ep0 maxpacket: 16 [ 1437.143084][T13907] usb 6-1: reset high-speed USB device number 81 using dummy_hcd [ 1437.158136][ T1597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.183032][ T1597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.203164][ T1597] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1437.223573][ T1597] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1437.252508][ T1597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.273736][ T1597] usb 7-1: config 0 descriptor?? [ 1437.302813][T13907] usb 6-1: device descriptor read/64, error -32 [ 1437.542720][T13907] usb 6-1: reset high-speed USB device number 81 using dummy_hcd [ 1437.573963][T13907] usb 6-1: device descriptor read/8, error -32 [ 1437.715608][ T1597] microsoft 0003:045E:07DA.0077: reserved main item tag 0xd [ 1437.734102][ T1597] microsoft 0003:045E:07DA.0077: unknown main item tag 0x0 [ 1437.741396][ T1597] microsoft 0003:045E:07DA.0077: unknown main item tag 0x0 [ 1437.774716][ T1597] microsoft 0003:045E:07DA.0077: hidraw2: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1437.796013][ T1597] microsoft 0003:045E:07DA.0077: no inputs found [ 1437.822771][ T1597] microsoft 0003:045E:07DA.0077: could not initialize ff, continuing anyway [ 1437.918726][T13914] usb 7-1: USB disconnect, device number 59 [ 1438.453953][ T9] usb 6-1: USB disconnect, device number 81 [ 1438.543704][T31006] fuse: Unknown parameter '000000000000000000050x0000000000000006' [ 1438.630727][T31006] fuse: Unknown parameter 'fsuuid' [ 1439.120369][T31021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6368'. [ 1439.274287][T31024] x_tables: duplicate underflow at hook 4 [ 1439.338592][T23987] steelseries 0003:1038:12B6.0076: hid_hw_raw_request() failed with -71 [ 1439.341692][T31021] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6368'. [ 1439.394016][T23987] usb 3-1: USB disconnect, device number 71 [ 1441.072175][T13914] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1441.179865][T31073] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1441.243237][T13914] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1441.251459][T13914] usb 3-1: config 0 has no interface number 0 [ 1441.259771][T13914] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1441.269013][T13914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.277106][T13914] usb 3-1: Product: syz [ 1441.281273][T13914] usb 3-1: Manufacturer: syz [ 1441.281274][T31078] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6386'. [ 1441.295347][T13914] usb 3-1: SerialNumber: syz [ 1441.301935][T13914] usb 3-1: config 0 descriptor?? [ 1441.712241][T23553] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1441.723514][T31067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.733129][T31067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.744249][T31067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.753240][T31067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.762028][T13914] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1441.770112][T13914] usb 3-1: Firmware version (0.0) predates our first public release. [ 1441.778704][T13914] usb 3-1: Please update to version 0.2 or newer [ 1441.873752][T23553] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1441.883195][T23553] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.894026][T23553] usb 7-1: config 0 descriptor?? [ 1442.020166][T13914] usb 3-1: USB disconnect, device number 72 [ 1442.226149][T31086] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1442.235129][T31086] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1442.383103][T31086] netlink: 'syz.5.6388': attribute type 9 has an invalid length. [ 1442.397881][T31086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6388'. [ 1442.418283][T31086] hsr0: entered promiscuous mode [ 1442.423747][T31086] macvlan0: entered promiscuous mode [ 1442.431244][T31086] macvlan0: entered allmulticast mode [ 1442.440059][T31086] hsr0: entered allmulticast mode [ 1442.445263][T31086] hsr_slave_0: entered allmulticast mode [ 1442.454250][T31086] hsr_slave_1: entered allmulticast mode [ 1442.962047][T13914] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1443.149195][T13914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.172773][T13914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1443.215272][T13914] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1443.257739][T13914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.292228][T13914] usb 3-1: Product: syz [ 1443.316831][T13914] usb 3-1: Manufacturer: syz [ 1443.321460][T13914] usb 3-1: SerialNumber: syz [ 1443.800850][T13914] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 1443.821685][T13914] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 1443.853077][T13914] cdc_ncm 3-1:1.0: bind() failure [ 1443.865400][T13914] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1443.873577][T13914] cdc_ncm 3-1:1.1: bind() failure [ 1443.891863][T13914] usb 3-1: USB disconnect, device number 73 [ 1443.941145][T31122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6399'. [ 1444.092192][T13919] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1444.238756][T31125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.248121][T31125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.265362][T13919] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.277700][T13919] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1444.289344][T13919] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1444.302158][T13919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.310377][T13919] usb 6-1: Product: syz [ 1444.314751][T13919] usb 6-1: Manufacturer: syz [ 1444.320464][T13919] usb 6-1: SerialNumber: syz [ 1444.333796][T13914] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1444.494406][T13914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.505032][T13914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1444.514161][T13914] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1444.530254][T13914] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1444.539706][T13914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.548740][T13914] usb 3-1: Product: syz [ 1444.553750][T13914] usb 3-1: Manufacturer: syz [ 1444.573472][T13914] usb 3-1: SerialNumber: syz [ 1444.580669][T13914] usb 3-1: config 0 descriptor?? [ 1444.598728][T13914] uvcvideo 3-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1444.600270][T13919] usb 6-1: 0:2 : does not exist [ 1444.610401][T13914] uvcvideo 3-1:0.0: No valid video chain found. [ 1444.629022][T23553] usb 7-1: Cannot set autoneg [ 1444.639616][T23553] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1444.665235][T13919] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1444.682480][T23553] usb 7-1: USB disconnect, device number 60 [ 1444.718123][T13919] usb 6-1: USB disconnect, device number 82 [ 1444.753309][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1444.807455][T13911] usb 3-1: USB disconnect, device number 74 [ 1445.261556][T31134] x_tables: duplicate underflow at hook 4 [ 1445.423718][T13911] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 1445.642288][T13911] usb 7-1: device descriptor read/64, error -71 [ 1445.692048][T13914] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1445.912312][T13911] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 