last executing test programs: 16m20.58169949s ago: executing program 32 (id=1036): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) 14m59.967423243s ago: executing program 33 (id=1357): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000180)={0x0, 0x3, 0xa, 0x0, 0x1, 0x81, 0x446}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x3000000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000180)={0x0, 0x3, 0xa, 0x0, 0x1, 0x81, 0x446}) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x3000000) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) (async) 10m21.344294634s ago: executing program 1 (id=2546): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r0) 10m21.149700142s ago: executing program 1 (id=2548): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffd, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0405627, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) r1 = socket(0x22, 0x2, 0x3) lchown(&(0x7f0000000000)='./cgroup\x00', 0xffffffffffffffff, 0xee01) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 10m20.555375471s ago: executing program 1 (id=2553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x28, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040), 0x0) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r4) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x6, 0x3}, {0xa, 0x10}, {0xd, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', r11, 0x10, 0x1, 0x10001, 0x7, {{0x17, 0x4, 0x3, 0x8, 0x5c, 0x64, 0x0, 0xd, 0x0, 0x0, @remote, @remote, {[@end, @cipso={0x86, 0x45, 0x3, [{0x5, 0xd, "afc65821dfa27f950d72f6"}, {0x6, 0xa, "37f089abfa59a314"}, {0x7, 0xf, "61a0c94e4d9878bd16ec509fbb"}, {0x5, 0x5, "e9d6ee"}, {0x2, 0x5, "9424fc"}, {0x7, 0x4, "063e"}, {0x5, 0x5, "31160e"}, {0x6, 0x6, "3235fd7d"}]}, @end]}}}}}) r12 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000006000000000000000000000000ffff20000a0080000000", @ANYRES32=0x0, @ANYRES16=r0], 0x23c}}, 0x0) 10m17.949665943s ago: executing program 1 (id=2563): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = gettid() capget(&(0x7f0000000000)={0x20071026, r2}, &(0x7f0000000080)={0x53d, 0x4, 0x2, 0x9, 0x6, 0x7}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000010c0)={0x100095, 0x70, 0x20000, {r4}}, 0x20) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 10m17.314946004s ago: executing program 1 (id=2567): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000002b80)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x3, 0xd}, {0x6, 0x60, 0x0, 0x4}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x1) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) chdir(&(0x7f0000000540)='./cgroup\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x564b143a, 0x83, 0xfffb, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000004}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0xffff7ffc, 0x8}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000004c0)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e60, @local}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000000)={0x5, {{0x2, 0x4e25, @multicast2}}, {{0x2, 0x1, @remote}}}, 0x108) mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x84, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x12, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @IFLA_GRE_REMOTE={0x0, 0x7, @private2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = open(&(0x7f0000000080)='./file0\x00', 0x80bc1, 0x108) recvfrom$unix(r7, &(0x7f00000014c0)=""/4096, 0x1000, 0x18040, &(0x7f00000024c0)=@file={0x1, './cgroup\x00'}, 0x6e) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x5875, @mcast1, 0x3}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) 10m16.833659525s ago: executing program 1 (id=2569): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) writev(r0, &(0x7f0000003580)=[{&(0x7f0000000240)="2adb0ec3c8def8c494119fdaf6e801c0d88b9e780efedfdfd4f2ebbf73947c67406e0818e740634717dc519f495a17ba6c79f39210a7e604677ba0a7c8f3975a2855f7f9da8840be0bd1afe2730c1698589c8f1d5832453b2b30775dd227f2c5e06302f928b6d4b7d4acf71cc492bf73bd3db78aa1c96684339ce9e6f939dc8f451e1307d03d9480725219a2dce27de417208a15d05d3c27a8cbdb17caaae811708c7f50c5eaaa65e660a6ab9672b00a05f1d603349a0350f0de826282b8aea94ac413e8bbb4fdb3cff30abbabd431cf8742a6944681", 0xd6}, {&(0x7f0000000380)="3069e04e2a84248bb2ea5d6944f43234fdc19f2365d8308e727aa8c4c8a2ad0a0c5b91c9f9f8064bd62fe744a98164f550d3dfcfecc537a6b40261c56128219cc7cb16888ca812c84deeccbd990eb2af7e5436764a4c9f96f0274a11cde7c22c40e0f4f989d107b310bd547cce7044", 0x6f}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000140)="7fff8602bf83d1d73cfaa2e25c5ab0ad43869a2929245e6575661d85ca4abf2acba1c1b7ed07899a1d31ebdf19ca483befa573097c43a89d0be71f36a591e16c53c1eb80f60414fc0972f664540e3ee0e7cbcaf8f378bd718f1da6bcc6e6d3b3cd74cf3608eaa383761e314338129c8951218dfeba8d7ff25c45a30b10e153d29d3286a2489894ed465b82605c", 0x8d}, {&(0x7f00000014c0)="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", 0xff0}, {&(0x7f00000024c0)="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", 0xdf8}], 0x6) 10m15.858480033s ago: executing program 34 (id=2569): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) writev(r0, &(0x7f0000003580)=[{&(0x7f0000000240)="2adb0ec3c8def8c494119fdaf6e801c0d88b9e780efedfdfd4f2ebbf73947c67406e0818e740634717dc519f495a17ba6c79f39210a7e604677ba0a7c8f3975a2855f7f9da8840be0bd1afe2730c1698589c8f1d5832453b2b30775dd227f2c5e06302f928b6d4b7d4acf71cc492bf73bd3db78aa1c96684339ce9e6f939dc8f451e1307d03d9480725219a2dce27de417208a15d05d3c27a8cbdb17caaae811708c7f50c5eaaa65e660a6ab9672b00a05f1d603349a0350f0de826282b8aea94ac413e8bbb4fdb3cff30abbabd431cf8742a6944681", 0xd6}, {&(0x7f0000000380)="3069e04e2a84248bb2ea5d6944f43234fdc19f2365d8308e727aa8c4c8a2ad0a0c5b91c9f9f8064bd62fe744a98164f550d3dfcfecc537a6b40261c56128219cc7cb16888ca812c84deeccbd990eb2af7e5436764a4c9f96f0274a11cde7c22c40e0f4f989d107b310bd547cce7044", 0x6f}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000140)="7fff8602bf83d1d73cfaa2e25c5ab0ad43869a2929245e6575661d85ca4abf2acba1c1b7ed07899a1d31ebdf19ca483befa573097c43a89d0be71f36a591e16c53c1eb80f60414fc0972f664540e3ee0e7cbcaf8f378bd718f1da6bcc6e6d3b3cd74cf3608eaa383761e314338129c8951218dfeba8d7ff25c45a30b10e153d29d3286a2489894ed465b82605c", 0x8d}, {&(0x7f00000014c0)="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", 0xff0}, {&(0x7f00000024c0)="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", 0xdf8}], 0x6) 9m27.738272531s ago: executing program 7 (id=2747): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000009000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509feffffff00009500000000000000bf91000000000000b7020000010000008500000085040000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000002840)=""/4101, 0x0, 0x40000000}, 0x94) 9m27.587342972s ago: executing program 7 (id=2749): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000043242108d81301006230010203010902120001000000000904"], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r1, 0x1) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e20, 0x8000, @loopback, 0x8}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="d74ac62e73ed6c30cb32fe45e873a6d695b8b4d0c8d4e2f119cc552513d28f0eb6cf69bbf0de67d1add5ec8b21a5bd5d3cb6a4e97a55529331207d048401f072424d250a71b0aa", 0x47}], 0x1, &(0x7f0000000140)=[@hoplimit={{0x14, 0x29, 0x34, 0x80000001}}, @dontfrag={{0x14, 0x29, 0x3e, 0xf16}}, @rthdrdstopts={{0x118, 0x29, 0x37, {0x21, 0x1f, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x5}, @jumbo, @calipso={0x7, 0x18, {0x1, 0x4, 0x8, 0x1, [0x6, 0x5]}}, @generic={0x1, 0xcd, "520e8121936a6058aecfc5c4d0b0646b6eacac01efd9f71f238a0fe015536602a4d281426a6eae15726c11a0852d3185e008a2b3df58d28563b51686ea4cb8e9291cd2adcaa9263e041c904ca62acbc56014e05cc6cd55baaefcdd0d2891a0b591f1c276d639384ef510520f179561946cbbcd42aad511b0d2ee1613e47029c4ad84d147232763cb1b0ad0cf1811ba25ad6294e0c6c7a1c91d664f543e1dcc38213de3725ff1d630f100f579a139d1d23051d607aabf3614416018cc2b056efaa2693bc650450bf4db6afd75d8"}, @jumbo={0xc2, 0x4, 0x5}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x1d, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x188}, 0x44843) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="07014807620200001c03001308996a290600000096010000050000000000000000000000cdb6d4cc8731845bbb78d624f508d40eda0140f2115c315a089827d2a558e04bfd8622662388630c76f2efd82b4dc42881a55ca041b6d0ba558866338c307039f9d3f91f07958a519b5472152c0b9d0428089fe89fd41c7efd9c3f641f19ba89e40496b5da6bc6fc489ffea6971d5dcf46ec7ef69fe45219a989a6a961778a74eb260bb1131016747fe2479ac9a8d642b17b563931a303403f6b452c920932b39d55fea6b740a889746048000000000000000000"], 0xd4) 9m24.391221116s ago: executing program 7 (id=2762): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)="60704a3de74adef633fba438d891dab762edd495ca9c6f5ba17408033c73be873e378dcb25dd57866d24e2d5197614ebb329e967d16981426e41", 0x3a}, {&(0x7f0000000100)="051d26ce0173341920c7cf123d65bf4f1afda10a12b5a7cc707423ecd935f487f5cfa8304200a47f44ad8e78e3355205cd6bb829324df145dabd3e3209c61f1d4376c2fec4c5029b81592e7fba81ad408c25852232c6dd00c1dbae29fe7b27fdd5e58d9e9a491d125233b6a5ac8161a0f93cb981e5ca5cb2ea8448c39df28bcfeac7c12834d3052a1624c49affa568743f5721640e70ee29156ca9b7bd3eac149b6d2335d89b3893d5dd123986c5736eff3f46cdd36130a82e555371827455a05458f47908740c1672e4d224369a3dbad7ca899c3a11e687", 0xd8}, {&(0x7f0000000200)="eafe38ff229f075724d7bedda880e08d6bab6627f1f6923191879b2befec84bced0cfc12123cd5480383a75866724d1f03a140b916d2759dc9ff8ff0ca6f2f3788bcd9bdee69f0b3832be1c2c094d04e86f20e64864148305d613f658685b2b0cb95261a9b0879740e58067c1c75e20f27281351f8b720ca0a101ff50802e2c46f4d2aa9119ef6e246f7451871c99b9ee2fb8161020708e25bf4eed5de1eaf9909f8a380e4496e9b4589411ffa82ac41efb5572af4209025d7", 0xb9}, {&(0x7f00000002c0)="f25ea3ad820c657cf92417d5545c960ca5c9ec6df54a4fef8c863d83dc805a6d696d077ae6aa129cf2990777a4593450d352", 0x32}, {&(0x7f0000000300)="2ef43aeeed709befb03f3bbeea1dffce96495ea347986fa47e9b448ab0ee57465f8f43335534f7d06b61ae4b3e9225f7e301822b55a0eaf06a9521ac7962ecbdf050a7b30321abb20be2e0f87ffb5c6f6b20f7673a0cd50d133c773ba86563322cf5b14ec92053a157c0ac5f2ff071c28ef54ad845c98667eb2d6443dd0b1fd5ae6b4091b0f42c9df7c0d8e69eb850516127eb5715ddeecc7d453916d0d2f401d40c7ac30e4000f5", 0xa8}, {&(0x7f00000003c0)="88e6ed887817f00857d1b038255c996e19", 0x11}], 0x6, 0x0, 0x0, 0x44}}], 0x1, 0x4000001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x41) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x20000, 0x5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x40000) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000007c0)={0x9, &(0x7f0000000740)=[{0x81, 0x6, 0x5, 0x1}, {0x3, 0x48, 0x7, 0x4}, {0x5, 0x7, 0x9, 0x10}, {0x6, 0xf1, 0x2, 0x6}, {0x1, 0x5, 0x4, 0x4}, {0x8001, 0x9, 0x9, 0x10}, {0xf800, 0x9, 0x9}, {0xa00, 0xa, 0xe, 0x6}, {0x8001, 0xff, 0xa, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000800)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000880)={r5, 0x3, r0, 0x2, 0x80000}) (async) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/233, 0xe9}], 0x2, &(0x7f0000001a00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0x2) fsync(r10) (async) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000001b80)={{r12}, 0x401, 0x0, 0xfffffffffffffffd}) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000001bc0)='/dev/fuse\x00') openat2(r6, &(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)={0x42002, 0x1}, 0x18) r13 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000001c80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa6, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x81, 0x0, 0x94}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x1, 0x80}}]}}}]}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001cc0)={0xa, 0x6, 0x300, 0x90, 0xd, 0x8, 0x20, 0x8}, 0x19, &(0x7f0000001d00)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "2f6d757f7939c6d21b8c7826f8652337"}]}, 0x4, [{0x96, &(0x7f0000001d40)=@string={0x96, 0x3, "73b0dfb4efcfa51a5e0aa4b3bfdd37e44933c24f55af5c4df2e820b85613c0336f326c10e31acd96f818e3e7a761518e9ca4a857d8f72af36f1faa656d082b96b16b5dd9f4ebede08f3aec6378f0259b482bcdac300515c7c16c1fed7841c847139fde8d886fe046af5557c5d422fd060e8e6a3b2421662e12ce43471718c14eb6e2ceb59e533d0351898ae3494ff7187d22250c"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x6d, &(0x7f0000001e40)=@string={0x6d, 0x3, "07065facc85276052108e1b4dc9189726ef440f625dd3e2b42c45fb47f19d46c0d46c6139a089fa825ab4ac4ec4186ac7bbc174abf329fa6fd03e11c81cda255beaa273cd9493460e61d4a3001cecbdf98b82e1816055cce71bf48d68988f5644be1266184ba35f370e803"}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_control_io$printer(r13, &(0x7f00000020c0)={0x14, &(0x7f0000001f80)={0x20, 0x22, 0x5d, {0x5d, 0xc, "85d5fac0d0cffc6fc1023006cd9a93f5169b34d591d479cd81eee1955c5b28006439a037cea07f3ebb20963234e7e6d3cc576b963082acf9961a16e178443df42efe631850c9c09be0bec3dcf1423455edb00c66a792856ecd58d6"}}, &(0x7f0000002000)={0x0, 0x3, 0x86, @string={0x86, 0x3, "f168164017315ad593475cfd8da7fb233e5021c7105d7788c6152207975423d4f70f6bf384c8d3594c4bd16fb6bb1c0c0bd97831ce8a0e589f9420ca03bfb36d91d721b202c7926c8a43f4c9050785d5898b372ffa479c7bc442f96a4c7fc307acef2353de8f3a025fb2dce47fdb5ffba36bb762e0cc0b6e5513d18340bb56f5ca6cc793"}}}, &(0x7f0000002300)={0x34, &(0x7f0000002100)={0x20, 0x14, 0x30, "18ebad0210e0aed098a7639d2673222ecaffb5314b62f0cb90e1141551a4314e436377f5fad175c695fbe66c45295594"}, &(0x7f0000002140)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002180)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000021c0)={0x20, 0x0, 0xaa, {0xa8, "0cbcc446c677a4de5866208d9b22477c3620860028c657a0becaa1557b213e61c1b26e00260d8dc8df7c33040368c41f1d1d49c25f1c66e53bbd269d02f86395116d190f5c4d45b3f1c16b96d292d4aaadfbbbfb4a571701028580877abe1d22dd172389de9a1ab96bbee7f7846420aab706ba3d6b5408f5ebe69f26bcb97b1f425dd7232dc17e58863ce01ec8d38b6c59ecce4d85a0cc4eccdcb39c77db85ce143094e9e9ee62cd"}}, &(0x7f0000002280)={0x20, 0x1, 0x1, 0x40}, &(0x7f00000022c0)={0x20, 0x0, 0x1, 0x1b}}) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000002340)='/dev/fuse\x00') r14 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002380), 0x101100, 0x0) syz_kvm_setup_cpu$x86(r14, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002400)=[@textreal={0x8, &(0x7f00000023c0)="f30fa6c0640f239fbaf80c66b872a42d8566efbafc0cb82846ef660f381d6e0d0f07f031190f20e06635004000000f22e0ba6100ecf79c0d00660fc692a09b0f", 0x40}], 0x1, 0x1, &(0x7f0000002440)=[@flags={0x3, 0x4044}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000002480), 0x1, 0x0) (async) r15 = openat(r11, &(0x7f00000024c0)='./file0\x00', 0x101000, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r15, 0x8004af81, &(0x7f0000002500)) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000002540)={0x5, 0x0, 0xfffffff9, 0x2, 'syz0\x00', 0x4}) (async) munlock(&(0x7f0000fed000/0x4000)=nil, 0x4000) (async) fdatasync(r4) (async) listxattr(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)=""/169, 0xa9) (async) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) (async) sendmsg$DEVLINK_CMD_RELOAD(r15, &(0x7f00000026c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4008800) (async) fsync(r7) 9m20.623316265s ago: executing program 7 (id=2770): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000ba0ecdf50a20000000020a03000000000000000000300bb569316b7fcf38990877a29c020000020c000440000000000000e103140000001100"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x44004) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000002280)={0x10000, 0x1, 0x43}) syz_open_dev$vcsu(&(0x7f0000000100), 0x101, 0x20002) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r8 = dup3(r5, r7, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x6}) socket$inet_tcp(0x2, 0x1, 0x0) connect$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r9, 0x0, 0x0) sched_setattr(r9, &(0x7f0000000000)={0x38, 0x6, 0x0, 0x7, 0x141, 0x20b, 0x661, 0xffffffff, 0xcb, 0x8}, 0x0) 9m18.141653308s ago: executing program 7 (id=2781): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x7, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}, {0x7ff, 0x4, 0x8, 0x2}, {0x6, 0x5, 0x6, 0xffffff81}, {0x5, 0x9, 0x3, 0x8ab2}, {0x3, 0x7, 0x8, 0x8}, {0x100, 0x9, 0xb, 0x4}, {0x1, 0x2, 0xd, 0x200}]}) (async) inotify_init1(0x0) (async) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x105200, 0x12c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2, &(0x7f0000000200)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4d3}]}, 0x4c}}, 0x40) 9m16.983273291s ago: executing program 7 (id=2788): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r1, 0x0, 0x4f) syz_open_dev$vim2m(&(0x7f00000002c0), 0xc, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0xbdf, &(0x7f0000000040)={0x0, 0xec28, 0x800, 0x1, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) accept4(r8, &(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x800) io_uring_enter(r4, 0x847ba, 0x79c, 0xe, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r2], 0x0) 9m1.515298587s ago: executing program 35 (id=2788): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r1, 0x0, 0x4f) syz_open_dev$vim2m(&(0x7f00000002c0), 0xc, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0xbdf, &(0x7f0000000040)={0x0, 0xec28, 0x800, 0x1, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) accept4(r8, &(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x800) io_uring_enter(r4, 0x847ba, 0x79c, 0xe, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r2], 0x0) 2m41.058272734s ago: executing program 8 (id=4071): setrlimit(0x1, &(0x7f0000000040)={0x7ff, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000080)=ANY=[@ANYBLOB="b886a77de904aaaaaaaaaa3b88a8000081003000000c000000a0040200000400000000000000"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x22, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xff84, 0x0, 0x84, 0x0, @remote, @broadcast}}}}}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000029001806fefc0100000000000000000000000000bffe8000000000000000000000000000aa00014001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002e60290780000230200a6"], 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000c57f54f45d2a8b46153d3b367a93b8f0b204bd425c3c8d5b4f5837403a6d3e9810b4673329446d214f9082063661dc5a945efc4902fb5c6989dd36b767be0893b90c95f30149bd78ec8537ecd8c45532319ce05bc8315f87b8530b32405c7c1edd56dc15198aac2d772a713f67cafddf74ab6fb8c2008bcb823390f8184e798310adb6e39cd04a3f271cebff2f78f5b67fc2899aeeb39e9e1e028cec17bff95604552b5ca845bb0c69"], 0x14}, 0x1, 0x0, 0x0, 0x40849}, 0x20000000) 2m40.790712619s ago: executing program 8 (id=4074): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r3, &(0x7f00000003c0)="35e369d7e6", 0x5) syz_usb_disconnect(r2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="1e93"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m38.008618643s ago: executing program 8 (id=4085): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x4cfd, 0x80, 0x6, 0x296}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000100)=0x9, 0x0, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400efffff08058103"], 0x0) fcntl$setlease(r4, 0x400, 0x0) syz_usb_connect$uac1(0x6, 0xf6, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x9, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3d, 0x3}, [@processing_unit={0x8, 0x24, 0x7, 0x5, 0x4, 0x5, '{'}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x31, '7\''}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x1, 0x6, [0x5, 0x6, 0x4, 0x8, 0x5, 0x7], 0x2}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x4, 0x6, "d675df0177"}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x1811, 0x2, "dd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x4, 0xfb, 0x4, "7cef8c46fdf67d"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x9, 0x81, "", 'oU+'}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0xa0, 0x7, "22e1dbfb604575c194"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x5c2, 0x5, "855a5ca3a6c461"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x4, 0x8, {0x7, 0x25, 0x1, 0x0, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x1, 0x3, 0xb3, "84b6", "ff41"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x5, 0x4, {0x7, 0x25, 0x1, 0x2, 0x2, 0x2}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x6, 0x98, 0x81, 0x8, 0xb}, 0x21, &(0x7f0000000040)={0x5, 0xf, 0x21, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x0, 0x0, 0x7, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x80, 0x81, 0x687d}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x3, 0x7}]}, 0x6, [{0x59, &(0x7f0000000240)=@string={0x59, 0x3, "32ca99144bb3550f1965d807538fada2ef1eb3136c086005426591049777b45adc89a07a93b4835ad8feb8aba40ae01d28ef88a5ab43c7dabaaf381ab0db6ebb1621183ffaaf8dc7e6769cb5cce3bc7b7ec604c166d85d"}}, {0x5c, &(0x7f00000004c0)=ANY=[@ANYBLOB="5c036b925fe06eb2dadca84649dd6f38b9240e236ce317dede27861d084e97c5b3b9255b9800ede575cd4fa3279a1c0597e3e8b639eb378efc4af28bc4a6fc2a92e3439bb137f9e07438d70dea06acf494b663cd5b74ceacc9c091d4d8cb0bbfe792f36a5ccb2343d33d0657"]}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc0a}}, {0x3d, &(0x7f0000000480)=@string={0x3d, 0x3, "dd49fbe5faebd4298dfe86cfe5b4d2e5188102d99f2f66742ac1f0774dd3b2249f3fc2b420f3de4db33e491726af5d14a6f071196f5ed19c290361"}}, {0x36, &(0x7f00000003c0)=@string={0x36, 0x3, "b4cd790a80bd6093937215354d99a50ff9b6dec78ac8ffdd4b556cc82dccea834ea40419c85b014fc31ca9bcb8ab731050a2d284"}}]}) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000380)={'exec ', '/{\'.:@s/*@}\x00'}, 0x11) fsync(r4) 2m36.406331708s ago: executing program 8 (id=4092): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x339, &(0x7f0000000380)={0x0, 0xbcdb, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x444}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f00000005c0)={0x0, 0x1000, 0x2, 0x81, 0x3, [0x3771, 0x2, 0x8, 0x2]}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x30, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)=ANY=[@ANYRES32=r13, @ANYRES16=r13, @ANYBLOB="010326bd60000000009616967eb2112403014282ad88c576a9002d", @ANYRESDEC=r7], 0x20}, 0x1, 0x0, 0x0, 0xc914}, 0x20040814) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc001920}, 0xc, &(0x7f0000000500)={&(0x7f0000002680)=ANY=[@ANYBLOB="427fdddf848e10c86b5bc82f630e27d37b07e4ba08a549ddd931efc19eb205799f13a212e80a87b8c6be202e3fd5edd113a7a66f4730a15c3bb0dfa656201c26f3924c0ac46b6a1a60db53d392ddacd339cf6a37c81189abad163bb57b0886e59c10e66de5a7d5c72a88384c4495f74654358139fada564081cbe187298d10a93dc29b1cf27cdfd11bc789eff0bbbe091c3da6b2a0a696c57e03e8b7a32bc5526012da8dbff2ef", @ANYRES16=r13, @ANYBLOB="000229bd7000fddbdf2512000000080009000300000008000600ff030000"], 0x24}, 0x1, 0x0, 0x0, 0x20040011}, 0x24008004) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="74020000", @ANYRES16=r14, @ANYBLOB="000229bd7000ffdbdf25030000000c000680050002000100000004000680480001801400040000000000000000000000ffff0000000005000200030000000800060008000000060005004e20000008000300ac1414bb060005004e230000080003000a0101000800040008000000"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x41) 2m35.236085344s ago: executing program 8 (id=4094): r0 = socket(0xa, 0x80805, 0x0) r1 = accept(r0, 0x0, &(0x7f0000001080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001100), &(0x7f0000001140)}, 0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000) r9 = socket$qrtr(0x2a, 0x2, 0x0) (async) connect$qrtr(r1, &(0x7f0000000300)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) (async) r10 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465c, 0x800, 0x3, 0x287}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r9, 0x0, 0x0}) io_uring_enter(r10, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002580)={0xffffffffffffffff, 0x20, &(0x7f0000002540)={&(0x7f0000001440)=""/196, 0xc4, 0x0, &(0x7f0000001540)=""/4096, 0x1000}}, 0x10) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r15, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x1e, 0x1f, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000000008000000000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c0043000010000009a91180000000000183a000001000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000088200000035220800faffffff85200000010000003c01200000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000012c0)='syzkaller\x00', 0x323, 0xc6, &(0x7f0000001300)=""/198, 0x41100, 0x8, '\x00', r13, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r14, r15, 0x6, 0x0, &(0x7f00000025c0)=[{0x1, 0x2, 