last executing test programs: 4m26.719011051s ago: executing program 32 (id=15): r0 = socket(0x10, 0x80002, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x9c, 0x8, 0x1000, 0x5, @rand_addr=' \x01\x00', @empty, 0x7, 0x8, 0x9, 0x2}}) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0xfff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f00000000c0)=[{r2, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x4000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)='?', 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) dup(0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x80, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @val, @val, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x96, 0xb5, 0x6d}}, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x2, 0x7}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}]}, 0x80}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 4m14.899246735s ago: executing program 33 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x50}}, 0x0) 4m12.044638902s ago: executing program 34 (id=70): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) accept(r0, 0x0, &(0x7f0000000040)) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x0, 0x0, 0x9, 0x0, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7800, 0x78a0}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x80, 0x0, 0xcb, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, @rand_addr=' \x01\x00'}}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$inet(0x2, 0x3, 0xfffffffe) connect$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @broadcast}, 0x10) 4m9.358480101s ago: executing program 35 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000140)="d0b4162c00"/14, 0xe, 0x4014, &(0x7f00000001c0)={0x11, 0x5, r1, 0x1, 0x70, 0x6, @local}, 0x14) 3m37.345777427s ago: executing program 36 (id=227): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40007, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x8, 0xe1, @value=0x9}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fc, 0xfffffffd, 0x55595659, 0x8, 0x0, [{0x400, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x3}, {0x200, 0x8}, {0x2, 0xffffffff}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x8}], 0x0, 0xd, 0x2, 0x3078182a3427730f}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60420000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@bridge_setlink={0x3c, 0x13, 0x8, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r5, 0x12088, 0x400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'pim6reg0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r8, 0xc00864c0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x1, 0x7, 0x400006a}, 0x2c) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000180)) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a0000002c5108ace8b4a571a1e0ad540d4b36d8d394ee517dc88d3fd2ee669313699f63f9db8405f295dd9560ac4808ef60e603ad5436499934784b1a2a7483ab07f53d2247dec413fc03101136f81550ee1e85d9746792055eee6ee8c5f8ffb10a2a7cebcbccba17d919e4e57eb578bb75edc953d7792d2e79289e140076207ad957faf40a52d3c777363710f2d45a12737f78cf1f2a0d69ce5b6ea3e8aef0fc16a5", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6400000000040002800a000100aaaaaaaaaabb0000"], 0x40}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0xe0, "f81705cb567a99990caba46f87bc8b511495b611da25af199c1705e67836357037acc9b124dc09232769fc0826b2c4aa51585abedd8954969aacb6d373ea90c854cb02e05b4b7b46fa4f3cd7dc0c3fe60985f7d7e5ea158eb9fb1a5cfe89031afe6726db2fa4b34c98742a41d2ea19ca87142569f5e8a22e37bcc9b6838f340e75961980de8bf458a4945944a7965f37f773f4524fcf93229e81b9ebcdde343d50f24c88679c112d05894513fb4d6cae664d7910ad1abc4564620a21ce7c1539b8f3dcdef8a55223564f0a8089e271f6976e9bd98f22fe8be21a74a25fedf56f"}, &(0x7f0000000500)=0xe8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000540)={r10, 0x4ae1, 0x5, 0xff, 0x1923, 0x2}, 0x14) syz_usb_connect(0x5, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500204030000004401020301094212000104f8a0e609046f00c57b7406e12f0800376dbe0900000000"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x5, 0xffffffff}, 0xd0, 0x9}}) 3m25.17277471s ago: executing program 37 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 3m24.51131078s ago: executing program 38 (id=289): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a482, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) 3m22.361505749s ago: executing program 39 (id=300): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) close_range(r0, r0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}}, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xad, 0x18, 0x38, 0x40, 0xcf3, 0x1002, 0x4f2c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfa, 0x0, 0x0, 0xed, 0x88, 0xb3}}]}}]}}, 0x0) syz_usb_disconnect(r2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_usb_connect$cdc_ecm(0x2, 0x174, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x162, 0x1, 0x1, 0x2, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x23, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "99"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x77, 0x6, 0x1, 0x5}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7813, 0xc1, 0x8001}, @mdlm_detail={0xe8, 0x24, 0x13, 0x5, "ccce34348a8a823d536f2ba4991b6e0f0626c29ac8502e6e576a462194912a115de8a3ecf74ff2bcea66b1ab1e1727fabc8c0ab80a184a4093d4cf43011ee5fd4501cb0894e5b70a3dde0a831df991e8cdfc54531530109ee03395395cdb3ab2f5b483c86c6c2faf4c937cec493112109e88096d11d6a91f026acac51ba1c42379bce7fd5c59751aa6e49f979f8a56643b52c637983546a353038ae13e4c81dd3a0e3009c9e03cd2546630345e2379a5a055e74d6032cba86966f8836ee1151d65ad24e2b2074a7b00dd78a90d59451b57abcfccaf691a58e876e4543764bd9a8343bb87"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x7}, @dmm={0x7, 0x24, 0x14, 0x7, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x968b, 0x1, 0x0, 0xec58, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x8, 0x46}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x7, 0x4}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x4b, 0x98, 0xfb, 0x20, 0x9}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "51aed262108970ddacec367b318f6239"}]}, 0x8, [{0x2d, &(0x7f0000000100)=@string={0x2d, 0x3, "b6dd9fed136dfbda69a5aebdf69904810a0994f7c869b0d3868e67102653c1767e3acf6253f8da50da7856"}}, {0x65, &(0x7f0000000140)=@string={0x65, 0x3, "bfec78e72bd418ee37fb306e5fb350a87f43efb224ce65a921b6039e3c3b56855f9ea8c76676ba6bce687cc86793e3c0c6d5e2c860aa737532d1ed1b697c372f5ad6b9e37cdebd43d1d96a5f3ee0bc6061e6dd8a6c1d4c93700d75169da543f5f325c9"}}, {0x43, &(0x7f0000000200)=@string={0x43, 0x3, "4d7c5b5cec38bb970ba814b718cecac916d94490cec2f4267cdd79f81c5bb59873de16891657cbf996b15290261a7e431f8fea3937cfcf6ec95c9040a39a873203"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x447}}, {0x6d, &(0x7f00000002c0)=@string={0x6d, 0x3, "8f55b4c15fafc31400a51d3d83f9419a7d4e4a22c165f3b2876e6d01e694896c4e677b60cae6c763ff8cb68c16131c5f58e972d84aefa8aecf1d29772963c8b4cd9d868140f97cc1720e98d521fcfde079e904947ef5bdfdc9975f548cd42ae065d0177fca5e6f52734ef6"}}, {0xcb, &(0x7f00000003c0)=@string={0xcb, 0x3, "4bd3467a93621ae7875cc533a8051c9358b405d8fcc49a34106ebd6415c8c5af68303bda4ccf8b8993977e11fd1c8382aa5ab4328c8a38035f2885392bee4ad7b94a5cc2dfa4810a2df450309e7645c37b537f744c0c5a7ee6455ac5ca34603f122dbaaf63cde20d8d655cc27e34ad726ed0a70d7a0b473483644d493a5595fd3542262dfa27dc6b26c7c306723331941b497ab3e38a31c21c61ed8a0abe02e219f3b1351b1ec56c1dd37a94a3417a211f91b19c5b5868afae95aaafdc145992aa67c44ca3114acada"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x10c2}}, {0x77, &(0x7f00000007c0)=@string={0x77, 0x3, "6f615ae9c366df3f2a07b8b6e3de1e1c5b3d95d3f68779cc7ce6775b58a84ba23337299fc2e90e26eee5b451437c04b54590feb4ac4fdab1b8604d2973338e015df5502d0b832a410a9d9d6248fca166756eba9fd6ce8a69893c2ea3ff9d2e45a9dc640bedae8db2e2426e2241df06a47870fe9097"}}]}) syz_usb_ep_write(r4, 0xfa, 0x3c, &(0x7f00000008c0)="444da3c130928c6cf5fca561231be5ea077828e7630ec259aef42714f4f51a5ad74215de7b80c63eb563074928b423ec384f180eedc38b2af7b5f7e3") setsockopt$inet_tcp_int(r3, 0x6, 0x8, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x3000000, @empty}}]}, 0x110) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) 3m17.633262645s ago: executing program 40 (id=323): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) 3m9.381137228s ago: executing program 41 (id=335): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @remote}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @broadcast}, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8}) 3m0.349341577s ago: executing program 42 (id=349): syz_emit_ethernet(0x82, &(0x7f0000001bc0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xfc}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010188, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 2m59.750549511s ago: executing program 43 (id=352): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x40000001) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x4, @loopback={0x0, 0xac141400}}, 0x1c) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x2286, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="400000000a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_usb_connect(0x1, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902440001000000000904000003ff016900052406000005240000000d240f75b11b7c08da"], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 2m39.40517508s ago: executing program 44 (id=437): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) syz_usb_connect(0x0, 0x438, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000dc473920e90f01dbc8d1010203010902260401000000000904ab"], 0x0) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) syz_usb_connect(0x3, 0x3e, &(0x7f0000001240)={{0x12, 0x1, 0x250, 0xa9, 0x97, 0x23, 0x8, 0x499, 0x1018, 0x3513, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x2, 0x9, 0x3, 0x30, 0xf8, [{{0x9, 0x4, 0x79, 0x7, 0x1, 0x95, 0x90, 0x13, 0x5, [], [{{0x9, 0x5, 0x5, 0x1, 0x40, 0x6, 0xdd, 0x6, [@generic={0x8, 0xb, "0e8b143ea55d"}]}}]}}, {{0x9, 0x4, 0x5d, 0x1, 0x0, 0xe, 0x1, 0x0, 0x8}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000002c0)='\xd5\x06!\xf5\xd5r(\xd3\xe3O\xf9\xa2B\x19,2\xc9\xca\x86\x03<\xbb\xd3:p\xcaeC\xa9BQ\xdeL\xe2\x9e\xf2*\xa7J\xdb\xce0\xc4\x0f\xd8\x83a|\xd87\xfe\xd4\xa0x\x806\xe6b\a\x87Y\x80\x8c\xea\xd2\x7f\xa9q\xc6\xe5\x93a9\xfb\xfc\"\x95\xdbh\x84\xdc\x01AC\x1cTGLz!\xa8\xb5\xfb\xbeL\xbe\xfb\x93`$\xf2\xa1\xdb\x04Y\xea\x8ch6\xab', r1) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) 2m33.18735127s ago: executing program 45 (id=471): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000001100), 0xcd, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000001140)={0x1, 0xffffffff, 0x3, 0xfffffffd, 0x3e, 0x70a}) r2 = syz_usb_connect(0x6, 0xb46, &(0x7f0000000280)={{0x12, 0x1, 0x510, 0xfa, 0x98, 0x6b, 0x8, 0x5c6, 0x9056, 0xd25b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb34, 0x2, 0x3, 0x4, 0x40, 0x8, [{{0x9, 0x4, 0x3, 0xd8, 0x10, 0xe1, 0xf, 0x1e, 0x40, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x80, 0x7, "e5a229"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xf5, 0x2, 0x3, 0x0, "", "ed"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xff, 0x4, 0x4, 0x6, "4b74e6", "04"}]}, @generic={0x95, 0xc, "b7adb1287c7140d6e6921ff0a2a2bdd058791b1431e15f756f8c5adb8d70741cda8f8a2a62caaa299b537f2384541ff00754b9ffbabc30e71e0d5636989cd8ccbeaf2aa06be64798c9e524f16e01dd23892fdbba216a4720fcd8fe9e49a42c125ed64da3ea0c83b6487230978e7b4614f05a195aca2d2a496b3de4e5e64ae2965944b3a98eac1e1315e7ed3f55935ec89cedeb"}], [{{0x9, 0x5, 0xa, 0x1, 0x400, 0x1, 0x4, 0x6, [@generic={0x94, 0x21, "9a6ca6a19f7f593f4af86641de7c5302a29d7bd645737368bf5f439cab0504e54f03cd8507516c7cfb22eeeb5badb00817a986db787a8676a11ef0dd3e998ff9d75818d7268772631b41715ed7ef09ead4abe3e995c1939726b0ebf55ddf47cdcd503932d59f65724dda187736304682218d81928258b12bb0bda6c26ca50eb1efcdb4a158a857570fcfda0a6d912a9d706b"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x2, 0x4, 0x7, [@generic={0x37, 0x31, "317af309e9d484f4e2cb88c22b29746a6090098f574a273f5311c88b88619b151cc7e97e7f01a5d65c4e46f100f7ae9eda5a588b4e"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x10, 0x8, 0x8, [@generic={0x22, 0xa, "a3a5b4d86d430d3f44b36770e3986251da9a1942679fa85feb4564b7626454cf"}, @generic={0xb6, 0xd, "777ce697551743b871ebed29981c84eee134430cbf496d2b1e89af3501b4fe1148bd6b4c121b1c391f5a8807d4741ba050ba40185668ac7aca871c1a5cac8204619abd6ce4241ac4240940d96094e0f8d7b8f076c0b8cbacc2cba79879a41c3e717dd0df54561ea3cc9bdc343bceae0a909641b9907890b2d24046e63baa306460d3ca9ffa927336cff417500b097d334b9f2f1d7d1e08e6b07e935a68e5c38f11065726711e1ec120fe73e2db77131eebe8ec6f"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x6, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc3, 0xc}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x7, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x17}, @generic={0x52, 0xd, "98c42a4eb45bf4490aaffe49c9651dbed69b30cd7b48dcdb009457eb1e5b4efc7e970d246cc8287d275085191a952c316eaae5b854e60a8116c7952e0f50b1a205daa3cd1feb07387fe3dba7ce5e40f2"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x7, 0x8, 0x9, [@generic={0x7d, 0x31, "508799a8bd352ef0f2629cc38cd0f7b36520ec03bf3dd35eec10c5b89bbc8f2c4b8294dfbd8a3920ce91d2e0e863086c84dbbdd6b4b926b09919febf19644c9c3dcdac0761e46c0bd42c4f9fafb3e3e67a001b252e1cdfb08c01a06686bb41a3560b5034b030f85ba34d20c177cb7d504448533a69a4afc6951cea"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x1, 0x6, 0x0, [@generic={0xe, 0x4, "e22bb6f759f0dd986d23a7c8"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0xa, 0x8a, 0xf9, [@generic={0xc1, 0x11, "7c7bcf2bb410a5821efc50f6ea2feec3eb97604dd7b759e6116fb68ffc94e207455210e62026d0c907a57f18fce52f24e905399d042ae72d89b50ce6e16823548e3992c35bfd99911ffdae512ecc651bd73f892a097fbe638dc81acf6188224a719b3548b36a1768071919fa7a381491324f3441b38dd8b68594300c3af2aa6ea795636179d46800e9bd2de508b373bf8448db3f1638e6c748cf1be1481373532b5a3976dc06addd6eaf143ebe3bdb0d06a4eb220ed033a9c7332c175c672e"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x0, 0x0, 0x3, [@generic={0x36, 0x31, "6551d1bceef739b722c1d89cdcdf49e44d5f90004d6fb3dd3d7e0d93792353486d2bcd6f68b59b0109acab27fe648413945603c5"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x9, 0x9, 0x4, [@generic={0xdb, 0x24, "1b74e383bc7ece380bccd47c0f777306313e6d67291d8499587d912cd69bc35cc98e39b07b758dc96284965b0021f991d09f41bcd0f0b785855892447b0755a6c61384c84d3596ebb485226ed6b6363e9f49c98166d8283dbc1b1af6cd6b0f7b147426c1ab17a45281efea731af35cb733c6bd5199dd61979560ad57bcfaf472534028efbbd7958e343e0144ac07ddd424ddaab6e14248586102481258832fd96d1f998a86cb807982d30c78efae1e78e61ea1aea40b2692a7ff4c3fac1647be6625a0280dbfad993d8c2d7f179519993a8d4aeaa4ba39d516"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x40, 0x9, 0xf0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe9, 0x3}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x6, 0x7, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8}]}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x8, 0x0, 0x4, [@generic={0xff, 0x2, "d162a4c61af7f726ec0e4ae75be9424e043e7ea6800ea56d6d515172956565f7ed7c7a286901e47bb18fdae56c4e2d44a694f4b6c8715d29bf4078f4ee1baf733885577f1fe22b0686460afb85170877b5ac36d2704d134f95641b20eb42d979b15dfaa85b827ad6a6e5bd871aba1cecaa8933715cb786e1c655e894ad38d710c9f0536704e03c8b91267a9f5eb72418457467f7013720ff05dc3364c7847ff2673e552f95050a8f00aecfae327d176f4d11760dde35932164d0fee84bf36ab05b5d659c276947f2a52e6dd2d0d0ec79026ab3f7430d23a287e9439cba6f7a31c9b8950b24ac25736dcad868de7c5ea81c49a903fb258b7d29d33c6a78"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x6, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x5, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7, 0xa, 0x6, [@generic={0x8b, 0x3, "7a820f2c6f2dd379ef49f146ba1fc79a959b8b0dfbed74a635a94d399d8ed939d2238e909238dffeedc281b1a3d312542212e6fd661109ecf93bbb97b18f4ced7bc47a3c7e94ee3984cc8ccfd1ad9150167e648ca43ea6470957603f5db527e406ca6bd2e2aa619ca28dcaaad507ff0a1ab3df7a53342792ac1d7af5b181436079a004e521c0992792"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}]}}]}}, {{0x9, 0x4, 0x4, 0x5, 0x9, 0x77, 0x17, 0xe5, 0x4, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "1f1f7a9e0c"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x9e4c, 0x7f, 0x5}, [@obex={0x5, 0x24, 0x15, 0x59ee}]}], [{{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x3, 0x3, 0x0, [@generic={0x41, 0xd, "820de590f16d9b793fe78aba9718956a38cba01139a9c8af53d30321894261a61b05fa98bb89b14bfe458144f4c617d453c0e499d4beea2b06463f6eb16f3a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x7f, 0x0, 0x6, [@generic={0x21, 0x1, "fe4e55755695910d4cea93ecd08430c643bdef84185611599ddaadcaafb13a"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x8, 0x4, 0x3, [@generic={0xb1, 0x10, "d6a91c87a83eac3ba351ad77c807f91045b9eb70f5718699ffe49dc1a664e1a9f8c5353a43bbb94d53a581167821d3db0e68b7a3f7e1955a93ea6f8da75f44923482e7edec973f44088b7275c221c38c6f45aa65446a7b2eacbf469f1189318c0ab807b6bfd64a649efcc798741192e285fc92afd617c304b0391dd40b0f7567276abda3abff606475a1beb8cae7aae765ae0b99ba4688024c0d37bc756221723b537d48f222ae4f9b84da6b10c5df"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0x1, 0xcf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0xbe}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x4, 0xf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x77, 0x9}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0xec, 0xc6, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x5}, @generic={0xdc, 0x1, "80d72a9b2dae88e7c0b7a8dd33cbbe5d068791fb1ad96c22204b1364e154eb615444364b1b0fa9b89c7b43b3e0eaba33e53615a35da49d3f2b07e751a0b74dc1c0c8478359b58b36a13c6167d9cb7d8f066a3654b642c3194fa2870725194add0c88a1d3a7bf02de8bede515147d7cec15d794c12aa9c43af2efd2588df446c363174b5def9dc4ff49758771e616550296761a3dd28002f7c5002eb3d0c63d60c0b08c56575cd2a026f061905db62ebdcb35a4242db0aa03d5953e240309409b90a9221af8c1741793d99093e8ac16453487800b9a370fef3d88"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x9, 0x9, 0x5, [@generic={0x6b, 0x7, "2520c7c04d7c4e76c5934e59e84256803f66c44ee6f223ce0b30874273574e5f0822c6004044f473293b5ee2f795950e35276dc4300cb989a1c649bb69fe3c8dcde46df5723b9bf5eceec1429a06c37cf9e4823c4a536f9f5e475d66c453764770dc41f2e84caa1535"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x40, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x100}]}}, {{0x9, 0x5, 0x9, 0xb, 0x20, 0x5, 0x0, 0x81, [@generic={0xd8, 0x8, "8f2533002a6180f738298d0e977b5458616d73d2e1b56225786a90a17855aaa287c9c147bc9804fbda2257c78d975abb0b6334663ffaed8df144f38530e8a7f1c5b8562b931c25988d05bce112f9b9288375ee3bc2b3406134cc875f1458093e09e5d90bf21d0a0b100d28ff3c630971a5e1960fccd3f92b6abdf270c818f18749bf7aab956cb409a54575f7f2318183a22455643962bebc217e0bcc0dcf45267cfc537b3c9a9ef96fdea5300f213dd8b0ea6c4ec39d6ed43e1ff25ef70562a88b5afc4331f1ba9e078001275b0dba6f50fcaea04f85"}]}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xe3, 0x9, 0x91, 0x10, 0x8}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x1, 0x1c}]}, 0x6, [{0xbb, &(0x7f0000000180)=@string={0xbb, 0x3, "b57d910df9f9c5ab6778ae245f3781ac6cf3911d6eb8b8c395682036daeb7c8604dc5935d3b8b542af1fb4a387114c011309d7e8d8f874e9b5d72296234846c6af6160a4b3c16b9d881409c6f3de61771c359120a8386f0398e0b1f1ee4f3614cfe49a7355b931571c0a08464c1ac3da2264bb288849b1e0f0893b544f429c75db0475423cdbe3ede307e08ff119d26ebe2093bc88ce7a8ec7c0b9a8b36f60e41827e0b12664f63afd6cefe99ea7c032cdf593238bcfc76a37"}}, {0x9a, &(0x7f0000000e00)=@string={0x9a, 0x3, "2019ec4d685458d8aa8a1fedcff1dbcfe67a809b708cc025b8c23b9246416524a412e8bdf1a407429bb814a2577e9789877b1cb7fab6732f404740c5ec570d7f2511ad0c03230857a41ce0a56766ec4b05c6423141f28e96c0b5d7bebf0bcd38ccfdd8187741f2be6fc406b431e14d02a37ba2ba0506bab5cbf0dfcfbeb730f8e072b975e5ea8c4afd71de7957507841c6d01088f61ef8a8"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x1b, &(0x7f0000000f00)=@string={0x1b, 