1445.952816][T13914] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1446.060171][T31143] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1446.132168][T13914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1446.141183][T13914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1446.152430][T13914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1446.160351][T13914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1446.169446][T13914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1446.180459][T13914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1446.188581][T13914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1446.225460][T13914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1446.354087][T13911] usb 7-1: device descriptor read/64, error -71 [ 1446.360537][T13914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1446.368755][T13914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1446.378061][T13914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1446.389759][T13914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1446.398110][T13914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1446.407304][T13914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1446.418559][T13914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1446.426819][T13914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1446.463122][T13911] usb usb7-port1: attempt power cycle [ 1446.522127][T13914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1446.534199][T13914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1446.542401][T13914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1446.551431][T13914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1446.582175][T13914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1446.799751][T13914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1446.822501][T13914] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1446.836556][T13914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1446.861278][T13914] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1446.881848][T13914] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1446.893386][T13911] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 1446.922362][T13914] usb 6-1: Product: syz [ 1447.027854][T13914] usb 6-1: Manufacturer: syz [ 1447.042903][T13914] usb 6-1: SerialNumber: syz [ 1447.050745][T13914] usb 6-1: config 0 descriptor?? [ 1447.069859][T13914] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1447.107388][T13911] usb 7-1: device descriptor read/8, error -71 [ 1447.391363][T13911] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 1447.495660][T13911] usb 7-1: device descriptor read/8, error -71 [ 1447.703043][T13911] usb usb7-port1: unable to enumerate USB device [ 1448.502153][T13919] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 1448.623219][ C1] usb 6-1: yurex_control_callback - control failed: -2 [ 1448.685032][T23553] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1448.736936][ T9] usb 6-1: USB disconnect, device number 83 [ 1448.770000][ T9] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1448.810909][T31169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6414'. [ 1448.841808][T31169] sctp: [Deprecated]: syz.5.6414 (pid 31169) Use of int in max_burst socket option. [ 1448.841808][T31169] Use struct sctp_assoc_value instead [ 1448.869489][T23553] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1448.890682][T23553] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1448.900514][T23553] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1448.914353][T23553] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1448.923662][T23553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.932337][T23553] usb 3-1: Product: syz [ 1448.936505][T23553] usb 3-1: Manufacturer: syz [ 1448.941075][T23553] usb 3-1: SerialNumber: syz [ 1449.117469][T31176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1449.164468][T23553] cdc_ncm 3-1:1.0: bind() failure [ 1449.179868][T23553] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1449.204777][T23553] cdc_ncm 3-1:1.1: bind() failure [ 1449.237082][T23553] usb 3-1: USB disconnect, device number 75 [ 1449.702491][T23553] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1449.748460][ T161] hsr0: left allmulticast mode [ 1449.756813][ T161] hsr_slave_0: left allmulticast mode [ 1449.766087][ T161] hsr_slave_1: left allmulticast mode [ 1449.771719][ T161] hsr0: left promiscuous mode [ 1449.777835][ T161] bridge0: port 3(hsr0) entered disabled state [ 1449.802159][ T161] bridge_slave_1: left allmulticast mode [ 1449.808790][ T161] bridge_slave_1: left promiscuous mode [ 1449.819475][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.880608][T23553] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1449.890814][T23553] usb 3-1: not running at top speed; connect to a high speed hub [ 1449.910749][T23553] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1449.934943][T23553] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1449.953733][T23553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.961919][T23553] usb 3-1: Product: syz [ 1449.966732][T23553] usb 3-1: Manufacturer: syz [ 1449.971348][T23553] usb 3-1: SerialNumber: syz [ 1449.990593][T31160] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1450.277729][ T161] bridge_slave_0: left allmulticast mode [ 1450.283752][ T161] bridge_slave_0: left promiscuous mode [ 1450.289575][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.722671][T13911] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1450.809450][ T161] gretap0 (unregistering): left promiscuous mode [ 1450.882092][T13911] usb 6-1: Using ep0 maxpacket: 8 [ 1450.889157][T13911] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1450.903967][T13911] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1450.917025][T13911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1450.928084][T13911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1450.938521][T13911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1450.942172][T13919] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1450.948753][T13911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1450.965760][T13911] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1450.975604][T13911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1450.985364][T13911] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 1450.996984][T13911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1451.028189][T13911] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1451.039135][T13911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.068609][T13911] usb 6-1: Product: syz [ 1451.076691][T13911] usb 6-1: Manufacturer: syz [ 1451.081347][T13911] usb 6-1: SerialNumber: syz [ 1451.089572][T13911] usb 6-1: config 0 descriptor?? [ 1451.100674][T13911] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1451.104217][T13919] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 1451.118517][T13919] usb 7-1: config 0 has no interface number 0 [ 1451.133323][T13919] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1451.150614][ T161] bond0 (unregistering): left promiscuous mode [ 1451.157249][ T161] : left promiscuous mode [ 1451.162489][ T161] bond_slave_1: left promiscuous mode [ 1451.168087][ T161] veth0_to_hsr: left promiscuous mode [ 1451.174162][T13919] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 1451.188748][T13919] usb 7-1: config 0 interface 113 has no altsetting 0 [ 1451.224533][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1451.241346][ T161] bond0 (unregistering): (slave 30): Releasing backup interface [ 1451.255472][T23553] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1451.263352][T23553] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1451.272692][T13919] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1451.282881][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1451.291773][T23553] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 