0x4, 0x8}, {0x1, 0x4, 0x4, 0x4}, {0x4, 0x1, 0xc, 0x3}, {0x0, 0x1, 0x9, 0x9}, {0x4, 0x3, 0xf, 0x4}, {0x5, 0x4, 0xa, 0x8}], 0x10, 0x100}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 2m34.575435515s ago: executing program 0 (id=4097): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'dvmrp1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'gre0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x8000, 0x40, 0x7, 0x8, {{0x24, 0x4, 0x3, 0xb, 0x90, 0x65, 0x0, 0xc5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x6, [{@empty}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}, {@broadcast, 0x5}]}, @ssrr={0x89, 0x13, 0x1c, [@multicast1, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp={0x44, 0x20, 0xc4, 0x0, 0xb, [0x1, 0x0, 0xa, 0x7, 0x1ff, 0x7ff, 0x200]}, @ssrr={0x89, 0xb, 0x31, [@local, @rand_addr=0x64010102]}, @lsrr={0x83, 0x17, 0xa6, [@local, @broadcast, @rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xb, 0x20, [@multicast1, @loopback]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000940)={@mcast2, 0x0}, &(0x7f00000009c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000400b59500000000000000000a004f00", @ANYRES32=r12, @ANYBLOB], 0x34}}, 0x44c85) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0x200, 0x4, {{0x25, 0x4, 0x2, 0x6, 0x94, 0x66, 0x0, 0xba, 0x29, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0x17, 0x56, [@local, @private=0xa010102, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end, @timestamp_addr={0x44, 0x1c, 0x38, 0x1, 0x7, [{@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@local, 0x816}]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x7, 0x2e, [@multicast2]}, @lsrr={0x83, 0x2b, 0xe1, [@loopback, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @private=0xa010102, @private=0xa010100, @private=0xa010102, @empty]}, @lsrr={0x83, 0x13, 0x32, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b40)={0x0, @dev, @local}, &(0x7f0000000b80)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f00000036c0)={0xa8c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff4408}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xd, 0x8, 0x2, 0x6}, {0x81, 0x0, 0x2, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x60}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x23}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7dd3, 0x4, 0x8, 0x40}, {0x4, 0x10, 0x91}, {0x1000, 0x7, 0xd3, 0x40780}, {0x1fa0, 0x9, 0xc, 0xf}, {0xa, 0x3, 0x1, 0x81}, {0x6, 0x7, 0x7, 0x5}, {0x5c2b, 0x8, 0x0, 0xe}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r6}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff94d}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5d}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xedcb40f5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}]}}, {{0x8, 0x1, r14}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}]}}]}, 0xa8c}, 0x1, 0x0, 0x0, 0x42}, 0x4000) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x449, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) 2m33.920933168s ago: executing program 0 (id=4099): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000037c0)={0x400, 0x5, 0x2, 0x0, 0x3, 0x7}) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004a00)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729364eade, 0x1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000003680)=[{0x1, 0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/117, 0x75}], &(0x7f0000000180)=[0xfffffffffffffffc]}, {0x1, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)}], &(0x7f0000000280)=[0x9]}, {0x2, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/20, 0x14}, {&(0x7f0000000380)=""/130, 0x82}], &(0x7f0000000480)=[0x2a6]}, {0x3, 0x1, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/197, 0xc5}], &(0x7f0000001740)=[0x9, 0x4, 0x6, 0x0, 0x25, 0x2, 0x1000, 0xfffffffffffffffb, 0x10000000000000]}, {0x5, 0x1, 0x0, &(0x7f0000002b40)=[{&(0x7f00000017c0)=""/242, 0xf2}, {&(0x7f00000018c0)=""/195, 0xc3}, {&(0x7f00000019c0)=""/136, 0x88}, {&(0x7f0000001a80)=""/168, 0xa8}, {&(0x7f0000001b40)=""/4096, 0x1000}], &(0x7f0000000500)=[0x59, 0x4e, 0x13b, 0x2]}, {0x3, 0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002bc0)=""/236, 0xec}, {&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000002d00)=""/253, 0xfd}], &(0x7f0000002e40)=[0x60, 0x1, 0x80000001, 0x7fffffffffffffff, 0xffffffffffff9402, 0x7, 0x3ff, 0xffffffffa68f8172, 0x1, 0x6]}, {0x7, 0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002ec0)=""/74, 0x4a}, {&(0x7f0000002f40)=""/143, 0x8f}, {&(0x7f0000003000)=""/181, 0xb5}, {&(0x7f00000030c0)=""/9, 0x9}, {&(0x7f0000003100)=""/165, 0xa5}, {&(0x7f00000031c0)=""/148, 0x94}, {&(0x7f0000003280)=""/229, 0xe5}], &(0x7f0000003400)=[0x1, 0x4, 0x1, 0x38d]}, {0x2, 0x1, 0x0, &(0x7f0000003540)=[{&(0x7f0000003440)=""/186, 0xba}, {&(0x7f0000003500)=""/35, 0x23}], &(0x7f0000003580)=[0x8000, 0x9]}, {0x1, 0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000035c0)=""/17, 0x11}], &(0x7f0000003640)=[0xfffffffffffffff9, 0x6, 0x1, 0x6, 0x8, 0x400000000000000]}], 0x9) io_uring_enter(r1, 0x3516, 0xa00100, 0x0, 0x0, 0x0) 2m33.575307983s ago: executing program 8 (id=4100): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000c00027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0xa6, 0xdc, 0x34, 0x40, 0x61d, 0xc020, 0xa2bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0xb2, 0x81, 0x0, [], [{{0x9, 0x5, 0x5, 0x390998da063e1313}}]}}]}}]}}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, 0x0}]) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x10, 0x1, 0x3, 0x7, {{0x5, 0x4, 0x1, 0x15, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x24}}}}}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f00000001c0)='\x00'}], 0x1}) 2m33.543309916s ago: executing program 0 (id=4101): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[]) r2 = socket$nl_route(0x10, 0x3, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000a00), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010", @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21"], 0x40}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x3c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0x10, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto(r0, &(0x7f00000000c0)="d551856fbc3cc2d57c01a3496f3aa4a26170f812315b6dde0914f8624c59a3bc850c629a931039ea1d0f9d4d04815ef4a58cf726c9e765ad12b771ac68a0", 0x3e, 0x80, &(0x7f0000000180)=@phonet={0x23, 0x0, 0x4, 0x18}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x40804) 2m31.320975346s ago: executing program 0 (id=4105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x202002, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYBLOB="af31c115b2443ed4ab68e2888736ce67b1b6a6d8726f638a46f3a39aaaef029d9a08c48d8a989401702acefa40511c2c653a287bedc83ff26b57fb97698126bf622e0293bf88022f14d6c1008148acf05f29a23547857cbb0e7f871064f1c50efb6ec43e9a99c895a38dee7a5534249bd57a1d83537f1a00"/135, @ANYRES16=r0, @ANYRES32=r0, @ANYRES16=r2], 0x3e, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 2m27.657615449s ago: executing program 0 (id=4113): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x2004c810) (async, rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') lseek(r1, 0x7fffffffffffffff, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r5, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r6 = socket(0x10, 0x803, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x80000, 0x0, {0x7}, [@NDA_VNI={0x8, 0x7, 0xb}]}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1}, 0x24}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x20, 0x20, 0x7fff, 0x4, {{0x41, 0x4, 0x0, 0xb, 0x104, 0x68, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0x34, 0xb1, 0x1, 0x9, [{@broadcast, 0xfffffff8}, {@multicast1, 0x100}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0x8}, {@broadcast, 0x8000}]}, @timestamp_prespec={0x44, 0x2c, 0xb9, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast1, 0x3}, {@local, 0x1}, {@private=0xa010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3b}}]}, @generic={0x94, 0xd, "b039ce36945a14f430bfa5"}, @end, @end, @cipso={0x86, 0x39, 0x2, [{0x7, 0xe, "23aad16748f67e101ce7b09b"}, {0x5, 0xd, "36d0a33cb0d197b5074890"}, {0x1, 0x11, "f6561f70bdb67c336856ef27dbbb54"}, {0x7, 0x7, "3464936aa1"}]}, @timestamp={0x44, 0x18, 0xff, 0x0, 0x7, [0x3, 0x6, 0x6, 0xe0e, 0x101]}, @lsrr={0x83, 0x3, 0x3a}, @timestamp={0x44, 0x2c, 0x58, 0x0, 0x9, [0x8, 0x4, 0x6, 0x2, 0x2, 0x1, 0xb, 0x6, 0x54, 0x0]}]}}}}}) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x5, r9, 0x7}, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r12, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 2m26.583112299s ago: executing program 0 (id=4117): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x0, 0x20, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x68, 0x1, 0xfd, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000280)={0x8, 'netpci0\x00', {'rose0\x00'}, 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) pwrite64(r1, &(0x7f0000000880)='u', 0x1, 0x83) connect$unix(r2, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r3 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x102, 0xfffd, 0xe0, 0x0, 0x0}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r4, &(0x7f0000000380)={&(0x7f0000000300)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="89a25a42070000000000000011cd0212fe08645b2be5780a3ad83858b26b7630a93aab386d718c6e16d50c75935c", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000900fcffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x100008c5}, 0x82890) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040)=0x7) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) 2m18.154347987s ago: executing program 36 (id=4100): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000c00027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0xa6, 0xdc, 0x34, 0x40, 0x61d, 0xc020, 0xa2bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0xb2, 0x81, 0x0, [], [{{0x9, 0x5, 0x5, 0x390998da063e1313}}]}}]}}]}}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, 0x0}]) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x10, 0x1, 0x3, 0x7, {{0x5, 0x4, 0x1, 0x15, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x24}}}}}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f00000001c0)='\x00'}], 0x1}) 2m11.445692563s ago: executing program 37 (id=4117): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x0, 0x20, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x68, 0x1, 0xfd, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000280)={0x8, 'netpci0\x00', {'rose0\x00'}, 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) pwrite64(r1, &(0x7f0000000880)='u', 0x1, 0x83) connect$unix(r2, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r3 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x102, 0xfffd, 0xe0, 0x0, 0x0}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r4, &(0x7f0000000380)={&(0x7f0000000300)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="89a25a42070000000000000011cd0212fe08645b2be5780a3ad83858b26b7630a93aab386d718c6e16d50c75935c", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000900fcffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x100008c5}, 0x82890) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040)=0x7) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) 2m7.451446787s ago: executing program 5 (id=4174): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_cache\x00') lseek(r0, 0x80, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x10022, 0x338}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x2a, 0x9, 0xfdfffffe, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x400000c0) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000001240)={0xd562382c321a7b22, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) r5 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) fsmount(r5, 0x0, 0x8) 2m7.337183238s ago: executing program 5 (id=4175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x1, 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="7c001800003f010000020000000001fcffff9500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0xd, 0xff5, &(0x7f00000003c0)=""/4085, 0x0, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pipe(0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd00005efe0000000162e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b838570400"}, 0x80, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7ffffffd, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x8800, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000006800e97800000000000ac83b4713039ee9463ac7e2396b0000000000510000040000000000"], 0x1c}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x100000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=r6], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x107000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="00000000f4e1", 0x6}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x80}}, @hoplimit={{0x14, 0x29, 0x34, 0xa}}, @hoplimit={{0x14}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x84, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0xe8}}], 0x1, 0x4000000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0x6, 0x0, 0x9, 0x81, 0x8, "aa7651b9d2037a4d41cfb76ab5c0c3a055be1c", 0x4, 0x2}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 2m6.185208854s ago: executing program 5 (id=4177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000362000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m4.868257489s ago: executing program 5 (id=4179): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x803e, 0x0, 0x9, 0x0, 0x4, 0xfa0d, 0xfffffffb}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket(0x1d, 0x1, 0xd) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) r3 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x20080) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000300)={0x4, r4}) syz_io_uring_setup(0x512, &(0x7f0000000540)={0x0, 0xc65f, 0x80, 0x0, 0x40}, &(0x7f0000000240), &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x521003, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x22) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x40002) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 1m59.551327094s ago: executing program 5 (id=4192): r0 = socket$inet6(0xa, 0x1, 0x9) shutdown(r0, 0x0) (async, rerun: 64) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x0) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @local, 0x5}, 0x1c) (async) socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) socket$inet6(0x2d, 0x806, 0x0) socket(0x25, 0x80000, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x3, @sliced={0x1, [0x12e, 0x1fd5, 0x7, 0x0, 0xfff9, 0x80, 0x8000, 0x2, 0x6, 0x753, 0x6, 0x8, 0x5, 0x1ea, 0x1, 0x2, 0x8001, 0x0, 0x5, 0x401, 0x2, 0x0, 0x9, 0x8, 0x5, 0x0, 0x6, 0x9, 0x0, 0x2, 0x400, 0x0, 0xfffb, 0x2, 0x66, 0x4, 0xb, 0x4, 0x2, 0xff, 0x8, 0x39, 0x1, 0x1, 0xe05, 0x7, 0x6, 0x80], 0x2}}, 0x6b}) (async, rerun: 64) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r4, &(0x7f00000002c0)='./file0\x00', r4, &(0x7f00000003c0)='./bus\x00', 0x0) (async) sendmmsg$inet6(r3, 0x0, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m59.240184899s ago: executing program 5 (id=4194): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x401, 0xb4e, 0xffffffff, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000140)={0x10003, 0x1, 0xfffffff5}) syz_open_dev$vcsu(&(0x7f0000000100), 0x101, 0x20002) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x6}) socket$inet_tcp(0x2, 0x1, 0x0) connect$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r8, 0x0, 0x0) sched_setattr(r8, &(0x7f0000000000)={0x38, 0x6, 0x0, 0x7, 0x141, 0x20b, 0x661, 0xffffffff, 0xcb, 0x8}, 0x0) 1m43.924298316s ago: executing program 38 (id=4194): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x401, 0xb4e, 0xffffffff, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000140)={0x10003, 0x1, 0xfffffff5}) syz_open_dev$vcsu(&(0x7f0000000100), 0x101, 0x20002) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x6}) socket$inet_tcp(0x2, 0x1, 0x0) connect$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r8, 0x0, 0x0) sched_setattr(r8, &(0x7f0000000000)={0x38, 0x6, 0x0, 0x7, 0x141, 0x20b, 0x661, 0xffffffff, 0xcb, 0x8}, 0x0) 13.619336785s ago: executing program 4 (id=4471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a98000000060a010400000000000000000a0000010900010073797a3100000000600004805c0001800c0001007061796c6f6164004c00028008000440000000ad08000240000000020800034000000086080001400000001508000440000000ef08000840000000000800084000000001080001400000001708000840000000000900020073797a3200000000090007"], 0xc0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x2f) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000040c0)={0x0, 0x0}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) listen(r7, 0xfffffffc) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) (async) recvmmsg(r3, &(0x7f0000003f40)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f00000002c0)=""/103, 0x67}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f00000003c0)=""/204, 0xcc}], 0x4, &(0x7f00000004c0)=""/199, 0xc7}, 0x3}, {{&(0x7f00000005c0)=@nfc_llcp, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/113, 0x71}, {&(0x7f00000006c0)=""/21, 0x15}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/65, 0x41}, {&(0x7f0000001800)=""/117, 0x75}, {&(0x7f0000001880)=""/74, 0x4a}, {&(0x7f0000001900)=""/181, 0xb5}, {&(0x7f00000019c0)=""/191, 0xbf}], 0x9, &(0x7f0000001b40)=""/246, 0xf6}, 0x6}, {{&(0x7f0000001c40)=@x25, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001cc0)=""/27, 0x1b}, {&(0x7f0000001d00)=""/17, 0x11}, {&(0x7f0000001d40)=""/210, 0xd2}, {&(0x7f0000001e40)=""/54, 0x36}, {&(0x7f0000001e80)=""/3, 0x3}], 0x5}, 0x48}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001f40)=""/151, 0x97}, {&(0x7f0000002000)=""/48, 0x30}, {&(0x7f0000002040)=""/251, 0xfb}, {&(0x7f0000002140)=""/117, 0x75}, {&(0x7f00000021c0)=""/152, 0x98}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000002300)=""/178, 0xb2}, {&(0x7f00000023c0)=""/187, 0xbb}, {&(0x7f0000002480)=""/133, 0x85}, {&(0x7f0000002540)=""/67, 0x43}], 0xa, &(0x7f0000002680)=""/205, 0xcd}, 0x6}, {{&(0x7f0000002780)=@alg, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002800)=""/253, 0xfd}, {&(0x7f0000002900)=""/211, 0xd3}, {&(0x7f0000002a00)=""/46, 0x2e}], 0x3}, 0xbdd}, {{&(0x7f0000002a80)=@l2tp6, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002b00)=""/177, 0xb1}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/66, 0x42}, {&(0x7f0000003c40)=""/116, 0x74}, {&(0x7f0000003cc0)=""/244, 0xf4}, {&(0x7f0000003dc0)=""/1, 0x1}, {&(0x7f0000003e00)=""/160, 0xa0}], 0x7}, 0x3ff}], 0x6, 0x1, &(0x7f0000004100)={r4, r5+60000000}) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@multicast2, 0x10003507, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) (async) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r11, &(0x7f0000001f80)={0x2020}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x0) r12 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r13 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async) r14 = add_key$user(&(0x7f0000006400), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000780)="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", 0x179, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r12, r13, r14}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 13.427804489s ago: executing program 4 (id=4472): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001040), 0x0, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x2000000000001, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001100)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) socket(0x840000000002, 0x3, 0xfa) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xc000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) clock_getres(0x17, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {0x10}, {}, {0x0, 0x0, 0x100}, {}, 0x2, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x10001, 0x72, 0x200, 0x0, 0xa}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000001040)='./cgroup\x00', &(0x7f00000011c0), &(0x7f0000001200)={'L+', 0x1}, 0x16, 0x3) r8 = openat$cgroup_ro(r3, &(0x7f0000001180)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000010c0)={'#! ', './file0', [], 0xa, "54968746ee04a40a00000000000000e7404435b0d2416c6521b323ba05e9000000002a7c45a016bae3802fc4211cbe"}, 0x3a) mmap(&(0x7f000046c000/0x1000)=nil, 0x1000, 0xa, 0x110, r8, 0xde8d4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 12.884725742s ago: executing program 6 (id=4475): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[]) r2 = socket$nl_route(0x10, 0x3, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000a00)="2c4d407e6ff03cfc2e184e742dec83b9041a4c1d4e1f9cd9e108da2423937f013b6147fec58247cb02de8d4c55fce63076ab7c6fdd0d215b9e86a6384b002abdf4b95b7e31", 0x45) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x3c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0x10, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto(r0, &(0x7f00000000c0)="d551856fbc3cc2d57c01a3496f3aa4a26170f812315b6dde0914f8624c59a3bc850c629a931039ea1d0f9d4d04815ef4a58cf726c9e765ad12b771ac68a0", 0x3e, 0x80, &(0x7f0000000180)=@phonet={0x23, 0x0, 0x4, 0x18}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x40804) 11.516394847s ago: executing program 4 (id=4477): r0 = creat(&(0x7f0000000200)='./bus\x00', 0xa1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{&(0x7f00000002c0)=@phonet, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)=""/33, 0x21}, {&(0x7f0000000340)=""/72, 0x48}, {&(0x7f00000003c0)=""/182, 0xb6}, {&(0x7f00000001c0)=""/41, 0x29}], 0x4, &(0x7f00000004c0)=""/100, 0x64}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/183, 0xb7}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/169, 0xa9}, {&(0x7f0000000640)=""/6, 0x6}, {&(0x7f0000000680)}, {&(0x7f00000008c0)=""/196, 0xc4}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/186, 0xba}], 0x8, &(0x7f0000000b80)=""/38, 0x26}, 0x10001}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000bc0)=""/253, 0xfd}, {&(0x7f0000000cc0)=""/40, 0xfffffffffffffe11}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f0000001d40)=""/34, 0x22}, 0x6}, {{&(0x7f0000001d80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/149, 0x95}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001f00)=""/90, 0x5a}, 0x1}, {{&(0x7f0000001f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002000)=""/52, 0x34}, {&(0x7f0000002040)=""/96, 0x60}], 0x2, &(0x7f00000031c0)=""/211, 0xd3}, 0x7}, {{&(0x7f00000032c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003340)=""/240, 0xf0}, {&(0x7f0000003440)=""/134, 0x86}, {&(0x7f0000003500)=""/28, 0x1c}, {&(0x7f0000003540)=""/252, 0xfc}], 0x4, &(0x7f0000005100)=""/253, 0xfd}, 0xfff}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003780)=""/10, 0xa}], 0x1, &(0x7f0000003800)=""/166, 0xa6}, 0x81}, {{&(0x7f00000038c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003940)=""/137, 0x89}, {&(0x7f0000003a00)=""/205, 0xcd}], 0x2, &(0x7f0000003b40)=""/17, 0x11}, 0x2}, {{0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000003b80)=""/177, 0xb1}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/20, 0x14}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/235, 0xeb}], 0x5, &(0x7f0000004e80)=""/25, 0x19}, 0x3}], 0x9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat(r0, &(0x7f0000000240)='./bus\x00', 0x2c0041, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x28004bc, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a00000006f7ff00000000000000000001000000003f4552000000040000000020000001000000020000000008"], 0x2a) socket(0x8, 0x6, 0x839) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r6}}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), 0x2, 0x0, 0x0, 0x40}, 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 10.27382314s ago: executing program 6 (id=4484): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x800000, {0x2, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x34}}, 0xea5bc50b619dd77e) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x439ee000, 0x0, 0x35, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd27, 0x25dfdbff, {0x2, 0x20, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_OIF={0x8}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x80}}, 