0x3, "e9c5ab82748c0d3629b4f61e109999df15ef6afa78b798ee47"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x429}}, {0xc3, &(0x7f0000000f80)=@string={0xc3, 0x3, "c85e266f69ea7e7d67509d945d8e4c814ee6f6924d47ecf016e244449863bfb405cdec67b6b33838803888d29a3ab81f5fc4bc4c6530093baff45e216a2149e588312ff5e147f1457504d7f7b2ab9c1640c8a4eff7d21969c41dde1319a79765ecea34292ff9f6e22df03e47c7cc306ce4012295c2e0a23816cab38b51f9d878cb57493ce82ad9b222d50bb2d3f62a092523e9e546cc7bb61c667ee88fc432c71de5e7b1682a0f14bd79d7a0cad726a74699ff0c4074476515d1761fb4c15bdd21"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="003205710000a2ffff81014632b4be24b8dbe974886f831d09603aae60979018ce0cf931c5e796d6bad6f6c6b2f3220d3cd69c259344f7c27c725d6faa304d39b8500255d0204e3ca90b901a3592e748312464fa6077c29ed8f84a7998a7e254f0c6ff16b00820bef85e688604ea8c4de0ab1387e00ad547d17ab9f9dcdbe44af59ffd30cc7425e77f1f4a7db52fd2e452243b4efb48af3032db18096f4947fc90ee613942d453f0bbc100cb"], 0x0}, 0x0) 2m29.677925954s ago: executing program 46 (id=493): syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x3, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000e, 0x9, 0x20) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) mq_open(&(0x7f0000000040)='\x00', 0x2, 0x1, &(0x7f0000000080)={0x2, 0x6, 0x7, 0x101}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2m25.7684185s ago: executing program 47 (id=502): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0xffff, 0x870, 0x100b, 0x7, 0xa, 0x1, 0x1, 0x700}}) 2m24.367457351s ago: executing program 48 (id=506): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r1, 0x540a, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0x60013, r0, 0xb1d26000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x2, 0x10800) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000000240)=[{0x3, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000140)=""/28, 0x1c}], &(0x7f0000000200)=[0xd8]}], 0x1) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r3, 0x5, 0x4002) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000080)=""/148) shmat(r6, &(0x7f0000001000/0x3000)=nil, 0x0) 2m15.299092034s ago: executing program 49 (id=510): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) (async) pread64(r0, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x40281, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0x1) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000500)) (async) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000500)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x0, 0x800000000, 0x0, 0x800, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x0, 0x800000000, 0x0, 0x800, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_EXE_FILE(0x2a, 0xd, 0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(r4, 0x0, 0x8808) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_io_uring_setup(0x5c2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x133}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r11, 0x4008ae6a, 0x0) (async) ioctl$KVM_SET_GSI_ROUTING(r11, 0x4008ae6a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x141, 0x1}) (async) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x141, 0x1}) io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 2m13.153331568s ago: executing program 50 (id=517): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x29) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x40, 0x0, 0x7}) lseek(0xffffffffffffffff, 0x14, 0x1) r3 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="e0b7ecd44ffcab", 0x7, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000540)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0xfffffffffffffffb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000180)='./file0\x00', r4, &(0x7f0000000200)='./bus\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x80984120, &(0x7f0000000280)) 2m10.844203218s ago: executing program 51 (id=522): syz_extract_tcp_res(&(0x7f0000000040), 0x5, 0xd0f6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000076000d0b0040000000000000030000000000000008000500", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x200000c1}, 0x24000004) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fe, 0xfff, 0x34565348, 0x3, 0x8, [{0x1a5, 0xf}, {0x8, 0xa}, {0xd, 0x208}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x9}, {0x6, 0xc}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r2, @ANYBLOB="0517"], 0x0) 2m10.763329477s ago: executing program 52 (id=524): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xae, 0x48, 0x81, 0x20, 0x4f1, 0x1001, 0x1963, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfa, 0x0, 0x0, 0x49, 0xab, 0x6b}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003d0009000000000000000000010000000400000014000180100010800c0000000900000000000000080002"], 0x34}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000001380)={0xa4, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc08a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x9af3, 0xab, 0x1, {0x22, 0x1a}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfa, 0xf5, 0x5}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x1, 0x2, 0x80, 0x6, 0x8, 0x3}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xe8, 0x2, 0x3, 0xff00, 0xfff9, [0xffc00f, 0xc0]}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x380a}}, {0x4a, &(0x7f00000003c0)=@string={0x4a, 0x3, "991072bb29c6a5d81a0cc7aa32fd92c6bd2919d39669f54a7371038860505ae9bdcccfa1e788e9f60bb0405902249d7ed394faf15b427b6b8a5453f901a33f1d555f1a75a895fb1d"}}, {0xd2, &(0x7f0000000440)=@string={0xd2, 0x3, "4c7ff1fd1cf705ce088c5ada1ee41c8e667f337ca9ed397d9f1fc3c8249f74d5a31138d65d8cbccb32beede0e28caf2a75a988a0045efca62fa023f03087c0c6d1b16863d9264bc1870bf62762a9299b508dbd82525243e4fe3f779ed330b0f5513b6b512e0edbfdc13abc84d437ebaea1b98b7b039aab8e4d90561aa7a6f01802b31cea8b4710a596331a71e871b0fe0bddd40cfc3055e778adb27b20b9f321503f8f06d855ec9ee77acd1f87953b4b6b9f94f2838deffe23daafe893541e12e050d02066585a5458a33c5a4107834a"}}]}) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 1m50.274722233s ago: executing program 53 (id=553): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x8, 0x0, 0x59091fd, 0x2}, 0x0, 0x7, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xffeffffe}}, 0x1, 0x0}}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4, 0x2}]}, 0x18}}, 0xc000) socket$isdn(0x22, 0x3, 0x22) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x34, r5, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r6, 0x9, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000011c0)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x29, 0x1c, 0x4, 0x9, 0x14, @mcast1, @rand_addr=' \x01\x00', 0x1, 0x7800, 0x1}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x3d, 0x0) ioctl$EVIOCGABS20(r9, 0x40044591, 0x0) pselect6(0x40, &(0x7f0000000440)={0x2, 0xffffffffffffffff, 0x10000, 0x10001, 0x200, 0x9, 0x5, 0xfffffffffffffffd}, &(0x7f0000000480)={0x9, 0x8, 0x2, 0x80000000009, 0x2, 0x80000003, 0x80000000}, 0x0, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="38010000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000e8001100ac14140c000000000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000aaff0000000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ac1e0001000000000000000000000000ff010000003500000a00080000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000009baa007d00000000000000000000000000003c0000000000000008000200"/240], 0x138}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)={0x24, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x145, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x20}]}]}, 0x24}}, 0x4040040) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0xf7f, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@mpls_uc={0x8847, {[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0xf71, 0x66, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0xb}, {"7431184dd8d93f280b36c333a3490ad5eef4cccbedc66d18cef60239bcca28827852cf9e09002c1f8ae522dbc17a6de2a607ba8ef20ee6870e1049af2f83ee8d6f9d321e763130313dbacddf0e5aab1b9c3d27d0b909e1dff12d4f5d66b03c4f9872775a608565302c6dfcbc96b5753269607542d4cfff620342ee9d614e3c3c8bdd40f802f1bbe3af444a3580e62fd9689c479148c93d2ab94f35b0493130b9f4ff7ea4f811f63b46a4e02cb187ed83400083ab0ad86d85fb28c580a1f079cbb692bcd17342973852a9cc94677ce102002501a344fc91dd0e32c9ff6be582c25898dbd351debdd343153a7d6ecc0a5c05f7bc93343371c307496d48d39cf620ab7cfcfe125564a6cfdc071e9fd2576ef21054ec7f7767fc212fc96cef4d70380db7cd0d08d5d3bf6445ff3e784cee12bdcf672e4322f69d7d90649e502fc34e756a6e515790633058338ad7c5dbe3af52aaee5e81281c54bfbcfa08a914ed0020852519ce1011261fc0acd6de40d0fcccf5b38b6f78633bd8777165c934443451cedee3529b4b486fee5f2e7b794d982008f209ec2625e18d2b813116aa08637abe08e20d4e1c03880f03551817db86214eea5878708ec1a75ad93b0e841bcc1ed3f1f3dbe9b7b19054617b1a5918a6e211e96710f93960e53627e446a9497238896cbd0eb6f13e1f120d6f6578846488dfbc885c7693fc07f00ef0821ed3b960ae7f7e5f8bdb4591eccd388d334149ffbff17c4de519c1eb25b68074a6453a5ec0b061a29dd182f7339c040da431efb3e2fb44351084658853408f17503dff1770d625f02c02a9cc75ced78d50705ab0dee58082b73e167674d2aa1c71a357e06af8c738c050278b83f09e51b3e9dbf5ed5013df3c28e01d22fa69a106c3494e9b93bd8b9c98ee20fb5232df3716ea3c0b5cd1f139225959b99e8eb16a07bd365326683a1c57629c5a0a8f8cc2c6a4a0a18ec1ebee2e0e31d86c6906546674f998a94bdddda0ba2fa41670f084b6852d9416c5c2da4bbaf47ff2c3c95796a384230aeb58ccdce9a4306ca7ca7682b10e7f1ab4864ce1ab8d55c256a0963178630684b59a53b2d9a0e71dc0776fa214bae45a8a56cd10d76e576d6f2906fff8dcbb9065bfe41d6b6ab7b91efc55a945605f63f45d337adfb5c13308ea8f6689888eb64d22f3e4c87bc3d0af5c21ad42f6d4030b5961f009f33abea17384711bd6acddf7d6e65e0df37d92717d73e096683556773f9fbd725755efdfebc1ebf793c2fb59e8b2fb8d251c6072b58f188018b6cad7e08239157f8599a362a2868b55ab5cb46155697a8ce391636a9519596824b1a7915771171f9663b3a379c2e729c6bb5dd2fd154eceddaf4aaad6513269ac2419c341187931a109e0a435b907530b7769610e23bba953ad6d3c17f0b7ab772cf6127dad6a1425628252d2d9fc6f16622703a34f6aba91aada6e7c1c52c74e5efc25281559337a222c44923cc1e7abd736730e7ea12ccfd288c942ade109c623a15ef84502a1929c00c745c8e2cecc1c72ab4f729af2c23098806ef4ef69451712c4b5f0ebb889b352cd30db0ef17652629635a781f6c1734cd5b5ce70dac8292bdcefa74933aafd0618c2ae3e561997f9141022b5a6f359fd831cb19fda8f06316a6d1884e065ac77c3f38e30f0efdbbb04e22c068b4d5c27f3d2fc366a3a2cdf6ca06cdfee5e8eadd50eedfac460ece968e17efc9a0f35b4678d55b7d47ad99a99fade3270c84750516d209fcefd6aafb55b30397584d4e917ba1ff513b0dc69a283677c7547e25fd843d4260ad2e066126ae049c41fb5ee4418777a9efed84d1632b1814327fbb02fd4f016eb70993cdac6e345fd4aea13b1fb176956fe719a11bfc873211f929cdf5fe5310413b17b6d3be1e9320d3966774af7d661e980a3be8cfb00f0b418d12fb1e757f5eefab166768f91d3d64a2ac2704496f34c01a930a70c16d864309d52d4adaa2c6b2de80ffa5a1201edc8fa5cc2080e9dba0ef42d8fefd776d9fc438ceaa63a2e90dd28244e359347b015089971368504f4fb341df4ec1f414aefd0ac64eed3e3483202c6caae5f5d81d00b21b5a4552f1bd72b892653d6528aef20765385e979cfd3c24d9588034fd03bfcdf6aee395699d54a32ef71b0be0f27368b9e4675a070643ebe0cfdf46006ab4cf4f29c3c4bbb7a71bd848100e027d3596807ffa140595caa4b2b80805ef272a58780075ac2108a5c7ef24015e6072a8e486a036b75ce67d2a8347a72c7ce8dceb3cf1691a9310ac4f91ba5f60f95908c39514767edc31084470ef7b6919a8f864e4c04aea554eb20da7bd0c30bf6028ebdfe322c42ca8274b7af4939e5abecf9dfffb6b6714f0d8ce154fcfca49dee903f24a4d7daba2cb944a02ae199a7727cb280d9108046a3a1de1439ee1dfb02e338757f28fc56579269c576e3e0b596c5857ad5c99c0c730ff16e13e20a5b87e8cecff4fb6fc615ec3bacdbf9caab87723d28f25f787f003e2f661a6869fc48fef06e9adf283154d92d5ef5fdfe1b361b0988d5b0b0cd4fd0df2aecec53eeb3805be1ec619c37a5e2523c811c0f15dc3ae7bebed31b19f4f5a5295ef049a642c313a720d6572dc03fb8af2cb599baf04249685f161b51370a5610b0efb9a92e651287f5216389971c2eda646a15c583d5a4b1cbe565c61126b6f98f3add8d4bbf5b3f62ef1f3e91c5e7bdc0ce0df609b38ad568882ab36593347f226a587847cc59c531bbca22cb7ac8c33e2f0ade0365da37fb06c05b5eeb463fa01a96b278a12e9ad8cffe7af709186ea60cc46725c5537d0b7274fdff873976db4f471152e89933250235caf583094c8015cfd355e4abd6dd92b67dbb437b2b8351d3c6ef145ce46321f056a8258c64f961187e04e26f27f49fd3246671cd197d3748eeebe280f85cb8f9e2cf159b8e8a496d23fad53600371c7c73632f08a612d3a7ff36538d6ca737a3efdb428b2d2daec184a2222e01e1766f2c77f22f2a60ebc5c1f17ce08fde00878090f616530411f665f62357afc340dcddfb55a0b0da4592e81eebdca3520b3fc2705d523679ee2c4f32d34063992400a99b10b828d3a6d53785521e8d40dd5692860dc8aef1e939e547fa9b6f57dbecd4e7c5956db94ec49a6a3db7219ee8cad1e0a5fa3ef532b52639c7ed32487e23e99bd285e831b103c7f6e3c486a94e3df672b63783afc1fa340b32e850e996524256d7d7064824b2bd6395094fadb84ce33700e3a50d1cf84542a29535f4e36794f7873ac653175c1b623d58ef4ff0f62ab6cf3644fd5eecdeb3715c56c2f8c56cf2c183af7094a5f50cc9a42afba6e292609fdbe4a0dc7e2e71737c80cb20b7a32d0ba8a59697aa0a839390c8e10aa8c406a55024285e06fbdcfa04b5408ecdd651702002405800aae551054310607882c04d9222cdea5b6f2305a99a776e2534b81686b127c3946f13467b6039f152c0e954c0e4de6d61c67aceba7da45c2f8e9cdc1e789eab93674a59829190ba6484f1159ffad8cf1348700eee820704afdbf8969e8978d3c000e594064f2268bdb5af839045b63fa70c7a80b92c0ed402a28aa63659ed0739420064f81a0bb4b91ebd1e9a16365303b6233ecc04566d13abce7e3f84c0a3cf71e7703c6d05f35e5f9d0ff5e0d3177e82e1b6ba6461c3eef5b2f045129344703fc74da48158f7c2bbeffb0d04c43f67fad9b79f81bcb1249ed5dcca5e3573a26e43ce57dfa1bc7660c9ba70a207af16afedf2ba8468b52e0e35d4bece5c704cf1de5df3616e39719dececfeab4cae7bfb7f1b513c5f8dd4dbb2c9f4a4f574e991c2b17251d21a5e00764344b460e847379141485cd7a91ec9b2187f20cfa32e52425a5e987e2bdcc084b330228a95108a8ba20846d26d985fd992c679406ab832344db2408e47c620394acd1777a422f3d425f8a074221259c667ac63ec8c772c5e980dfa0a656788b05255284326ec813d9cd44ff5f889a0e3538c5465faee6df3da5f6aed203ef350c8bc35b775c90838d4a384ec29ddfa3122f72791d6de7566a53c64b29fba60ace973f5d38e797c72b09d8e18ab3a1992c701562976fdcb90e3074c3a09945b9eb881d77b2db9e510d8044cc209506ee80380c3b963cb78ec45e20a755ee0e4de6c18bc2d484fff623ab3b55934a6635e709c6e40f1a388c423464de3421f347a8dad958174a35b053e313d718abe8b0c1fe8da4b0af3cbcb220a29667f6d246e033da87ed59f0b4d47109f274b022d30a5b6717b8a3ff6dc90e519a64bf059ad6bb493649bd9dc38dee829afb37b7e36c0fcf4db0c1435394f863191c6e2fcad864b8ad04d52f1fb1916b2563af30465cecbf4d4d78e37dabf2e650a5a7c7ab6834d642478435e7ce25d676f9cfc368aee5234087775af9d3f24c5eda9de8c7dc168ae6739e259f51fd24a39b4414507e34360fc0dd079e16acba942d1c9f8372dde37a92c2c21095ce75eba4eb463dade3d427b4a9ea0564c46093f2168ed7ddde353da37e6ac2ea7aa44cd635492d5247fab009d88174d06bc0bad1cef955f6c7560aea8ec7d4063a503ff08e1f51045ece30924e2e6295d1ed3fae8ea87467cc1ef8a61b9e0be85a772df948da3f82dd19919cbc77d6941a87ed998e9ee1a2e50021ff685be122ecc45a77a27a223a210a9084d2d9c8daa2fbb440db4f2c17b745cdd2343a67681ac5ddab09094142da71b2effa0944b59b194dd33fb77b795f1558ae56119d9e30501d3a2b9560d7cfd8dceddab77ab2e23ebae35bc35815806cad92b6a49d495df98e8ff02a5f32925543ade6641f20319ddb0a03df2985d0b8787e98e0d16b6b9c1a1cb71ad4bc3824332989a20fc69c7d57ef941052c9613f5b74553d775f9d132321d1b9a1075057529b9ad4c516a0c5de388c4017c481952397a19fac7ea94d5b7e835825d60c39ed7ac737c6048b0df0d94647fae921d6810c209f3bf2eaae1dc4a56d28bc63f7a5355daa626a08f1cd1bf796b0f10e9fee268cb2ab81cf602b37ffc475fb69d91f4c27f4ae2597bb088c6afa130d137911daba933dabfe8a1450299c011aa56c067d1ee0ec880ab12dd48d5ff9752d625f1cd0aeedc5cf8d9e0df612b1c6d076ce0c9db3da9bffcac4cc4fc67c1c1106129a8b9e3559458d29e2ab4f3f57e4de1d6ed61a4995ac6715fcafbb02b3fb4f5a28cd0615a08b56f17a3a4a2c16352e05e162068cc451cc31b1d4627309928a6bc75f6160259d036727a30ccf37ecb1c6c2cf4f01699bfbedc11a9995c78246caf0c12a36c24b5451125cdcbe4c0a9156009f4fb649393d7a680e06caf3b986dca04cd7dd848a66b2dc2f83e5debd499b3af63603f0637ea024538d3b06f1a1ab23901084ed0e45d7f25524e8f8fbcea9c6a8018317528a41ea2155bb4d4164b3ae140bfad875c7bb869bbbfe71cb441b60092d290f892e289308adf3dd29ae02221b1ac9470f38aa76aebcd2c69eceff0b94a742f84dbd172c9ce7b5a6d7026636688"}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x220, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x6a}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1f8, 0x3, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xf5, 0x2, "f6e7bbf067a42129d7c78c78d3f7dac0f756b6c1172f5a211baafa005e64d28117f2983f22f67284e493de63e453af70db1b3220ddc3ef24be3174d3291596d9f1d169846a3353b0cc3cec9de5455903a9385e11405f698cc3738aaa47467d31d04d9fea28fd6fbcec26b930571c8cf778bc345b830ab5273037f7ea2bb8d236813b940ac86ea1dc758afb831ea804ae0a749ece0c746fc7382fdd7e567e085b3a86156cc9eb9a3675ba6ad823ecbbf8b6664a9aa295f750fce9590911b55a8e238c931826fe99d38a72d94e297b67deeb72022de1aea1f32f157ef157a5d6b30c2865bf54cf9f70573ba9c01098cf7012"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7fffffff}}, {0xec, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe7, 0x1, "50b3498b93d582c5544cb3cf5aa3ef98245c30d993b7b8b1c0b183ddfbd5df42cd0eb6ae4408eb78b6cdc1639017d88ca05c88e5fa0c9a935f536489608733c083f12b86cbbe9b201da78328128ab26f7ca91646edfdc4cbd702d011f3cb54c9faa04db606d06e5fe9d879d3ed3c748ae21f83f5d21c36b86e469f1f255cf7af81e4265cd5d6380e7623caee8baae0a35bdb810b9d588b1bf86f9af4ae6aa2517449722b36adf58ff057e3940bdba927c51e3ce6184dae57278de87db775a64e73197bb2954b6f346fb0e6f6b8efc3e83f3f3730b7c2d158ffe457de2ee64d3a2d6ff2"}}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 1m33.389618298s ago: executing program 54 (id=644): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x4008af10, &(0x7f0000000500)) syz_open_dev$sg(&(0x7f0000000040), 0xb92, 0x40000) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x187e03) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000380)={0x0, 0x0, '\x00', @raw_data=[0x1, 0x5, 0x1, 0x1ff, 0x7, 0x100, 0x100, 0xa5, 0x0, 0x185, 0x1ab, 0x17f6, 0x375, 0xffffffff, 0x4eff, 0x6, 0xa, 0x6, 0x0, 0xf, 0x5, 0x0, 0x0, 0xb13, 0xfffffffb, 0x6, 0x9, 0x7f, 0x0, 0x7, 0x8, 0x1]}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dcd69f205a04105201010102030109022400090000100009042e00027e3a110009050202000202000009058202"], 0x0) 1m30.611567711s ago: executing program 5 (id=655): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_team\x00', 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1=0xac141436}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x2600}}}}}}}, 0x0) 1m30.579421314s ago: executing program 5 (id=656): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@mmap={0x6, 0x4, 0x4, 0x10, 0x1, {}, {0x4, 0x0, 0x6, 0x2, 0x7, 0x60, "514fef64"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x4, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xb483faa9dc5ff013}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0xd7}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)=0x7) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) (async) r6 = socket(0xa, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c8, 0x2b8, 0x368, 0x0, 0x368, 0x1c0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, &(0x7f0000000200), {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0xffffff00, 'veth1_to_batadv\x00', 'syzkaller1\x00', {}, {0x80}, 0x21, 0x2, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "1bc3", 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6c9b, 0xd, @ipv6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x4e21}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x9}}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'bond_slave_1\x00', 'tunl0\x00', {0xff}, {}, 0x33, 0x2}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="081936524281", 0x9, 0x2, [0x34, 0x2b, 0x38, 0x2e, 0x21, 0x1d, 0x4, 0x28, 0x29, 0x7, 0x20, 0xe, 0x16, 0xa, 0x3d, 0x18], 0x2, 0x0, 0x6}}}, {{@ip={@rand_addr=0x64010100, @local, 0xffffffff, 0xffffffff, 'ip_vti0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x32, 0x1, 0x2e}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0xd, "ad027869a5b5ee739a915789838112047daf3dfc852bc9db50d20b3bdbd9"}}}, {{@ip={@private=0xa010101, @loopback, 0xffffff00, 0xff000000, 'pim6reg1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x67, 0x1, 0x14}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x81]}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r6, @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800068008000200080000003e"], 0x44}}, 0x0) (rerun: 32) 1m29.949094263s ago: executing program 5 (id=658): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) io_setup(0x7d, &(0x7f0000000600)) 1m28.93862109s ago: executing program 5 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x96) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e53f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd, {0x0, 0x13}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r1) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0x0, 0x100000000000010, {0x7, 0x28, 0x7fffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m27.956874751s ago: executing program 5 (id=664): socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20008012, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c) 1m27.775974696s ago: executing program 5 (id=665): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='$grotp_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3}, 0x50) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x80440, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x74) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="66660f3881028feaf8106a0000000100b9800000c00f3235000800000f3066baa00066b8001066efc4e2a5bdee66baf80cb81039258def66bafc0ced3e0fc71ce6f02007b805000000b9060000000f01c166b8a2000f00d8", 0x58}], 0x1, 0x20, &(0x7f0000000100)=[@cstype3={0x5, 0xe}], 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendfile(0xffffffffffffffff, r9, 0x0, 0xfb) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xd}, 0x1c) r10 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) r11 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r11, 0x1, 0x1a, &(0x7f0000000140)=""/62, &(0x7f00000001c0)=0x3e) r12 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r12, &(0x7f0000000180)={'exec ', '&\x00~\x1c-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5g\xcc\xd5\v-\xc7g\x80\x9e/\x19{S\xa6\xfcv\x02\xae\xa1z,\xde-\x8fKN\x86g\x93\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xab \x00\x00\x00F\xd8\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x834}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'\tj\xde;+\n1\xd0\x15\xf9Q\xacw\xcfS\x9a\x90\xf3-\xedkp\xed\x10\a\x00\xf1\x94\x99\xe1?