1451.297984][T13919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.308098][ T161] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface [ 1451.316069][T13911] usb 6-1: USB disconnect, device number 84 [ 1451.317640][T13919] usb 7-1: Product: syz [ 1451.327334][T13919] usb 7-1: Manufacturer: syz [ 1451.333083][T13919] usb 7-1: SerialNumber: syz [ 1451.345229][T13919] usb 7-1: config 0 descriptor?? [ 1451.350629][ T161] bond0 (unregistering): Released all slaves [ 1451.365947][ T161] bond1 (unregistering): Released all slaves [ 1451.380409][ T161] bond2 (unregistering): Released all slaves [ 1451.392361][T31202] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1451.468749][ C0] usb 7-1: NFC: Urb failure (status -71) [ 1451.490423][ C0] usb 7-1: NFC: Urb failure (status -71) [ 1451.526780][T13919] usb 7-1: NFC: Unable to get FW version [ 1451.537827][T13919] pn533_usb 7-1:0.113: probe with driver pn533_usb failed with error -71 [ 1451.919618][ T161] tipc: Left network mode [ 1452.469693][T31244] x_tables: duplicate underflow at hook 3 [ 1452.484366][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 1452.484382][ T29] audit: type=1326 audit(1772888286.677:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31245 comm="syz.5.6427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd6b59c799 code=0x0 [ 1452.606891][T13911] usb 7-1: USB disconnect, device number 66 [ 1452.796412][ T161] hsr_slave_0: left promiscuous mode [ 1452.802869][ T161] hsr_slave_1: left promiscuous mode [ 1452.809113][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1452.820737][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1452.962114][T23553] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 1453.072972][ T161] caif0 (unregistering): left allmulticast mode [ 1453.176121][T23553] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1453.193449][T23553] usb 3-1: USB disconnect, device number 76 [ 1453.200168][T23553] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 1453.798401][ T161] IPVS: stop unused estimator thread 0... [ 1454.000793][T31289] syzkaller0: entered promiscuous mode [ 1454.008926][T31289] syzkaller0: entered allmulticast mode [ 1454.181897][T31292] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6432'. [ 1454.402077][T23553] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 1454.564619][T23553] usb 3-1: Invalid ep0 maxpacket: 32 [ 1454.682083][T13919] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1454.702556][T23553] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 1454.726069][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1454.737771][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1454.745860][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1454.754262][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1454.762438][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1454.855630][T13919] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1454.864027][T23553] usb 3-1: Invalid ep0 maxpacket: 32 [ 1454.869979][T13919] usb 6-1: not running at top speed; connect to a high speed hub [ 1454.879075][T23553] usb usb3-port1: attempt power cycle [ 1454.885460][T13919] usb 6-1: config 45 has an invalid interface number: 197 but max is 0 [ 1454.894393][T13919] usb 6-1: config 45 has no interface number 0 [ 1454.900718][T13919] usb 6-1: config 45 interface 197 has no altsetting 0 [ 1454.918693][T13919] usb 6-1: New USB device found, idVendor=07aa, idProduct=9601, bcdDevice=ed.b8 [ 1454.938129][T13919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.954083][T31305] chnl_net:caif_netlink_parms(): no params data found [ 1454.960981][T13919] usb 6-1: Product: syz [ 1454.968046][T13919] usb 6-1: Manufacturer: syz [ 1454.982107][T13919] usb 6-1: SerialNumber: syz [ 1455.090066][T31305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.097876][T31305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.105722][T31305] bridge_slave_0: entered allmulticast mode [ 1455.113283][T31305] bridge_slave_0: entered promiscuous mode [ 1455.123863][T31305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.131057][T31305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.138681][T31305] bridge_slave_1: entered allmulticast mode [ 1455.147829][T31305] bridge_slave_1: entered promiscuous mode [ 1455.179922][T31305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.193313][T31305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.209196][T13919] hub 6-1:45.197: bad descriptor, ignoring hub [ 1455.216221][T13919] hub 6-1:45.197: probe with driver hub failed with error -5 [ 1455.227263][T13919] dm9601 6-1:45.197: probe with driver dm9601 failed with error -22 [ 1455.235765][T23553] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 1455.243954][T31305] team0: Port device team_slave_0 added [ 1455.255374][T31305] team0: Port device team_slave_1 added [ 1455.273709][T23553] usb 3-1: Invalid ep0 maxpacket: 32 [ 1455.279631][T13919] usb 6-1: USB disconnect, device number 85 [ 1455.290534][T31305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1455.298622][T31305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1455.332815][T31305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1455.344918][T31305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1455.351857][T31305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1455.378573][T31305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.412206][T23553] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 1455.419550][T31305] hsr_slave_0: entered promiscuous mode [ 1455.427815][T31305] hsr_slave_1: entered promiscuous mode [ 1455.434731][T31305] debugfs: 'hsr0' already exists in 'hsr' [ 1455.435110][T23553] usb 3-1: Invalid ep0 maxpacket: 32 [ 1455.440463][T31305] Cannot create hsr debugfs directory [ 1455.452231][T23553] usb usb3-port1: unable to enumerate USB device [ 1455.704352][T31305] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1455.715865][T31305] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1455.727251][T31305] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1455.739972][T31305] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1455.810248][T31305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.834946][T31305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1455.859214][T23121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.866382][T23121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1455.879679][T23121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.886884][T23121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.066298][T31305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1456.107812][T31305] veth0_vlan: entered promiscuous mode [ 1456.138134][T31305] veth1_vlan: entered promiscuous mode [ 1456.167418][T31305] veth0_macvtap: entered promiscuous mode [ 1456.185871][T31305] veth1_macvtap: entered promiscuous mode [ 1456.206180][T31305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1456.224675][T31305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.238871][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.248863][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.276178][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.293776][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.390918][T23121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.400581][T23121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.426364][T23126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.434465][T23126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.441302][T31336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1456.842379][T15307] Bluetooth: hci1: command tx timeout [ 1456.988772][T31347] binder: 31344:31347 ioctl c0306201 200000000640 returned -22 [ 1457.282279][T23121] TC_ACT_REPEAT abuse ? [ 1457.342349][T31330] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 1457.388807][T31359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6447'. [ 1457.525760][T31330] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.535986][T31330] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1457.545109][T31330] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1457.554391][T31330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.565432][T31330] usb 7-1: config 0 descriptor?? [ 1457.586552][T31330] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1457.595895][T31330] dvb-usb: bulk message failed: -22 (3/0) [ 1457.622866][T31330] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1457.639997][T31330] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1457.647375][T31330] usb 7-1: media controller created [ 1457.654869][T31330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1457.672345][T23553] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1457.676645][T31330] dvb-usb: bulk message failed: -22 (6/0) [ 1457.686007][T31330] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1457.705382][T31330] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input175 [ 1457.737663][T31330] dvb-usb: schedule remote query interval to 150 msecs. [ 1457.760430][T31330] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1457.835239][T23553] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1457.854782][T23553] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.869483][T31364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6448'. [ 1457.879236][T23553] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1457.903772][T23553] usb 3-1: config 1 has no interface number 1 [ 1457.919515][T23553] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1457.924634][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 1457.946903][ T5904] dvb-usb: error while querying for an remote control event. [ 1457.967666][T23553] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1457.985952][T23553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.997713][T23553] usb 3-1: Product: syz [ 1458.001883][T23553] usb 3-1: Manufacturer: syz [ 1458.007366][T23553] usb 3-1: SerialNumber: syz [ 1458.133797][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 1458.139586][ T5904] dvb-usb: error while querying for an remote control event. [ 1458.256084][T23553] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1458.263925][T23553] usb 3-1: MIDIStreaming interface descriptor not found [ 1458.332229][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 1458.338008][ T5904] dvb-usb: error while querying for an remote control event. [ 1458.353296][T23121] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1458.372972][T23553] usb 3-1: USB disconnect, device number 81 [ 1458.499888][T31330] usb 7-1: USB disconnect, device number 67 [ 1458.535094][T31330] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1458.891746][T31387] macsec1: entered promiscuous mode [ 1458.912361][T15307] Bluetooth: hci1: command tx timeout [ 1458.920634][T31387] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1458.941896][T31387] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6453'. [ 1458.953125][T31389] FAULT_INJECTION: forcing a failure. [ 1458.953125][T31389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1458.993852][T31389] CPU: 1 UID: 0 PID: 31389 Comm: syz.2.6454 Tainted: G L syzkaller #0 PREEMPT(full) [ 1458.993883][T31389] Tainted: [L]=SOFTLOCKUP [ 1458.993887][T31389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1458.993894][T31389] Call Trace: [ 1458.993907][T31389] [ 1458.993912][T31389] dump_stack_lvl+0xe8/0x150 [ 1458.993934][T31389] should_fail_ex+0x412/0x560 [ 1458.993954][T31389] _copy_from_user+0x2d/0xb0 [ 1458.993970][T31389] ___sys_recvmsg+0x175/0x590 [ 1458.993987][T31389] ? __pfx____sys_recvmsg+0x10/0x10 [ 1458.994009][T31389] ? __fget_files+0x3a0/0x420 [ 1458.994030][T31389] do_recvmmsg+0x334/0x800 [ 1458.994045][T31389] ? __pfx_do_recvmmsg+0x10/0x10 [ 1458.994061][T31389] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1458.994082][T31389] __x64_sys_recvmmsg+0x198/0x250 [ 1458.994094][T31389] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1458.994110][T31389] do_syscall_64+0x14d/0xf80 [ 1458.994120][T31389] ? trace_irq_disable+0x3b/0x150 [ 1458.994136][T31389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.994147][T31389] ? clear_bhb_loop+0x40/0x90 [ 1458.994159][T31389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.994170][T31389] RIP: 0033:0x7ff8c079c799 [ 1458.994181][T31389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.994190][T31389] RSP: 002b:00007ff8c15b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1458.994202][T31389] RAX: ffffffffffffffda RBX: 00007ff8c0a15fa0 RCX: 00007ff8c079c799 [ 1458.994209][T31389] RDX: 0000000000000004 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1458.994216][T31389] RBP: 00007ff8c15b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1458.994223][T31389] R10: 0000000040020062 R11: 0000000000000246 R12: 0000000000000001 [ 1458.994229][T31389] R13: 00007ff8c0a16038 R14: 00007ff8c0a15fa0 R15: 00007ff8c0b3fa48 [ 1458.994244][T31389] [ 1459.502140][T23553] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1459.655668][T23553] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1459.665184][T23553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.673298][T23553] usb 3-1: Product: syz [ 1459.679128][T23553] usb 3-1: Manufacturer: syz [ 1459.683827][T23553] usb 3-1: SerialNumber: syz [ 1459.694357][T23553] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1459.718034][ T1597] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1459.967948][T31407] netlink: 'syz.6.6460': attribute type 9 has an invalid length. [ 1460.042420][T23553] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 1460.154292][T31413] tipc: Enabled bearer , priority 0 [ 1460.205016][T23553] usb 6-1: not running at top speed; connect to a high speed hub [ 1460.214498][T23553] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1460.225653][T23553] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1460.238803][T23553] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1460.248068][T23553] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.256402][T23553] usb 6-1: Product: Й [ 1460.260571][T23553] usb 6-1: Manufacturer: ⺔矟瘉譁쉸庨⟸諙ᔦ槽䤻一ᜯ莄坁袬曟൰ꎌ丙ᘼ졏ვ祐俳ᜦ岓錘多忋㫶둱 [ 1460.277822][T23553] usb 6-1: SerialNumber: ဉ [ 1460.288407][T31405] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1460.700505][T31405] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1460.832247][ T1597] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1460.839599][ T1597] ath9k_htc: Failed to initialize the device [ 1460.866287][ T1597] usb 3-1: ath9k_htc: USB layer deinitialized [ 1460.910149][T31405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.922744][T31405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.936691][T31405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.947219][T31405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.962252][T23553] cdc_ncm 6-1:1.0: bind() failure [ 1460.975206][T23553] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1460.985467][T23553] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1460.995964][T15307] Bluetooth: hci1: command tx timeout [ 1461.003044][T23553] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1461.023736][T23553] usb 6-1: USB disconnect, device number 86 [ 1461.111851][ T5904] usb 3-1: USB disconnect, device number 82 [ 1461.282095][T13911] tipc: Node number set to 3438684645 [ 1461.382214][T23553] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1461.512081][T23553] usb 7-1: device descriptor read/64, error -71 [ 1461.755424][T23553] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1462.016001][T31432] could not allocate digest TFM handle md5 [ 1462.034219][T23553] usb 7-1: device descriptor read/64, error -71 [ 1462.142083][ T5904] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1462.173231][T23553] usb usb7-port1: attempt power cycle [ 1462.284792][ T5904] usb 3-1: device descriptor read/64, error -71 [ 1462.522078][T23553] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1462.572077][ T5904] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1462.614152][T23553] usb 7-1: device descriptor read/8, error -71 [ 1462.712047][ T5904] usb 3-1: device descriptor read/64, error -71 [ 1462.835598][ T5904] usb usb3-port1: attempt power cycle [ 1462.852090][T23553] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1462.894670][T23553] usb 7-1: device descriptor read/8, error -71 [ 1463.003604][T23553] usb usb7-port1: unable to enumerate USB device [ 1463.072150][T15307] Bluetooth: hci1: command tx timeout [ 1463.192168][ T5904] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1463.235566][ T5904] usb 3-1: device descriptor read/8, error -71 [ 1463.492388][ T5904] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1463.522715][ T5904] usb 3-1: device descriptor read/8, error -71 [ 1463.635181][ T5904] usb usb3-port1: unable to enumerate USB device [ 1464.029287][T31473] x_tables: duplicate underflow at hook 1 [ 1464.082371][T13919] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1464.232170][T13919] usb 6-1: Using ep0 maxpacket: 8 [ 1464.239800][T13919] usb 6-1: config 1 interface 0 altsetting 140 bulk endpoint 0x1 has invalid maxpacket 8 [ 1464.252517][T13919] usb 6-1: config 1 interface 0 altsetting 140 bulk endpoint 0x82 has invalid maxpacket 8 [ 1464.270160][T13919] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1464.831849][T31504] FAULT_INJECTION: forcing a failure. [ 1464.831849][T31504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1464.861854][T31504] CPU: 1 UID: 0 PID: 31504 Comm: syz.2.6480 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.861883][T31504] Tainted: [L]=SOFTLOCKUP [ 1464.861891][T31504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1464.861906][T31504] Call Trace: [ 1464.861920][T31504] [ 1464.861929][T31504] dump_stack_lvl+0xe8/0x150 [ 1464.861956][T31504] should_fail_ex+0x412/0x560 [ 1464.861983][T31504] prepare_alloc_pages+0x22a/0x650 [ 1464.862013][T31504] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1464.862037][T31504] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1464.862061][T31504] ? __pfx_policy_nodemask+0x10/0x10 [ 1464.862086][T31504] ? __lock_acquire+0x6b5/0x2cf0 [ 1464.862111][T31504] alloc_pages_mpol+0x232/0x4a0 [ 1464.862138][T31504] vma_alloc_folio_noprof+0xea/0x210 [ 1464.862161][T31504] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1464.862190][T31504] do_pte_missing+0x1656/0x3750 [ 1464.862228][T31504] handle_mm_fault+0x1bec/0x3310 [ 1464.862269][T31504] ? handle_mm_fault+0xee/0x3310 [ 1464.862294][T31504] ? __pfx_handle_mm_fault+0x10/0x10 [ 1464.862318][T31504] ? lock_mm_and_find_vma+0xa7/0x340 [ 1464.862332][T31504] do_user_addr_fault+0x75b/0x1340 [ 1464.862370][T31504] exc_page_fault+0x6a/0xc0 [ 1464.862398][T31504] asm_exc_page_fault+0x26/0x30 [ 1464.862416][T31504] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1464.862432][T31504] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1464.862441][T31504] RSP: 0018:ffffc900038074d8 EFLAGS: 00050202 [ 1464.862451][T31504] RAX: ffffffff84ac1401 RBX: ffff88804fbe6000 RCX: 0000000000000154 [ 1464.862459][T31504] RDX: 0000000000000000 RSI: ffff88804fbe6d40 RDI: 0000200000002000 [ 1464.862466][T31504] RBP: ffffc90003807650 R08: ffff88804fbe6e93 R09: 1ffff11009f7cdd2 [ 1464.862473][T31504] R10: dffffc0000000000 R11: ffffed1009f7cdd3 R12: dffffc0000000000 [ 1464.862480][T31504] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e94 [ 1464.862499][T31504] ? _copy_to_iter+0x3a1/0x17d0 [ 1464.862531][T31504] _copy_to_iter+0x493/0x17d0 [ 1464.862569][T31504] ? __pfx__copy_to_iter+0x10/0x10 [ 1464.862583][T31504] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1464.862597][T31504] ? lockdep_hardirqs_on+0x7a/0x110 [ 1464.862611][T31504] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1464.862625][T31504] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 1464.862722][T31504] __skb_datagram_iter+0xf8/0x980 [ 1464.862734][T31504] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1464.862749][T31504] skb_copy_datagram_iter+0xb5/0x270 [ 1464.862762][T31504] netlink_recvmsg+0x2c3/0xa50 [ 1464.862779][T31504] ? __lock_acquire+0x6b5/0x2cf0 [ 1464.862807][T31504] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1464.862836][T31504] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1464.862863][T31504] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1464.862881][T31504] ? security_socket_recvmsg+0x7e/0x2c0 [ 1464.862961][T31504] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1464.862986][T31504] sock_recvmsg+0x172/0x1b0 [ 1464.863012][T31504] ____sys_recvmsg+0x1e6/0x4a0 [ 1464.863031][T31504] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1464.863048][T31504] ? import_iovec+0x73/0xa0 [ 1464.863065][T31504] ___sys_recvmsg+0x215/0x590 [ 1464.863077][T31504] ? __pfx____sys_recvmsg+0x10/0x10 [ 1464.863118][T31504] ? __fget_files+0x3a0/0x420 [ 1464.863154][T31504] do_recvmmsg+0x334/0x800 [ 1464.863175][T31504] ? __pfx_do_recvmmsg+0x10/0x10 [ 1464.863191][T31504] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1464.863209][T31504] __x64_sys_recvmmsg+0x198/0x250 [ 1464.863221][T31504] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1464.863246][T31504] do_syscall_64+0x14d/0xf80 [ 1464.863268][T31504] ? trace_irq_disable+0x3b/0x150 [ 1464.863293][T31504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.863311][T31504] ? clear_bhb_loop+0x40/0x90 [ 1464.863327][T31504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.863337][T31504] RIP: 0033:0x7ff8c079c799 [ 1464.863348][T31504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.863356][T31504] RSP: 002b:00007ff8c15b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1464.863367][T31504] RAX: ffffffffffffffda RBX: 00007ff8c0a15fa0 RCX: 00007ff8c079c799 [ 1464.863375][T31504] RDX: 0000000000000004 RSI: 00002000000011c0 RDI: 0000000000000003 [ 1464.863386][T31504] RBP: 00007ff8c15b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.863397][T31504] R10: 0000000040020062 R11: 0000000000000246 R12: 0000000000000001 [ 1464.863409][T31504] R13: 00007ff8c0a16038 R14: 00007ff8c0a15fa0 R15: 00007ff8c0b3fa48 [ 1464.863439][T31504] [ 1466.335745][T31483] tipc: Enabled bearer , priority 0 [ 1466.382968][T31483] syzkaller0: entered promiscuous mode [ 1466.388485][T31483] syzkaller0: entered allmulticast mode [ 1466.632737][T31483] tipc: Resetting bearer [ 1466.845644][T13919] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1466.876724][T13919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.889104][T13919] usb 6-1: can't set config #1, error -71 [ 1466.908041][T13919] usb 6-1: USB