0x8000) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000fc1000/0x1000)=nil, 0x1000}, 0x5}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) getrandom(&(0x7f00000001c0)=""/91, 0x5b, 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) unshare(0x2a020400) shmget$private(0x0, 0xfffffffffeffffff, 0x0, &(0x7f0000fff000/0x1000)=nil) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x800000}) 9.71445519s ago: executing program 2 (id=4486): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x339, &(0x7f0000000380)={0x0, 0xbcdb, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x444}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f00000005c0)={0x0, 0x1000, 0x2, 0x81, 0x3, [0x3771, 0x2, 0x8, 0x2]}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x30, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="f99e2cd8", @ANYRES16, @ANYBLOB="010000000000080000000300fc00240001800a00010069623a6c6f00"], 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4000004) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)=ANY=[@ANYRES32=r11, @ANYRES16=r11, @ANYBLOB="010326bd60000000009616967eb2112403014282ad88c576a9002d", @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0xc914}, 0x20040814) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc001920}, 0xc, &(0x7f0000000500)={&(0x7f0000002680)=ANY=[@ANYBLOB="427fdddf848e10c86b5bc82f630e27d37b07e4ba08a549ddd931efc19eb205799f13a212e80a87b8c6be202e3fd5edd113a7a66f4730a15c3bb0dfa656201c26f3924c0ac46b6a1a60db53d392ddacd339cf6a37c81189abad163bb57b0886e59c10e66de5a7d5c72a88384c4495f74654358139fada564081cbe187298d10a93dc29b1cf27cdfd11bc789eff0bbbe091c3da6b2a0a696c57e03e8b7a32bc5526012da8dbff2ef", @ANYRES16=r11, @ANYBLOB="000229bd7000fddbdf2512000000080009000300000008000600ff030000"], 0x24}, 0x1, 0x0, 0x0, 0x20040011}, 0x24008004) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="74020000", @ANYRES16=r12, @ANYBLOB="000229bd7000ffdbdf25030000000c000680050002000100000004000680480001801400040000000000000000000000ffff0000000005000200030000000800060008000000060005004e20000008000300ac1414bb060005004e230000080003000a0101000800040008000000"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x41) 9.257239961s ago: executing program 9 (id=4487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/kernel/oops_count', 0x40100, 0x3a) r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r6, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000010c0)="3aae1baf93", 0x5}, {0x0}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 8.967891476s ago: executing program 6 (id=4488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4814) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, 0x0, 0x0}, 0x20) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r6, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 8.519293094s ago: executing program 2 (id=4489): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x90002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x40010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket(0x2, 0x80805, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}, {{&(0x7f00000003c0)=@nfc, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000500)=""/175, 0xaf}, 0x6}], 0x2, 0x2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}}, 0x84) r6 = socket$inet6(0xa, 0x3, 0xc98) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x80b80000, @loopback, 0x7fff}, 0x1c) r7 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 7.355473283s ago: executing program 9 (id=4491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x49}]}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) flock(r0, 0x2) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000201000390400"/20, @ANYRES32=0x0, @ANYBLOB="0d980000010100001800128008000100677265000c00028008000700e0000001"], 0x38}}, 0x840) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) 6.783255969s ago: executing program 9 (id=4493): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000002240), 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000300)=0x4) 6.667719472s ago: executing program 4 (id=4494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_getroute={0x1c, 0x1a, 0x100, 0x70bd28, 0x25dfdbfe, {0x2, 0x80, 0x20, 0x3, 0xfd, 0x4, 0x0, 0x5, 0x3c00}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4010) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_PARMS={0x14, 0x1, {0x3, 0x823, 0x6, 0x19, 0xf, 0xa, 0x2}}]}}]}, 0x150}}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0xb, 0x2}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x804) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x1b, 0x76, 0x36, 0x20, 0x525, 0x9901, 0x3975, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x84, 0x4, 0x2, 0xc4, 0xc6, 0x1f, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@empty, @multicast2, r3}, 0xc) syz_usb_control_io$uac1(r7, 0x0, 0x0) 6.002651866s ago: executing program 3 (id=4495): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x28, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040), 0x0) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r4) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x6, 0x3}, {0xa, 0x10}, {0xd, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', r11, 0x10, 0x1, 0x10001, 0x7, {{0x17, 0x4, 0x3, 0x8, 0x5c, 0x64, 0x0, 0xd, 0x0, 0x0, @remote, @remote, {[@end, @cipso={0x86, 0x45, 0x3, [{0x5, 0xd, "afc65821dfa27f950d72f6"}, {0x6, 0xa, "37f089abfa59a314"}, {0x7, 0xf, "61a0c94e4d9878bd16ec509fbb"}, {0x5, 0x5, "e9d6ee"}, {0x2, 0x5, "9424fc"}, {0x7, 0x4, "063e"}, {0x5, 0x5, "31160e"}, {0x6, 0x6, "3235fd7d"}]}, @end]}}}}}) r12 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000300000000000000ffff20000a0080000000", @ANYRES32=0x0, @ANYRES16=r0], 0x23c}}, 0x0) 5.219359979s ago: executing program 2 (id=4496): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xb}, &(0x7f0000000380)=0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000780)=ANY=[@ANYBLOB="7c02000013002904000000000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000080ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40105"], 0x27c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000dbdf255d00000008000300", @ANYRES32, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x24004804}, 0x20000000) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 4.849385877s ago: executing program 2 (id=4497): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r2, r1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) io_setup(0x30, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = gettid() kcmp(r6, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) (async) syz_io_uring_setup(0x70f3, &(0x7f0000000180)={0x0, 0xdb0c, 0x8, 0xfffffffe, 0x24000}, 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) r7 = shmget$private(0x0, 0x4000, 0xa4, &(0x7f0000ff9000/0x4000)=nil) shmat(r7, &(0x7f0000ffe000/0x2000)=nil, 0x5000) (async, rerun: 64) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000340)=@in={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000008400000000000000d4000080ffff0500180000000000000084000000000000000900040000000100ff56e7bc8a517ab7001800000000009bff01a377d771d635cd7200008400000000000000000208000700000470000000000000008400000001000000cef3020002000000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000060000000f00000000000000"], 0x90, 0x4004001}, {&(0x7f0000001180)=@in6={0xa, 0x4e22, 0xfffff4bb, @mcast2, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=[@init={0x18, 0x84, 0x0, {0xec, 0xe, 0x10, 0x5}}], 0x18, 0x48000}, {0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f00000016c0)}], 0x3, 0x20004040) (rerun: 64) shmctl$IPC_STAT(r7, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r8, 0x10200, 0x40000}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 4.650911935s ago: executing program 6 (id=4498): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x800000, {0x2, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x34}}, 0xea5bc50b619dd77e) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x439ee000, 0x0, 0x35, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd27, 0x25dfdbff, {0x2, 0x20, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_OIF={0x8}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x80}}, 0x8000) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000fc1000/0x1000)=nil, 0x1000}, 0x5}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) getrandom(&(0x7f00000001c0)=""/91, 0x5b, 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) unshare(0x2a020400) shmget$private(0x0, 0xfffffffffeffffff, 0x0, &(0x7f0000fff000/0x1000)=nil) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x800000}) 4.547353651s ago: executing program 4 (id=4499): prctl$PR_GET_FPEXC(0xb, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mprotect(&(0x7f0000a64000/0x1000)=nil, 0x1000, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0xf) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/4120, 0x1018}], 0x1, 0x7ff, 0x0) 4.208563709s ago: executing program 9 (id=4500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x200400) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x1ff, 0x1, 0x10}, 0x1, 0x101, 0x80}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000009060102000000004e220000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040961b09000000000000010902240001"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x8c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x101}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x70dbb975}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000801}, 0x40000) 3.770960289s ago: executing program 2 (id=4501): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000001c0)={0x200f}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000440)={0x980000, 0x9, 0x8, r5, 0x0, &(0x7f00000003c0)={0xa00964, 0x40, '\x00', @ptr=0x3}}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@random="3ce92d52943d14e3e8e9904120bad3cae371d82e0445b99d8ec3e4c16598828a", 0x20, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3.373367243s ago: executing program 6 (id=4502): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r7 = syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x7495, 0x0, 0x2, 0x29e}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f00000000c0)=@in={0x2, 0x4e21, @multicast1}, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x67f, 0x64, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x0, 0x0, 0x240024e}, &(0x7f0000000080), &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet(r11, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r11, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) 3.099790943s ago: executing program 3 (id=4503): socket$igmp(0x2, 0x3, 0x2) 2.793623231s ago: executing program 3 (id=4504): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r2) inotify_init() inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x10000020) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x3, 0x4, 0x2}}, 0xa) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005124e4407c0500222946010203010902240001fc0000000904fe01"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) (async) creat(&(0x7f0000000100)='./file0\x00', 0x7a) (async) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) (async) close(r2) (async) inotify_init() (async) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x10000020) (async) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x3, 0x4, 0x2}}, 0xa) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005124e4407c0500222946010203010902240001fc0000000904fe01"], 0x0) (async) 2.229339065s ago: executing program 9 (id=4505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r5 = socket(0x10, 0x800, 0x7fff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="648456e3", @ANYRES16=0x0, @ANYBLOB="00082abd7000fcdbdf25770000000800ef000a0000000800ef00090000000800ef00040000000800ef00000000000500ee000f0000000500ee00030000000800ef00030000000500ee00020000000800ef00090000000500ee0004000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000e20000/0xb000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000000), 0x20000328) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="d0929072bc056b846d0b2fc52620d5390fc6e6d0f1dfc6c3817f659166963c104308", @ANYRES16=r6, @ANYBLOB="08002bbd7000fbdbdf255d00000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff0f0000090000002800a6800a00060008021100000000000a00060008021100000100000a00060008021100000000000800a500000000000800a500000000000800a50001000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008040) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x4c, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0xf}, {0x0, 0xf}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xb7c}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0xa00000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 2.127575352s ago: executing program 3 (id=4506): syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010070000904000000010100000a240104000d02020208240400000000000000010000010200000904010101010200000b240202900b08000236df09050109000400000007250100000000090402", @ANYRES64], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r1, 0x107, 0x2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @u32=0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.130831746s ago: executing program 3 (id=4507): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f00000004c0)=[@code={0xa, 0x7b, {"420f01c966bad104b80d000000ef0f20e035080000000f22e048b86d1e0000000000000f23d00f21f835100000010f23f8c403f9164b6c0e66baf80cb884f7e18eef66bafc0cec650f183eb805000000b98ee200000f01d90f78048cb9800000c00f3235008000000f30"}}, @wrmsr={0x65, 0x20, {0xaa8, 0xfffffffffffffff7}}, @rdmsr={0x66, 0x18, {0x669}}, @nested_load_code={0x12e, 0x61, {0x3, "66b8be000f00d84f0fc76ba3660f6575050fc76e7cc402719e2c1436660f382307c4e2b990148766baa00066b893d066ef66bad004b000eeb9570a0000b800000000ba000000000f30"}}, @wr_drn={0x68, 0x20, {0x7, 0x4}}, @wr_crn={0x67, 0x20, {0x0, 0x7}}, @nested_vmresume={0x130, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xf87d, 0x4}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro64=0x2401, 0x6, 0x3, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @uexit={0x0, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest16=0x800, 0x1, 0x337, 0x5}}, @out_dx={0x6a, 0x28, {0xff, 0x6, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_vmresume={0x130, 0x18}], 0x284}) ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000480)=0x2288, 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r2, 0xa, 0x21) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x2, 0x8001, 0xb, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x10, 0x8, 0xbe2}}) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@remote, @local, r5}, 0xc) close_range(r2, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f00000004c0)=[@code={0xa, 0x7b, {"420f01c966bad104b80d000000ef0f20e035080000000f22e048b86d1e0000000000000f23d00f21f835100000010f23f8c403f9164b6c0e66baf80cb884f7e18eef66bafc0cec650f183eb805000000b98ee200000f01d90f78048cb9800000c00f3235008000000f30"}}, @wrmsr={0x65, 0x20, {0xaa8, 0xfffffffffffffff7}}, @rdmsr={0x66, 0x18, {0x669}}, @nested_load_code={0x12e, 0x61, {0x3, "66b8be000f00d84f0fc76ba3660f6575050fc76e7cc402719e2c1436660f382307c4e2b990148766baa00066b893d066ef66bad004b000eeb9570a0000b800000000ba000000000f30"}}, @wr_drn={0x68, 0x20, {0x7, 0x4}}, @wr_crn={0x67, 0x20, {0x0, 0x7}}, @nested_vmresume={0x130, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xf87d, 0x4}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro64=0x2401, 0x6, 0x3, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @uexit={0x0, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest16=0x800, 0x1, 0x337, 0x5}}, @out_dx={0x6a, 0x28, {0xff, 0x6, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_vmresume={0x130, 0x18}], 0x284}) (async) ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000480)=0x2288, 0x4) (async) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) (async) fcntl$setsig(r2, 0xa, 0x21) (async) fcntl$setlease(r2, 0x400, 0x1) (async) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) creat(&(0x7f0000000100)='./file0\x00', 0x0) (async) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x2, 0x8001, 0xb, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x10, 0x8, 0xbe2}}) (async) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@remote, @local, r5}, 0xc) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) 1.0288387s ago: executing program 9 (id=4508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4814) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, 0x0, 0x0}, 0x20) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r6, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 395.450328ms ago: executing program 2 (id=4509): prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mprotect(&(0x7f0000a64000/0x1000)=nil, 0x1000, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/4120, 0x1018}], 0x1, 0x7ff, 0x0) 221.329799ms ago: executing program 6 (id=4510): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000002240), 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000300)=0x4) 171.184006ms ago: executing program 3 (id=4511): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c96"]) read$FUSE(r0, &(0x7f0000006280)={0x2020, 0x0, 0x0}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x40, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x800000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0x237, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xd, 0x10000, 0x9, 0x2, 0x3, 0x8000, 0x2, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x162}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x8, 0x1}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) io_uring_enter(r5, 0x3517, 0x173d, 0x42, 0x0, 0x0) r8 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x6}) unshare(0x2a020400) 0s ago: executing program 4 (id=4512): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x800000, {0x2, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x34}}, 0xea5bc50b619dd77e) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x439ee000, 0x0, 0x35, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd27, 0x25dfdbff, {0x2, 0x20, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_OIF={0x8}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x80}}, 0x8000) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000fc1000/0x1000)=nil, 0x1000}, 0x5}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) getrandom(&(0x7f00000001c0)=""/91, 0x5b, 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) unshare(0x2a020400) shmget$private(0x0, 0xfffffffffeffffff, 0x0, &(0x7f0000fff000/0x1000)=nil) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x800000}) kernel console output (not intermixed with test programs): 143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.877093][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.424072][T21983] input: syz0 as /devices/virtual/input/input126 [ 1150.569685][T21990] openvswitch: netlink: IP tunnel dst address not specified [ 1150.649618][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4016'. [ 1152.353021][T16908] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1152.550020][T16908] usb 9-1: Using ep0 maxpacket: 32 [ 1152.611546][T16908] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1152.639949][T16908] usb 9-1: config 0 has no interface number 0 [ 1152.672223][T16908] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1152.696529][T16908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.720035][T16908] usb 9-1: Product: syz [ 1152.724307][T16908] usb 9-1: Manufacturer: syz [ 1152.750166][T16908] usb 9-1: SerialNumber: syz [ 1152.781103][T16908] usb 9-1: config 0 descriptor?? [ 1152.801578][T16908] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1153.020215][T16908] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1153.095371][T16908] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1154.550453][ T30] audit: type=1326 audit(1764712958.385:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.0.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13298f749 code=0x7ffc0000 [ 1154.654130][ T30] audit: type=1326 audit(1764712958.385:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.0.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13298f749 code=0x7ffc0000 [ 1154.762040][T22050] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1154.930635][ T30] audit: type=1326 audit(1764712958.405:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.0.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe13298f749 code=0x7ffc0000 [ 1154.989127][ T30] audit: type=1326 audit(1764712958.405:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.0.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13298f749 code=0x7ffc0000 [ 1155.240911][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1155.273108][ T30] audit: type=1326 audit(1764712958.405:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.0.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13298f749 code=0x7ffc0000 [ 1155.289606][ T5963] usb 9-1: USB disconnect, device number 71 [ 1155.314205][ T30] audit: type=1326 audit(1764712958.405:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.0.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe13298f749 code=0x7ffc0000 [ 1155.367268][ T5963] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1155.409218][ T5963] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1155.481511][ T5963] quatech2 9-1:0.51: device disconnected [ 1155.537112][ T30] audit: type=1326 audit(1764712958.405:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.0.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13298f749 code=0x7ffc0000 [ 1155.744406][ T30] audit: type=1326 audit(1764712958.405:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.0.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe13298f749 code=0x7ffc0000 [ 1155.956637][ T30] audit: type=1326 audit(1764712958.405:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.0.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13298f749 code=0x7ffc0000 [ 1155.983330][ T30] audit: type=1326 audit(1764712958.405:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.0.