\x10\xda\xc7\xed[\x00'/163}, 0xa8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m27.509592818s ago: executing program 55 (id=665): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='$grotp_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3}, 0x50) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x80440, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x74) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="66660f3881028feaf8106a0000000100b9800000c00f3235000800000f3066baa00066b8001066efc4e2a5bdee66baf80cb81039258def66bafc0ced3e0fc71ce6f02007b805000000b9060000000f01c166b8a2000f00d8", 0x58}], 0x1, 0x20, &(0x7f0000000100)=[@cstype3={0x5, 0xe}], 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendfile(0xffffffffffffffff, r9, 0x0, 0xfb) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xd}, 0x1c) r10 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) r11 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r11, 0x1, 0x1a, &(0x7f0000000140)=""/62, &(0x7f00000001c0)=0x3e) r12 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r12, &(0x7f0000000180)={'exec ', '&\x00~\x1c-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5g\xcc\xd5\v-\xc7g\x80\x9e/\x19{S\xa6\xfcv\x02\xae\xa1z,\xde-\x8fKN\x86g\x93\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xab \x00\x00\x00F\xd8\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x834}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'\tj\xde;+\n1\xd0\x15\xf9Q\xacw\xcfS\x9a\x90\xf3-\xedkp\xed\x10\a\x00\xf1\x94\x99\xe1?\x10\xda\xc7\xed[\x00'/163}, 0xa8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m14.442061915s ago: executing program 8 (id=746): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000740)=0x5, 0x8) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000680)={'veth0_vlan\x00', {0x2, 0x0, @multicast1}}) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a5d3ad58c3bc1736fdcb2c1aef9159ea0f60650b622c126ea0c931fb54b7715a6394c3b27112cd123ae66d9f54db4dda88cf04f5470c87b6601df49557f91dd462bd161c4a32edb37a147cf1340355c1c30cbde00a025284ecc94858e89e52a2994fe1e824722dba161e3413968f2d29b1c94a8191ae3e7892f6efff3954315264a1f69d0d54b00d11cd6b9a34bdbc37aa7db99f740aa3df4a9e6d02ac81f85f219630664b4474d775382a351c012ae5ca22101ad299859e18f48b4a", 0xbc}, {&(0x7f00000003c0)="100688a991803045266a0be2d424be8d8b36d65ba73307b5eb419bd0885ad0ea42d05acc5b829d91979798a7b06b6d2b933105b501f90d8856d3ff5f9015fbba48a28ac3b37fcb72fa7fad23187d065330d21b063c675fd92624f5614beebe023ba0d7766c1e581ce95795f71f946e0be2052c89ff89bdf683a88f0b71eae6bc4b0a0dbadcdfa440ab3ad3ed8482fbdc3266974c1f3118665bfbcef91e77a03bae688780755a368d0def1f903511e6a98a2f1027553b9f5b6eeb7e584a5e717bf4533cd80163758edd308410f78ce0535956ee45dab18566", 0xd8}], 0x2, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0x3, [{@rand_addr=0x64010102, 0x6}, {@loopback, 0x100}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x6}]}, @lsrr={0x83, 0x7, 0xdc, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x8, 0x2d, 0x0, 0x9, [0x4]}, @timestamp={0x44, 0x14, 0x67, 0x0, 0x0, [0x7b80, 0x8c1, 0xfffffff7, 0x0]}, @lsrr={0x83, 0x1f, 0x64, [@loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010100]}, @rr={0x7, 0xf, 0xc8, [@rand_addr=0x64010100, @rand_addr=0x64010101, @local]}, @cipso={0x86, 0x3a, 0x3, [{0x2, 0xf, "400c1ef2c3996709b29654581d"}, {0x5, 0xc, "31200eeb2ceefa241a67"}, {0x0, 0xd, "8f0c9f39e1edf365b2093d"}, {0x2, 0xc, "3e67e7a6b99477a9d07d"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x110}, 0x682873aa7091c4e8) 1m14.218302087s ago: executing program 8 (id=748): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@RTM_DELMDB={0x38, 0x55, 0x63837ba875575fe9, 0x70bd25, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0xfffe, {@ip4=@remote, 0x86dd}}}]}, 0x38}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x20363159}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40, 0x90}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='/', 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) recvmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x69, 0x0, 0x0, &(0x7f0000000640)=""/135, 0x7e}, 0xe2}], 0x400000000000160, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) splice(r5, 0x0, r0, 0x0, 0x1100000000f336, 0x0) 1m13.948109169s ago: executing program 8 (id=750): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_setup(0x2ad5, &(0x7f00000001c0)) r0 = socket(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800001418002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1m13.664810252s ago: executing program 8 (id=752): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'geneve0\x00'}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x1404c012, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x3, 0x2, {}, 0x40020800}) 1m13.602566967s ago: executing program 8 (id=753): syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xb, 0xce, 0xdc, 0x8, 0x18b4, 0x1002, 0x8793, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0xf0, 0x6, 0x1, 0x8f, 0x7f, 0xff, 0x9, [], [{{0x9, 0x5, 0x8, 0x10, 0x220, 0x1, 0x6, 0x2}}]}}]}}]}}, 0x0) 1m12.150456978s ago: executing program 8 (id=763): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000140)={0x0, 0x800}) (async) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0xa6f, 0x2, 0xe5, 0x1ee84758, 0x8]}, &(0x7f0000000040)=0x78) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'dummy0\x00', 0x2000000}, 0x18) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_info_req={{0xa, 0x70, 0x2}, {0x7}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x1}}]}}, 0x15) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 1m11.102958821s ago: executing program 9 (id=771): r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') (rerun: 64) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000140)) (async, rerun: 64) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"c800", 0x1ff, 0x6, 0x3, 0x0, 0x2, "01cff78ea77000ebff00", '\x00', "05049e3c", '\x00\x00\x00\b', ["000300000503c9eb06327bd6", "ffff08000000000000042371", "070500110800c1024b00", "a29f1696f7a8348e9a8100"]}) 1m10.853084722s ago: executing program 9 (id=772): r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c00000000000000008e1445c7000000", @ANYRES32=r0, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c"], 0xc0}, 0x0) (fail_nth: 7) 1m10.367320153s ago: executing program 9 (id=774): socket$inet6(0xa, 0x80002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$getown(r0, 0x9) syz_open_procfs$pagemap(r2, &(0x7f0000000940)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b8, 0x300, 0x300, 0x210, 0x0, 0x210, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x12}}}, {{@ipv6={@mcast1, @local, [0xff, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xffffff00, 0xff000000], 'veth1_vlan\x00', 'pimreg\x00', {0xff}, {0xff}, 0x1c, 0x3, 0x4, 0x21}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@mcast1, 0x3e, 0xa, 0x6}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff, 0xffffff00, 0x0, 0xffffffff], [0xffff00, 0xff, 0xffffffff, 0xff], 'veth1_vlan\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x3c, 0x2, 0x1, 0x8}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010100, @ipv4=@local, 0x32, 0x5, 0x8}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast1, [0x0, 0xffffffff, 0xff, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff], 'lo\x00', 'pim6reg1\x00', {0xff}, {}, 0x0, 0xd8, 0x4, 0x18}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3b}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0xc, 0x2, 0x0, [0x2, 0xd, 0x1, 0x7, 0x0, 0x5, 0x3, 0x0, 0x7, 0x4, 0x3, 0x109d, 0x0, 0x3, 0x0, 0x400], 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x6, 0x0, 0x7fffffffffffffe], 0x4, 0x8340}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000070000000800000022"], 0x48) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000180)=0x9) 1m9.91734276s ago: executing program 9 (id=777): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000b80), 0x220000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x8e8, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{}, {}, {[{}, {}, {}, {0x0, 0x2}, {0x3}]}, {}, {}, {}, {}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}]}, {[{0x0, 0x2}]}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000b00)={{0xa, 0x4e21, 0xf, @ipv4={'\x00', '\xff\xff', @local}, 0xfc}, {0xa, 0x4e24, 0x0, @loopback, 0x10}, 0xffffffffffffffff, {[0x3, 0x9, 0x4, 0x2, 0x1, 0x4, 0x3, 0x580]}}, 0x5c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) bind$inet6(r1, &(0x7f0000000ac0)={0xa, 0x4e20, 0x8, @private0, 0x9}, 0x1c) socket$packet(0x11, 0x3, 0x300) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0xfffffffffffffffe, r4, {0x7, 0x1f, 0x0, 0xffffffff88008000, 0xffff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x100, 0xffffffff}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) 1m9.67472679s ago: executing program 9 (id=778): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x20000000000, 0x0, 0x40001d4}, 0x8840) 1m9.350750169s ago: executing program 9 (id=781): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a5d3ad58c3bc1736fdcb2c1aef9159ea0f60650b622c126ea0c931fb54b7715a6394c3b27112cd123ae66d9f54db4dda88cf04f5470c87b6601df49557f91dd462bd161c4a32edb37a147cf1340355c1c30cbde00a025284ecc94858e89e52a2994fe1e824722dba161e3413968f2d29b1c94a8191ae3e7892f6efff3954315264a1f69d0d54b00d11cd6b9a34bdbc37aa7db99f740aa3df4a9e6d02ac81f85f219630664b4474d775382a351c012ae5ca22101ad299859e18f48b4a", 0xbc}, {&(0x7f00000003c0)="100688a991803045266a0be2d424be8d8b36d65ba73307b5eb419bd0885ad0ea42d05acc5b829d91979798a7b06b6d2b933105b501f90d8856d3ff5f9015fbba48a28ac3b37fcb72fa7fad23187d065330d21b063c675fd92624f5614beebe023ba0d7766c1e581ce95795f71f946e0be2052c89ff89bdf683a88f0b71eae6bc4b0a0dbadcdfa440ab3ad3ed8482fbdc3266974c1f3118665bfbcef91e77a03bae688780755a368d0def1f903511e6a98a2f1027553b9f5b6eeb7e584a5e717bf4533cd80163758edd308410f78ce0535956ee45dab18566", 0xd8}], 0x2, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0x3, [{@rand_addr=0x64010102, 0x6}, {@loopback, 0x100}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x6}]}, @lsrr={0x83, 0x7, 0xdc, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x8, 0x2d, 0x0, 0x9, [0x4]}, @timestamp={0x44, 0x14, 0x67, 0x0, 0x0, [0x7b80, 0x8c1, 0xfffffff7, 0x0]}, @lsrr={0x83, 0x1f, 0x64, [@loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010100]}, @rr={0x7, 0xf, 0xc8, [@rand_addr=0x64010100, @rand_addr=0x64010101, @local]}, @cipso={0x86, 0x3a, 0x3, [{0x2, 0xf, "400c1ef2c3996709b29654581d"}, {0x5, 0xc, "31200eeb2ceefa241a67"}, {0x0, 0xd, "8f0c9f39e1edf365b2093d"}, {0x2, 0xc, "3e67e7a6b99477a9d07d"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x110}, 0x682873aa7091c4e8) 1m8.791641787s ago: executing program 56 (id=781): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a5d3ad58c3bc1736fdcb2c1aef9159ea0f60650b622c126ea0c931fb54b7715a6394c3b27112cd123ae66d9f54db4dda88cf04f5470c87b6601df49557f91dd462bd161c4a32edb37a147cf1340355c1c30cbde00a025284ecc94858e89e52a2994fe1e824722dba161e3413968f2d29b1c94a8191ae3e7892f6efff3954315264a1f69d0d54b00d11cd6b9a34bdbc37aa7db99f740aa3df4a9e6d02ac81f85f219630664b4474d775382a351c012ae5ca22101ad299859e18f48b4a", 0xbc}, {&(0x7f00000003c0)="100688a991803045266a0be2d424be8d8b36d65ba73307b5eb419bd0885ad0ea42d05acc5b829d91979798a7b06b6d2b933105b501f90d8856d3ff5f9015fbba48a28ac3b37fcb72fa7fad23187d065330d21b063c675fd92624f5614beebe023ba0d7766c1e581ce95795f71f946e0be2052c89ff89bdf683a88f0b71eae6bc4b0a0dbadcdfa440ab3ad3ed8482fbdc3266974c1f3118665bfbcef91e77a03bae688780755a368d0def1f903511e6a98a2f1027553b9f5b6eeb7e584a5e717bf4533cd80163758edd308410f78ce0535956ee45dab18566", 0xd8}], 0x2, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0x3, [{@rand_addr=0x64010102, 0x6}, {@loopback, 0x100}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x6}]}, @lsrr={0x83, 0x7, 0xdc, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x8, 0x2d, 0x0, 0x9, [0x4]}, @timestamp={0x44, 0x14, 0x67, 0x0, 0x0, [0x7b80, 0x8c1, 0xfffffff7, 0x0]}, @lsrr={0x83, 0x1f, 0x64, [@loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010100]}, @rr={0x7, 0xf, 0xc8, [@rand_addr=0x64010100, @rand_addr=0x64010101, @local]}, @cipso={0x86, 0x3a, 0x3, [{0x2, 0xf, "400c1ef2c3996709b29654581d"}, {0x5, 0xc, "31200eeb2ceefa241a67"}, {0x0, 0xd, "8f0c9f39e1edf365b2093d"}, {0x2, 0xc, "3e67e7a6b99477a9d07d"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x110}, 0x682873aa7091c4e8) 56.975818562s ago: executing program 57 (id=763): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000140)={0x0, 0x800}) (async) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0xa6f, 0x2, 0xe5, 0x1ee84758, 0x8]}, &(0x7f0000000040)=0x78) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'dummy0\x00', 0x2000000}, 0x18) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_info_req={{0xa, 0x70, 0x2}, {0x7}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x1}}]}}, 0x15) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 43.336996902s ago: executing program 6 (id=917): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x1) sendmmsg$inet_sctp(r0, &(0x7f0000007cc0)=[{0x0, 0x0, 0x0, 0xf00, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x2c}], 0x1, 0x8800) 43.292044702s ago: executing program 6 (id=918): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) (fail_nth: 3) 42.498997891s ago: executing program 6 (id=921): add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000280)="0000000000000004ff6943b800000008fe000028f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8dc6ee1ed1238532dd4c6ee9eddd58a599264432dc88941a476f8674c3b25a20e8d25504d773dd523add126ab51ca15c9d0436b3d0164bda8d9ed4e88158a20d3c55bd06050b964a5503bd0ef4b3a0823ad11bfae501057d95ba3e8d12893e6201c24e96b3031a817db4aa92e708a23ec370714940856977cb6f99f8ddc11996d1d5587f9c325bf5c2f77088d08a05af40a5392711377de42a66c2adee5a0612b9", 0xdc, 0x0) 42.331033164s ago: executing program 6 (id=923): r0 = fsopen(&(0x7f00000001c0)='nfs\x00', 0x1) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151000, 0x0) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f00000000c0)='limits\x00') mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x12068, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 42.135123787s ago: executing program 6 (id=927): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket(0x400000000010, 0x2, 0x4) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000004c0)={0x17, 0x0, 0x0}) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003001e030500e1000c040007031a000300", 0x33a) timer_create(0xc5440a8c35220ab1, &(0x7f0000000080)={0x0, 0x24, 0x1, @thr={&(0x7f0000000000)="90d85f225df177a27609ff6f6ed82d062e85a99d62eb84aad8fbeb5eb967b536999cc89c9c60c0edbb6788c66e8da18f", &(0x7f0000000100)="bb74572aa8c362888c591b018ae3493c9a915aec38031386d8fc01a1a3477b18a1fd6411a3086b8c49bb818d4f7d32e5f5a14e641e0be87e00b74b2e8cf0475cb986515b03e0087f0313798c819d7fb6a548d96cbd61998cabf043c778117c94cf3b137c698cd26cc9f897b8cf868291f592fc58591bf049f8b56f9483ba07e9e5e3f6564de5367cababb2a2380ddf91f36cc8a6487d6b51b880f3a6d08ac82da737483635dbdc563c5fc2129104badb90e9a906221a"}}, &(0x7f0000000200)=0x0) timer_getoverrun(r2) 41.692793624s ago: executing program 6 (id=932): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x100000000000000, 0x0, 0x40001d4}, 0x8840) 41.329373635s ago: executing program 58 (id=932): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x100000000000000, 0x0, 0x40001d4}, 0x8840) 29.88128518s ago: executing program 3 (id=934): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYBLOB="8c4556cbe3ab839b14a38590408f0f832fa0d50b0975975d177cf8a29c8c458f", @ANYBLOB='\a\x00'/12, @ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r0], 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@RTM_GETMDB={0x18, 0x56, 0x20, 0x70bd2b, 0x25dfdbfe, {0x7, r5}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24000814) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x24, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xc, 0x0, 0x0, @ipv4=@empty=0x2000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x404000d}, 0x0) r6 = syz_io_uring_setup(0x5ab8, &(0x7f00000003c0)={0x0, 0x4278, 0x10100}, 0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x3b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x80002101, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x2c}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r11, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r12, @ANYBLOB="140004006e6963766630000000000000000000000800050007000000"], 0x38}}, 0x8014) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)={0xffffffd7, 0x0, 0x810, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME={0x362, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xff}, @device_b, @device_a, @from_mac=@broadcast, {0x7, 0x7}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @void, @void, @void, @void, @void, [{0xdd, 0xba, "08a8dece1918cbdc2923ffb5de6fcc7ea116a4b1c54d2f14f902d910b3116903cda1fcc4cb10983c98d1dd8969cb4fc2eaf9a8b7c95d1639bd090e44a836aa2642021fbd37c21e3cae7df596920a7007f78d80d984ffe0e699f5c199ddbb92304ca681df1c6d06c663fe7deb3a5d24376c22fbbe216def438a3de55d6faf158862a015047777dd0702551d217961bd43f61a59aeaf77efe4c4283f8161b8a17f96349c13d8ab126d74741d25509ed8ccf0a36e5519de3bea54c6"}, {0xdd, 0xbb, "2ddd8c9eb079a0bac4e18bf9e4bb1ad3cc46cc3def4e4b7f91776e889cd272e27a706422c0c1b5377d07b9e704e2b7bf1cfe9bc864315390f9d177df8e80a9f0dcc4aa0d100f0aede00545258e81a6e53ce199565a3dd276274a5b57f90d3c63e135425ef4232dec3184e2295aa83a003d1645b2aeb3de66aa384ec585736214b006f5a9926742dd2857e7a1dff75c285760f21d4f1324f79afceae425e8684ce96eac5e41f23f2d09a3d7275f6d179fcd76741c47efb51072d014"}, {0xdd, 