disconnect, device number 87 [ 1467.834497][T31579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.853093][T31579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.194798][T31483] tipc: Resetting bearer [ 1468.212076][T13909] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1468.234316][T31483] tipc: Disabling bearer [ 1468.394478][T13909] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1468.407226][T13909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.422648][T13909] usb 6-1: config 0 descriptor?? [ 1468.438810][T13909] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1468.843507][T13909] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 1469.095685][T31582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.105901][T31582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.182070][ T5904] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1469.318351][T13909] gspca_cpia1: usb_control_msg 02, error -32 [ 1469.342094][ T5904] usb 7-1: Using ep0 maxpacket: 8 [ 1469.356741][T13909] gspca_cpia1: usb_control_msg 02, error -71 [ 1469.365231][ T5904] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1469.374549][T13909] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1469.400680][T13909] usb 6-1: USB disconnect, device number 88 [ 1469.416670][ T5904] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1469.428983][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.434112][T31598] vlan3: entered promiscuous mode [ 1469.447261][ T5904] usb 7-1: Product: syz [ 1469.450046][T31598] vlan3: entered allmulticast mode [ 1469.451449][ T5904] usb 7-1: Manufacturer: syz [ 1469.456892][T31598] hsr_slave_1: entered allmulticast mode [ 1469.470849][ T5904] usb 7-1: SerialNumber: syz [ 1469.471426][T31597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6497'. [ 1469.486627][ T5904] usb 7-1: config 0 descriptor?? [ 1469.501503][ T5904] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1469.737106][T31604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.747158][T31604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.982124][T13911] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1470.144846][T13911] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 3 [ 1470.155197][T13911] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1470.170975][T13911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1470.180973][T13911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1470.189173][T13911] usb 3-1: Product: syz [ 1470.193545][T13911] usb 3-1: Manufacturer: syz [ 1470.198174][T13911] usb 3-1: SerialNumber: syz [ 1470.206614][T31605] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1470.282885][ T9] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1470.422249][ T9] usb 6-1: device descriptor read/64, error -71 [ 1470.522510][T13911] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1470.676228][ T9] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1470.720660][T31604] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1470.813774][ T9] usb 6-1: device descriptor read/64, error -71 [ 1470.849723][T13911] usb 3-1: USB disconnect, device number 87 [ 1470.884394][T13911] usblp0: removed [ 1470.928727][ T9] usb usb6-port1: attempt power cycle [ 1471.080385][T31634] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6504'. [ 1471.292060][ T9] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1471.322700][ T9] usb 6-1: device descriptor read/8, error -71 [ 1471.572907][ T9] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1471.594146][ T9] usb 6-1: device descriptor read/8, error -71 [ 1471.704609][ T9] usb usb6-port1: unable to enumerate USB device [ 1471.755575][ T5904] gspca_zc3xx: reg_r err -71 [ 1472.342168][ T5904] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1472.358765][ T5904] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1472.390931][ T5904] usb 7-1: USB disconnect, device number 72 [ 1472.726113][T31650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6509'. [ 1472.886724][T31660] fuse: Bad value for 'fd' [ 1473.112095][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1473.266295][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1473.277423][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.288418][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.299083][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1473.313286][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1473.323201][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1473.331339][ T9] usb 3-1: Manufacturer: syz [ 1473.338881][ T9] usb 3-1: config 0 descriptor?? [ 1473.392061][ T5904] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1473.545949][ T5904] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1473.555388][ T5904] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1473.567256][ T5904] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1473.576674][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.584740][ T5904] usb 6-1: Product: syz [ 1473.588943][ T5904] usb 6-1: Manufacturer: syz [ 1473.593700][ T5904] usb 6-1: SerialNumber: syz [ 1473.600758][ T5904] usb 6-1: config 0 descriptor?? [ 1473.611485][ T5904] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1473.758893][ T9] appleir 0003:05AC:8243.0078: unknown main item tag 0x0 [ 1473.774202][ T9] appleir 0003:05AC:8243.0078: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1474.021844][ T5904] gspca_sunplus: reg_r err -71 [ 1474.033416][ T5904] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1474.046463][ T5904] usb 6-1: USB disconnect, device number 93 [ 1474.334233][ T9] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 1474.359708][ T9] hid-generic 0000:0000:0000.0079: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1474.790182][ T29] audit: type=1326 audit(1772888308.987:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af799c799 code=0x7ffc0000 [ 1474.835647][ T29] audit: type=1326 audit(1772888308.987:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af799c799 code=0x7ffc0000 [ 1474.866740][ T29] audit: type=1326 audit(1772888308.987:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9af799c799 code=0x7ffc0000 [ 1474.892683][ T29] audit: type=1326 audit(1772888308.987:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af799c799 code=0x7ffc0000 [ 1474.902439][T13909] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1474.921421][ T29] audit: type=1326 audit(1772888308.987:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af799c799 code=0x7ffc0000 [ 1474.962663][ T29] audit: type=1326 audit(1772888308.987:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f9af799c799 code=0x7ffc0000 [ 1475.009627][ T29] audit: type=1326 audit(1772888308.987:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af799c799 code=0x7ffc0000 [ 1475.033344][ T29] audit: type=1326 audit(1772888308.987:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af799c799 code=0x7ffc0000 [ 1475.058965][ T29] audit: type=1326 audit(1772888308.987:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9af799c799 code=0x7ffc0000 [ 1475.086216][ T29] audit: type=1326 audit(1772888308.987:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31695 comm="syz.6.