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13298f749 code=0x7ffc0000 [ 1156.870172][T22087] netlink: 'syz.8.4032': attribute type 10 has an invalid length. [ 1156.979945][ T43] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1157.102360][T22087] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1157.254243][ T43] usb 6-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.00 [ 1157.267004][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.314999][ T43] usb 6-1: config 0 descriptor?? [ 1157.320445][ T6017] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1157.386585][ T43] usbhid 6-1:0.0: can't add hid device: -22 [ 1157.440595][ T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 1157.519895][ T6017] usb 9-1: Using ep0 maxpacket: 32 [ 1157.561233][ T6017] usb 9-1: config 0 has an invalid interface number: 217 but max is 0 [ 1157.660085][ T6017] usb 9-1: config 0 has no interface number 0 [ 1157.709450][ T6017] usb 9-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1157.718845][ T6017] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.730422][T22083] wg1: entered promiscuous mode [ 1157.735330][T22083] wg1: entered allmulticast mode [ 1157.863031][ T6017] usb 9-1: Product: syz [ 1157.867328][ T6017] usb 9-1: Manufacturer: syz [ 1157.876628][ T6017] usb 9-1: SerialNumber: syz [ 1157.974512][ T6017] usb 9-1: config 0 descriptor?? [ 1158.027628][ T6017] ftdi_sio 9-1:0.217: FTDI USB Serial Device converter detected [ 1158.037938][ T6017] usb 9-1: Detected SIO [ 1158.046707][ T6017] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1158.526556][T22098] input: syz0 as /devices/virtual/input/input127 [ 1158.561600][T22098] openvswitch: netlink: IP tunnel dst address not specified [ 1158.675003][T22098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4035'. [ 1159.635877][ T5963] usb 9-1: USB disconnect, device number 72 [ 1159.657202][ T5963] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1159.695226][ T5963] ftdi_sio 9-1:0.217: device disconnected [ 1160.289890][ T6491] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1160.440385][ T6491] usb 9-1: Using ep0 maxpacket: 16 [ 1160.452046][ T6491] usb 9-1: config 0 has an invalid interface number: 63 but max is 0 [ 1160.477357][ T6491] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.498662][ T6491] usb 9-1: config 0 has no interface number 0 [ 1160.505563][ T6491] usb 9-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1160.527857][ T6491] usb 9-1: config 0 interface 63 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.543396][ T6491] usb 9-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=41.e6 [ 1160.553963][ T6491] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.581685][ T6491] usb 9-1: config 0 descriptor?? [ 1160.841885][ T6491] usb 9-1: USB disconnect, device number 73 [ 1161.010196][T22126] input: syz0 as /devices/virtual/input/input128 [ 1161.055267][T22126] openvswitch: netlink: IP tunnel dst address not specified [ 1161.066233][T22126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4042'. [ 1161.212941][ T5963] usb 6-1: USB disconnect, device number 16 [ 1161.526284][T22131] netlink: 'syz.5.4043': attribute type 1 has an invalid length. [ 1161.665395][T22131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1161.858642][T22137] loop6: detected capacity change from 0 to 524288000 [ 1161.906733][T22137] netlink: 388 bytes leftover after parsing attributes in process `syz.8.4044'. [ 1163.257885][T22147] input: syz0 as /devices/virtual/input/input129 [ 1163.297634][T22147] openvswitch: netlink: IP tunnel dst address not specified [ 1163.306416][T22147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4047'. [ 1163.628756][T22151] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4049'. [ 1163.681289][T22151] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1163.746803][T22152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.765950][T22164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.807911][T22164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.110113][T22164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.177224][T22164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.317204][T22176] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1166.373555][T22179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.425091][T22179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.514895][T22179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.570369][T22179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.692173][T22170] netlink: 'syz.0.4055': attribute type 4 has an invalid length. [ 1166.749499][T22180] netlink: 'syz.0.4055': attribute type 4 has an invalid length. [ 1168.226208][T22198] netlink: 'syz.8.4060': attribute type 4 has an invalid length. [ 1168.262651][T22202] FAULT_INJECTION: forcing a failure. [ 1168.262651][T22202] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.297174][T22202] CPU: 1 UID: 0 PID: 22202 Comm: syz.5.4063 Not tainted syzkaller #0 PREEMPT(full) [ 1168.297206][T22202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1168.297218][T22202] Call Trace: [ 1168.297227][T22202] [ 1168.297237][T22202] dump_stack_lvl+0x189/0x250 [ 1168.297271][T22202] ? __pfx____ratelimit+0x10/0x10 [ 1168.297311][T22202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.297333][T22202] ? __pfx__printk+0x10/0x10 [ 1168.297364][T22202] ? __pfx___might_resched+0x10/0x10 [ 1168.297384][T22202] ? fs_reclaim_acquire+0x7d/0x100 [ 1168.297410][T22202] should_fail_ex+0x414/0x560 [ 1168.297443][T22202] should_failslab+0xa8/0x100 [ 1168.297467][T22202] __kmalloc_cache_noprof+0x6f/0x6e0 [ 1168.297496][T22202] ? ipv6_flowlabel_opt+0xe76/0x23a0 [ 1168.297523][T22202] ipv6_flowlabel_opt+0xe76/0x23a0 [ 1168.297550][T22202] ? __lock_acquire+0x6b6/0x2cf0 [ 1168.297579][T22202] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1168.297624][T22202] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1168.297650][T22202] ? lockdep_hardirqs_on+0x98/0x140 [ 1168.297676][T22202] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1168.297716][T22202] do_ipv6_setsockopt+0xdb0/0x2eb0 [ 1168.297754][T22202] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1168.297788][T22202] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1168.297823][T22202] ? __lock_acquire+0x6b6/0x2cf0 [ 1168.297865][T22202] ? __pfx___might_resched+0x10/0x10 [ 1168.297891][T22202] ? ksys_write+0x1cb/0x250 [ 1168.297926][T22202] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1168.297944][T22202] ? aa_sk_perm+0x160/0x920 [ 1168.297969][T22202] ? aa_sk_perm+0x7f0/0x920 [ 1168.297997][T22202] ? __pfx_aa_sk_perm+0x10/0x10 [ 1168.298022][T22202] ? aa_sock_opt_perm+0xff/0x1a0 [ 1168.298052][T22202] ipv6_setsockopt+0x59/0x170 [ 1168.298069][T22202] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1168.298099][T22202] do_sock_setsockopt+0x17c/0x1b0 [ 1168.298134][T22202] __x64_sys_setsockopt+0x13f/0x1b0 [ 1168.298170][T22202] do_syscall_64+0xfa/0xf80 [ 1168.298188][T22202] ? lockdep_hardirqs_on+0x98/0x140 [ 1168.298217][T22202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.298238][T22202] ? clear_bhb_loop+0x60/0xb0 [ 1168.298272][T22202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.298303][T22202] RIP: 0033:0x7f5878f8f749 [ 1168.298324][T22202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.298343][T22202] RSP: 002b:00007f5879d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1168.298367][T22202] RAX: ffffffffffffffda RBX: 00007f58791e5fa0 RCX: 00007f5878f8f749 [ 1168.298388][T22202] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 1168.298402][T22202] RBP: 00007f5879d7c090 R08: 0000000000000020 R09: 0000000000000000 [ 1168.298416][T22202] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1168.298429][T22202] R13: 00007f58791e6038 R14: 00007f58791e5fa0 R15: 00007f587930fa28 [ 1168.298466][T22202] [ 1168.610136][T22197] netlink: 'syz.8.4060': attribute type 4 has an invalid length. [ 1168.860985][T22201] tipc: Enabled bearer , priority 0 [ 1168.917019][T22201] syzkaller0: entered promiscuous mode [ 1168.924268][T22201] syzkaller0: entered allmulticast mode [ 1169.111639][T22206] tipc: Resetting bearer [ 1169.121501][T22200] tipc: Resetting bearer [ 1169.182719][T22200] tipc: Disabling bearer [ 1169.699900][ T6491] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1169.874953][ T6491] usb 9-1: Using ep0 maxpacket: 16 [ 1169.925921][ T6491] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.948583][ T6491] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1169.980349][ T6491] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1169.998318][ T6491] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.024884][ T6491] usb 9-1: Product: syz [ 1170.039274][ T6491] usb 9-1: Manufacturer: syz [ 1170.063134][ T6491] usb 9-1: SerialNumber: syz [ 1170.242159][T22227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.276705][T22227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.518469][ T6491] usb 9-1: cannot find UAC_HEADER [ 1170.578266][ T6491] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1170.613661][ T6491] usb 9-1: USB disconnect, device number 74 [ 1170.660648][ T6541] udevd[6541]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1171.520014][ T6491] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1171.712541][ T6491] usb 6-1: config 228 has an invalid descriptor of length 138, skipping remainder of the config [ 1171.735290][ T6491] usb 6-1: config 228 has 0 interfaces, different from the descriptor's value: 1 [ 1171.747497][ T5963] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1171.772270][ T6491] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3233, bcdDevice= 0.00 [ 1171.791415][ T6491] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.923483][ T5963] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1171.953806][ T5963] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1171.968734][ T5963] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1172.003121][ T5963] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1172.022884][ T5963] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1172.038729][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1172.063928][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1172.080280][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1172.094916][ T5963] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1172.107206][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1172.114776][ T6491] usb 6-1: string descriptor 0 read error: -32 [ 1172.126296][ T6491] usb 6-1: USB disconnect, device number 17 [ 1172.148566][ T5963] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1172.168657][ T5963] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1172.193856][ T5963] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1172.238493][ T5963] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1172.276798][ T5963] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1172.313140][ T5963] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1172.361044][ T5963] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1172.382503][T22249] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4076'. [ 1172.397063][ T5963] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1172.429010][ T5963] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1172.463225][ T5963] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1172.489262][ T5963] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1172.516360][ T5963] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1172.545912][ T5963] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1172.569594][ T5963] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1172.597159][ T5963] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1172.637742][ T5963] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1172.645342][T22255] netlink: 'syz.0.4078': attribute type 1 has an invalid length. [ 1172.682101][ T5963] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1172.726833][ T5963] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1172.789263][ T5963] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1172.840458][ T5963] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1172.855666][T22255] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1172.864987][ T5963] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1172.899077][ T5963] usb 9-1: Product: syz [ 1172.934351][ T5963] usb 9-1: Manufacturer: syz [ 1172.950976][ T5963] usb 9-1: SerialNumber: syz [ 1172.974944][ T5963] usb 9-1: config 0 descriptor?? [ 1172.993798][ T5963] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 1173.322803][ C1] usb 9-1: yurex_control_callback - control failed: -71 [ 1173.334602][ T1213] usb 9-1: USB disconnect, device number 75 [ 1173.408014][ T1213] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 1173.937355][T22277] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4083'. [ 1173.955524][T22273] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1173.962227][T22273] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1173.999271][T22273] vhci_hcd vhci_hcd.0: Device attached [ 1174.180019][ T1213] vhci_hcd: vhci_device speed not set [ 1174.280712][ T1213] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1174.363224][T22278] vhci_hcd: connection reset by peer [ 1174.387910][ T3491] vhci_hcd: stop threads [ 1174.413327][ T3491] vhci_hcd: release socket [ 1174.446261][ T3491] vhci_hcd: disconnect device [ 1175.175529][T22291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1175.453425][T22299] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4090'. [ 1175.778610][T22302] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1177.507619][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.514284][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.093201][T22337] tipc: Started in network mode [ 1178.110005][T22337] tipc: Node identity 6e80bdeed3b6, cluster identity 4711 [ 1178.117766][T22337] tipc: Enabled bearer , priority 0 [ 1178.182734][T22338] syzkaller0: entered promiscuous mode [ 1178.209886][T22338] syzkaller0: entered allmulticast mode [ 1178.444283][T22333] tipc: Resetting bearer [ 1178.694030][T22345] netlink: 'syz.8.4100': attribute type 21 has an invalid length. [ 1178.741630][T22332] tipc: Resetting bearer [ 1178.862857][T22332] tipc: Disabling bearer [ 1178.911960][T22349] input: syz0 as /devices/virtual/input/input130 [ 1178.981441][T22351] netlink: 'syz.6.4096': attribute type 4 has an invalid length. [ 1179.065238][T22352] netlink: 'syz.6.4096': attribute type 4 has an invalid length. [ 1179.087452][ T5921] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1179.152394][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4101'. [ 1179.237773][T22345] netlink: 'syz.8.4100': attribute type 6 has an invalid length. [ 1179.279244][T22345] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4100'. [ 1179.295257][ T5921] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1179.324029][ T5921] usb 9-1: config 0 has no interface number 0 [ 1179.390780][ T1213] vhci_hcd: vhci_device speed not set [ 1179.419926][ T5921] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1179.559940][ T5921] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.568090][ T5921] usb 9-1: Product: syz [ 1179.649586][ T5921] usb 9-1: Manufacturer: syz [ 1179.709939][ T5921] usb 9-1: SerialNumber: syz [ 1179.718241][ T5921] usb 9-1: config 0 descriptor?? [ 1179.980279][ T5921] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1180.017663][ T5921] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1180.061911][ T5921] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1180.080115][ T5921] usb 9-1: media controller created [ 1180.097130][T22360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4102'. [ 1180.182303][T22345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.210366][T22345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.243160][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1180.337623][T22348] netlink: 'syz.8.4100': attribute type 33 has an invalid length. [ 1180.347297][T22348] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4100'. [ 1180.365768][T22348] `: renamed from team0 (while UP) [ 1180.780022][ T5963] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1180.956420][ T5963] usb 6-1: config 3 has an invalid interface number: 161 but max is 0 [ 1180.986884][ T5963] usb 6-1: config 3 has no interface number 0 [ 1181.012838][ T5963] usb 6-1: config 3 interface 161 has no altsetting 0 [ 1181.054430][ T5963] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 1181.078685][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.089405][ T5963] usb 6-1: Product: syz [ 1181.096061][T22374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.106625][T22374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.118495][ T5963] usb 6-1: Manufacturer: syz [ 1181.147279][ T5963] usb 6-1: SerialNumber: syz [ 1181.392394][ T5921] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1182.089464][T22388] input: syz0 as /devices/virtual/input/input131 [ 1182.122184][T22387] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1182.214548][T22388] openvswitch: netlink: IP tunnel dst address not specified [ 1182.249259][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4108'. [ 1183.443179][ T5963] go7007 6-1:3.161: probe with driver go7007 failed with error -12 [ 1183.574872][ T5963] usb 6-1: USB disconnect, device number 18 [ 1184.211175][T22400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.302664][T22400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.365609][T22381] syz.2.4107 (22381): drop_caches: 2 [ 1184.415012][T22400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.604794][T22400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.093271][T22429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.121594][T22429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.461580][T22443] netlink: 'syz.6.4122': attribute type 4 has an invalid length. [ 1187.534151][T22444] netlink: 'syz.6.4122': attribute type 4 has an invalid length. [ 1191.204604][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4133'. [ 1193.399706][T22502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.408963][T22502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.126973][T22514] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4143'. [ 1195.329505][T22516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4144'. [ 1195.424057][T12761] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1195.437079][T12761] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1195.446177][T12761] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1195.456587][T12761] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1195.468049][T12761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1196.343412][T22518] chnl_net:caif_netlink_parms(): no params data found [ 1196.688167][T22518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.702768][T22518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.749640][T12761] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1196.759338][T22518] bridge_slave_0: entered allmulticast mode [ 1196.782711][T22518] bridge_slave_0: entered promiscuous mode [ 1196.880301][T22518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.895590][T22518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.930937][T22518] bridge_slave_1: entered allmulticast mode [ 1196.949541][T22518] bridge_slave_1: entered promiscuous mode [ 1197.012277][T22518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.028885][T22542] netlink: 'syz.2.4149': attribute type 4 has an invalid length. [ 1197.039667][T22518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.081694][T22518] team0: Port device team_slave_0 added [ 1197.089338][T22518] team0: Port device team_slave_1 added [ 1197.110294][T22543] netlink: 'syz.2.4149': attribute type 4 has an invalid length. [ 1197.142941][T22518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.158571][T22518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.206642][T22518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.219596][T22518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.229960][T22518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.269352][T22518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.457311][T22518] hsr_slave_0: entered promiscuous mode [ 1197.463908][T22518] hsr_slave_1: entered promiscuous mode [ 1197.470774][T22518] debugfs: 'hsr0' already exists in 'hsr' [ 1197.476657][T22518] Cannot create hsr debugfs directory [ 1197.560374][T12761] Bluetooth: hci4: command tx timeout [ 1197.933511][T22518] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1198.013996][T22548] input: syz0 as /devices/virtual/input/input132 [ 1198.034472][T22548] openvswitch: netlink: IP tunnel dst address not specified [ 1198.055470][T22548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4150'. [ 1198.700604][T22518] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1198.745144][T22555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.777153][T22555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.808671][T22518] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1198.837650][T22518] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1198.959360][T22518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.979204][T22518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.018837][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.026096][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.061382][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.068504][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.258085][T22518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.436851][T22518] veth0_vlan: entered promiscuous mode [ 1199.501361][T22518] veth1_vlan: entered promiscuous mode [ 1199.627297][T22518] veth0_macvtap: entered promiscuous mode [ 1199.634745][T12761] Bluetooth: hci4: command tx timeout [ 1199.669667][T22518] veth1_macvtap: entered promiscuous mode [ 1199.786935][T22518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.830944][T22576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4158'. [ 1199.852623][T22576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4158'. [ 1199.868082][T22518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.900247][T22576] sit1: entered allmulticast mode [ 1199.925654][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.953935][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.000404][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.009188][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.241064][T11166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.258628][T11166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.371963][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.403383][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.710178][T12761] Bluetooth: hci4: command tx timeout [ 1201.971713][T14493] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1202.000767][T14493] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1202.011223][T14493] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1202.020180][T14493] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1202.027892][T14493] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1202.443956][T22604] tipc: Enabled bearer , priority 0 [ 1202.454810][T22604] syzkaller0: entered promiscuous mode [ 1202.461720][T22604] syzkaller0: entered allmulticast mode [ 1202.496055][T22604] tipc: Resetting bearer [ 1202.505881][T22603] tipc: Resetting bearer [ 1202.533565][T22603] tipc: Disabling bearer [ 1202.927486][T22614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.979988][T22614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.130371][T22600] chnl_net:caif_netlink_parms(): no params data found [ 1203.152604][T22620] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4167'. [ 1203.361644][T22600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.379647][T22600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.398236][T22600] bridge_slave_0: entered allmulticast mode [ 1203.418721][T22600] bridge_slave_0: entered promiscuous mode [ 1203.443262][T22600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.460466][T22600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.476532][T22600] bridge_slave_1: entered allmulticast mode [ 1203.494120][T22600] bridge_slave_1: entered promiscuous mode [ 1203.573091][T22600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.603913][T22600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.715239][T22600] team0: Port device team_slave_0 added [ 1203.750950][T22600] team0: Port device team_slave_1 added [ 1203.791052][T14493] Bluetooth: hci4: command tx timeout [ 1203.840291][T22600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.868734][T22600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.894836][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.969279][T22600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.020915][T22600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.057408][T22600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.116402][T22600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1204.117269][T14493] Bluetooth: hci6: command tx timeout [ 1204.283616][T22636] netlink: 'syz.6.4169': attribute type 1 has an invalid length. [ 1204.819614][T22636] bond3: entered promiscuous mode [ 1204.826437][T22636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1204.890789][T22600] hsr_slave_0: entered promiscuous mode [ 1204.915259][T22600] hsr_slave_1: entered promiscuous mode [ 1204.937166][T22600] debugfs: 'hsr0' already exists in 'hsr' [ 1204.943829][T22600] Cannot create hsr debugfs directory [ 1206.236038][T22662] raw-gadget.20 gadget.6: failed to queue suspend event [ 1206.250342][T14493] Bluetooth: hci6: command tx timeout [ 1208.012380][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1208.195217][T14493] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1208.270065][T14493] Bluetooth: hci6: command tx timeout [ 1208.365083][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1208.371363][T22701] raw-gadget.20 gadget.6: failed to queue resume event [ 1208.451231][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1208.542454][ T24] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1208.706221][ T24] usb 6-1: string descriptor 0 read error: -22 [ 1208.764369][ T24] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1208.785061][T22701] raw-gadget.20 gadget.6: failed to queue suspend event [ 1208.824934][T22600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1208.886978][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.924835][T22600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1209.067356][ T24] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1209.102892][T22600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1209.152685][T22712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.184523][T22600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1209.195784][T22712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.205093][T22711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.228860][T22711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.321058][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1209.352782][ T6017] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1209.521329][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1209.532516][ T6017] usb 10-1: Using ep0 maxpacket: 8 [ 1209.541541][ T6017] usb 10-1: too many configurations: 249, using maximum allowed: 8 [ 1209.629828][ T24] usb 6-1: media controller created [ 1209.677146][ T6017] usb 10-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 1209.696986][ T6017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 1209.722117][ T6017] usb 10-1: Product: syz [ 1209.738777][ T6017] usb 10-1: Manufacturer: syz [ 1209.745714][T22600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.762187][ T6017] usb 10-1: SerialNumber: syz [ 1209.788307][ T6017] usb 10-1: config 0 descriptor?? [ 1209.812050][T22600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.861621][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.868832][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.986756][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1210.023886][ T6017] mdc800 10-1:0.0: probe fails -> wrong Number of Configuration [ 1210.068560][T11459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.075883][T11459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.095185][ T6017] usb 10-1: USB disconnect, device number 2 [ 1210.352157][T14493] Bluetooth: hci6: command tx timeout [ 1210.416868][T22600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1210.461832][T22600] veth0_vlan: entered promiscuous mode [ 1210.480074][T22600] veth1_vlan: entered promiscuous mode [ 1210.643908][T22600] veth0_macvtap: entered promiscuous mode [ 1210.675318][T22600] veth1_macvtap: entered promiscuous mode [ 1210.824476][T22600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.145055][T22600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.178885][T22740] tipc: Started in network mode [ 1211.197970][T22740] tipc: Node identity 6e29303dcc35, cluster identity 4711 [ 1211.216930][T22740] tipc: Enabled bearer , priority 0 [ 1211.248407][T22741] syzkaller0: entered promiscuous mode [ 1211.276591][T22741] syzkaller0: entered allmulticast mode [ 1211.346142][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.407763][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.556101][T22741] tipc: Resetting bearer [ 1211.577299][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.624679][T22739] tipc: Resetting bearer [ 1211.643081][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 1211.694034][T22752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1211.721714][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1211.721735][ T30] audit: type=1326 audit(1764713015.555:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22750 comm="syz.2.