0x14, "1ca20bf0d9f60f74e7e7072d4c56dfc972988089"}, {0xdd, 0xbc, "68d47c714092a35cf2d64a30c2e23c9eacf8563b448e3c58deb07bc09114bdb247e5580b41dcfeeb9232a17dffa0c8b0fa789eaf7500b5461c08f45c8ed9e68d51161d3d48f2ba68322e5afb172bd94ab9d48716487ef5b59da96f60d9f4723d6249611d8a41e8fb214c402c086635268085e0d0210d1f5405a5f60fcfad4201409e07038fc7e94a8803b79d2849614f7172765b94e4c78237fb4565d11ddecd6592f4d5d4f9a3c2723d6fb652f3931fc34bd386a26c9056fb2d81b1"}, {0xdd, 0x62, "1b31f0b40b10a39b01b089539a2a689bfb1e2d3cc377260ee4dbc7d7196710c302f2b78c5c1d9dd9006f202808d04415190bbac5a9af68e68d0738e8f2cedad39fc73d45fe41ea55652472a843a6cc6d7ce6a0979aaeee1099f384e0ba37ba6fbc78"}, {0xdd, 0x3e, "22de84fdf1bc6b0ef0debb3e9264535ed1a5da7cd7cd8fc5b56cc3c36e1be58df2003d9ba48cb80ae4f07afc92c88efb454b47d78aab8f183f0e4632f869"}, {0xdd, 0x4f, "0ca63437ff6211e070290e513af4748bffb6052071eb19f9f909a47b99641cba76d3434024d2d49b6d5dbca1fa62e88e88aba4645bcffe6a6638af9bf104edc91c8099f41a76b5c9f3de9f839d10fc"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x40}, 0x54) r13 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_kvm_setup_cpu$x86(r9, r13, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x41, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1) ioctl$KVM_RUN(r13, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_enter(r6, 0x678, 0x5, 0x0, 0x0, 0x0) 29.253346338s ago: executing program 3 (id=1002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xa00, &(0x7f0000000280)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) 29.001671712s ago: executing program 3 (id=1005): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, &(0x7f0000000280)="0000000000000004ff6943b800000008fe000028f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8dc6ee1ed1238532dd4c6ee9eddd58a599264432dc88941a476f8674c3b25a20e8d25504d773dd523add126ab51ca15c9d0436b3d0164bda8d9ed4e88158a20d3c55bd06050b964a5503bd0ef4b3a0823ad11bfae501057d95ba3e8d12893e6201c24e96b3031a817db4aa92e708a23ec370714940856977cb6f99f8ddc11996d1d5587f9c325bf5c2f77088d08a05af40a5392711377de42a66c2adee5a0612b9", 0xdc, r0) 28.712856796s ago: executing program 3 (id=1006): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x1c, 0x0, @void}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0x2046) fsopen(&(0x7f0000000080)='selinuxfs\x00', 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0x7fff) mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x20000007}) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf, 0x0, {0x0, 0x20000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x1324c000) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000001400)=0x3d74, 0x4) 27.620236464s ago: executing program 3 (id=1017): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) lsm_list_modules(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff00e7406d04230807000102030109025200010000000009044000000e"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc01) r2 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x0, 0x1170, 0x1170, 0x170, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4e20]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff, 0x0, 0xff], 'syzkaller1\x00', 'hsr0\x00', {0xff}, {}, 0x3a, 0x4, 0x5, 0x46}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast1, @empty, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYBLOB="4c69414f55033cd673c685411647fd7e"], 0x0, 0x0, 0x0}, 0x0) 27.098214024s ago: executing program 3 (id=1022): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0x4) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xbb80) r3 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000080)=0xfffffffb) writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)={0x0, 0x1f00}) 26.350722791s ago: executing program 59 (id=1022): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0x4) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xbb80) r3 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000080)=0xfffffffb) writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)={0x0, 0x1f00}) 10.878986343s ago: executing program 7 (id=1114): mknod$loop(0x0, 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/27, 0x1b}], 0x1}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}], 0x2, 0x40010001, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000100)) 10.440655093s ago: executing program 2 (id=1117): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904cf0003080662ff09050c02200006060309050710000257ae0102070824"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl(r0, 0x8b29, &(0x7f0000000040)) r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x0, 0xfffffdba, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x10, 0x8, 0xffffc7e8, 0xc000}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x1, 0x7, 0x0, 0x3ff, {{0x16, 0x4, 0x0, 0x28, 0x58, 0x64, 0x0, 0x3, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0x4f, 0x3, 0xf, [{@broadcast, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@loopback, 0xb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x9, 0x1, 0x1, [{@private=0xa010101, 0x52f16fb4}, {@loopback, 0x3}, {@broadcast}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0xec, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40004}, 0x4000080) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, '\x00\x00@\x00'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200100005587"], 0x0}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r10, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/28, 0x1c}, {&(0x7f0000000700)=""/201, 0xc9}, {&(0x7f0000000680)=""/4, 0x4}, {&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000900)=""/131, 0x83}, {&(0x7f00000009c0)=""/241, 0xf1}], 0x6, &(0x7f0000000b40)=""/119, 0x77}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000bc0)=""/127, 0x7f}, {&(0x7f0000000c40)=""/102, 0x66}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/11, 0xb}], 0x4}, 0x5}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d40)}], 0x1, &(0x7f0000001dc0)=""/124, 0x7c}, 0xa}, {{&(0x7f0000001e40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001ec0)=""/150, 0x96}, {&(0x7f0000001f80)=""/240, 0xf0}, {&(0x7f0000002080)=""/2, 0x2}, {&(0x7f00000020c0)=""/44, 0x2c}], 0x4, &(0x7f0000002140)=""/112, 0x70}, 0x1}, {{&(0x7f00000021c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002240)=""/171, 0xab}, {&(0x7f0000002300)=""/96, 0x60}, {&(0x7f0000002380)=""/247, 0xf7}, {&(0x7f0000002480)=""/7, 0x7}, {&(0x7f00000024c0)=""/59, 0x3b}, {&(0x7f0000002500)=""/164, 0xa4}, {&(0x7f00000025c0)=""/164, 0xa4}, {&(0x7f0000002680)=""/197, 0xc5}], 0x8, &(0x7f0000002800)=""/211, 0xd3}, 0x3}, {{&(0x7f0000002900)=@qipcrtr, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002980)=""/146, 0x92}], 0x1}, 0xb}, {{&(0x7f0000002a80)=@pppol2tpv3in6, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002b00)=""/128, 0x80}, {&(0x7f0000002b80)=""/129, 0x81}, {&(0x7f0000002c40)=""/81, 0x51}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/105, 0x69}], 0x5, &(0x7f0000003dc0)=""/166, 0xa6}, 0x1000}, {{&(0x7f0000003e80)=@rc={0x1f, @none}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003f00)=""/161, 0xa1}, {&(0x7f0000003fc0)=""/49, 0x31}, {&(0x7f0000004000)=""/206, 0xce}, {&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/191, 0xbf}, {&(0x7f00000051c0)=""/99, 0x63}], 0x6}, 0x9}, {{&(0x7f00000052c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f00000056c0)=[{&(0x7f0000005340)=""/33, 0x21}, {&(0x7f0000005380)=""/77, 0x4d}, {&(0x7f0000005400)=""/247, 0xf7}, {&(0x7f0000005500)=""/243, 0xf3}, {&(0x7f0000005600)=""/7, 0x7}, {&(0x7f0000005640)=""/26, 0x1a}, {&(0x7f0000005680)=""/50, 0x32}], 0x7, &(0x7f0000005740)=""/189, 0xbd}}], 0x9, 0x2, &(0x7f0000005a40)={0x0, 0x3938700}) r11 = syz_open_dev$vim2m(&(0x7f0000000080), 0xda9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000040)={0x40, 0x1, 0x0, "000080000034a52bb80d4400000900000baabaca0000001e00", 0x30323953}) 10.295039863s ago: executing program 7 (id=1119): clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x64, 0x0, 0x0, 0x81}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={r0, r1+10000000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x32) r3 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000000)) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r3], 0x2b) sendfile(r5, r3, 0x0, 0x4000000053d2) syz_usb_connect(0x0, 0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000073c903735ed4563226cd87df8fde7702b403b1b5129ee9e0102030109025800010000000209041900010e01005d2b240000a17557a0775f5ace48022725f723b17605240005000d240f0124000000090008004706241a0a00210724140080f9ff0624074057be0724140500f9ff082407090500030009050103ff030072fa0211a43d07c7ee328d920223ca21d2f447b57604b14bca04d64cbd688883895cee0ae783860b36d8a0e2d373955a45228c0e34f508bc41196355178c443906c52cf171d96d6c3f323f55e8c43d8981267d54d4a221cf09949a7a3604c4ecc8a086888d5a3e00c77f6716ed9e8907285e"], 0x0) 8.029714625s ago: executing program 1 (id=1131): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x8102, 0x0) read$nci(r0, &(0x7f0000000000)=""/1, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) lseek(r0, 0x6, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x2210, 0x400, 0x0, 0x395}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)="91c94ef3af243a648a75ef17224d5436fb0a95f86e60559cd58f4562da22df40b5420bffe8961bb4dcbeb24537fffe0226c444def8656dc56a336d29ba85f20b29bcc184bb9e33c2d854101a392550e1d2dccb8a9fbd6903a7fcdc96dc1be24b62eacc0665f4cf773c1ec0a2863c89ab88d5", 0x72}, {&(0x7f00000003c0)="35d3a0f46a8e408e28beb03db73684b93d363922e10e681b19352e41295d73d62f955b40772cd4648c07d7b34b995b225375d0ba181cc7d034b49b0a58b70482cce32c34a6b69f7bfe39a0f4403ad29a90e302912758cf639dd168e959dc27b099205a4441ba261f5bd1e4a845104805c4cc42fd78128d9027522a23bfe721ce588ebadf5536d8c2f5e82fae063d35c492b45913d4d5d5e87e8274d62d9baf8e627c190858d2197812b63fe71526248891d301bc4a8e7dd678", 0xb9}, {&(0x7f0000000180)="cad4781cc39b5a22741d8a88a15ffaf852923f5aa1ae6d8657a1f22d860b2745ab9638092db98358f75c7bd0b7ee65b9705e39c248a9b19bafdf91160a2ea9fed2916dfe431394e1a2e10a7ff85f93353cb659956a419844fa9894", 0x5b}, {&(0x7f0000000480)="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", 0xfa}, {&(0x7f0000000240)="0a7dfb86587a1aafbf032faccbb2235319abbe23e1fe9e0b4c", 0x19}, {&(0x7f0000000280)}], 0x6) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000600)=r4, 0x1) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) 7.768952286s ago: executing program 1 (id=1133): socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [], {0x95, 0x0, 0x0, 0x1000000}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.49027667s ago: executing program 1 (id=1135): unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @private=0x4}}, 0x0, 0x0, 0x4c, 0x0, "9055c8f4174238a1c8ea6eaee6ad5f8ab516712518a7894b6e813b4a046b005d9b9f055ae4d36d4a4520314271a3e25673a112bf867f34539620100d4e5c898ce30a57e2912dfb476bff0afc6030f90a"}, 0xd8) r5 = socket(0x22, 0x2, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000180)) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000180), 0x4) shutdown(r4, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0xdf14, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @ioapic={0x4000, 0x8, 0xd0d9, 0x5, 0x0, [{0x1, 0x0, 0x5, '\x00', 0x9e}, {0x7a, 0x8, 0x6, '\x00', 0xe}, {0x8, 0x19, 0x8, '\x00', 0x1}, {0xb, 0xb7, 0x22, '\x00', 0x2}, {0x5, 0x9, 0xd3, '\x00', 0x6}, {0xe, 0x64, 0x40, '\x00', 0x8}, {0x4, 0x4d, 0x2, '\x00', 0x3d}, {0x9, 0x9, 0x25, '\x00', 0x2}, {0x3, 0x2, 0x0, '\x00', 0x81}, {0xfb, 0x9, 0xe, '\x00', 0x13}, {0xfa, 0x8a, 0x80, '\x00', 0x9}, {0x7, 0xfa, 0x26, '\x00', 0x3}, {0xc, 0x0, 0x77, '\x00', 0xc}, {0xfa, 0x6, 0xd, '\x00', 0x7}, {0x6, 0x40, 0x8, '\x00', 0x6}, {0x8, 0x4, 0x4, '\x00', 0x7}, {0x1, 0xff, 0xc9, '\x00', 0xe8}, {0x9, 0xaf, 0xd8, '\x00', 0xc}, {0xf, 0x8, 0x0, '\x00', 0x5}, {0x73, 0x1, 0x3c, '\x00', 0x7}, {0x0, 0x9, 0x2}, {0x5, 0x6, 0x40, '\x00', 0x7f}, {0x4, 0x7, 0x0, '\x00', 0x3}, {0x1, 0xf, 0x1, '\x00', 0x6}]}}) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6002adf700383aff00000000000000000000ffff0a"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f0000000300)) dup(r8) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) 7.236821405s ago: executing program 2 (id=1136): syz_io_uring_submit(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x7f000001, 0x0, 0x20000800}, 0x800) 7.105326029s ago: executing program 7 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="b9cbf0020010000026bd7000fcdbdf2515c00652fb6ed50400000008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x2}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES64]) 6.728862205s ago: executing program 1 (id=1139): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x21, 0x26, 0xf31, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2}}}, 0x24}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x64, 0x4, 0x368, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000013002300ffffff0000da000000000000", @ANYRES32=0x0, @ANYBLOB="00000000102000001400030046f0f5484fc468716c616e30000000b656000000000000"], 0x40}}, 0x20044800) 6.72762502s ago: executing program 0 (id=1140): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x9, 0x3, @name="94d20db1c2d2db32ed651509473369fa55acf0340d8f99008e0361844e6d3478"}) 6.720602284s ago: executing program 7 (id=1141): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0xb}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x1005, &(0x7f0000001840)=""/4101, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7f, "cad486", "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"}}, 0x110) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f00000101c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x62000000}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r4 = socket$inet(0x2, 0x1, 0x100) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e22, @empty=0xff91}, 0x10) 6.572988423s ago: executing program 2 (id=1143): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xac0, 0x20, 0xbbba, 0x0, 0x18, 0x8effffff, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0x200}, {}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20, 0x1, 0x1}) 6.54066451s ago: executing program 0 (id=1144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x434902) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x8000fc, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x9403, 0x3002, 0x2b8, 0x2c0, 0x3d0, 0x3d8, 0x3d8, 0x3d0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x8, 0xfc, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz1\x00', 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x140b6964c6a3d8d0, 0x1ff0001ff, 0xffffff00, 0xff], 'gre0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x2, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffff4, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xa8}, {0x28}}}}, 0x500) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c200, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x3}}, 0x20) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0xc0844123, &(0x7f0000000080)=0x5) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa08, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x3, 0x1, 0x1, "5165a41796ed6bb8c8ecf24946ef12aedd4f4bc7c546d290105b2f528e4cacf4", 0x20303159}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) r8 = syz_clone3(&(0x7f0000001840)={0x100, &(0x7f0000000100), &(0x7f0000000700), &(0x7f0000000740), {0x20}, &(0x7f0000000780)=""/92, 0x5c, &(0x7f0000000800)=""/4096, &(0x7f0000001800)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) syz_open_procfs(r8, &(0x7f00000018c0)='fd\x00') getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000140)=""/19, &(0x7f0000000240)=0x13) 6.449284819s ago: executing program 7 (id=1145): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x202102) syz_usb_disconnect(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100e9ff0c000000420000004400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) gettid() prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r4, @ANYBLOB="0002007e0000000024001280110001006272696467655f736c617665000000000c000580050001"], 0x44}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x0, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0xfffffe46) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r7], 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f4040000005f041295"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ee2d010203010902"], 0x0) 6.156739406s ago: executing program 2 (id=1146): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = socket(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) close_range(r3, 0xffffffffffffffff, 0x0) r5 = msgget(0x3, 0xa0) msgrcv(r5, &(0x7f0000000080)={0x0, ""/128}, 0x88, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xd}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x8, 0x3ff, 0xd, 0x0, 0xf508, 0x8, 0x2}}, {0x8, 0x2, [0x2, 0xfffb]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) 5.932419998s ago: executing program 4 (id=1148): syz_io_uring_submit(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r1) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000a0000008000000080"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x4, r3, 0x0, 0x700}, 0x38) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="00ff0001"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 5.335936192s ago: executing program 0 (id=1149): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffff]}, 0x8, 0x0) ppoll(&(0x7f0000000340)=[{r0, 0x3500}], 0x1, 0x0, 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x535f, &(0x7f00000006c0)={0x0, 0x42f5, 0x4, 0x0, 0x330, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r1, 0x0, 0x0, 0x0, 0x80800}) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x722, 0x12) (async) io_uring_enter(r1, 0x3516, 0xd1b, 0x8, 0x0, 0x0) 4.743471614s ago: executing program 4 (id=1150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x0, &(0x7f0000000040)}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') r3 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) preadv(r2, 0x0, 0x0, 0x20000000, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'bond_slave_0\x00', {}, 0x597}) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x41) 4.37874095s ago: executing program 1 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 4.259804816s ago: executing program 0 (id=1152): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="b9cbf0020010000026bd7000fcdbdf2515c00652fb6ed50400000008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7800, 0x40, 0xbf5, 0x6, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x64, 0x0, 0x40, 0x4, 0x0, @private=0xa010102, @empty, {[@noop, @noop]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES64]) 3.868949815s ago: executing program 1 (id=1153): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 3.861421949s ago: executing program 4 (id=1154): mmap(&(0x7f0000245000/0x4000)=nil, 0x4000, 0x1000007, 0x402d032, 0xffffffffffffffff, 0xe8bc4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000040)="073d1b15f7d0b66871b9ad85545f6c91574db6c57acaf30d71fbb578ce119510827e58e9358304f2e49b952736af051e8ef44281", 0x34}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001d35e69d9963c7bd5e38afdb2a7551f24f51f8453b26bf4106d46812fa52759cd440d125f61758c47cb85223a8ffc8e6c9b9956"], 0x18, 0x40418c4}, 0x20040041) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, r2, 0x1, 0x9, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x7, 0xffffffff}, 0x18}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.116089712s ago: executing program 0 (id=1155): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r2, 0x5707b563827c8365, 0xfffffffc, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x53, 0x69}}}}}, 0x28}, 0x1, 0xe00}, 0x20008940) 2.749260635s ago: executing program 7 (id=1156): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) cachestat(r0, &(0x7f0000000100)={0x5, 0x4}, &(0x7f0000000140), 