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af799c799 code=0x7ffc0000 [ 1475.142112][ T5904] usb 3-1: reset high-speed USB device number 88 using dummy_hcd [ 1475.153416][T13909] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1475.165322][T13909] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1475.177267][T13909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30073, setting to 1024 [ 1475.188865][T13909] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1475.203743][T13909] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1475.213501][T13909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.221641][T13909] usb 6-1: Product: syz [ 1475.227060][T13909] usb 6-1: Manufacturer: syz [ 1475.231749][T13909] usb 6-1: SerialNumber: syz [ 1475.245786][T13909] usb 6-1: config 0 descriptor?? [ 1475.251838][T31694] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1475.259571][T31694] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1475.273973][ T5904] usb 3-1: device descriptor read/64, error -32 [ 1475.280610][T13909] usb 6-1: ucan: probing device on interface #0 [ 1475.478555][T13909] usb 6-1: ucan: could not read protocol version, ret=-71 [ 1475.486487][T13909] usb 6-1: ucan: probe failed; try to update the device firmware [ 1475.503409][T13909] usb 6-1: USB disconnect, device number 94 [ 1475.526068][ T5904] usb 3-1: reset high-speed USB device number 88 using dummy_hcd [ 1475.662094][ T5904] usb 3-1: device descriptor read/64, error -32 [ 1475.735175][T31708] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1475.902202][ T5904] usb 3-1: reset high-speed USB device number 88 using dummy_hcd [ 1475.922350][ T5904] usb 3-1: device descriptor read/8, error -32 [ 1476.134909][T31720] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1476.382044][ T5904] usb 3-1: reset high-speed USB device number 88 using dummy_hcd [ 1476.415322][ T5904] usb 3-1: device firmware changed [ 1476.426667][T31330] usb 3-1: USB disconnect, device number 88 [ 1476.582034][T31330] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1476.757598][T31330] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1476.766827][T31330] usb 3-1: config 1 has no interface number 0 [ 1476.773286][T31330] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.785996][T31330] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1476.796031][T31330] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1476.807755][T31330] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1476.819993][T31330] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1476.834314][T31330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1476.845564][T31330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.853607][T31330] usb 3-1: Product: syz [ 1476.857846][T31330] usb 3-1: Manufacturer: syz [ 1476.862865][T31330] usb 3-1: SerialNumber: syz [ 1477.075710][T31719] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1477.270599][T31740] netlink: 188 bytes leftover after parsing attributes in process `syz.8.6535'. [ 1477.284311][T31739] netlink: 188 bytes leftover after parsing attributes in process `syz.8.6535'. [ 1477.700397][T31719] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1477.725451][T31330] cdc_ncm 3-1:1.1: bind() failure [ 1477.807132][T31748] syzkaller1: entered allmulticast mode [ 1477.926610][T31750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1477.965802][T31330] usb 3-1: USB disconnect, device number 89 [ 1478.313623][ T9] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1478.474862][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.485664][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1478.496909][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1478.507012][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1478.515968][ T9] usb 6-1: SerialNumber: syz [ 1478.748017][ T9] usb 6-1: 0:2 : does not exist [ 1478.766595][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1478.856788][ T9] usb 6-1: USB disconnect, device number 95 [ 1478.896959][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1478.974152][T31762] input: syz1 as /devices/virtual/input/input176 [ 1479.049841][T31762] netlink: 'syz.2.6543': attribute type 21 has an invalid length. [ 1479.058517][T31762] IPv6: NLM_F_CREATE should be specified when creating new route [ 1479.070701][T31762] netlink: 'syz.2.6543': attribute type 1 has an invalid length. [ 1479.171518][T31771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1479.179285][T31771] IPv6: NLM_F_CREATE should be set when creating new route [ 1479.186600][T31771] IPv6: NLM_F_CREATE should be set when creating new route [ 1479.462416][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1479.612513][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1479.619370][ T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1479.629543][ T9] usb 3-1: config 0 has no interface number 0 [ 1479.636211][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1479.648385][ T9] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1479.657735][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1479.667302][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.675780][ T9] usb 3-1: Product: syz [ 1479.679934][ T9] usb 3-1: Manufacturer: syz [ 1479.685008][ T9] usb 3-1: SerialNumber: syz [ 1479.691375][ T9] usb 3-1: config 0 descriptor?? [ 1479.742043][T31330] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1479.842329][T13919] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1479.892617][T31330] usb 7-1: Using ep0 maxpacket: 16 [ 1479.902009][T31330] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64 [ 1479.916349][T31330] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1479.925469][T31330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.933554][T31330] usb 7-1: Product: syz [ 1479.937703][T31330] usb 7-1: Manufacturer: syz [ 1479.942693][T31330] usb 7-1: SerialNumber: syz [ 1479.950088][T31330] usb 7-1: config 0 descriptor?? [ 1479.967901][T31330] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1480.006056][T13919] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1480.015889][T13919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.025293][T13919] usb 6-1: Product: syz [ 1480.029508][T13919] usb 6-1: Manufacturer: syz [ 1480.038909][T13919] usb 6-1: SerialNumber: syz [ 1480.187619][T31780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.197167][T31780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.207473][T27696] usb 7-1: Failed to submit usb control message: -71 [ 1480.208729][T13907] usb 7-1: USB disconnect, device number 73 [ 1480.214778][T27696] usb 7-1: unable to send the bmi data to the device: -71 [ 1480.214819][T27696] usb 7-1: unable to get target info from device [ 1480.214835][T27696] usb 7-1: could not get target info (-71) [ 1480.214867][T27696] usb 7-1: could not probe fw (-71) [ 1480.306618][T13919] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1480.324198][T13919] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1480.336221][T13919] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1480.348785][T13919] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1480.359122][T13919] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1480.370869][T13919] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1480.389549][T13919] usb 6-1: USB disconnect, device number 96 [ 1480.668366][T31799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.684468][T31799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.875327][T31801] binder: 31800:31801 ioctl c0189371 200000000100 returned -22 [ 1480.899189][T31801] binder_alloc: 31800: binder_alloc_buf, no vma [ 1481.444747][T31810] dummy0: entered promiscuous mode [ 1481.450999][T31810] debugfs: 'hsr1' already exists in 'hsr' [ 1481.457419][T31810] Cannot create hsr debugfs directory [ 1481.464377][T31810] hsr1: entered promiscuous mode [ 1481.469461][T31810] hsr1: entered allmulticast mode [ 1481.476153][T31810] dummy0: entered allmulticast mode [ 1481.483912][T31813] netlink: 