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1211.822406][T22739] tipc: Disabling bearer [ 1211.874487][ T30] audit: type=1326 audit(1764713015.585:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22750 comm="syz.2.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1211.956338][ T30] audit: type=1326 audit(1764713015.595:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22750 comm="syz.2.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1212.036891][ T30] audit: type=1326 audit(1764713015.605:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22750 comm="syz.2.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1212.093760][ T30] audit: type=1326 audit(1764713015.605:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22750 comm="syz.2.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1212.159929][ T30] audit: type=1326 audit(1764713015.605:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22750 comm="syz.2.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1212.210602][ T30] audit: type=1326 audit(1764713015.605:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22750 comm="syz.2.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1212.272184][ T30] audit: type=1326 audit(1764713015.605:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22750 comm="syz.2.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1212.346585][ T30] audit: type=1326 audit(1764713015.605:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22750 comm="syz.2.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1212.374133][T10732] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.390438][ T30] audit: type=1326 audit(1764713015.605:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22750 comm="syz.2.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1212.548740][ T24] usb 6-1: USB disconnect, device number 19 [ 1212.764310][ T9341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.796454][ T9341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.954143][ T6031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.996330][ T6031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.495518][T22792] input: syz0 as /devices/virtual/input/input134 [ 1213.533634][T22788] raw-gadget.20 gadget.6: failed to queue resume event [ 1213.643206][T22799] fuse: Bad value for 'fd' [ 1213.786232][T22792] openvswitch: netlink: IP tunnel dst address not specified [ 1213.818446][T22800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4160'. [ 1214.414312][T22808] raw-gadget.20 gadget.6: failed to queue suspend event [ 1214.940052][T22821] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4200'. [ 1216.732279][T22843] syz_tun: entered allmulticast mode [ 1216.750205][ T5963] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1216.996442][ T5963] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.101970][ T5963] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1217.119881][ T5963] usb 10-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1217.139625][ T5963] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.182221][ T5963] usb 10-1: config 0 descriptor?? [ 1218.408998][T22870] fuse: Bad value for 'fd' [ 1220.064932][T14493] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1220.625332][T22900] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4212'. [ 1221.083310][T16908] usb 10-1: USB disconnect, device number 3 [ 1221.547207][T22905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.571859][T22905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.132267][ T5963] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1222.300297][ T5963] usb 4-1: Using ep0 maxpacket: 8 [ 1222.334184][ T5963] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1222.366322][ T5963] usb 4-1: config 0 has no interface number 0 [ 1222.380912][ T5963] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1222.430292][ T5963] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1222.470792][ T5963] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1222.509544][ T5963] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1222.553665][ T5963] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1222.574303][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.613238][ T5963] usb 4-1: config 0 descriptor?? [ 1222.649034][ T5963] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1223.062144][T22948] fuse: Bad value for 'fd' [ 1223.303823][T22957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.353092][T22957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.463504][T22961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.492344][T22961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.523099][T22964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.533740][T22964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1224.234956][T22970] tipc: Enabled bearer , priority 0 [ 1224.266647][T22970] syzkaller0: entered promiscuous mode [ 1224.283298][T22970] syzkaller0: entered allmulticast mode [ 1224.362970][T22970] tipc: Resetting bearer [ 1224.388987][T22968] tipc: Resetting bearer [ 1224.488363][T22968] tipc: Disabling bearer [ 1225.073123][T22979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4226'. [ 1225.255284][T22979] kvm: kvm [22978]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 1225.287269][T22979] kvm: kvm [22978]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x2 [ 1225.324922][T22979] kvm: kvm [22978]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x1 [ 1225.415716][T22979] kvm_intel: kvm [22978]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 1225.438659][T22979] kvm_intel: kvm [22978]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 1225.462625][T22979] kvm_intel: kvm [22978]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 1225.556083][T22979] kvm_intel: kvm [22978]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 1225.951326][ T5963] usb 4-1: USB disconnect, device number 30 [ 1225.984967][ T5963] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1226.293351][T22995] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4227'. [ 1226.811911][T14493] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1228.179890][T16908] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1228.400131][T16908] usb 4-1: Using ep0 maxpacket: 8 [ 1228.436177][T16908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1228.519925][T16908] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1228.599918][T16908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1228.696620][T16908] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1228.730532][T23031] netlink: 388 bytes leftover after parsing attributes in process `syz.9.4231'. [ 1228.768228][T16908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.867509][T23029] loop6: detected capacity change from 0 to 524288000 [ 1228.934379][T16908] usb 4-1: Product: syz [ 1228.938617][T16908] usb 4-1: Manufacturer: syz [ 1229.022953][T16908] usb 4-1: SerialNumber: syz [ 1229.128814][T23029] loop6: unable to read partition table [ 1229.156361][T16908] usb 4-1: config 0 descriptor?? [ 1229.172423][T23029] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 1230.124038][T21429] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1230.136873][T21429] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1230.153841][T21429] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1230.186970][T21429] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1230.199477][T21429] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1230.410176][T16908] usb 4-1: can't set config #0, error -71 [ 1230.472080][T16908] usb 4-1: USB disconnect, device number 31 [ 1230.765564][T21429] Bluetooth: hci0: command 0x0406 tx timeout [ 1231.038986][T23052] syzkaller0: entered promiscuous mode [ 1231.054960][T23052] syzkaller0: entered allmulticast mode [ 1231.091622][T23052] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4235'. [ 1231.151601][T23052] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4235'. [ 1231.537033][T23064] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4236'. [ 1231.772930][T23068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1232.280266][T14493] Bluetooth: hci7: command tx timeout [ 1232.460045][T23068] ip6gre1: entered promiscuous mode [ 1232.476025][T23068] ip6gre1: entered allmulticast mode [ 1232.558323][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1232.606745][ T1213] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1232.615421][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1232.656595][T23045] chnl_net:caif_netlink_parms(): no params data found [ 1232.906463][T23083] netlink: 'syz.9.4238': attribute type 1 has an invalid length. [ 1233.093195][T23092] FAULT_INJECTION: forcing a failure. [ 1233.093195][T23092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.194202][T23092] CPU: 1 UID: 0 PID: 23092 Comm: syz.6.4241 Not tainted syzkaller #0 PREEMPT(full) [ 1233.194227][T23092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1233.194236][T23092] Call Trace: [ 1233.194242][T23092] [ 1233.194248][T23092] dump_stack_lvl+0x189/0x250 [ 1233.194268][T23092] ? __pfx____ratelimit+0x10/0x10 [ 1233.194287][T23092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1233.194300][T23092] ? __pfx__printk+0x10/0x10 [ 1233.194316][T23092] ? __might_fault+0xb0/0x130 [ 1233.194341][T23092] should_fail_ex+0x414/0x560 [ 1233.194360][T23092] _copy_from_user+0x2d/0xb0 [ 1233.194374][T23092] cmsghdr_from_user_compat_to_kern+0x394/0x800 [ 1233.194394][T23092] ? kasan_save_track+0x4f/0x80 [ 1233.194411][T23092] ? kasan_save_track+0x3e/0x80 [ 1233.194434][T23092] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 1233.194454][T23092] ? __lock_acquire+0x6b6/0x2cf0 [ 1233.194477][T23092] ____sys_sendmsg+0x20f/0x820 [ 1233.194499][T23092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1233.194526][T23092] __sys_sendmsg_sock+0x28/0x40 [ 1233.194544][T23092] io_sendmsg+0x1fa/0x580 [ 1233.194567][T23092] __io_issue_sqe+0x181/0x4b0 [ 1233.194581][T23092] ? io_file_get_normal+0xe9/0x2d0 [ 1233.194595][T23092] io_issue_sqe+0x165/0x1060 [ 1233.194614][T23092] io_submit_sqes+0xa44/0x1e40 [ 1233.194645][T23092] __se_sys_io_uring_enter+0x2df/0x2b00 [ 1233.194670][T23092] ? ksys_write+0x1cb/0x250 [ 1233.194690][T23092] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1233.194703][T23092] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1233.194715][T23092] ? __pfx_vfs_write+0x10/0x10 [ 1233.194734][T23092] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1233.194749][T23092] ? __fget_files+0x3a0/0x420 [ 1233.194769][T23092] ? fput+0xa0/0xd0 [ 1233.194784][T23092] ? ksys_write+0x22a/0x250 [ 1233.194802][T23092] ? __pfx_ksys_write+0x10/0x10 [ 1233.194822][T23092] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1233.194837][T23092] do_syscall_64+0xfa/0xf80 [ 1233.194848][T23092] ? lockdep_hardirqs_on+0x98/0x140 [ 1233.194865][T23092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.194878][T23092] ? clear_bhb_loop+0x60/0xb0 [ 1233.194893][T23092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.194905][T23092] RIP: 0033:0x7fa02b78f749 [ 1233.194917][T23092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.194928][T23092] RSP: 002b:00007fa02c626038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1233.194943][T23092] RAX: ffffffffffffffda RBX: 00007fa02b9e5fa0 RCX: 00007fa02b78f749 [ 1233.194953][T23092] RDX: 0000000000a00100 RSI: 0000000000003516 RDI: 0000000000000004 [ 1233.194961][T23092] RBP: 00007fa02c626090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.194969][T23092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.194977][T23092] R13: 00007fa02b9e6038 R14: 00007fa02b9e5fa0 R15: 00007fa02bb0fa28 [ 1233.194997][T23092] [ 1233.510615][T23083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1233.820333][T22761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1233.828685][ T1213] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1234.350356][T14493] Bluetooth: hci7: command tx timeout [ 1236.123409][T23045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.146502][T23045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.210115][T23045] bridge_slave_0: entered allmulticast mode [ 1236.252473][T23045] bridge_slave_0: entered promiscuous mode [ 1236.343145][T23045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.385227][T23045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.415076][T23045] bridge_slave_1: entered allmulticast mode [ 1236.430338][T14493] Bluetooth: hci7: command tx timeout [ 1236.555443][T23045] bridge_slave_1: entered promiscuous mode [ 1236.830035][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1237.822951][T23123] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4247'. [ 1237.831570][T23045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.923123][T23045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.336019][T23045] team0: Port device team_slave_0 added [ 1238.358029][T23135] tipc: Enabled bearer , priority 0 [ 1238.371347][T23045] team0: Port device team_slave_1 added [ 1238.407525][T23135] syzkaller0: entered promiscuous mode [ 1238.421162][T23135] syzkaller0: entered allmulticast mode [ 1238.478463][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 1238.478479][ T30] audit: type=1800 audit(1764713042.305:990): pid=23139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4251" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 1238.516300][T14493] Bluetooth: hci7: command tx timeout [ 1238.794674][T23045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.821793][T23045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.894391][T23045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.923634][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.930403][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.967426][T23137] tipc: Resetting bearer [ 1238.979037][T23045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.001478][T23045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.047739][T23045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.071819][T23134] tipc: Resetting bearer [ 1239.097031][T23134] tipc: Disabling bearer [ 1239.222266][T23045] hsr_slave_0: entered promiscuous mode [ 1239.253918][T23045] hsr_slave_1: entered promiscuous mode [ 1239.264892][T23045] debugfs: 'hsr0' already exists in 'hsr' [ 1239.279106][T23045] Cannot create hsr debugfs directory [ 1240.248763][T23045] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.676499][T23045] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.747353][T23168] input: syz1 as /devices/virtual/input/input136 [ 1241.846361][ T30] audit: type=1326 audit(1764713045.665:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.2.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1241.870626][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.914131][T23171] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4258'. [ 1241.994003][ T30] audit: type=1326 audit(1764713045.665:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.2.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1242.101173][ T30] audit: type=1326 audit(1764713045.665:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.2.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1242.167407][ T30] audit: type=1326 audit(1764713045.665:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.2.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1242.189937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.223896][ T30] audit: type=1326 audit(1764713045.665:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.2.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1242.282861][ T30] audit: type=1326 audit(1764713045.665:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.2.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1242.305604][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.345239][ T30] audit: type=1326 audit(1764713045.665:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.2.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1242.367816][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.433727][ T30] audit: type=1326 audit(1764713045.675:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.2.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1242.456659][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.465139][ T30] audit: type=1326 audit(1764713045.675:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.2.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1242.487601][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.571694][T23045] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.739946][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1242.856865][T23182] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4262'. [ 1242.872861][T23045] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.903892][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1242.917655][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1242.943376][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1242.963860][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1242.976552][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.990561][ T9] usb 4-1: Product: syz [ 1242.995148][ T9] usb 4-1: Manufacturer: syz [ 1243.001408][ T9] usb 4-1: SerialNumber: syz [ 1243.008122][ T9] usb 4-1: config 0 descriptor?? [ 1243.235165][T23175] input: syz0 as /devices/virtual/input/input138 [ 1243.675511][T23045] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1244.106807][T23186] random: crng reseeded on system resumption [ 1244.134823][T23186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.144504][T23186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.243962][T23045] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1244.312256][T23045] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1244.346783][T23045] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1244.581039][T23045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.793866][T23045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.819535][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.826793][ T6180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.911270][T11364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.918438][T11364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1244.995475][T23045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1245.006244][T23045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1245.090594][T23107] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1245.179479][T23045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.254191][T23107] usb 10-1: Using ep0 maxpacket: 8 [ 1245.268175][T23107] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1245.279174][T23107] usb 10-1: config 7 has an invalid interface number: 67 but max is 0 [ 1245.289320][T23107] usb 10-1: config 7 has no interface number 0 [ 1245.322757][T23107] usb 10-1: string descriptor 0 read error: -22 [ 1245.332061][T23107] usb 10-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1245.367277][T23107] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.378086][T23045] veth0_vlan: entered promiscuous mode [ 1245.442087][T23045] veth1_vlan: entered promiscuous mode [ 1245.627549][ T6017] usb 10-1: USB disconnect, device number 4 [ 1245.666831][T23045] veth0_macvtap: entered promiscuous mode [ 1245.841153][T23045] veth1_macvtap: entered promiscuous mode [ 1245.950032][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1245.983224][T23045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.052263][T23045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.320999][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.399715][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.429937][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.537698][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.752953][T23227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1248.758375][ T6530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.794859][ T6530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.868829][T23241] syzkaller0: entered promiscuous mode [ 1248.899912][T23241] syzkaller0: entered allmulticast mode [ 1249.034234][T23241] syzkaller0: mtu less than device minimum [ 1249.220867][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.255373][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.645606][T23250] fuse: Invalid rootmode [ 1250.378445][T11252] raw-gadget.20 gadget.6: failed to queue disconnect event [ 1250.777892][T23262] Cannot find add_set index 0 as target [ 1252.334387][T21429] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1252.348331][T21429] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1252.361995][T21429] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1252.377468][T21429] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1252.388884][T21429] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1253.167705][T23277] netlink: 