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x155e, &(0x7f0000000740)={0x0, 0x1c29, 0x10100, 0xfffffffe, 0x345, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000140)={0x2, 0x1, 0x80, 0xfffffffffffffffc, 0xffffffffffffffff}) r8 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}}) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r10, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r10, 0x0, r9, 0x0, 0x7ffff041, 0x1200000000000000) getresuid(0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000086000000070000000900010073797a300000000060000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d1c001280180006800e000100636f6e6e6c696d69740000000400028008000340000001"], 0xa8}}, 0x20050800) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r11, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000001200)={0x28, 0x0, r13, 0x100b, &(0x7f0000001240)=""/4107}) 2.748923892s ago: executing program 4 (id=1157): socket$inet6(0xa, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b8, 0x300, 0x300, 0x210, 0x0, 0x210, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x12}}}, {{@ipv6={@mcast1, @local, [0xff, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xffffff00, 0xff000000], 'veth1_vlan\x00', 'pimreg\x00', {0xff}, {0xff}, 0x1c, 0x3, 0x4, 0x21}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@mcast1, 0x3e, 0xa, 0x6}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff, 0xffffff00, 0x0, 0xffffffff], [0xffff00, 0xff, 0xffffffff, 0xff], 'veth1_vlan\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x3c, 0x2, 0x1, 0x8}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010100, @ipv4=@local, 0x32, 0x5, 0x8}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast1, [0x0, 0xffffffff, 0xff, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff], 'lo\x00', 'pim6reg1\x00', {0xff}, {}, 0x0, 0xd8, 0x4, 0x18}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3b}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0xc, 0x2, 0x0, [0x2, 0xd, 0x1, 0x7, 0x0, 0x5, 0x3, 0x0, 0x7, 0x4, 0x3, 0x109d, 0x0, 0x3, 0x0, 0x400], 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000180)=0x9) 1.987284501s ago: executing program 2 (id=1158): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000280)="0000000000000004ff6943b800000008fe000028f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8dc6ee1ed1238532dd4c6ee9eddd58a599264432dc88941a476f8674c3b25a20e8d25504d773dd523add126ab51ca15c9d0436b3d0164bda8d9ed4e88158a20d3c55bd06050b964a5503bd0ef4b3a0823ad11bfae501057d95ba3e8d12893e6201c24e96b3031a817db4", 0xa5, r0) 1.986964641s ago: executing program 0 (id=1159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000006", @ANYRES16=r1, @ANYBLOB="010023bd7200fddbdf2511000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0) socket$kcm(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x10000, 0xfffffffd}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@isdn={0x22, 0x2, 0xfd, 0x0, 0x6}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="2b3d48b2a2847625febbae3c649e9bc9f9e36b058284cc5722d89a45fa4bed24d1531afa4d1d07a4fe06538cd2ae238b10e124b40824374062c81958d0be72e343ac6c1ec469c91edae739e460896eacd78405bdeb668e129a7d7474aacec0567efbcaeac88febe350163dcbe57d05398f77adc09e2cea3edf54436b7ccdff4a227d52e2ccf88a0f2dd1e3", 0x8b}, {&(0x7f0000000100)="7bf803293966b029a3a2775b1e22cb3671", 0x11}, {&(0x7f0000000480)="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", 0xfa}], 0x3, &(0x7f0000000b40)=[{0x28, 0x112, 0xc, "ece1294ec6e76a6340708e67b205d2fbb1de01408965e891"}, {0x20, 0x84, 0xfff, "b042a13bd9bb1a8e6c06c492c24115"}, {0xa8, 0x10d, 0x81, "23d068c824bcda0c7fb8ddeeab1c46c9f822338989bdd48756b0e4d9d5c75ffb622e4c383a6c54a7c1f156d07413daa091ffc88b13e12320dd7a9c145c21c635dcc71651f0f4fa5a5a5eb894e008f413fe2b5a92515a345848d3c7e8d2d5d999f1aee67ccd880e9dfab78381b383ce4b11c656244ebe792b04d8ef8349abc1e6e0eaa8915458f801adfed0f192335ee2f692"}, {0x60, 0x113, 0x7, "bce664cb7971fcd9c4bfd7b4dfd89ae6bc6f552bd7aa71f811beec72aefa3fe464538f817b12538f1b8b950feb37213d52681e9db9c3baa180cdc2b2552cd05b71b8c8429de02ee43acf0013"}, {0x50, 0x108, 0x6, "f7864d312e948307d24629bb3deac4e5d4bc0d281eb1de34940e790acaeeb5ef07dab56db7b4222ddfcf3c76eb683c62ddb0282f897f19377d66f89c"}, {0x108, 0x29, 0x9, "91af406e9f8b2e9e850e8eaed87426244217fba581c96f8f57d196445e60ddf1c502b743082d9bd1053a8017ec827d52045d24fa2a59b359e5e3e03d2d98e06a697fa049083099054967364db1181137d5f9996eb50254dd4c792fda9486c686cafe6107880e289936577b6391450fdf1adedec76294aef2c0cd211771f86e4c308222b4d89fa06d0335f50f22ddba1eecea9cf8158b719eb2a4b133125b107332c49a19b65a142fea4e0e448a2b9944b8b9e9a567905319dddacafbd08858ab531399d44fc4fe6a72c753c1646a9d4d4bee7252efb3e45487cd17566a6b8d7462b0a14fe3db961955a09cd81af592bc47814249e6191a"}, {0x108, 0x3a, 0x2, "87c6a84b671ba2c372cd1d698100f186fdb6050162cc43c27a86063243dffdb8b1e88ec8523237b413aca3c4163dcc9ce249803b2a61255bc20f076e9c665627cbbd1f5c59a6ec94513888fe1feeb0de7d5941db08f824182b8a572a2cb42594f7c0ce4b7c19a5ce41748a35f33f5a66d2f27506b468baeb918cd3ab650cf7b2f0b777b9107b2abf48dcbe11297bf0ffb4516ec69ef5c4bcc2ae2114fbcc3d6798ac83d8003403f20b9db2e0112b010566227d0f48625bbfeb4db5b49fc0e5019e1eb41fd88c2cde9db27fdba8223f68c368c4acfa36f77c30b3c66f5fa981b29e7df4ce0206736f12622742a18ccbc7cbce"}, {0xd8, 0x10f, 0xfff, "ed2eff4a85e6c747ff9eed3aa0c14adf3d0748fdd820885fa1eff5a161a17153461b413aa1c9e6368951eb9838e567d8ee76c27cd643b8590cec22cb60c5f2f60c0913cdb1bc9e08124d8b4c8f21a61acd4ec356fbb4fc0d6876107fe0ccd6177f601febf9cc09a67e33a7da63cb5151f73d909d4198ba0c70766486d2ea12e4045d1d15fba3a1866df56ba9785528b81155d6eae2d16c6a600ea0850a56f294e46fa0fe5a9e5fa43e2bf20f60392532a237000661852cde817c22e63138a797f500676eab"}], 0x488}, 0x40000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000280)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x55cb}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fffffff}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5e}]}]}]}}]}, 0xb8}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x64}, {0x40}, {0x6}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x5000aea5, &(0x7f0000000080)=ANY=[]) 1.597586235s ago: executing program 4 (id=1160): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) (async) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)="09d4", 0x2, 0xfffffffffffffffe) (async) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, 0x0, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x3, 0x90, [0x4000000002c0, 0x0, 0x0, 0x400000000534, 0x40000000064a], 0x700, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000020000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000078893535a2de01f700000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"]}, 0x108) (async) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f045, 0xfffffffc}) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x438, &(0x7f0000000040)=ANY=[], 0x0) 797.331955ms ago: executing program 2 (id=1161): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x6, 0x0, 0xff16) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x10000, &(0x7f0000000100), 0x106, 0x6}}, 0x20) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033a0000001f030000ef000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$cgroup_freezer_state(r6, &(0x7f00000000c0), 0x2, 0x0) mkdirat$cgroup(r6, &(0x7f0000000000)='syz1\x00', 0x1ff) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x4, 0x0, [0x7d18, 0x3, 0x3, 0xc, 0x401, 0x8, 0x0, 0x558e, 0x3a0800, 0x6, 0x200, 0x2, 0x3, 0x0, 0x0, 0x9]}, {0x2b, 0x0, [0x3, 0xfffffff8, 0x7fffffff, 0x1000, 0x5, 0x0, 0x10001, 0x8, 0x7, 0xd0000000, 0x6, 0x2000003, 0x77, 0xe57a, 0xfffffffd, 0x6b]}], r5, 0x1, 0x1, 0x90}}, 0x20) 0s ago: executing program 4 (id=1162): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x40011, &(0x7f0000000380)={0xa, 0x4e23, 0x6, @loopback, 0x8001}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r2, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x5910}}, 0x0, 0x0, 0x578e, 0x0, 0x54}, 0x9c) (fail_nth: 1) kernel console output (not intermixed with test programs): _syscall_64+0xf3/0x230 [ 265.863094][ T9693] ? clear_bhb_loop+0x35/0x90 [ 265.863117][ T9693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.863136][ T9693] RIP: 0033:0x7f06c778d169 [ 265.863150][ T9693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.863162][ T9693] RSP: 002b:00007f06c85da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.863178][ T9693] RAX: ffffffffffffffda RBX: 00007f06c79a5fa0 RCX: 00007f06c778d169 [ 265.863188][ T9693] RDX: 0000400000000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 265.863199][ T9693] RBP: 00007f06c85da090 R08: 0000000000000000 R09: 0000000000000000 [ 265.863208][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.863217][ T9693] R13: 0000000000000000 R14: 00007f06c79a5fa0 R15: 00007f06c7acfa28 [ 265.863241][ T9693] [ 265.863257][ T9693] ERROR: Out of memory at tomoyo_realpath_from_path. [ 265.870433][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.870468][ T8] usb 5-1: Product: syz [ 265.977239][ T9554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.186716][ T9701] netlink: 160 bytes leftover after parsing attributes in process `syz.7.720'. [ 266.210743][ T8] usb 5-1: Manufacturer: syz [ 266.226543][ T8] usb 5-1: SerialNumber: syz [ 266.241602][ T9554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.259292][ T8] usb 5-1: config 0 descriptor?? [ 266.292297][ T8] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 266.305104][ T9554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.325627][ T9554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.386933][ T9554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.418893][ T9554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.441024][ T9554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.547138][ T9554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.559096][ T9554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.587330][ T9554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.607136][ T9554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.643595][ T9554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.655441][ T9554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.666343][ T9554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.677491][ T8] gspca_ov534_9: reg_w failed -71 [ 266.684981][ T9554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.695977][ T9554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.710697][ T9554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.726521][ T9709] @: renamed from vlan0 (while UP) [ 266.757450][ T977] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 266.760252][ T9554] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.807676][ T9554] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.865245][ T9554] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.884781][ T9554] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.957613][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.004851][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.028644][ T977] usb 8-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 267.071331][ T977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.108918][ T977] usb 8-1: config 0 descriptor?? [ 267.117235][ T8] gspca_ov534_9: Unknown sensor 0000 [ 267.117301][ T8] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 267.228172][ T8] usb 5-1: USB disconnect, device number 14 [ 267.257421][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.265294][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.366775][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.429167][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.577600][ T977] logitech-hidpp-device 0003:046D:C086.000F: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.7-1/input0 [ 267.707225][ T8468] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 267.926021][ T8468] usb 10-1: config 0 has no interfaces? [ 267.953715][ T8468] usb 10-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 267.955679][ T9748] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 267.963414][ T8468] usb 10-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 268.228419][ T8468] usb 10-1: Manufacturer: syz [ 268.292419][ T8468] usb 10-1: SerialNumber: syz [ 268.329237][ T8468] usb 10-1: config 0 descriptor?? [ 268.338239][ T977] usb 8-1: USB disconnect, device number 21 [ 268.532657][ T9765] x_tables: duplicate underflow at hook 1 [ 268.570474][ T5889] usb 10-1: USB disconnect, device number 10 [ 269.043771][ T9785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.576986][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.8.743'. [ 269.602122][ T9802] netlink: 40 bytes leftover after parsing attributes in process `syz.8.743'. [ 269.617224][ T977] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 269.787408][ T977] usb 8-1: Using ep0 maxpacket: 32 [ 269.815129][ T977] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.827235][ T5884] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 269.854136][ T977] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 269.895961][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 269.915374][ T977] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 269.937464][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 269.977728][ T977] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 269.996786][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.997178][ T5884] usb 10-1: device descriptor read/64, error -71 [ 270.013774][ T977] usb 8-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 270.037818][ T977] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 270.046909][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.073128][ T977] usb 8-1: Product: syz [ 270.074635][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.747'. [ 270.081087][ T977] usb 8-1: Manufacturer: syz [ 270.095231][ T977] usb 8-1: SerialNumber: syz [ 270.108262][ T977] usb 8-1: config 0 descriptor?? [ 270.117043][ T9794] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 270.140527][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.747'. [ 270.162777][ T9821] netlink: 'syz.6.747': attribute type 11 has an invalid length. [ 270.180920][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.8.748'. [ 270.190736][ T9825] netlink: 16 bytes leftover after parsing attributes in process `syz.8.748'. [ 270.200931][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.8.748'. [ 270.298037][ T5884] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 270.343081][ T977] cxacru_cm: 89 callbacks suppressed [ 270.343104][ T977] cxacru 8-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 270.406707][ T9833] cxacru 8-1:0.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 270.439506][ T977] usb 8-1: USB disconnect, device number 22 [ 270.447328][ T5884] usb 10-1: device descriptor read/64, error -71 [ 270.459566][ T9833] cxacru 8-1:0.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 270.588312][ T5884] usb usb10-port1: attempt power cycle [ 270.877274][ T5882] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 270.937364][ T5884] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 270.978093][ T8] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 270.988045][ T5884] usb 10-1: device descriptor read/8, error -71 [ 271.047380][ T5882] usb 7-1: device descriptor read/64, error -71 [ 271.158157][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 271.179993][ T8] usb 9-1: config 0 has an invalid interface number: 240 but max is 0 [ 271.199939][ T8] usb 9-1: config 0 has no interface number 0 [ 271.206242][ T8] usb 9-1: config 0 interface 240 altsetting 6 endpoint 0x8 has invalid maxpacket 544, setting to 64 [ 271.223977][ T8] usb 9-1: config 0 interface 240 has no altsetting 0 [ 271.242435][ T8] usb 9-1: New USB device found, idVendor=18b4, idProduct=1002, bcdDevice=87.93 [ 271.252051][ T5884] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 271.270136][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.283626][ T8] usb 9-1: Product: syz [ 271.293308][ T5884] usb 10-1: device descriptor read/8, error -71 [ 271.305825][ T8] usb 9-1: Manufacturer: syz [ 271.312318][ T8] usb 9-1: SerialNumber: syz [ 271.329730][ T8] usb 9-1: config 0 descriptor?? [ 271.337559][ T5882] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 271.409590][ T5884] usb usb10-port1: unable to enumerate USB device [ 271.488521][ T5882] usb 7-1: device descriptor read/64, error -71 [ 271.583633][ T8] usb 9-1: USB disconnect, device number 10 [ 271.608217][ T5882] usb usb7-port1: attempt power cycle [ 271.976413][ T5882] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 272.020213][ T5882] usb 7-1: device descriptor read/8, error -71 [ 272.053214][ T9909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.082470][ T9909] batadv_slave_0: entered promiscuous mode [ 272.107323][ T9909] batadv_slave_0: entered allmulticast mode [ 272.136011][ T9909] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 272.257290][ T5882] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 272.309175][ T5882] usb 7-1: device descriptor read/8, error -71 [ 272.432481][ T5882] usb usb7-port1: unable to enumerate USB device [ 272.734169][ T9943] input: syz0 as /devices/virtual/input/input30 [ 272.770632][ T9943] FAULT_INJECTION: forcing a failure. [ 272.770632][ T9943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.830611][ T9943] CPU: 0 UID: 0 PID: 9943 Comm: syz.9.768 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 272.830639][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.830650][ T9943] Call Trace: [ 272.830656][ T9943] [ 272.830664][ T9943] dump_stack_lvl+0x241/0x360 [ 272.830690][ T9943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.830707][ T9943] ? __pfx__printk+0x10/0x10 [ 272.830725][ T9943] ? __pfx_lock_release+0x10/0x10 [ 272.830756][ T9943] should_fail_ex+0x40a/0x550 [ 272.830783][ T9943] _copy_from_user+0x2d/0xb0 [ 272.830803][ T9943] input_event_from_user+0x1e2/0x4a0 [ 272.830826][ T9943] ? __pfx_input_event_from_user+0x10/0x10 [ 272.830849][ T9943] ? input_event+0xa7/0xe0 [ 272.830871][ T9943] uinput_write+0x47c/0x12b0 [ 272.830899][ T9943] ? __pfx_uinput_write+0x10/0x10 [ 272.830920][ T9943] ? bpf_lsm_file_permission+0x9/0x10 [ 272.830943][ T9943] ? rw_verify_area+0x243/0x630 [ 272.830959][ T9943] ? __pfx_uinput_write+0x10/0x10 [ 272.830979][ T9943] vfs_write+0x29f/0xd10 [ 272.830999][ T9943] ? __mutex_unlock_slowpath+0x227/0x800 [ 272.831023][ T9943] ? __pfx_vfs_write+0x10/0x10 [ 272.831037][ T9943] ? do_sys_openat2+0x17a/0x1d0 [ 272.831061][ T9943] ? __fget_files+0x2a/0x410 [ 272.831083][ T9943] ? __fget_files+0x395/0x410 [ 272.831102][ T9943] ? __fget_files+0x2a/0x410 [ 272.831131][ T9943] ksys_write+0x18f/0x2b0 [ 272.831149][ T9943] ? __pfx_ksys_write+0x10/0x10 [ 272.831166][ T9943] ? do_syscall_64+0x100/0x230 [ 272.831189][ T9943] ? do_syscall_64+0xb6/0x230 [ 272.831212][ T9943] do_syscall_64+0xf3/0x230 [ 272.831232][ T9943] ? clear_bhb_loop+0x35/0x90 [ 272.831264][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.831284][ T9943] RIP: 0033:0x7fab0e58d169 [ 272.831299][ T9943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.831312][ T9943] RSP: 002b:00007fab0f3cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.831330][ T9943] RAX: ffffffffffffffda RBX: 00007fab0e7a5fa0 RCX: 00007fab0e58d169 [ 272.831342][ T9943] RDX: 000000000000fe4f RSI: 0000400000000000 RDI: 0000000000000003 [ 272.831353][ T9943] RBP: 00007fab0f3cc090 R08: 0000000000000000 R09: 0000000000000000 [ 272.831363][ T9943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.831372][ T9943] R13: 0000000000000000 R14: 00007fab0e7a5fa0 R15: 00007fab0e8cfa28 [ 272.831397][ T9943] [ 273.407543][ T5882] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 273.452348][ T9965] FAULT_INJECTION: forcing a failure. [ 273.452348][ T9965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.514474][ T9965] CPU: 1 UID: 0 PID: 9965 Comm: syz.9.772 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 273.514501][ T9965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.514512][ T9965] Call Trace: [ 273.514518][ T9965] [ 273.514526][ T9965] dump_stack_lvl+0x241/0x360 [ 273.514551][ T9965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.514569][ T9965] ? __pfx__printk+0x10/0x10 [ 273.514591][ T9965] ? snprintf+0xda/0x120 [ 273.514611][ T9965] should_fail_ex+0x40a/0x550 [ 273.514639][ T9965] _copy_to_user+0x31/0xb0 [ 273.514660][ T9965] simple_read_from_buffer+0xca/0x150 [ 273.514683][ T9965] proc_fail_nth_read+0x1e9/0x250 [ 273.514704][ T9965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.514725][ T9965] ? rw_verify_area+0x243/0x630 [ 273.514740][ T9965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.514759][ T9965] vfs_read+0x1f8/0xb40 [ 273.514776][ T9965] ? fdget_pos+0x254/0x320 [ 273.514795][ T9965] ? __pfx___mutex_lock+0x10/0x10 [ 273.514815][ T9965] ? __pfx_vfs_read+0x10/0x10 [ 273.514827][ T9965] ? do_sys_openat2+0x17a/0x1d0 [ 273.514850][ T9965] ? __fget_files+0x2a/0x410 [ 273.514869][ T9965] ? __fget_files+0x395/0x410 [ 273.514885][ T9965] ? __fget_files+0x2a/0x410 [ 273.514913][ T9965] ksys_read+0x18f/0x2b0 [ 273.514930][ T9965] ? __pfx_ksys_read+0x10/0x10 [ 273.514945][ T9965] ? do_syscall_64+0x100/0x230 [ 273.514965][ T9965] ? do_syscall_64+0xb6/0x230 [ 273.514984][ T9965] do_syscall_64+0xf3/0x230 [ 273.514999][ T9965] ? clear_bhb_loop+0x35/0x90 [ 273.515014][ T9965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.515026][ T9965] RIP: 0033:0x7fab0e58bb7c [ 273.515035][ T9965] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.515043][ T9965] RSP: 002b:00007fab0f3cc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.515054][ T9965] RAX: ffffffffffffffda RBX: 00007fab0e7a5fa0 RCX: 00007fab0e58bb7c [ 273.515061][ T9965] RDX: 000000000000000f RSI: 00007fab0f3cc0a0 RDI: 0000000000000004 [ 273.515067][ T9965] RBP: 00007fab0f3cc090 R08: 0000000000000000 R09: 0000000000000000 [ 273.515073][ T9965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.515079][ T9965] R13: 0000000000000000 R14: 00007fab0e7a5fa0 R15: 00007fab0e8cfa28 [ 273.515099][ T9965] [ 273.767192][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 273.775595][ T5882] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.787438][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.794096][ T5882] usb 5-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 273.834587][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.893650][ T5882] usb 5-1: config 0 descriptor?? [ 274.050235][ T9974] x_tables: duplicate underflow at hook 1 [ 274.126044][ T5882] usb 5-1: string descriptor 0 read error: -71 [ 274.149688][ T5882] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input31 [ 274.177854][ T5193] bcm5974 5-1:0.0: could not read from device [ 274.205387][ T5193] bcm5974 5-1:0.0: could not read from device [ 274.212200][ T5882] usb 5-1: USB disconnect, device number 15 [ 274.228042][ T5193] bcm5974 5-1:0.0: could not read from device [ 274.247220][ T5889] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 274.271395][ T5193] bcm5974 5-1:0.0: could not read from device [ 274.445814][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 274.453139][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.466035][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.507541][ T5889] usb 7-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 274.526870][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.578873][ T5889] usb 7-1: config 0 descriptor?? [ 275.021279][ T5889] wacom 0003:056A:030A.0010: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.6-1/input0 [ 275.142806][ T62] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.289113][T10009] mmap: syz.4.780 (10009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 275.322540][ T5889] usb 7-1: USB disconnect, device number 14 [ 275.382601][ T62] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.562679][ T62] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.678685][ T62] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.718655][T10025] netlink: 48 bytes leftover after parsing attributes in process `syz.7.784'. [ 275.889698][ T29] audit: type=1326 audit(1740727061.390:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955718d169 code=0x7fc00000 [ 275.925674][ T62] bridge_slave_1: left allmulticast mode [ 275.935895][ T62] bridge_slave_1: left promiscuous mode [ 275.946784][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.955796][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.976020][ T29] audit: type=1326 audit(1740727061.390:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f955718d169 code=0x7fc00000 [ 275.999958][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.008355][ T29] audit: type=1326 audit(1740727061.390:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955718d169 code=0x7fc00000 [ 276.031270][ T29] audit: type=1326 audit(1740727061.390:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955718d169 code=0x7fc00000 [ 276.054227][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.054687][ T62] bridge_slave_0: left allmulticast mode [ 276.061423][ T29] audit: type=1326 audit(1740727061.390:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955718d169 code=0x7fc00000 [ 276.061458][ T29] audit: type=1326 audit(1740727061.390:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955718d169 code=0x7fc00000 [ 276.061489][ T29] audit: type=1326 audit(1740727061.390:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955718d169 code=0x7fc00000 [ 276.061520][ T29] audit: type=1326 audit(1740727061.390:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955718d169 code=0x7fc00000 [ 276.061553][ T29] audit: type=1326 audit(1740727061.390:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955718d169 code=0x7fc00000 [ 276.061583][ T29] audit: type=1326 audit(1740727061.390:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955718d169 code=0x7fc00000 [ 276.201886][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.233405][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.242317][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.251311][ T62] bridge_slave_0: left promiscuous mode [ 276.292149][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.544950][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.786'. [ 276.606398][T10038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.786'. [ 277.167792][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.182967][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.193811][ T62] bond0 (unregistering): Released all slaves [ 278.020328][ T62] hsr_slave_0: left promiscuous mode [ 278.045753][ T62] hsr_slave_1: left promiscuous mode [ 278.058747][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.066363][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.075475][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.083456][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.121639][ T62] veth1_macvtap: left promiscuous mode [ 278.127497][ T62] veth0_macvtap: left promiscuous mode [ 278.133120][ T62] veth1_vlan: left promiscuous mode [ 278.143119][ T62] veth0_vlan: left promiscuous mode [ 278.357667][ T5146] Bluetooth: hci4: command tx timeout [ 278.567369][ T8468] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 278.720140][ T62] team0 (unregistering): Port device team_slave_1 removed [ 278.727284][ T8468] usb 5-1: Using ep0 maxpacket: 16 [ 278.736947][ T8468] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.748875][ T8468] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.765075][ T8468] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.776951][ T8468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.799360][ T62] team0 (unregistering): Port device team_slave_0 removed [ 278.799945][ T8468] usb 5-1: Product: syz [ 278.814069][ T8468] usb 5-1: Manufacturer: syz [ 278.824193][ T8468] usb 5-1: SerialNumber: syz [ 279.098873][ T8468] usb 5-1: 0:192 : does not exist [ 279.195775][ T8468] usb 5-1: USB disconnect, device number 16 [ 279.383664][ T6328] udevd[6328]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.513667][T10035] chnl_net:caif_netlink_parms(): no params data found [ 279.800953][T10035] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.801021][T10035] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.801157][T10035] bridge_slave_0: entered allmulticast mode [ 279.802165][T10035] bridge_slave_0: entered promiscuous mode [ 279.803789][T10035] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.803852][T10035] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.803979][T10035] bridge_slave_1: entered allmulticast mode [ 279.804970][T10035] bridge_slave_1: entered promiscuous mode [ 279.943481][T10035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.060469][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 280.061813][T10035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.101205][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.795'. [ 280.181450][T10118] x_tables: duplicate underflow at hook 1 [ 280.241881][T10035] team0: Port device team_slave_0 added [ 280.290608][T10035] team0: Port device team_slave_1 added [ 280.422863][T10035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.439458][ T5146] Bluetooth: hci4: command tx timeout [ 280.447558][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.546096][T10035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.662733][T10035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.697036][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.752006][T10035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.904833][T10035] hsr_slave_0: entered promiscuous mode [ 280.923267][T10035] hsr_slave_1: entered promiscuous mode [ 280.935016][T10035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.945271][T10035] Cannot create hsr debugfs directory [ 281.303804][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.808'. [ 281.327369][ T8449] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 281.472798][T10166] dccp_v4_rcv: dropped packet with invalid checksum [ 281.517283][ T8449] usb 7-1: Using ep0 maxpacket: 8 [ 281.533178][ T8449] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 281.562678][ T8449] usb 7-1: config 0 interface 0 has no altsetting 0 [ 281.580484][ T8449] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 281.602972][T10035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 281.609790][ T8449] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.627745][ T8449] usb 7-1: Product: syz [ 281.638854][T10035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 281.655487][ T8449] usb 7-1: Manufacturer: syz [ 281.674627][ T8449] usb 7-1: SerialNumber: syz [ 281.685622][T10035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 281.700236][ T8449] usb 7-1: config 0 descriptor?? [ 281.712106][ T8449] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 281.724137][T10035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 281.772502][T10172] x_tables: duplicate underflow at hook 1 [ 281.896821][T10035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.910318][ T8449] snd_usb_toneport 7-1:0.0: cannot get proper max packet size [ 281.939399][ T8449] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 281.950426][T10035] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.963900][ T8449] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 281.981547][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.988755][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.038050][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.045233][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.109496][ T8449] usb 7-1: USB disconnect, device number 15 [ 282.204054][T10035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.280760][T10035] veth0_vlan: entered promiscuous mode [ 282.304265][T10035] veth1_vlan: entered promiscuous mode [ 282.314952][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 282.359327][T10035] veth0_macvtap: entered promiscuous mode [ 282.380793][T10035] veth1_macvtap: entered promiscuous mode [ 282.413142][T10035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.444554][T10035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.462196][T10035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.487356][T10035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.507952][T10035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.519000][ T5146] Bluetooth: hci4: command tx timeout [ 282.526773][T10035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.536852][T10035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.547628][T10035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.559881][T10035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.573426][T10035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.584074][T10035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.609860][T10035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.637806][T10035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.656630][T10035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.668071][T10035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.727250][T10035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.747241][T10035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.766836][T10035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.783209][T10035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.809629][T10035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.845431][T10035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.886100][T10035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.905134][T10035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.928187][T10035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.090200][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.120338][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.206091][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.216206][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.657200][ T8468] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 283.828582][ T8468] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 283.857894][ T8468] usb 2-1: config 0 has no interface number 0 [ 283.884519][ T8468] usb 2-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 283.926563][ T8468] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 283.945197][ T8468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.956616][ T8468] usb 2-1: config 0 descriptor?? [ 284.005231][ T8468] keyspan 2-1:0.136: Keyspan 2 port adapter converter detected [ 284.047587][ T8468] keyspan 2-1:0.136: found no endpoint descriptor for endpoint 1 [ 284.070571][ T8468] keyspan 2-1:0.136: found no endpoint descriptor for endpoint 84 [ 284.096437][ T8468] keyspan 2-1:0.136: found no endpoint descriptor for endpoint 2 [ 284.120186][ T8468] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 284.148751][ T8468] keyspan 2-1:0.136: found no endpoint descriptor for endpoint 88 [ 284.168267][ T8468] keyspan 2-1:0.136: found no endpoint descriptor for endpoint 6 [ 284.208354][ T8468] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 284.249934][ T8468] usb 2-1: USB disconnect, device number 22 [ 284.276563][ T8468] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 284.324280][ T8468] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 284.346072][ T8468] keyspan 2-1:0.136: device disconnected [ 284.607538][ T5146] Bluetooth: hci4: command tx timeout [ 284.856396][T10286] warning: `syz.1.824' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 285.080649][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 285.181174][ T8468] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 285.347296][ T8468] usb 2-1: device descriptor read/64, error -71 [ 285.597218][ T8468] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 285.737214][ T8468] usb 2-1: device descriptor read/64, error -71 [ 285.847696][ T8468] usb usb2-port1: attempt power cycle [ 286.197662][ T8468] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 286.228560][ T8468] usb 2-1: device descriptor read/8, error -71 [ 286.438308][ T8449] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 286.477316][ T8468] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 286.498502][ T8468] usb 2-1: device descriptor read/8, error -71 [ 286.609533][ T8449] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 286.621973][ T8468] usb usb2-port1: unable to enumerate USB device [ 286.646096][ T8449] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.674748][ T8449] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 286.686221][ T8449] usb 5-1: config 1 has no interface number 1 [ 286.700807][ T8449] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 286.719056][ T8449] usb 5-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x5F, changing to 0xF [ 286.735916][ T8449] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 4 [ 286.764477][ T8449] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.780942][ T8449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.789394][ T8449] usb 5-1: Product: syz [ 286.793596][ T8449] usb 5-1: Manufacturer: syz [ 286.799434][ T8449] usb 5-1: SerialNumber: syz [ 287.048122][ T8449] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 287.111667][ T8449] usb 5-1: USB disconnect, device number 17 [ 287.297267][ T5889] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 287.468306][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.500505][ T5889] usb 7-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 287.515528][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.546038][ T5889] usb 7-1: config 0 descriptor?? [ 287.833236][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.851817][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.861675][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.871491][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.881665][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 287.889019][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.959286][ T5889] waltop 0003:172F:0500.0011: unknown main item tag 0x0 [ 287.976308][ T5889] waltop 0003:172F:0500.0011: unknown main item tag 0x0 [ 287.994693][ T5889] waltop 0003:172F:0500.0011: unknown main item tag 0x0 [ 288.005734][ T5889] waltop 0003:172F:0500.0011: unknown main item tag 0x0 [ 288.013748][ T5889] waltop 0003:172F:0500.0011: unknown main item tag 0x0 [ 288.023256][ T5889] waltop 0003:172F:0500.0011: hidraw0: USB HID v0.00 Device [HID 172f:0500] on usb-dummy_hcd.6-1/input0 [ 288.160238][ T974] usb 7-1: USB disconnect, device number 16 [ 288.378180][T10419] chnl_net:caif_netlink_parms(): no params data found [ 288.576807][T10419] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.590443][T10419] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.599518][T10419] bridge_slave_0: entered allmulticast mode [ 288.608241][T10419] bridge_slave_0: entered promiscuous mode [ 288.616470][T10419] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.624712][T10419] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.631979][ T5885] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 288.644873][T10419] bridge_slave_1: entered allmulticast mode [ 288.653815][T10419] bridge_slave_1: entered promiscuous mode [ 288.718468][T10419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.739725][T10419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.791314][ T5885] usb 5-1: device descriptor read/64, error -71 [ 288.864166][T10419] team0: Port device team_slave_0 added [ 288.898443][T10419] team0: Port device team_slave_1 added [ 