'syz.5.6558': attribute type 2 has an invalid length. [ 1481.486057][T23124] [ 1481.493971][T23124] ============================================ [ 1481.500120][T23124] WARNING: possible recursive locking detected [ 1481.502558][T31813] netlink: 'syz.5.6558': attribute type 11 has an invalid length. [ 1481.506295][T23124] syzkaller #0 Tainted: G L [ 1481.506309][T23124] -------------------------------------------- [ 1481.526183][T23124] kworker/u8:19/23124 is trying to acquire lock: [ 1481.529292][T31813] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6558'. [ 1481.532526][T23124] ffff888030af0f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1481.532591][T23124] [ 1481.532591][T23124] but task is already holding lock: [ 1481.532598][T23124] ffff8880580a4f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1481.532639][T23124] [ 1481.532639][T23124] other info that might help us debug this: [ 1481.532646][T23124] Possible unsafe locking scenario: [ 1481.532646][T23124] [ 1481.532653][T23124] CPU0 [ 1481.532659][T23124] ---- [ 1481.532665][T23124] lock(&hsr->seqnr_lock); [ 1481.532680][T23124] lock(&hsr->seqnr_lock); [ 1481.532694][T23124] [ 1481.532694][T23124] *** DEADLOCK *** [ 1481.532694][T23124] [ 1481.532700][T23124] May be due to missing lock nesting notation [ 1481.532700][T23124] [ 1481.532708][T23124] 12 locks held by kworker/u8:19/23124: [ 1481.532720][T23124] #0: ffff8880311e2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1481.532772][T23124] #1: ffffc90005917c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1481.532822][T23124] #2: ffffffff8fbceac8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1481.532947][T23124] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x215/0x1670 [ 1481.533019][T23124] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1481.533091][T23124] #5: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1481.682446][T23124] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1481.691621][T23124] #7: ffff8880580a4f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1481.701146][T23124] #8: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 1481.710743][T23124] #9: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1481.720694][T23124] #10: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1481.730734][T23124] #11: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1481.739989][T23124] [ 1481.739989][T23124] stack backtrace: [ 1481.745898][T23124] CPU: 1 UID: 0 PID: 23124 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 1481.745925][T23124] Tainted: [L]=SOFTLOCKUP [ 1481.745931][T23124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1481.745943][T23124] Workqueue: ipv6_addrconf addrconf_dad_work [ 1481.745971][T23124] Call Trace: [ 1481.745978][T23124] [ 1481.745986][T23124] dump_stack_lvl+0xe8/0x150 [ 1481.746011][T23124] print_deadlock_bug+0x279/0x290 [ 1481.746038][T23124] __lock_acquire+0x253f/0x2cf0 [ 1481.746064][T23124] ? __flow_hash_from_keys+0x45b/0x6e0 [ 1481.746163][T23124] lock_acquire+0xf0/0x2e0 [ 1481.746183][T23124] ? hsr_dev_xmit+0x237/0x360 [ 1481.746205][T23124] ? hsr_dev_xmit+0x237/0x360 [ 1481.746224][T23124] _raw_spin_lock_bh+0x36/0x50 [ 1481.746246][T23124] ? hsr_dev_xmit+0x237/0x360 [ 1481.746265][T23124] hsr_dev_xmit+0x237/0x360 [ 1481.746283][T23124] ? hsr_dev_xmit+0x2d/0x360 [ 1481.746303][T23124] dev_hard_start_xmit+0x2d8/0x870 [ 1481.746326][T23124] __dev_queue_xmit+0x16d1/0x3890 [ 1481.746348][T23124] ? __dev_queue_xmit+0x277/0x3890 [ 1481.746365][T23124] ? ret_from_fork_asm+0x1a/0x30 [ 1481.746388][T23124] ? ret_from_fork_asm+0x1a/0x30 [ 1481.746413][T23124] ? arch_stack_walk+0x11b/0x150 [ 1481.746436][T23124] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1481.746454][T23124] ? ret_from_fork_asm+0x1a/0x30 [ 1481.746480][T23124] ? stack_trace_save+0xa9/0x100 [ 1481.746504][T23124] ? __pfx_stack_trace_save+0x10/0x10 [ 1481.746526][T23124] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1481.746545][T23124] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 1481.746566][T23124] macvlan_start_xmit+0x3ba/0x600 [ 1481.746652][T23124] dev_hard_start_xmit+0x2d8/0x870 [ 1481.746675][T23124] __dev_queue_xmit+0x16d1/0x3890 [ 1481.746696][T23124] ? __dev_queue_xmit+0x277/0x3890 [ 1481.746715][T23124] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1481.746736][T23124] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1481.746754][T23124] ? __asan_memcpy+0x40/0x70 [ 1481.746769][T23124] ? __pskb_copy_fclone+0x9c8/0xff0 [ 1481.746788][T23124] ? __asan_memcpy+0x40/0x70 [ 1481.746804][T23124] ? __pskb_copy_fclone+0x9c8/0xff0 [ 1481.746825][T23124] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 1481.746848][T23124] ? hsr_addr_subst_dest+0x30d/0xa90 [ 1481.746871][T23124] hsr_forward_skb+0x157b/0x2860 [ 1481.746893][T23124] ? ret_from_fork_asm+0x1a/0x30 [ 1481.746921][T23124] ? hsr_forward_skb+0xb3/0x2860 [ 1481.746944][T23124] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1481.746965][T23124] ? do_raw_spin_lock+0x12b/0x2f0 [ 1481.746984][T23124] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1481.747002][T23124] ? hsr_dev_xmit+0x237/0x360 [ 1481.747023][T23124] hsr_dev_xmit+0x242/0x360 [ 1481.747041][T23124] ? hsr_dev_xmit+0x2d/0x360 [ 1481.747061][T23124] dev_hard_start_xmit+0x2d8/0x870 [ 1481.747083][T23124] __dev_queue_xmit+0x16d1/0x3890 [ 1481.747103][T23124] ? __dev_queue_xmit+0x277/0x3890 [ 1481.747121][T23124] ? __local_bh_enable_ip+0xd0/0x130 [ 1481.747145][T23124] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1481.747163][T23124] ? neigh_connected_output+0x1ea/0x460 [ 1481.747218][T23124] ? eth_header+0x11b/0x200 [ 1481.747273][T23124] ? __asan_memcpy+0x40/0x70 [ 1481.747295][T23124] ? ip6_output+0x126/0x550 [ 1481.747317][T23124] ip6_output+0x340/0x550 [ 1481.747340][T23124] ? __pfx_ip6_output+0x10/0x10 [ 1481.747361][T23124] ndisc_send_skb+0xd0b/0x1670 [ 1481.747381][T23124] ? ndisc_send_skb+0x215/0x1670 [ 1481.747400][T23124] ? __pfx_ndisc_send_skb+0x10/0x10 [ 1481.747419][T23124] ? __pfx_dst_output+0x10/0x10 [ 1481.747444][T23124] addrconf_dad_completed+0x909/0xe60 [ 1481.747468][T23124] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 1481.747498][T23124] ? addrconf_dad_work+0xc4e/0x14c0 [ 1481.747521][T23124] ? __local_bh_enable_ip+0xd0/0x130 [ 1481.747543][T23124] addrconf_dad_work+0xc5e/0x14c0 [ 1481.747568][T23124] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1481.747593][T23124] ? process_scheduled_works+0xa25/0x1830 [ 1481.747614][T23124] ? process_scheduled_works+0xa25/0x1830 [ 1481.747636][T23124] process_scheduled_works+0xb02/0x1830 [ 1481.747666][T23124] ? __pfx_process_scheduled_works+0x10/0x10 [ 1481.747690][T23124] ? assign_work+0x3d5/0x5e0 [ 1481.747713][T23124] worker_thread+0xa50/0xfc0 [ 1481.747744][T23124] kthread+0x388/0x470 [ 1481.747761][T23124] ? __pfx_worker_thread+0x10/0x10 [ 1481.747783][T23124] ? __pfx_kthread+0x10/0x10 [ 1481.747799][T23124] ret_from_fork+0x51e/0xb90 [ 1481.747821][T23124] ? __pfx_ret_from_fork+0x10/0x10 [ 1481.747842][T23124] ? __switch_to+0xc7d/0x1450 [ 1481.747863][T23124] ? __pfx_kthread+0x10/0x10 [ 1481.747879][T23124] ret_from_fork_asm+0x1a/0x30 [ 1481.747909][T23124] [ 1482.280175][ T9] appletouch 3-1:0.85: Failed to request geyser raw mode [ 1482.288693][ T9] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1482.306940][ T9] usb 3-1: USB disconnect, device number 90 [ 1484.593912][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.600314][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.353136][T18937] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)