'syz.9.4284': attribute type 1 has an invalid length. [ 1253.218630][T23275] netlink: 'syz.4.4282': attribute type 4 has an invalid length. [ 1253.266242][T23278] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4284'. [ 1253.395297][T23274] netlink: 'syz.4.4282': attribute type 4 has an invalid length. [ 1253.443700][T23278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1253.464628][T23281] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1253.476422][T23281] bond2: (slave geneve2): making interface the new active one [ 1253.485387][T23281] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1253.583859][ T7850] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1253.607556][T23283] syz.3.4285 (23283) used obsolete PPPIOCDETACH ioctl [ 1253.630379][ T9] iguanair 4-1:0.0: failed to get version [ 1253.658636][ T9] iguanair 4-1:0.0: probe with driver iguanair failed with error -110 [ 1253.720182][ T9] usb 4-1: USB disconnect, device number 32 [ 1253.928262][ T9341] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.033834][ T7850] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1254.308294][ T7850] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1254.400325][ T7850] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1254.520024][T21429] Bluetooth: hci8: command tx timeout [ 1254.672041][ T9341] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.018882][T23294] program syz.2.4287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1255.402084][T23301] fuse: Invalid rootmode [ 1255.692336][T23296] tipc: Enabled bearer , priority 0 [ 1255.731510][T23298] syzkaller0: entered promiscuous mode [ 1255.758732][T23298] syzkaller0: entered allmulticast mode [ 1255.854599][T23306] tipc: Resetting bearer [ 1255.929563][T23293] tipc: Resetting bearer [ 1256.004557][T23293] tipc: Disabling bearer [ 1256.106107][ T9341] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.351862][T21429] Bluetooth: hci1: command 0x0406 tx timeout [ 1256.357972][ T9341] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.592004][T14493] Bluetooth: hci8: command tx timeout [ 1257.287395][T23272] chnl_net:caif_netlink_parms(): no params data found [ 1257.697619][ T9341] bridge_slave_1: left allmulticast mode [ 1257.716819][ T9341] bridge_slave_1: left promiscuous mode [ 1257.752467][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.812785][ T9341] bridge_slave_0: left allmulticast mode [ 1257.837733][ T9341] bridge_slave_0: left promiscuous mode [ 1257.883190][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.672389][T14493] Bluetooth: hci8: command tx timeout [ 1258.895942][ T9341] bridge0 (unregistering): left allmulticast mode [ 1258.938121][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1258.938145][ T30] audit: type=1326 audit(1764713062.765:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23328 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1259.009534][ T30] audit: type=1326 audit(1764713062.765:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23328 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1259.067160][ T30] audit: type=1326 audit(1764713062.805:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23328 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1259.123344][ T30] audit: type=1326 audit(1764713062.805:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23328 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1259.177324][ T30] audit: type=1326 audit(1764713062.805:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23328 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1259.236896][ T30] audit: type=1326 audit(1764713062.805:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23328 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1259.289530][ T30] audit: type=1326 audit(1764713062.805:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23328 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1259.344143][ T30] audit: type=1326 audit(1764713062.805:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23328 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1259.431394][ T30] audit: type=1326 audit(1764713062.805:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23328 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1259.484751][ T30] audit: type=1326 audit(1764713062.805:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23328 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1260.198802][T23334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.240741][T23334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.295884][T23334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.310747][T23334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.437011][ T9341] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.499104][ T9341] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.518726][ T9341] .` (unregistering): Released all slaves [ 1260.728263][ T9341] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1260.740477][ T9341] bond2 (unregistering): left promiscuous mode [ 1260.747814][ T9341] bond1 (unregistering): Released all slaves [ 1260.754033][T14493] Bluetooth: hci8: command tx timeout [ 1260.919467][T23336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.932759][T23336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.989626][ T9341] bond2 (unregistering): Released all slaves [ 1261.167771][ T9341] bond0 (unregistering): Released all slaves [ 1261.324339][ T9341] bond3 (unregistering): Released all slaves [ 1261.573924][T23343] fuse: Invalid rootmode [ 1261.761670][T23354] QAT: Device 16 not found [ 1261.807577][T23356] input: syz0 as /devices/virtual/input/input140 [ 1261.829890][T23332] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1261.864659][T23356] openvswitch: netlink: IP tunnel dst address not specified [ 1261.889555][T23356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4300'. [ 1262.032264][T23332] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1262.042981][T23332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.058585][T23332] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.090841][T23332] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1262.100955][T23332] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1262.113541][T23332] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1262.127346][T23332] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1262.182523][T23332] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1262.209981][T23332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.218374][T23332] usb 4-1: Product: syz [ 1262.236680][T23332] usb 4-1: Manufacturer: syz [ 1262.247659][T23332] usb 4-1: SerialNumber: syz [ 1262.329132][T23332] cdc_ncm 4-1:1.0: skipping garbage [ 1262.334897][T23332] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 1262.345014][T23332] cdc_ncm 4-1:1.0: bind() failure [ 1262.508664][T23345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.533617][T23345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.576475][T23332] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1262.619530][T23332] usb 4-1: USB disconnect, device number 33 [ 1262.976767][ T9341] : left promiscuous mode [ 1263.051100][T23272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.062234][T23272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.110998][T23272] bridge_slave_0: entered allmulticast mode [ 1263.144083][T23272] bridge_slave_0: entered promiscuous mode [ 1263.163621][T23272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.200814][T23272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.208316][T23272] bridge_slave_1: entered allmulticast mode [ 1263.230008][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1263.272220][T23272] bridge_slave_1: entered promiscuous mode [ 1263.375326][ T9341] tipc: Disabling bearer [ 1263.402480][ T9341] tipc: Left network mode [ 1263.505617][T23272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.579625][T23272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.650001][T23107] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 1263.797332][T23272] team0: Port device team_slave_0 added [ 1263.835811][T23272] team0: Port device team_slave_1 added [ 1263.871175][T23107] usb 10-1: Invalid ep0 maxpacket: 32 [ 1264.014726][T23107] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 1264.235337][T23107] usb 10-1: Invalid ep0 maxpacket: 32 [ 1264.241857][T23107] usb usb10-port1: attempt power cycle [ 1264.446463][T23272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1264.487763][T23272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.640274][T23107] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 1264.652416][T23272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.687722][T23107] usb 10-1: Invalid ep0 maxpacket: 32 [ 1264.708195][T23396] tipc: Started in network mode [ 1264.726088][T23396] tipc: Node identity 4ac1778df285, cluster identity 4711 [ 1264.742327][T23396] tipc: Enabled bearer , priority 0 [ 1264.796344][T23403] tipc: Resetting bearer [ 1264.831958][T23272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1264.855125][T23272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.911922][T23107] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 1264.951115][T23107] usb 10-1: Invalid ep0 maxpacket: 32 [ 1264.960503][T23107] usb usb10-port1: unable to enumerate USB device [ 1265.020368][T23272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.178019][T23389] tipc: Disabling bearer [ 1265.496541][T23407] fuse: Bad value for 'rootmode' [ 1265.589708][T23272] hsr_slave_0: entered promiscuous mode [ 1265.643695][T23272] hsr_slave_1: entered promiscuous mode [ 1265.676520][T23272] debugfs: 'hsr0' already exists in 'hsr' [ 1265.739708][T23272] Cannot create hsr debugfs directory [ 1265.796935][ T9341] hsr_slave_0: left promiscuous mode [ 1265.819340][ T9341] hsr_slave_1: left promiscuous mode [ 1265.852611][ T9341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.887557][ T9341] batadv0: mtu less than device minimum [ 1265.906994][ T9341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1265.919229][ T9341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1265.930701][ T9341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1265.942030][ T9341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1265.953431][ T9341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1265.964716][ T9341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1265.976599][ T9341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1265.989032][ T9341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1266.068301][ T9341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1266.082894][ T9341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1266.151600][ T9341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1266.230844][ T9341] batman_adv: batadv0: Interface deactivated: dummy0 [ 1266.276122][ T9341] batman_adv: batadv0: Removing interface: dummy0 [ 1266.391402][ T9341] veth1_macvtap: left promiscuous mode [ 1266.399943][T17478] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1266.454003][ T9341] veth0_macvtap: left promiscuous mode [ 1266.494559][ T9341] veth1_vlan: left promiscuous mode [ 1266.505970][ T9341] veth0_vlan: left promiscuous mode [ 1266.576611][T17478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1266.597822][T17478] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 1266.623488][T17478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.652887][T17478] usb 5-1: config 0 descriptor?? [ 1266.753686][ T9341] pim6reg9 (unregistering): left allmulticast mode [ 1266.784762][ T9341] pim6reg (unregistering): left allmulticast mode [ 1266.895647][T23425] input: syz0 as /devices/virtual/input/input141 [ 1266.906083][T23418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.102777][T23425] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4313'. [ 1267.122250][T23418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.507555][T17478] acrux 0003:1A34:F705.001C: unexpected long global item [ 1267.556538][T17478] acrux 0003:1A34:F705.001C: parse failed [ 1267.590364][T17478] acrux 0003:1A34:F705.001C: probe with driver acrux failed with error -22 [ 1268.659380][ T9341] team0 (unregistering): Port device team_slave_1 removed [ 1268.710800][ T9341] team0 (unregistering): Port device team_slave_0 removed [ 1269.448848][ T5942] usb 5-1: USB disconnect, device number 3 [ 1270.255716][T23460] loop6: detected capacity change from 0 to 524288000 [ 1270.298625][T23467] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4319'. [ 1270.314038][T23466] netlink: 388 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1270.570754][T23469] fuse: Bad value for 'rootmode' [ 1271.250275][T23478] input: syz1 as /devices/virtual/input/input142 [ 1271.510281][T23480] blkio.reset_stats is deprecated [ 1271.518388][ T9341] IPVS: stop unused estimator thread 0... [ 1271.541432][T23478] binder: 23475:23478 ioctl c0306201 0 returned -14 [ 1272.117655][T23485] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4323'. [ 1272.880570][ T6491] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1273.092174][ T6491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1273.134720][ T6491] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 1273.144207][ T6491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.155014][ T6491] usb 4-1: config 0 descriptor?? [ 1273.390906][T23493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.408086][T23493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.654769][T23478] syz.4.4322 (23478): drop_caches: 2 [ 1273.662345][ T6491] acrux 0003:1A34:F705.001D: unexpected long global item [ 1273.671486][ T6491] acrux 0003:1A34:F705.001D: parse failed [ 1273.677314][ T6491] acrux 0003:1A34:F705.001D: probe with driver acrux failed with error -22 [ 1274.597491][ T9341] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.405046][ T9341] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.884185][T23549] fuse: Bad value for 'rootmode' [ 1276.223096][ T9341] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.834916][ T9341] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.985532][T23563] netlink: 156 bytes leftover after parsing attributes in process `syz.9.4334'. [ 1277.159061][T23556] tipc: Started in network mode [ 1277.164852][T23556] tipc: Node identity 9e6a19f095bf, cluster identity 4711 [ 1277.172970][T23556] tipc: Enabled bearer , priority 0 [ 1277.235145][T23559] syzkaller0: entered promiscuous mode [ 1277.247740][T23559] syzkaller0: entered allmulticast mode [ 1277.307823][T23272] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1277.399206][T23556] tipc: Resetting bearer [ 1277.663865][T23556] tipc: Disabling bearer [ 1277.702474][T23272] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1277.862358][T23272] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1277.891228][T23582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.912852][T23582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.938540][T23582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.961321][T23582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.075676][T23272] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1278.185045][T23578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4337'. [ 1278.651716][T23272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.702314][T23272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.763974][T11207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.771176][T11207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.824375][T11207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.831769][T11207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.984866][T23272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1279.014750][T23272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1279.088003][T23607] fuse: Unknown parameter 'use00000000000000000000' [ 1279.215678][T23272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.483019][T23272] veth0_vlan: entered promiscuous mode [ 1279.492249][T23615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4342'. [ 1279.664837][ T9341] bridge_slave_1: left allmulticast mode [ 1279.787972][ T9341] bridge_slave_1: left promiscuous mode [ 1279.808366][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.944959][ T9341] bridge_slave_0: left allmulticast mode [ 1279.980456][ T9341] bridge_slave_0: left promiscuous mode [ 1279.980666][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.991649][ T9341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.003813][ T9341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.017231][ T9341] bond0 (unregistering): Released all slaves [ 1282.254964][ T9341] bond1 (unregistering): Released all slaves [ 1282.370023][T23272] veth1_vlan: entered promiscuous mode [ 1282.506455][T23649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.633521][T23649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.891210][T23272] veth0_macvtap: entered promiscuous mode [ 1282.975069][T23272] veth1_macvtap: entered promiscuous mode [ 1282.985423][T23657] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1283.057166][T23272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.109597][T23272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1283.169794][T10988] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.205241][T10988] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.273125][T10988] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.716630][T23672] input: syz0 as /devices/virtual/input/input143 [ 1283.729439][T23672] net_ratelimit: 31 callbacks suppressed [ 1283.729469][T23672] openvswitch: netlink: IP tunnel dst address not specified [ 1283.750567][T23672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4348'. [ 1283.793606][T23675] fuse: Unknown parameter 'use00000000000000000000' [ 1283.847891][T10988] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.357587][T23690] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1284.983117][T23697] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4352'. [ 1285.194954][ T9341] hsr_slave_0: left promiscuous mode [ 1285.329943][ T9341] hsr_slave_1: left promiscuous mode [ 1285.356665][ T9341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.419861][ T9341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.448216][T23703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.471495][T23703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.480888][ T9341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.488275][ T9341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.574328][ T9341] veth1_macvtap: left promiscuous mode [ 1285.585716][ T9341] veth0_macvtap: left promiscuous mode [ 1285.606534][ T9341] veth1_vlan: left promiscuous mode [ 1285.620417][ T9341] veth0_vlan: left promiscuous mode [ 1286.511870][ T6017] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1286.679903][ T6017] usb 10-1: Using ep0 maxpacket: 16 [ 1286.694275][ T6017] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1286.714286][ T6017] usb 10-1: config 0 has no interface number 0 [ 1286.732104][ T6017] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1286.771183][ T6017] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1286.805461][ T6017] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1286.889917][ T6017] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1286.942348][ T6017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.980729][ T6017] usb 10-1: Product: syz [ 1287.012678][ T6017] usb 10-1: Manufacturer: syz [ 1287.064884][ T6017] usb 10-1: SerialNumber: syz [ 1287.149888][ T6017] usb 10-1: config 0 descriptor?? [ 1287.197629][T23712] raw-gadget.9 gadget.9: fail, usb_ep_enable returned -22 [ 1287.283685][T23712] raw-gadget.9 gadget.9: fail, usb_ep_enable returned -22 [ 1287.284112][ T9341] team0 (unregistering): Port device team_slave_1 removed [ 1287.362857][ T9341] team0 (unregistering): Port device team_slave_0 removed [ 1287.685431][T23712] raw-gadget.9 gadget.9: fail, usb_ep_enable returned -22 [ 1287.702082][T23712] raw-gadget.9 gadget.9: fail, usb_ep_enable returned -22 [ 1288.154363][ T6017] Error reading MAC address [ 1288.166477][T23712] raw-gadget.9 gadget.9: fail, usb_ep_enable returned -22 [ 1288.182723][T23712] raw-gadget.9 gadget.9: fail, usb_ep_enable returned -22 [ 1288.348146][T23703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.355362][T23703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.363089][T23703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.370254][T23703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1288.415833][T23703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1288.462181][T23704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1288.496942][T23713] tipc: Enabled bearer , priority 0 [ 1288.505730][T23716] syzkaller0: entered promiscuous mode [ 1288.512343][T23716] syzkaller0: entered allmulticast mode [ 1288.547887][T23709] tipc: Resetting bearer [ 1288.622750][ T6017] sr9700 10-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1288.623233][T23709] tipc: Disabling bearer [ 1288.674586][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.699825][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.141948][ T3865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.170589][ T3865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.967650][T23393] usb 10-1: USB disconnect, device number 9 [ 1290.337036][T23751] fuse: Unknown parameter 'use00000000000000000000' [ 1290.898797][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1290.898819][ T30] audit: type=1326 audit(1764713094.725:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23767 comm="syz.6.4364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe76778f749 code=0x0 [ 1291.194886][T23782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4366'. [ 1291.214495][T23781] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4367'. [ 1291.391648][T23776] bond3: (slave bond_slave_1): Device is not our slave [ 1291.425094][T23776] bond3: option active_slave: invalid value (bond_slave_1) [ 1291.468331][T23776] bond3 (unregistering): Released all slaves [ 1291.745871][T23777] IPv6: sit1: Disabled Multicast RS [ 1291.940588][T23793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.077045][T23807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.094984][T23807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.115864][T23807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.166260][T23807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.184515][T23811] netlink: 'syz.9.4370': attribute type 1 has an invalid length. [ 1292.203099][T23810] fuse: Unknown parameter 'user_i00000000000000000000' [ 1292.210212][T23793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.336475][T23811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1293.799986][T23834] netlink: 'syz.3.4374': attribute type 4 has an invalid length. [ 1293.862801][T23841] netlink: 'syz.3.4374': attribute type 4 has an invalid length. [ 1294.060097][ T43] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1294.212394][ T43] usb 10-1: device descriptor read/64, error -71 [ 1294.461042][ T43] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1294.524899][T23860] tipc: Enabled bearer , priority 0 [ 1294.535242][T23860] syzkaller0: entered promiscuous mode [ 1294.541492][T23860] syzkaller0: entered allmulticast mode [ 1294.587902][T23860] tipc: Resetting bearer [ 1294.611911][ T43] usb 10-1: device descriptor read/64, error -71 [ 1294.663094][T23858] tipc: Resetting bearer [ 1294.732972][ T43] usb usb10-port1: attempt power cycle [ 1294.749654][T23858] tipc: Disabling bearer [ 1294.938334][ T30] audit: type=1326 audit(1764713098.765:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23865 comm="syz.2.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1294.969370][ T30] audit: type=1326 audit(1764713098.765:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23865 comm="syz.2.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1295.046342][ T30] audit: type=1326 audit(1764713098.765:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23865 comm="syz.2.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1295.099887][ T43] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1295.115212][ T30] audit: type=1326 audit(1764713098.765:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23865 comm="syz.2.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1295.171075][ T30] audit: type=1326 audit(1764713098.765:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23865 comm="syz.2.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1295.226740][ T30] audit: type=1326 audit(1764713098.795:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23865 comm="syz.2.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1295.256282][ T43] usb 10-1: device descriptor read/8, error -71 [ 1295.293764][ T30] audit: type=1326 audit(1764713098.795:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23865 comm="syz.2.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1295.353057][ T30] audit: type=1326 audit(1764713098.795:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23865 comm="syz.2.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542e38f749 code=0x7ffc0000 [ 1295.428389][ T30] audit: type=1326 audit(1764713098.845:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23865 comm="syz.2.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f542e38df90 code=0x7ffc0000 [ 1295.529900][ T43] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1295.577211][T23876] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4381'. [ 1295.591014][ T43] usb 10-1: device descriptor read/8, error -71 [ 1295.687482][T23879] fuse: Unknown parameter 'user_i00000000000000000000' [ 1295.709167][T23882] loop9: detected capacity change from 0 to 7 [ 1295.720872][ T43] usb usb10-port1: unable to enumerate USB device [ 1296.077783][T23883] Invalid logical block size (1) [ 1296.078751][ T5850] Dev loop9: unable to read RDB block 7 [ 1296.090021][ T5850] loop9: unable to read partition table [ 1296.096060][ T5850] loop9: partition table beyond EOD, truncated [ 1296.292083][T23889] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4386'. [ 1296.486197][T23882] Dev loop9: unable to read RDB block 7 [ 1296.492598][T23882] loop9: unable to read partition table [ 1296.498770][T23882] loop9: partition table beyond EOD, truncated [ 1296.509805][T23882] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 1296.641009][T23899] input: syz0 as /devices/virtual/input/input144 [ 1296.689201][T23899] openvswitch: netlink: IP tunnel dst address not specified [ 1296.750460][T23899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4388'. [ 1296.826545][T23900] xt_bpf: check failed: parse error [ 1296.947965][T23905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4390'. [ 1296.959930][T23905] bridge_slave_1: left allmulticast mode [ 1296.968712][T23905] bridge_slave_1: left promiscuous mode [ 1296.980568][ T5205] Dev loop9: unable to read RDB block 7 [ 1296.993391][T23905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.007949][ T5205] loop9: unable to read partition table [ 1297.030156][ T5205] loop9: partition table beyond EOD, truncated [ 1297.055175][T23905] bridge_slave_0: left allmulticast mode [ 1297.079459][T23905] bridge_slave_0: left promiscuous mode [ 1297.104378][T23905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.354062][T23913] bridge0: port 3(syz_tun) entered blocking state [ 1297.400085][T23913] bridge0: port 3(syz_tun) entered disabled state [ 1297.427524][T23913] syz_tun: entered allmulticast mode [ 1297.461612][T23913] syz_tun: entered promiscuous mode [ 1297.467348][T23913] bridge0: port 3(syz_tun) entered blocking state [ 1297.474721][T23913] bridge0: port 3(syz_tun) entered forwarding state [ 1297.890982][T23920] kvm: pic: non byte read [ 1297.895499][T23920] kvm: pic: non byte read [ 1297.940625][T23920] kvm: pic: non byte read [ 1297.947098][T23920] kvm: pic: non byte read [ 1297.957527][T23930] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4394'. [ 1297.968537][T23920] kvm: pic: non byte read [ 1297.975374][T23920] kvm: pic: non byte read [ 1298.026735][T23920] kvm: pic: non byte read [ 1298.038748][T23920] kvm: pic: non byte read [ 1298.076809][T23920] kvm: pic: non byte read [ 1298.100790][T23920] kvm: pic: non byte read [ 1298.112140][T23932] fuse: Unknown parameter 'user_i00000000000000000000' [ 1298.430204][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1298.703993][T23939] loop6: detected capacity change from 0 to 524288000 [ 1298.783313][T23939] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4397'. [ 1298.836389][T23941] syzkaller1: entered promiscuous mode [ 1298.870170][T23941] syzkaller1: entered allmulticast mode [ 1299.331132][T23954] fuse: Bad value for 'fd' [ 1299.970064][T17478] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1300.140487][T17478] usb 5-1: Using ep0 maxpacket: 16 [ 1300.162270][T17478] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1300.180824][T17478] usb 5-1: config 0 has no interface number 0 [ 1300.198111][T17478] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1300.220365][T17478] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1300.249353][T17478] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1300.274349][T17478] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1300.284453][T17478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.293755][T17478] usb 5-1: Product: syz [ 1300.299486][T17478] usb 5-1: Manufacturer: syz [ 1300.308080][T17478] usb 5-1: SerialNumber: syz [ 1300.327345][T17478] usb 5-1: config 0 descriptor?? [ 1300.340629][T23960] raw-gadget.8 gadget.4: fail, usb_ep_enable returned -22 [ 1300.359302][T23960] raw-gadget.8 gadget.4: fail, usb_ep_enable returned -22 [ 1300.359506][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.374751][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.578341][T23960] raw-gadget.8 gadget.4: fail, usb_ep_enable returned -22 [ 1300.586745][T23960] raw-gadget.8 gadget.4: fail, usb_ep_enable returned -22 [ 1301.732457][T23994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4411'. [ 1301.743934][T17478] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1301.786198][T17478] usb 5-1: USB disconnect, device number 4 [ 1302.123389][T24004] FAULT_INJECTION: forcing a failure. [ 1302.123389][T24004] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.136371][T24004] CPU: 0 UID: 0 PID: 24004 Comm: syz.3.4414 Not tainted syzkaller #0 PREEMPT(full) [ 1302.136392][T24004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1302.136400][T24004] Call Trace: [ 1302.136406][T24004] [ 1302.136411][T24004] dump_stack_lvl+0x189/0x250 [ 1302.136431][T24004] ? __pfx____ratelimit+0x10/0x10 [ 1302.136453][T24004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1302.136466][T24004] ? __pfx__printk+0x10/0x10 [ 1302.136483][T24004] ? __pfx___might_resched+0x10/0x10 [ 1302.136496][T24004] ? fs_reclaim_acquire+0x7d/0x100 [ 1302.136512][T24004] should_fail_ex+0x414/0x560 [ 1302.136531][T24004] should_failslab+0xa8/0x100 [ 1302.136545][T24004] __kmalloc_noprof+0xcb/0x7e0 [ 1302.136563][T24004] ? io_cache_alloc_new+0x40/0x100 [ 1302.136600][T24004] io_cache_alloc_new+0x40/0x100 [ 1302.136628][T24004] io_msg_alloc_async+0x1b2/0x2d0 [ 1302.136659][T24004] io_sendmsg_prep+0x344/0x5f0 [ 1302.136694][T24004] io_submit_sqes+0x935/0x1e40 [ 1302.136753][T24004] __se_sys_io_uring_enter+0x2df/0x2b00 [ 1302.136797][T24004] ? ksys_write+0x1cb/0x250 [ 1302.136829][T24004] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1302.136848][T24004] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1302.136870][T24004] ? __pfx_vfs_write+0x10/0x10 [ 1302.136901][T24004] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1302.136925][T24004] ? __fget_files+0x3a0/0x420 [ 1302.136954][T24004] ? fput+0xa0/0xd0 [ 1302.136973][T24004] ? ksys_write+0x22a/0x250 [ 1302.136998][T24004] ? __pfx_ksys_write+0x10/0x10 [ 1302.137025][T24004] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1302.137046][T24004] do_syscall_64+0xfa/0xf80 [ 1302.137060][T24004] ? lockdep_hardirqs_on+0x98/0x140 [ 1302.137087][T24004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.137105][T24004] ? clear_bhb_loop+0x60/0xb0 [ 1302.137125][T24004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.137140][T24004] RIP: 0033:0x7f14d0d8f749 [ 1302.137156][T24004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1302.137171][T24004] RSP: 002b:00007f14d1b8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1302.137198][T24004] RAX: ffffffffffffffda RBX: 00007f14d0fe5fa0 RCX: 00007f14d0d8f749 [ 1302.137210][T24004] RDX: 0000000000a00100 RSI: 0000000000003516 RDI: 0000000000000004 [ 1302.137221][T24004] RBP: 00007f14d1b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.137232][T24004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1302.137242][T24004] R13: 00007f14d0fe6038 R14: 00007f14d0fe5fa0 R15: 00007f14d110fa28 [ 1302.137269][T24004] [ 1302.448802][T24006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1302.523044][T24008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.623109][T24008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.836961][T24013] loop3: detected capacity change from 0 to 7 [ 1302.877744][T24013] Dev loop3: unable to read RDB block 7 [ 1302.916908][T24013] loop3: unable to read partition table [ 1302.949219][T24013] loop3: partition table beyond EOD, truncated [ 1302.997077][T24013] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1303.078215][T24020] loop6: detected capacity change from 0 to 524288000 [ 1303.178908][T24020] netlink: 388 bytes leftover after parsing attributes in process `syz.9.4416'. [ 1303.496629][T24027] netlink: 'syz.6.4421': attribute type 6 has an invalid length. [ 1303.865299][T24033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.905636][T24033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.051323][T24038] FAULT_INJECTION: forcing a failure. [ 1304.051323][T24038] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.113772][T24038] CPU: 1 UID: 0 PID: 24038 Comm: syz.3.4425 Not tainted syzkaller #0 PREEMPT(full) [ 1304.113806][T24038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1304.113819][T24038] Call Trace: [ 1304.113828][T24038] [ 1304.113838][T24038] dump_stack_lvl+0x189/0x250 [ 1304.113868][T24038] ? __pfx____ratelimit+0x10/0x10 [ 1304.113899][T24038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1304.113921][T24038] ? __pfx__printk+0x10/0x10 [ 1304.113956][T24038] ? __pfx___might_resched+0x10/0x10 [ 1304.113975][T24038] ? fs_reclaim_acquire+0x7d/0x100 [ 1304.114002][T24038] should_fail_ex+0x414/0x560 [ 1304.114035][T24038] should_failslab+0xa8/0x100 [ 1304.114060][T24038] __kmalloc_noprof+0xcb/0x7e0 [ 1304.114089][T24038] ? sock_kmalloc+0xd6/0x160 [ 1304.114117][T24038] sock_kmalloc+0xd6/0x160 [ 1304.114141][T24038] cmsghdr_from_user_compat_to_kern+0x2c9/0x800 [ 1304.114182][T24038] ? kasan_save_track+0x4f/0x80 [ 1304.114209][T24038] ? kasan_save_track+0x3e/0x80 [ 1304.114238][T24038] ? io_msg_alloc_async+0x1b2/0x2d0 [ 1304.114264][T24038] ? io_sendmsg_prep+0x344/0x5f0 [ 1304.114297][T24038] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 1304.114330][T24038] ? __lock_acquire+0x6b6/0x2cf0 [ 1304.114369][T24038] ____sys_sendmsg+0x20f/0x820 [ 1304.114406][T24038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1304.114456][T24038] __sys_sendmsg_sock+0x28/0x40 [ 1304.114488][T24038] io_sendmsg+0x1fa/0x580 [ 1304.114525][T24038] __io_issue_sqe+0x181/0x4b0 [ 1304.114549][T24038] ? io_file_get_normal+0xe9/0x2d0 [ 1304.114574][T24038] io_issue_sqe+0x165/0x1060 [ 1304.114607][T24038] io_submit_sqes+0xa44/0x1e40 [ 1304.114666][T24038] __se_sys_io_uring_enter+0x2df/0x2b00 [ 1304.114712][T24038] ? ksys_write+0x1cb/0x250 [ 1304.114745][T24038] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1304.114766][T24038] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1304.114787][T24038] ? __pfx_vfs_write+0x10/0x10 [ 1304.114818][T24038] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1304.114843][T24038] ? __fget_files+0x3a0/0x420 [ 1304.114875][T24038] ? fput+0xa0/0xd0 [ 1304.114898][T24038] ? ksys_write+0x22a/0x250 [ 1304.114930][T24038] ? __pfx_ksys_write+0x10/0x10 [ 1304.114963][T24038] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1304.114990][T24038] do_syscall_64+0xfa/0xf80 [ 1304.115008][T24038] ? lockdep_hardirqs_on+0x98/0x140 [ 1304.115037][T24038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.115057][T24038] ? clear_bhb_loop+0x60/0xb0 [ 1304.115083][T24038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.115103][T24038] RIP: 0033:0x7f14d0d8f749 [ 1304.115122][T24038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1304.115140][T24038] RSP: 002b:00007f14d1b8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1304.115174][T24038] RAX: ffffffffffffffda RBX: 00007f14d0fe5fa0 RCX: 00007f14d0d8f749 [ 1304.115190][T24038] RDX: 0000000000a00100 RSI: 0000000000003516 RDI: 0000000000000004 [ 1304.115204][T24038] RBP: 00007f14d1b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.115217][T24038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.115230][T24038] R13: 00007f14d0fe6038 R14: 00007f14d0fe5fa0 R15: 00007f14d110fa28 [ 1304.115266][T24038] [ 1305.765190][T24064] FAULT_INJECTION: forcing a failure. [ 1305.765190][T24064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1305.788762][T24064] CPU: 0 UID: 0 PID: 24064 Comm: syz.9.4433 Not tainted syzkaller #0 PREEMPT(full) [ 1305.788794][T24064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1305.788807][T24064] Call Trace: [ 1305.788816][T24064] [ 1305.788826][T24064] dump_stack_lvl+0x189/0x250 [ 1305.788856][T24064] ? __pfx____ratelimit+0x10/0x10 [ 1305.788892][T24064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1305.788914][T24064] ? __pfx__printk+0x10/0x10 [ 1305.788954][T24064] should_fail_ex+0x414/0x560 [ 1305.788987][T24064] _copy_from_user+0x2d/0xb0 [ 1305.789009][T24064] copy_folio_from_user+0x1e4/0x320 [ 1305.789047][T24064] mfill_atomic_copy+0xf9c/0x1390 [ 1305.789087][T24064] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 1305.789123][T24064] userfaultfd_ioctl+0x2a01/0x4c80 [ 1305.789154][T24064] ? __se_sys_ioctl+0x47/0x170 [ 1305.789179][T24064] ? do_syscall_64+0xfa/0xf80 [ 1305.789196][T24064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.789226][T24064] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1305.789284][T24064] ? kasan_quarantine_put+0xdd/0x220 [ 1305.789313][T24064] ? lockdep_hardirqs_on+0x98/0x140 [ 1305.789353][T24064] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1305.789379][T24064] ? do_vfs_ioctl+0xbe8/0x1430 [ 1305.789407][T24064] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1305.789437][T24064] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1305.789474][T24064] ? vfs_write+0x956/0xb30 [ 1305.789542][T24064] ? ksys_write+0x1e1/0x250 [ 1305.789576][T24064] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1305.789600][T24064] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1305.789625][T24064] __se_sys_ioctl+0xfc/0x170 [ 1305.789656][T24064] do_syscall_64+0xfa/0xf80 [ 1305.789674][T24064] ? lockdep_hardirqs_on+0x98/0x140 [ 1305.789704][T24064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.789722][T24064] ? clear_bhb_loop+0x60/0xb0 [ 1305.789747][T24064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.789766][T24064] RIP: 0033:0x7f9d6758f749 [ 1305.789785][T24064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1305.789802][T24064] RSP: 002b:00007f9d68418038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1305.789825][T24064] RAX: ffffffffffffffda RBX: 00007f9d677e5fa0 RCX: 00007f9d6758f749 [ 1305.789841][T24064] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 1305.789856][T24064] RBP: 00007f9d68418090 R08: 0000000000000000 R09: 0000000000000000 [ 1305.789870][T24064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1305.789883][T24064] R13: 00007f9d677e6038 R14: 00007f9d677e5fa0 R15: 00007f9d6790fa28 [ 1305.789919][T24064] [ 1306.361996][T24066] netlink: 'syz.2.4427': attribute type 4 has an invalid length. [ 1306.483655][T24067] netlink: 'syz.2.4427': attribute type 4 has an invalid length. [ 1306.836970][T24074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4435'. [ 1307.271055][T24092] FAULT_INJECTION: forcing a failure. [ 1307.271055][T24092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1307.331010][T24092] CPU: 0 UID: 0 PID: 24092 Comm: syz.4.4438 Not tainted syzkaller #0 PREEMPT(full) [ 1307.331043][T24092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1307.331055][T24092] Call Trace: [ 1307.331073][T24092] [ 1307.331083][T24092] dump_stack_lvl+0x189/0x250 [ 1307.331112][T24092] ? __pfx____ratelimit+0x10/0x10 [ 1307.331141][T24092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1307.331164][T24092] ? __pfx__printk+0x10/0x10 [ 1307.331192][T24092] ? __might_fault+0xb0/0x130 [ 1307.331234][T24092] should_fail_ex+0x414/0x560 [ 1307.331266][T24092] _copy_from_user+0x2d/0xb0 [ 1307.331288][T24092] cmsghdr_from_user_compat_to_kern+0x394/0x800 [ 1307.331321][T24092] ? kasan_save_track+0x4f/0x80 [ 1307.331349][T24092] ? kasan_save_track+0x3e/0x80 [ 1307.331389][T24092] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 1307.331422][T24092] ? __lock_acquire+0x6b6/0x2cf0 [ 1307.331462][T24092] ____sys_sendmsg+0x20f/0x820 [ 1307.331500][T24092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1307.331551][T24092] __sys_sendmsg_sock+0x28/0x40 [ 1307.331582][T24092] io_sendmsg+0x1fa/0x580 [ 1307.331621][T24092] __io_issue_sqe+0x181/0x4b0 [ 1307.331643][T24092] ? io_file_get_normal+0xe9/0x2d0 [ 1307.331669][T24092] io_issue_sqe+0x165/0x1060 [ 1307.331703][T24092] io_submit_sqes+0xa44/0x1e40 [ 1307.331762][T24092] __se_sys_io_uring_enter+0x2df/0x2b00 [ 1307.331808][T24092] ? ksys_write+0x1cb/0x250 [ 1307.331841][T24092] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1307.331862][T24092] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1307.331883][T24092] ? __pfx_vfs_write+0x10/0x10 [ 1307.331916][T24092] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1307.331941][T24092] ? __fget_files+0x3a0/0x420 [ 1307.331973][T24092] ? fput+0xa0/0xd0 [ 1307.331998][T24092] ? ksys_write+0x22a/0x250 [ 1307.332035][T24092] ? __pfx_ksys_write+0x10/0x10 [ 1307.332077][T24092] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1307.332105][T24092] do_syscall_64+0xfa/0xf80 [ 1307.332123][T24092] ? lockdep_hardirqs_on+0x98/0x140 [ 1307.332153][T24092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.332173][T24092] ? clear_bhb_loop+0x60/0xb0 [ 1307.332197][T24092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.332216][T24092] RIP: 0033:0x7efdff18f749 [ 1307.332236][T24092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1307.332255][T24092] RSP: 002b:00007efe00043038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1307.332279][T24092] RAX: ffffffffffffffda RBX: 00007efdff3e5fa0 RCX: 00007efdff18f749 [ 1307.332295][T24092] RDX: 0000000000a00100 RSI: 0000000000003516 RDI: 0000000000000004 [ 1307.332308][T24092] RBP: 00007efe00043090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.332321][T24092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1307.332334][T24092] R13: 00007efdff3e6038 R14: 00007efdff3e5fa0 R15: 00007efdff50fa28 [ 1307.332370][T24092] [ 1308.567672][T24107] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4441'. [ 1308.841034][T24110] loop6: detected capacity change from 0 to 524288000 [ 1308.963832][T24110] netlink: 388 bytes leftover after parsing attributes in process `syz.3.4440'. [ 1309.965313][T24127] FAULT_INJECTION: forcing a failure. [ 1309.965313][T24127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1310.049552][T24127] CPU: 0 UID: 0 PID: 24127 Comm: syz.4.4445 Not tainted syzkaller #0 PREEMPT(full) [ 1310.049573][T24127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1310.049582][T24127] Call Trace: [ 1310.049588][T24127] [ 1310.049594][T24127] dump_stack_lvl+0x189/0x250 [ 1310.049613][T24127] ? __pfx____ratelimit+0x10/0x10 [ 1310.049632][T24127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1310.049645][T24127] ? __pfx__printk+0x10/0x10 [ 1310.049668][T24127] should_fail_ex+0x414/0x560 [ 1310.049687][T24127] _copy_from_user+0x2d/0xb0 [ 1310.049701][T24127] copy_folio_from_user+0x1e4/0x320 [ 1310.049739][T24127] mfill_atomic_copy+0xf9c/0x1390 [ 1310.049774][T24127] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 1310.049808][T24127] userfaultfd_ioctl+0x2a01/0x4c80 [ 1310.049838][T24127] ? __se_sys_ioctl+0x47/0x170 [ 1310.049862][T24127] ? do_syscall_64+0xfa/0xf80 [ 1310.049880][T24127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.049909][T24127] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1310.049964][T24127] ? kasan_quarantine_put+0xdd/0x220 [ 1310.049993][T24127] ? lockdep_hardirqs_on+0x98/0x140 [ 1310.050043][T24127] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1310.050070][T24127] ? do_vfs_ioctl+0xbe8/0x1430 [ 1310.050096][T24127] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1310.050110][T24127] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1310.050131][T24127] ? vfs_write+0x956/0xb30 [ 1310.050169][T24127] ? ksys_write+0x1e1/0x250 [ 1310.050189][T24127] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1310.050204][T24127] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1310.050218][T24127] __se_sys_ioctl+0xfc/0x170 [ 1310.050237][T24127] do_syscall_64+0xfa/0xf80 [ 1310.050247][T24127] ? lockdep_hardirqs_on+0x98/0x140 [ 1310.050263][T24127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.050275][T24127] ? clear_bhb_loop+0x60/0xb0 [ 1310.050290][T24127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.050302][T24127] RIP: 0033:0x7efdff18f749 [ 1310.050314][T24127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1310.050326][T24127] RSP: 002b:00007efe00043038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1310.050342][T24127] RAX: ffffffffffffffda RBX: 00007efdff3e5fa0 RCX: 00007efdff18f749 [ 1310.050351][T24127] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 1310.050359][T24127] RBP: 00007efe00043090 R08: 0000000000000000 R09: 0000000000000000 [ 1310.050368][T24127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1310.050375][T24127] R13: 00007efdff3e6038 R14: 00007efdff3e5fa0 R15: 00007efdff50fa28 [ 1310.050395][T24127] [ 1310.823040][T24136] tipc: Enabled bearer , priority 0 [ 1310.887460][T24136] tipc: Resetting bearer [ 1311.470240][T24134] tipc: Disabling bearer [ 1311.671819][T24147] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1312.378102][T24166] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4454'. [ 1312.553324][T24172] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4455'. [ 1312.615918][T24170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1312.637454][T24172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1312.717154][T24172] bond4: (slave batadv1): Opening slave failed [ 1313.621164][T24188] netlink: 'syz.4.4456': attribute type 4 has an invalid length. [ 1313.680929][T24188] netlink: 'syz.4.4456': attribute type 4 has an invalid length. [ 1315.974595][T24218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.007802][T24218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.079393][T24218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.135361][T24218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.008512][T24233] input: syz0 as /devices/virtual/input/input145 [ 1317.126442][T24233] openvswitch: netlink: IP tunnel dst address not specified [ 1317.174824][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4465'. [ 1317.791777][T21429] Bluetooth: hci4: command 0x0406 tx timeout [ 1318.070036][T16235] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1318.239852][T16235] usb 10-1: Using ep0 maxpacket: 32 [ 1318.267735][T16235] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.310071][T16235] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.349835][T16235] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1318.379364][T16235] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.419302][T16235] usb 10-1: config 0 descriptor?? [ 1318.810983][T16235] usbhid 10-1:0.0: can't add hid device: -71 [ 1318.817139][T16235] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1318.940436][T16235] usb 10-1: USB disconnect, device number 14 [ 1319.700074][T16235] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1319.795588][T24266] input: syz0 as /devices/virtual/input/input146 [ 1319.891743][T16235] usb 10-1: not running at top speed; connect to a high speed hub [ 1319.941857][T16235] usb 10-1: config 95 has an invalid interface number: 1 but max is 0 [ 1320.009970][T16235] usb 10-1: config 95 has no interface number 0 [ 1320.033048][T16235] usb 10-1: config 95 interface 1 has no altsetting 0 [ 1320.034780][T24266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4475'. [ 1320.085979][T16235] usb 10-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1320.142388][T16235] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.176922][T16235] usb 10-1: Product: syz [ 1320.191525][T16235] usb 10-1: Manufacturer: syz [ 1320.196292][T16235] usb 10-1: SerialNumber: syz [ 1320.476176][T24261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.598915][T24261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.953823][T24274] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4476'. [ 1321.022193][T16235] usb 10-1: USB disconnect, device number 15 [ 1321.105037][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1321.213500][T24276] netlink: 'syz.3.4478': attribute type 4 has an invalid length. [ 1322.039968][T24289] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4482'. [ 1322.117565][T24298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'. [ 1324.051018][T24328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.106099][T24328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.462527][T24332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1324.493421][T24332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.526802][T24332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.397538][T24339] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4492'. [ 1325.889999][T16235] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1326.060105][T16235] usb 5-1: Using ep0 maxpacket: 32 [ 1326.091420][T16235] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1326.158568][T16235] usb 5-1: config 0 has no interface number 0 [ 1326.170918][T16235] usb 5-1: config 0 interface 132 has no altsetting 0 [ 1326.202033][T16235] usb 5-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 1326.221153][T16235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.239649][T16235] usb 5-1: Product: syz [ 1326.267773][T16235] usb 5-1: Manufacturer: syz [ 1326.319453][T16235] usb 5-1: SerialNumber: syz [ 1326.363744][T16235] usb 5-1: config 0 descriptor?? [ 1326.691547][T16235] cdc_subset 5-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.4-1, Belkin, eTEK, or compatible, 6e:d3:6a:e5:97:2f [ 1326.717974][T24350] loop6: detected capacity change from 0 to 524288000 [ 1326.814386][T24350] netlink: 388 bytes leftover after parsing attributes in process `syz.3.4495'. [ 1326.828765][T22382] usb 5-1: USB disconnect, device number 5 [ 1326.883639][T22382] cdc_subset 5-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.4-1, Belkin, eTEK, or compatible [ 1327.160167][T24353] loop3: detected capacity change from 0 to 7 [ 1327.195539][T24353] Dev loop3: unable to read RDB block 7 [ 1327.202465][T24353] loop3: unable to read partition table [ 1327.208602][T24353] loop3: partition table beyond EOD, truncated [ 1327.216057][T24353] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1328.034440][T14493] Bluetooth: hci6: command 0x0406 tx timeout [ 1328.485141][T24040] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1328.690815][T24040] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.740033][T24040] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1328.770335][T24040] usb 10-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1328.817244][T24040] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.917713][T24040] usb 10-1: config 0 descriptor?? [ 1329.226723][T16235] usb 10-1: USB disconnect, device number 16 [ 1329.626110][T24393] netlink: 'syz.4.4499': attribute type 4 has an invalid length. [ 1329.677013][T24396] netlink: 'syz.4.4499': attribute type 4 has an invalid length. [ 1329.716318][T24399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.822037][T24399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.229766][T24408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.343688][T24409] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4505'. [ 1330.367206][T24408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.283029][T24415] loop7: detected capacity change from 0 to 7 [ 1331.352769][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.362038][ C1] buffer_io_error: 27 callbacks suppressed [ 1331.362058][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1331.409864][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.419159][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1331.439284][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.448459][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1331.456787][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.465957][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1331.489797][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.498986][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1331.507104][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.516385][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1331.524494][T24415] ldm_validate_partition_table(): Disk read failed. [ 1331.540114][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.549404][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1331.585912][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.595126][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1331.603299][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.612511][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1331.621824][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1331.631153][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1331.639155][T24415] Dev loop7: unable to read RDB block 0 [ 1331.676290][T24415] loop7: unable to read partition table [ 1331.700348][T24415] loop7: partition table beyond EOD, truncated [ 1331.741265][T24415] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1332.250243][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1332.250265][ T30] audit: type=1326 audit(1764713136.075:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24433 comm="syz.3.4511" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14d0d8f749 code=0x0 [ 1332.313874][T24434] fuse: Unknown parameter '' [ 1332.428503][T24437] netlink: 'syz.2.4509': attribute type 4 has an invalid length. [ 1332.521817][T24440] netlink: 'syz.2.4509': attribute type 4 has an invalid length. [ 1332.994172][ T31] INFO: task kworker/1:5:5921 blocked for more than 143 seconds. [ 1333.033592][ T31] Not tainted syzkaller #0 [ 1333.065480][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1333.077327][ T3865] wlan0: Trigger new scan to find an IBSS to join [ 1333.116158][ T31] task:kworker/1:5 state:D stack:20936 pid:5921 tgid:5921 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1333.173677][ T31] Workqueue: usb_hub_wq hub_event [ 1333.202890][ T31] Call Trace: [ 1333.225273][ T31] [ 1333.237949][ T31] __schedule+0x17b2/0x4d40 [ 1333.287320][ T31] ? __pfx___schedule+0x10/0x10 [ 1333.313431][ T31] ? schedule+0x91/0x360 [ 1333.334324][ T31] schedule+0x165/0x360 [ 1333.358953][ T31] schedule_timeout+0x9a/0x270 [ 1333.384525][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1333.427423][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1333.474186][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1333.506629][ T31] ? wait_for_completion+0x267/0x5d0 [ 1333.558237][ T31] wait_for_completion+0x2bf/0x5d0 [ 1333.595180][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1333.638251][ T31] i2c_del_adapter+0x568/0x6c0 [ 1333.692876][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1333.742742][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 1333.780874][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 1333.810345][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1333.839267][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 1333.888854][ T31] usb_probe_interface+0x668/0xc30 [ 1333.918616][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1333.943479][ T31] really_probe+0x26d/0x9e0 [ 1333.965778][ T31] __driver_probe_device+0x18c/0x2f0 [ 1333.985947][ T31] driver_probe_device+0x4f/0x430 [ 1334.004386][ T31] __device_attach_driver+0x2ce/0x530 [ 1334.061436][ T31] bus_for_each_drv+0x251/0x2e0 [ 1334.090886][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1334.101284][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1334.107336][ T31] __device_attach+0x2b8/0x400 [ 1334.112760][ T31] ? __pfx___device_attach+0x10/0x10 [ 1334.118789][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1334.131948][ T31] bus_probe_device+0x185/0x260 [ 1334.141746][ T31] device_add+0x7b6/0xb50 [ 1334.146495][ T31] usb_set_configuration+0x1a87/0x20e0 [ 1334.152801][ T31] usb_generic_driver_probe+0x8d/0x150 [ 1334.158422][ T31] usb_probe_device+0x1c4/0x390 [ 1334.188189][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1334.218494][ T31] really_probe+0x26d/0x9e0 [ 1334.230092][ T31] __driver_probe_device+0x18c/0x2f0 [ 1334.235843][ T31] driver_probe_device+0x4f/0x430 [ 1334.246995][ T31] __device_attach_driver+0x2ce/0x530 [ 1334.264949][ T31] bus_for_each_drv+0x251/0x2e0 [ 1334.286807][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1334.300139][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1334.306030][ T31] __device_attach+0x2b8/0x400 [ 1334.311214][ T31] ? __pfx___device_attach+0x10/0x10 [ 1334.316792][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1334.322735][ T31] bus_probe_device+0x185/0x260 [ 1334.335948][ T31] device_add+0x7b6/0xb50 [ 1334.352857][ T31] usb_new_device+0xa39/0x16f0 [ 1334.360104][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1334.365584][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1334.372418][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1334.379367][ T31] hub_event+0x2958/0x4a20 [ 1334.384709][ T31] ? __pfx_hub_event+0x10/0x10 [ 1334.390008][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1334.397409][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1334.437983][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1334.450964][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1334.457036][ T31] process_scheduled_works+0xad1/0x1770 [ 1334.465169][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1334.471762][ T31] worker_thread+0x8a0/0xda0 [ 1334.476831][ T31] kthread+0x711/0x8a0 [ 1334.481529][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1334.487419][ T31] ? __pfx_kthread+0x10/0x10 [ 1334.508373][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1334.519443][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1334.538762][ T31] ? __pfx_kthread+0x10/0x10 [ 1334.556846][ T31] ret_from_fork+0x52d/0xa60 [ 1334.562440][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1334.572597][ T31] ? __switch_to_asm+0x39/0x70 [ 1334.581933][ T31] ? __switch_to_asm+0x33/0x70 [ 1334.599892][ T31] ? __pfx_kthread+0x10/0x10 [ 1334.612380][ T31] ret_from_fork_asm+0x1a/0x30 [ 1334.623258][ T31] [ 1334.632467][ T31] INFO: task syz.8.4100:22345 blocked for more than 145 seconds. [ 1334.663031][ T31] Not tainted syzkaller #0 [ 1334.677235][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1334.689941][ T31] task:syz.8.4100 state:D stack:24408 pid:22345 tgid:22343 ppid:21430 task_flags:0x400140 flags:0x00080002 [ 1334.716439][ T31] Call Trace: [ 1334.724785][ T31] [ 1334.736704][ T31] __schedule+0x17b2/0x4d40 [ 1334.746923][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1334.767270][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1334.782288][ T31] ? __pfx___schedule+0x10/0x10 [ 1334.797685][ T31] ? schedule+0x91/0x360 [ 1334.805044][ T31] schedule+0x165/0x360 [ 1334.812078][ T31] schedule_preempt_disabled+0x13/0x30 [ 1334.818027][ T31] __mutex_lock+0x7e6/0x1350 [ 1334.824815][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1334.839424][ T31] ? usbdev_open+0x16e/0x760 [ 1334.854344][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1334.860578][ T31] ? bus_find_device+0x273/0x2b0 [ 1334.866827][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1334.873323][ T31] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1334.881308][ T31] usbdev_open+0x16e/0x760 [ 1334.889853][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1334.898475][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1334.909573][ T31] chrdev_open+0x4cc/0x5e0 [ 1334.921370][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1334.927735][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1334.944260][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1334.950142][ T31] do_dentry_open+0x7ce/0x1420 [ 1334.961301][ T31] vfs_open+0x3b/0x340 [ 1334.965471][ T31] ? path_openat+0x33f3/0x3dd0 [ 1334.970968][ T31] path_openat+0x340e/0x3dd0 [ 1334.975624][ T31] ? do_sys_openat2+0xbc/0x200 [ 1334.982769][ T31] ? __x64_sys_openat+0x138/0x170 [ 1334.987938][ T31] ? __pfx_path_openat+0x10/0x10 [ 1334.993788][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1334.998778][ T31] do_filp_open+0x1fa/0x410 [ 1335.003520][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1335.008613][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1335.016720][ T31] ? alloc_fd+0x64c/0x6c0 [ 1335.024674][ T31] do_sys_openat2+0x121/0x200 [ 1335.035072][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1335.046733][ T31] ? rcu_is_watching+0x15/0xb0 [ 1335.075629][ T31] __x64_sys_openat+0x138/0x170 [ 1335.094877][ T31] do_syscall_64+0xfa/0xf80 [ 1335.105319][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1335.122005][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.129849][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1335.140582][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.159817][ T31] RIP: 0033:0x7f9a7498df90 [ 1335.169226][ T31] RSP: 002b:00007f9a72bf5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1335.185585][ T31] RAX: ffffffffffffffda RBX: 0000000000001501 RCX: 00007f9a7498df90 [ 1335.203534][ T31] RDX: 0000000000001501 RSI: 00007f9a72bf5c10 RDI: 00000000ffffff9c [ 1335.221491][ T31] RBP: 00007f9a72bf5c10 R08: 0000000000000000 R09: 0000000000000000 [ 1335.238696][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1335.256333][ T31] R13: 00007f9a74be6038 R14: 00007f9a74be5fa0 R15: 00007f9a74d0fa28 [ 1335.280013][ T31] [ 1335.283162][ T31] INFO: task syz.0.4117:22426 blocked for more than 145 seconds. [ 1335.353928][ T31] Not tainted syzkaller #0 [ 1335.358933][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1335.437467][ T31] task:syz.0.4117 state:D stack:28152 pid:22426 tgid:22425 ppid:16593 task_flags:0x400140 flags:0x00080002 [ 1335.459869][ T31] Call Trace: [ 1335.463214][ T31] [ 1335.466279][ T31] __schedule+0x17b2/0x4d40 [ 1335.489781][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1335.495257][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1335.510817][ T31] ? __pfx___schedule+0x10/0x10 [ 1335.515769][ T31] ? schedule+0x91/0x360 [ 1335.529765][ T31] schedule+0x165/0x360 [ 1335.534009][ T31] schedule_preempt_disabled+0x13/0x30 [ 1335.539524][ T31] __mutex_lock+0x7e6/0x1350 [ 1335.560883][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1335.571753][ T31] ? usbdev_open+0x16e/0x760 [ 1335.576426][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1335.583178][ T31] ? bus_find_device+0x273/0x2b0 [ 1335.588208][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1335.593833][ T31] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1335.600354][ T31] usbdev_open+0x16e/0x760 [ 1335.604821][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1335.609922][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1335.615164][ T31] chrdev_open+0x4cc/0x5e0 [ 1335.619869][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1335.624841][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1335.632648][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1335.637750][ T31] do_dentry_open+0x7ce/0x1420 [ 1335.642968][ T31] vfs_open+0x3b/0x340 [ 1335.647223][ T31] ? path_openat+0x33f3/0x3dd0 [ 1335.652172][ T31] path_openat+0x340e/0x3dd0 [ 1335.657009][ T31] ? do_sys_openat2+0xbc/0x200 [ 1335.661957][ T31] ? __x64_sys_openat+0x138/0x170 [ 1335.667450][ T31] ? __pfx_path_openat+0x10/0x10 [ 1335.676793][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1335.683165][ T31] do_filp_open+0x1fa/0x410 [ 1335.687902][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1335.693246][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1335.698285][ T31] ? alloc_fd+0x64c/0x6c0 [ 1335.703206][ T31] do_sys_openat2+0x121/0x200 [ 1335.708115][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1335.713709][ T31] ? exc_page_fault+0x82/0x100 [ 1335.718601][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1335.724055][ T31] __x64_sys_openat+0x138/0x170 [ 1335.729037][ T31] do_syscall_64+0xfa/0xf80 [ 1335.734112][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1335.749903][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.756312][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1335.765878][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.783484][ T31] RIP: 0033:0x7fe13298df90 [ 1335.793598][ T31] RSP: 002b:00007fe133764b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1335.811571][ T31] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007fe13298df90 [ 1335.827454][ T31] RDX: 0000000000101301 RSI: 00007fe133764c10 RDI: 00000000ffffff9c [ 1335.845084][ T31] RBP: 00007fe133764c10 R08: 0000000000000000 R09: 0000000000000000 [ 1335.862150][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1335.889768][ T31] R13: 00007fe132be6038 R14: 00007fe132be5fa0 R15: 00007fe132d0fa28 [ 1335.897832][ T31] [ 1335.910331][ T31] [ 1335.910331][ T31] Showing all locks held in the system: [ 1335.929794][ T31] 1 lock held by khungtaskd/31: [ 1335.934720][ T31] #0: ffffffff8df414c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1336.019934][ T31] 2 locks held by kworker/u8:13/3865: [ 1336.026730][ T31] #0: ffff8881472ba948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1336.061131][ T31] #1: ffffc9000c707b80 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1336.100005][ T31] 2 locks held by getty/5595: [ 1336.104734][ T31] #0: ffff88802fea60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1336.128553][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1336.150766][ T31] 5 locks held by kworker/1:5/5921: [ 1336.155996][ T31] #0: ffff88801d6add48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1336.172607][ T31] #1: ffffc90004c6fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1336.187149][ T31] #2: ffff888027e27198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1336.212693][ T31] #3: ffff88807d9f1198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1336.223582][ T31] #4: ffff88801c7bf160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1336.233339][ T31] 3 locks held by kworker/u8:18/6073: [ 1336.239005][ T31] #0: ffff88814c766148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1336.252079][ T31] #1: ffffc9000b6b7b80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1336.266074][ T31] #2: ffffffff8f2f2548 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1336.275962][ T31] 4 locks held by udevd/6541: [ 1336.285541][ T31] #0: ffff88806ee84e80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 1336.295631][ T31] #1: ffff888061861c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1336.305203][ T31] #2: ffff8880586a1878 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1336.314973][ T31] #3: ffff88807d9f1198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1336.325663][ T31] 4 locks held by kworker/u8:27/9341: [ 1336.331373][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1336.342340][ T31] #1: ffffc90003097b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1336.353036][ T31] #2: ffffffff8f2e55b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 1336.362547][ T31] #3: ffffffff8f2f2548 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 1336.371757][ T31] 1 lock held by syz.8.4100/22345: [ 1336.376976][ T31] #0: ffff888027e27198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1336.386291][ T31] 1 lock held by syz.0.4117/22426: [ 1336.397416][ T31] #0: ffff888027e27198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1336.406507][ T31] 1 lock held by syz.3.4511/24434: [ 1336.411782][ T31] #0: ffffffff8df46e80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1336.422554][ T31] 3 locks held by syz.4.4512/24443: [ 1336.427764][ T31] #0: ffffffff8f2e55b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1336.439292][ T31] #1: ffffffff8f2f2548 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 1336.448498][ T31] #2: ffffffff8df46fb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1336.459511][ T31] [ 1336.479767][ T31] ============================================= [ 1336.479767][ T31] [ 1336.488255][ T31] NMI backtrace for cpu 0 [ 1336.488274][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1336.488299][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1336.488312][ T31] Call Trace: [ 1336.488321][ T31] [ 1336.488331][ T31] dump_stack_lvl+0x189/0x250 [ 1336.488362][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1336.488385][ T31] ? __pfx__printk+0x10/0x10 [ 1336.488424][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1336.488453][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1336.488481][ T31] ? __pfx__printk+0x10/0x10 [ 1336.488513][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1336.488543][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1336.488571][ T31] watchdog+0xf3c/0xf80 [ 1336.488598][ T31] ? watchdog+0x1e2/0xf80 [ 1336.488625][ T31] kthread+0x711/0x8a0 [ 1336.488652][ T31] ? __pfx_watchdog+0x10/0x10 [ 1336.488672][ T31] ? __pfx_kthread+0x10/0x10 [ 1336.488698][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1336.488726][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1336.488753][ T31] ? __pfx_kthread+0x10/0x10 [ 1336.488778][ T31] ret_from_fork+0x52d/0xa60 [ 1336.488810][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1336.488849][ T31] ? __switch_to_asm+0x39/0x70 [ 1336.488871][ T31] ? __switch_to_asm+0x33/0x70 [ 1336.488893][ T31] ? __pfx_kthread+0x10/0x10 [ 1336.488917][ T31] ret_from_fork_asm+0x1a/0x30 [ 1336.488958][ T31] [ 1336.488968][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1336.656772][ C1] NMI backtrace for cpu 1 [ 1336.656793][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1336.656812][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1336.656822][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1336.656852][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 14 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1336.656867][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1336.656883][ C1] RAX: 336e904c8f2f1d00 RBX: ffffffff819729e7 RCX: 336e904c8f2f1d00 [ 1336.656895][ C1] RDX: 0000000000000001 RSI: ffffffff8d762d2a RDI: ffffffff8bbfa900 [ 1336.656907][ C1] RBP: ffffc90000197f10 R08: ffff8880b893341b R09: 1ffff11017126683 [ 1336.656924][ C1] R10: dffffc0000000000 R11: ffffed1017126684 R12: ffffffff8f801370 [ 1336.656936][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395eb70 [ 1336.656948][ C1] FS: 0000000000000000(0000) GS:ffff8881261c5000(0000) knlGS:0000000000000000 [ 1336.656962][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1336.656974][ C1] CR2: 00007fe7679b6ad8 CR3: 0000000078e24000 CR4: 00000000003526f0 [ 1336.657002][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1336.657014][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1336.657025][ C1] Call Trace: [ 1336.657033][ C1] [ 1336.657040][ C1] default_idle+0x13/0x20 [ 1336.657057][ C1] default_idle_call+0x73/0xb0 [ 1336.657083][ C1] do_idle+0x1e7/0x510 [ 1336.657102][ C1] ? __pfx_do_idle+0x10/0x10 [ 1336.657125][ C1] cpu_startup_entry+0x44/0x60 [ 1336.657141][ C1] start_secondary+0x101/0x110 [ 1336.657168][ C1] common_startup_64+0x13e/0x147 [ 1336.657193][ C1] [ 1338.030261][ T36] wlan0: Trigger new scan to find an IBSS to join [ 1338.921869][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.160607][ T5205] udevd[5205]: worker [6541] /devices/platform/dummy_hcd.8/usb9/9-1 is taking a long time