288.967473][T10419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.974698][T10419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.039093][T10419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.077558][ T5885] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 289.090170][T10419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.118316][T10419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.144815][T10419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.267277][ T5885] usb 5-1: device descriptor read/64, error -71 [ 289.335463][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 289.349388][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'. [ 289.358537][ T8468] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 289.367227][T10419] hsr_slave_0: entered promiscuous mode [ 289.373635][T10419] hsr_slave_1: entered promiscuous mode [ 289.391871][ T5885] usb usb5-port1: attempt power cycle [ 289.426005][T10419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.447247][T10419] Cannot create hsr debugfs directory [ 289.550556][ T8468] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 289.570522][ T8468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.601547][ T8468] usb 7-1: Product: syz [ 289.617445][ T8468] usb 7-1: Manufacturer: syz [ 289.633015][ T8468] usb 7-1: SerialNumber: syz [ 289.664149][ T8468] r8152-cfgselector 7-1: Unknown version 0x0000 [ 289.675218][ T8468] r8152-cfgselector 7-1: config 0 descriptor?? [ 289.747519][ T5885] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 289.770026][ T5885] usb 5-1: device descriptor read/8, error -71 [ 289.907352][T10459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.924407][T10459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.958569][ T5146] Bluetooth: hci5: command tx timeout [ 290.007366][ T5885] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 290.055024][ T5885] usb 5-1: device descriptor read/8, error -71 [ 290.152362][ T5906] r8152-cfgselector 7-1: USB disconnect, device number 17 [ 290.169079][ T5885] usb usb5-port1: unable to enumerate USB device [ 291.019430][T10419] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 291.100290][T10419] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 291.152328][T10419] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 291.183631][T10502] netlink: 16 bytes leftover after parsing attributes in process `syz.6.855'. [ 291.230528][T10419] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 291.438803][T10419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.492745][T10419] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.545400][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.552573][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.587241][ T5885] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 291.650658][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.657817][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.739151][ T5885] usb 7-1: device descriptor read/64, error -71 [ 291.770757][T10419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.014160][T10419] veth0_vlan: entered promiscuous mode [ 292.021880][ T5885] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 292.042129][ T5146] Bluetooth: hci5: command tx timeout [ 292.064295][T10419] veth1_vlan: entered promiscuous mode [ 292.179211][ T5885] usb 7-1: device descriptor read/64, error -71 [ 292.224720][T10419] veth0_macvtap: entered promiscuous mode [ 292.263724][T10419] veth1_macvtap: entered promiscuous mode [ 292.287623][ T5885] usb usb7-port1: attempt power cycle [ 292.316336][T10526] netlink: 56 bytes leftover after parsing attributes in process `syz.1.860'. [ 292.344246][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.512593][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.540220][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.567263][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.587904][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.604697][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.615115][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.627925][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.642174][ T5885] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 292.678230][ T5885] usb 7-1: device descriptor read/8, error -71 [ 292.699797][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.791717][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.808328][T10419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.819540][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.830091][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.852147][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.875577][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.889402][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.904970][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.923807][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.936025][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.937473][ T5885] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 292.954761][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 292.969767][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.985698][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.997949][ T5885] usb 7-1: device descriptor read/8, error -71 [ 293.002419][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.018214][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.033834][T10419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.107628][ T5885] usb usb7-port1: unable to enumerate USB device [ 293.116619][T10419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.157613][T10419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.222137][T10419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.255073][T10419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.295272][T10541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.348104][T10541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.519441][ T5885] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 293.592300][T10555] netlink: 48 bytes leftover after parsing attributes in process `syz.1.867'. [ 293.698643][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.715810][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.753731][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.798940][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.084691][T10571] capability: warning: `syz.1.869' uses 32-bit capabilities (legacy support in use) [ 294.118227][ T5146] Bluetooth: hci5: command tx timeout [ 294.587467][ T5885] usb 2-1: device descriptor read/64, error -71 [ 294.867253][ T5885] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 294.957975][T10595] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 295.089545][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.113001][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.159671][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.217643][ T5885] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.226749][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.273731][ T5885] usb 2-1: config 0 descriptor?? [ 295.598689][T10603] xt_CT: No such helper "pptp" [ 295.686317][ T5885] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 295.733294][ T5885] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 295.746541][ T5885] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 295.902879][T10620] x_tables: duplicate underflow at hook 1 [ 295.961845][T10624] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.880'. [ 296.007243][T10624] erspan0: entered promiscuous mode [ 296.197321][ T5146] Bluetooth: hci5: command tx timeout [ 296.473772][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.884'. [ 296.510500][T10646] netlink: 160 bytes leftover after parsing attributes in process `syz.6.885'. [ 297.564324][ T8] usb 2-1: USB disconnect, device number 28 [ 297.692524][T10680] @: renamed from vlan0 (while UP) [ 298.537223][ T5889] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 298.722178][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 298.757372][ T5889] usb 7-1: config index 0 descriptor too short (expected 224, got 18) [ 298.768383][ T5889] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 298.776715][ T5889] usb 7-1: config 0 has no interface number 0 [ 298.783810][ T5889] usb 7-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 298.820003][ T5889] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 298.853132][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.863120][ T5889] usb 7-1: Product: syz [ 298.877203][ T5889] usb 7-1: Manufacturer: syz [ 298.877287][ T8449] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 298.895602][ T5889] usb 7-1: SerialNumber: syz [ 298.922514][ T5889] usb 7-1: config 0 descriptor?? [ 298.968937][ T5889] hub 7-1:0.132: bad descriptor, ignoring hub [ 298.975195][ T5889] hub 7-1:0.132: probe with driver hub failed with error -5 [ 299.009549][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input35 [ 299.088760][ T8449] usb 1-1: Using ep0 maxpacket: 32 [ 299.099868][ T8449] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 299.129687][ T8449] usb 1-1: can't read configurations, error -61 [ 299.284769][ T8449] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 299.377470][ T52] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 299.447941][ T8449] usb 1-1: Using ep0 maxpacket: 32 [ 299.469746][ T8449] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 299.481025][ T8449] usb 1-1: can't read configurations, error -61 [ 299.501138][ T8449] usb usb1-port1: attempt power cycle [ 299.547376][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 299.561174][ T52] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.586795][ T52] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 299.596820][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.613793][ T52] usb 2-1: Product: syz [ 299.618973][ T52] usb 2-1: Manufacturer: syz [ 299.627972][ T52] usb 2-1: SerialNumber: syz [ 299.638654][ T52] usb 2-1: config 0 descriptor?? [ 299.657509][ T52] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 299.664030][ T52] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 299.864248][T10741] netlink: zone id is out of range [ 299.869978][ T8449] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 299.893753][T10741] netlink: zone id is out of range [ 299.914244][ T8449] usb 1-1: Using ep0 maxpacket: 32 [ 299.924491][T10741] netlink: zone id is out of range [ 299.933976][T10741] netlink: zone id is out of range [ 299.940214][T10741] netlink: zone id is out of range [ 299.946589][T10741] netlink: zone id is out of range [ 299.970513][T10741] netlink: zone id is out of range [ 299.970700][ T8449] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 299.994212][T10741] netlink: zone id is out of range [ 300.009979][T10741] netlink: zone id is out of range [ 300.017440][ T5888] usb 7-1: USB disconnect, device number 22 [ 300.024437][T10741] netlink: zone id is out of range [ 300.035519][T10741] netlink: zone id is out of range [ 300.041562][T10741] netlink: zone id is out of range [ 300.048357][T10741] netlink: zone id is out of range [ 300.055038][T10741] netlink: zone id is out of range [ 300.072006][ T8449] usb 1-1: can't read configurations, error -61 [ 300.077665][T10741] netlink: zone id is out of range [ 300.119902][T10741] netlink: zone id is out of range [ 300.125659][T10741] netlink: zone id is out of range [ 300.237241][ T8449] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 300.270355][ T8449] usb 1-1: Using ep0 maxpacket: 32 [ 300.305345][ T8449] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 300.320365][ T8449] usb 1-1: can't read configurations, error -61 [ 300.339856][ T8449] usb usb1-port1: unable to enumerate USB device [ 300.381438][T10785] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 300.403024][T10788] trusted_key: syz.6.910 sent an empty control message without MSG_MORE. [ 300.685748][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 300.685767][ T29] audit: type=1326 audit(1740727086.180:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10795 comm="syz.4.914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f955718d169 code=0x0 [ 300.796181][T10800] netlink: 'syz.4.914': attribute type 3 has an invalid length. [ 301.061524][T10816] FAULT_INJECTION: forcing a failure. [ 301.061524][T10816] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.075274][T10816] CPU: 0 UID: 0 PID: 10816 Comm: syz.6.918 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 301.075297][T10816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.075307][T10816] Call Trace: [ 301.075312][T10816] [ 301.075319][T10816] dump_stack_lvl+0x241/0x360 [ 301.075346][T10816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.075363][T10816] ? __pfx__printk+0x10/0x10 [ 301.075391][T10816] should_fail_ex+0x40a/0x550 [ 301.075417][T10816] prepare_alloc_pages+0x1da/0x5b0 [ 301.075442][T10816] __alloc_frozen_pages_noprof+0x16f/0x710 [ 301.075463][T10816] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 301.075492][T10816] ? prb_first_seq+0x131/0x210 [ 301.075512][T10816] alloc_pages_mpol+0x311/0x660 [ 301.075538][T10816] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 301.075568][T10816] alloc_pages_noprof+0x121/0x190 [ 301.075592][T10816] __pud_alloc+0x91/0x2b0 [ 301.075613][T10816] ? __pfx_validate_chain+0x10/0x10 [ 301.075631][T10816] ? __pfx___pud_alloc+0x10/0x10 [ 301.075653][T10816] ? __pfx_validate_chain+0x10/0x10 [ 301.075668][T10816] ? validate_chain+0x11e/0x5920 [ 301.075684][T10816] ? preempt_count_add+0x93/0x190 [ 301.075708][T10816] __handle_mm_fault+0x495f/0x70f0 [ 301.075728][T10816] ? mark_lock+0x9a/0x360 [ 301.075755][T10816] ? __lock_acquire+0x1397/0x2100 [ 301.075795][T10816] ? __pfx___handle_mm_fault+0x10/0x10 [ 301.075825][T10816] ? mt_find+0x2a9/0x920 [ 301.075846][T10816] ? __pfx_lock_release+0x10/0x10 [ 301.075878][T10816] ? mt_find+0x2a9/0x920 [ 301.075899][T10816] ? mt_find+0x6c8/0x920 [ 301.075919][T10816] ? mt_find+0x2a9/0x920 [ 301.075944][T10816] ? __pfx_mt_find+0x10/0x10 [ 301.075981][T10816] ? find_vma+0xf9/0x170 [ 301.076003][T10816] ? __pfx_find_vma+0x10/0x10 [ 301.076022][T10816] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 301.076048][T10816] handle_mm_fault+0x3e5/0x8d0 [ 301.076079][T10816] exc_page_fault+0x2b9/0x8b0 [ 301.076106][T10816] asm_exc_page_fault+0x26/0x30 [ 301.076126][T10816] RIP: 0010:__put_user_4+0x11/0x20 [ 301.076147][T10816] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 301.076160][T10816] RSP: 0018:ffffc900050cfcf8 EFLAGS: 00050206 [ 301.076179][T10816] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000400000000100 [ 301.076191][T10816] RDX: 0000000000000000 RSI: ffffffff8c2ab700 RDI: ffffffff8c80ef80 [ 301.076202][T10816] RBP: ffffc900050cfe80 R08: ffffffff903ced77 R09: 1ffffffff2079dae [ 301.076213][T10816] R10: dffffc0000000000 R11: fffffbfff2079daf R12: 0000000000005601 [ 301.076224][T10816] R13: 0000000000000050 R14: 0000000000000002 R15: 0000000000000000 [ 301.076249][T10816] vt_ioctl+0x187b/0x2020 [ 301.076275][T10816] ? __pfx_vt_ioctl+0x10/0x10 [ 301.076312][T10816] ? tty_jobctrl_ioctl+0x36e/0xba0 [ 301.076333][T10816] ? __fget_files+0x2a/0x410 [ 301.076358][T10816] tty_ioctl+0x90f/0xdc0 [ 301.076373][T10816] ? __pfx_tty_ioctl+0x10/0x10 [ 301.076390][T10816] __se_sys_ioctl+0xf5/0x170 [ 301.076409][T10816] do_syscall_64+0xf3/0x230 [ 301.076430][T10816] ? clear_bhb_loop+0x35/0x90 [ 301.076452][T10816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.076469][T10816] RIP: 0033:0x7f399dd8d169 [ 301.076483][T10816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.076493][T10816] RSP: 002b:00007f399eca9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.076507][T10816] RAX: ffffffffffffffda RBX: 00007f399dfa5fa0 RCX: 00007f399dd8d169 [ 301.076516][T10816] RDX: 0000400000000100 RSI: 0000000000005600 RDI: 0000000000000003 [ 301.076524][T10816] RBP: 00007f399eca9090 R08: 0000000000000000 R09: 0000000000000000 [ 301.076532][T10816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.076541][T10816] R13: 0000000000000000 R14: 00007f399dfa5fa0 R15: 00007f399e0cfa28 [ 301.076565][T10816] [ 302.035939][ T8] usb 2-1: USB disconnect, device number 29 [ 302.317698][T10851] x_tables: duplicate underflow at hook 1 [ 302.348969][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.928'. [ 302.732380][T10874] netlink: 'syz.0.933': attribute type 6 has an invalid length. [ 302.755058][T10874] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.933'. [ 302.779688][ T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.979536][ T52] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 303.037305][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.157417][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 303.183026][ T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.183069][ T52] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.267247][ T52] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.285856][ T52] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.341388][ T52] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.405754][ T52] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=a0.23 [ 303.453069][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.491143][ T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.627691][T10904] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 303.792868][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.806064][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.815967][ T53] bridge_slave_1: left allmulticast mode [ 303.817752][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.832338][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.839339][ T53] bridge_slave_1: left promiscuous mode [ 303.840600][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.854434][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 303.866444][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 303.874333][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.924823][ T53] bridge_slave_0: left allmulticast mode [ 303.965313][ T53] bridge_slave_0: left promiscuous mode [ 303.974206][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.009048][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.054900][ T8] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 304.096426][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.138934][ T8] usb 5-1: config 0 descriptor?? [ 304.160227][ T8] usb 5-1: bad CDC descriptors [ 304.233484][ T52] usb 2-1: string descriptor 0 read error: -71 [ 304.246341][ T52] usb 2-1: usb_control_msg returned -71 [ 304.269768][ T52] usbtmc 2-1:16.0: can't read capabilities [ 304.342458][ T52] usb 2-1: USB disconnect, device number 30 [ 304.349859][ T5888] usb 5-1: USB disconnect, device number 22 [ 304.562972][T10935] x_tables: duplicate underflow at hook 1 [ 304.751911][T10944] netlink: 'syz.0.947': attribute type 13 has an invalid length. [ 304.788606][T10944] netlink: 'syz.0.947': attribute type 17 has an invalid length. [ 304.796439][T10944] netlink: 152 bytes leftover after parsing attributes in process `syz.0.947'. [ 305.653435][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.665852][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.685902][ T53] bond0 (unregistering): Released all slaves [ 305.704600][T10944] syz_tun: refused to change device tx_queue_len [ 305.962544][ T5833] Bluetooth: hci1: command tx timeout [ 306.423674][T10996] vlan0: entered promiscuous mode [ 306.468661][T10996] bond0: entered promiscuous mode [ 306.482015][T10996] bond_slave_0: entered promiscuous mode [ 306.507503][T10996] bond_slave_1: entered promiscuous mode [ 306.534759][T10996] bond0: left promiscuous mode [ 306.539981][T10996] bond_slave_0: left promiscuous mode [ 306.545999][T10996] bond_slave_1: left promiscuous mode [ 306.603459][ T53] hsr_slave_0: left promiscuous mode [ 306.616031][ T53] hsr_slave_1: left promiscuous mode [ 306.630163][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.667295][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.686671][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.739605][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.841425][ T53] veth1_macvtap: left promiscuous mode [ 306.868132][ T53] veth0_macvtap: left promiscuous mode [ 306.877347][ T53] veth1_vlan: left promiscuous mode [ 306.894917][ T53] veth0_vlan: left promiscuous mode [ 306.994963][T11013] x_tables: duplicate underflow at hook 1 [ 307.287323][ T52] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 307.449099][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 307.471413][ T52] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 307.486234][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.518380][ T52] usb 1-1: config 0 descriptor?? [ 307.788324][ T52] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 307.809627][ T52] asix 1-1:0.0: probe with driver asix failed with error -32 [ 307.973460][ T53] team0 (unregistering): Port device team_slave_1 removed [ 308.035678][ T53] team0 (unregistering): Port device team_slave_0 removed [ 308.043399][ T5833] Bluetooth: hci1: command tx timeout [ 309.234900][T10916] chnl_net:caif_netlink_parms(): no params data found [ 309.352355][T11087] FAULT_INJECTION: forcing a failure. [ 309.352355][T11087] name failslab, interval 1, probability 0, space 0, times 0 [ 309.456502][T11087] CPU: 1 UID: 0 PID: 11087 Comm: syz.7.963 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 309.456528][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.456537][T11087] Call Trace: [ 309.456543][T11087] [ 309.456550][T11087] dump_stack_lvl+0x241/0x360 [ 309.456574][T11087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.456589][T11087] ? __pfx__printk+0x10/0x10 [ 309.456614][T11087] ? __kmalloc_cache_noprof+0x48/0x390 [ 309.456634][T11087] ? __pfx___might_resched+0x10/0x10 [ 309.456659][T11087] should_fail_ex+0x40a/0x550 [ 309.456684][T11087] should_failslab+0xac/0x100 [ 309.456706][T11087] __kmalloc_cache_noprof+0x70/0x390 [ 309.456725][T11087] ? ip_set_create+0x336/0x1960 [ 309.456757][T11087] ip_set_create+0x336/0x1960 [ 309.456780][T11087] ? rcu_needs_cpu+0x1/0xb0 [ 309.456798][T11087] ? trace_contention_end+0x3c/0x120 [ 309.456819][T11087] ? __pfx_ip_set_create+0x10/0x10 [ 309.456865][T11087] ? nfnetlink_rcv_msg+0x225/0x1180 [ 309.456886][T11087] nfnetlink_rcv_msg+0xbec/0x1180 [ 309.456907][T11087] ? nfnetlink_rcv_msg+0x225/0x1180 [ 309.456947][T11087] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 309.456966][T11087] ? stack_trace_save+0x118/0x1d0 [ 309.457003][T11087] ? dev_hard_start_xmit+0x27a/0x7d0 [ 309.457024][T11087] ? __dev_queue_xmit+0x1b73/0x3f50 [ 309.457038][T11087] ? __netlink_deliver_tap+0x561/0x7f0 [ 309.457052][T11087] ? netlink_deliver_tap+0x19d/0x1b0 [ 309.457066][T11087] ? netlink_unicast+0x7c4/0x990 [ 309.457088][T11087] ? netlink_sendmsg+0x8de/0xcb0 [ 309.457101][T11087] ? __sock_sendmsg+0x221/0x270 [ 309.457117][T11087] ? ____sys_sendmsg+0x53a/0x860 [ 309.457135][T11087] ? __sys_sendmsg+0x269/0x350 [ 309.457168][T11087] netlink_rcv_skb+0x206/0x480 [ 309.457185][T11087] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 309.457207][T11087] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.457234][T11087] ? apparmor_capable+0x13b/0x1b0 [ 309.457253][T11087] ? bpf_lsm_capable+0x9/0x10 [ 309.457272][T11087] ? security_capable+0x7e/0x2d0 [ 309.457296][T11087] nfnetlink_rcv+0x297/0x2ab0 [ 309.457320][T11087] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 309.457344][T11087] ? __dev_queue_xmit+0x2f4/0x3f50 [ 309.457373][T11087] ? __dev_queue_xmit+0x1775/0x3f50 [ 309.457388][T11087] ? kasan_save_track+0x51/0x80 [ 309.457409][T11087] ? ____sys_sendmsg+0x53a/0x860 [ 309.457434][T11087] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 309.457453][T11087] ? __dev_queue_xmit+0x2f4/0x3f50 [ 309.457472][T11087] ? __pfx___dev_queue_xmit+0x10/0x10 [ 309.457504][T11087] ? ref_tracker_free+0x643/0x7e0 [ 309.457528][T11087] ? __asan_memcpy+0x40/0x70 [ 309.457543][T11087] ? __pfx_ref_tracker_free+0x10/0x10 [ 309.457563][T11087] ? __skb_clone+0x5c/0x6c0 [ 309.457593][T11087] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.457637][T11087] ? skb_clone+0x240/0x390 [ 309.457653][T11087] ? __pfx_lock_release+0x10/0x10 [ 309.457676][T11087] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 309.457704][T11087] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.457722][T11087] netlink_unicast+0x7f6/0x990 [ 309.457754][T11087] ? __pfx_netlink_unicast+0x10/0x10 [ 309.457773][T11087] ? __virt_addr_valid+0x45f/0x530 [ 309.457790][T11087] ? __phys_addr_symbol+0x2f/0x70 [ 309.457811][T11087] ? __check_object_size+0x47a/0x730 [ 309.457836][T11087] netlink_sendmsg+0x8de/0xcb0 [ 309.457863][T11087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.457884][T11087] ? aa_sock_msg_perm+0x91/0x160 [ 309.457910][T11087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.457923][T11087] __sock_sendmsg+0x221/0x270 [ 309.457944][T11087] ____sys_sendmsg+0x53a/0x860 [ 309.457971][T11087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.457987][T11087] ? __fget_files+0x2a/0x410 [ 309.458015][T11087] ? __fget_files+0x2a/0x410 [ 309.458037][T11087] __sys_sendmsg+0x269/0x350 [ 309.458058][T11087] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.458084][T11087] ? do_sys_openat2+0x17a/0x1d0 [ 309.458121][T11087] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.458139][T11087] ? do_syscall_64+0x100/0x230 [ 309.458158][T11087] ? do_syscall_64+0xb6/0x230 [ 309.458175][T11087] do_syscall_64+0xf3/0x230 [ 309.458189][T11087] ? clear_bhb_loop+0x35/0x90 [ 309.458208][T11087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.458223][T11087] RIP: 0033:0x7f06c778d169 [ 309.458237][T11087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.458247][T11087] RSP: 002b:00007f06c85da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.458263][T11087] RAX: ffffffffffffffda RBX: 00007f06c79a5fa0 RCX: 00007f06c778d169 [ 309.458272][T11087] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 309.458280][T11087] RBP: 00007f06c85da090 R08: 0000000000000000 R09: 0000000000000000 [ 309.458287][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.458295][T11087] R13: 0000000000000000 R14: 00007f06c79a5fa0 R15: 00007f06c7acfa28 [ 309.458314][T11087] [ 310.107907][ T8] usb 1-1: USB disconnect, device number 8 [ 310.117379][ T5833] Bluetooth: hci1: command tx timeout [ 310.289786][T10916] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.342028][T10916] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.342189][T10916] bridge_slave_0: entered allmulticast mode [ 310.342945][T10916] bridge_slave_0: entered promiscuous mode [ 310.349549][T10916] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.357167][T10916] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.357440][T10916] bridge_slave_1: entered allmulticast mode [ 310.358539][T10916] bridge_slave_1: entered promiscuous mode [ 310.496373][T10916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.579233][T10916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.722370][T10916] team0: Port device team_slave_0 added [ 310.745229][T10916] team0: Port device team_slave_1 added [ 310.877526][T10916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.895949][T10916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.971680][T10916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.020856][T10916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.065397][T10916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.099084][T10916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.236156][T11132] x_tables: duplicate underflow at hook 1 [ 311.248588][T10916] hsr_slave_0: entered promiscuous mode [ 311.272947][T10916] hsr_slave_1: entered promiscuous mode [ 311.296805][T10916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.305242][T10916] Cannot create hsr debugfs directory [ 311.725256][ T29] audit: type=1326 audit(1740727097.210:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7fc00000 [ 311.770694][ T29] audit: type=1326 audit(1740727097.210:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdd698d169 code=0x7fc00000 [ 311.818866][ T29] audit: type=1326 audit(1740727097.210:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7fc00000 [ 311.842580][ T29] audit: type=1326 audit(1740727097.210:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7fc00000 [ 311.865906][ T29] audit: type=1326 audit(1740727097.210:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7fc00000 [ 311.890817][ T29] audit: type=1326 audit(1740727097.210:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7fc00000 [ 311.920302][ T29] audit: type=1326 audit(1740727097.210:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7fc00000 [ 311.946804][ T29] audit: type=1326 audit(1740727097.210:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7fc00000 [ 311.970146][ T29] audit: type=1326 audit(1740727097.210:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7fc00000 [ 311.994988][ T29] audit: type=1326 audit(1740727097.210:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7fc00000 [ 312.197629][ T5833] Bluetooth: hci1: command tx timeout [ 312.237726][T10916] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 312.259113][T10916] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 312.280436][T10916] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 312.345771][T10916] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 312.404873][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 312.574661][T10916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.629036][T11187] FAULT_INJECTION: forcing a failure. [ 312.629036][T11187] name failslab, interval 1, probability 0, space 0, times 0 [ 312.629297][T10916] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.642155][T11187] CPU: 0 UID: 0 PID: 11187 Comm: syz.0.985 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 312.642179][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.642189][T11187] Call Trace: [ 312.642196][T11187] [ 312.642204][T11187] dump_stack_lvl+0x241/0x360 [ 312.642226][T11187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.642241][T11187] ? __pfx__printk+0x10/0x10 [ 312.642257][T11187] ? __lock_acquire+0x1397/0x2100 [ 312.642286][T11187] should_fail_ex+0x40a/0x550 [ 312.642312][T11187] should_failslab+0xac/0x100 [ 312.642332][T11187] ? xfrm_state_alloc+0x26/0x320 [ 312.642348][T11187] kmem_cache_alloc_noprof+0x70/0x380 [ 312.642372][T11187] xfrm_state_alloc+0x26/0x320 [ 312.642387][T11187] __find_acq_core+0x87a/0x1c10 [ 312.642421][T11187] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 312.642441][T11187] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.642467][T11187] xfrm_find_acq+0x7a/0xa0 [ 312.642494][T11187] pfkey_getspi+0x62b/0xec0 [ 312.642516][T11187] ? pfkey_broadcast+0x45/0x400 [ 312.642539][T11187] pfkey_sendmsg+0xbe3/0x1070 [ 312.642571][T11187] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 312.642605][T11187] ? __pfx_aa_sk_perm+0x10/0x10 [ 312.642627][T11187] ? __import_iovec+0x582/0x830 [ 312.642647][T11187] ? aa_sock_msg_perm+0x91/0x160 [ 312.642672][T11187] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 312.642688][T11187] __sock_sendmsg+0x221/0x270 [ 312.642710][T11187] ____sys_sendmsg+0x53a/0x860 [ 312.642740][T11187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.642760][T11187] ? __fget_files+0x2a/0x410 [ 312.642781][T11187] ? __fget_files+0x2a/0x410 [ 312.642804][T11187] __sys_sendmsg+0x269/0x350 [ 312.642829][T11187] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.642862][T11187] ? do_sys_openat2+0x17a/0x1d0 [ 312.642911][T11187] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.642934][T11187] ? do_syscall_64+0x100/0x230 [ 312.642957][T11187] ? do_syscall_64+0xb6/0x230 [ 312.642979][T11187] do_syscall_64+0xf3/0x230 [ 312.642998][T11187] ? clear_bhb_loop+0x35/0x90 [ 312.643022][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.643041][T11187] RIP: 0033:0x7fcdd698d169 [ 312.643058][T11187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.643072][T11187] RSP: 002b:00007fcdd777f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.643089][T11187] RAX: ffffffffffffffda RBX: 00007fcdd6ba5fa0 RCX: 00007fcdd698d169 [ 312.643101][T11187] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 312.643111][T11187] RBP: 00007fcdd777f090 R08: 0000000000000000 R09: 0000000000000000 [ 312.643121][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.643130][T11187] R13: 0000000000000000 R14: 00007fcdd6ba5fa0 R15: 00007fcdd6ccfa28 [ 312.643155][T11187] [ 312.952517][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.959708][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.987219][ T52] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 312.996496][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.003719][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.146491][T10916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.149844][ T52] usb 5-1: config 0 has no interfaces? [ 313.177232][ T52] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 313.222260][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.253160][ T52] usb 5-1: config 0 descriptor?? [ 313.264397][T10916] veth0_vlan: entered promiscuous mode [ 313.307477][T10916] veth1_vlan: entered promiscuous mode [ 313.350152][T10916] veth0_macvtap: entered promiscuous mode [ 313.366152][T10916] veth1_macvtap: entered promiscuous mode [ 313.386276][T11200] x_tables: duplicate underflow at hook 1 [ 313.429109][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.452976][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.465836][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.486338][ T52] usb 5-1: USB disconnect, device number 23 [ 313.491003][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.508396][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.524021][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.524047][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.524063][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.524080][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.524094][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.525344][T10916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.529485][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.529507][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.529520][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.529534][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.529546][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.529560][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.529572][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.529585][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.529598][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.529611][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.529623][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.529636][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.530532][T10916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.533659][T10916] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.533691][T10916] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.533716][T10916] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.533739][T10916] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.976461][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.001519][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.018728][T11209] netlink: 20 bytes leftover after parsing attributes in process `syz.7.990'. [ 314.112191][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.162097][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.946116][T11240] x_tables: duplicate underflow at hook 1 [ 315.105255][T11247] xt_CONNSECMARK: invalid mode: 0 [ 315.587779][ T8468] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 315.787798][ T8468] usb 5-1: Using ep0 maxpacket: 8 [ 315.824314][ T8468] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 315.824355][ T8468] usb 5-1: config 0 has no interface number 0 [ 315.824388][ T8468] usb 5-1: config 0 interface 29 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 315.824408][ T8468] usb 5-1: config 0 interface 29 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 315.824432][ T8468] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 315.824457][ T8468] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 315.824480][ T8468] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 315.824500][ T8468] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 315.824521][ T8468] usb 5-1: config 0 interface 29 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 315.826347][ T8468] usb 5-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01 [ 315.826377][ T8468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.826396][ T8468] usb 5-1: Product: syz [ 315.826411][ T8468] usb 5-1: Manufacturer: syz [ 315.826425][ T8468] usb 5-1: SerialNumber: syz [ 315.838204][ T8468] usb 5-1: config 0 descriptor?? [ 315.839411][T11255] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 315.843758][ T8468] ums-usbat 5-1:0.29: USB Mass Storage device detected [ 316.118855][ T8468] ums-usbat 5-1:0.29: probe with driver ums-usbat failed with error -5 [ 316.165710][ T8468] usb 5-1: USB disconnect, device number 24 [ 316.320475][T11296] xt_CT: No such helper "pptp" [ 316.527283][ T25] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 316.548232][T11308] x_tables: duplicate underflow at hook 1 [ 316.741321][ T25] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 316.773815][ T25] usb 2-1: config 0 has no interface number 0 [ 316.806645][ T25] usb 2-1: config 0 interface 128 has no altsetting 0 [ 316.831378][ T25] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 316.851378][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.879811][ T25] usb 2-1: Product: syz [ 316.899776][ T25] usb 2-1: Manufacturer: syz [ 316.919515][ T25] usb 2-1: SerialNumber: syz [ 316.966453][ T25] usb 2-1: config 0 descriptor?? [ 317.005220][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 317.005239][ T29] audit: type=1326 audit(1740727102.500:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 317.006414][T11325] FAULT_INJECTION: forcing a failure. [ 317.006414][T11325] name failslab, interval 1, probability 0, space 0, times 0 [ 317.026233][ T29] audit: type=1326 audit(1740727102.500:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 317.035774][T11325] CPU: 0 UID: 0 PID: 11325 Comm: syz.0.1020 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 317.035798][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.035809][T11325] Call Trace: [ 317.035815][T11325] [ 317.035821][T11325] dump_stack_lvl+0x241/0x360 [ 317.035847][T11325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.035865][T11325] ? __pfx__printk+0x10/0x10 [ 317.035884][T11325] ? __kmalloc_cache_noprof+0x48/0x390 [ 317.035906][T11325] ? __pfx___might_resched+0x10/0x10 [ 317.035935][T11325] should_fail_ex+0x40a/0x550 [ 317.035960][T11325] should_failslab+0xac/0x100 [ 317.035982][T11325] __kmalloc_cache_noprof+0x70/0x390 [ 317.036001][T11325] ? audit_log_d_path+0xb5/0x190 [ 317.036024][T11325] audit_log_d_path+0xb5/0x190 [ 317.036045][T11325] audit_log_d_path_exe+0x42/0x70 [ 317.036064][T11325] audit_log_task+0x2c9/0x3d0 [ 317.036084][T11325] ? __pfx_audit_log_task+0x10/0x10 [ 317.036102][T11325] ? __pfx___cant_migrate+0x10/0x10 [ 317.036126][T11325] audit_seccomp+0x7b/0x1f0 [ 317.036146][T11325] __seccomp_filter+0xb38/0x1fe0 [ 317.036172][T11325] ? vfs_write+0x7fa/0xd10 [ 317.036192][T11325] ? __pfx___seccomp_filter+0x10/0x10 [ 317.036216][T11325] ? do_sys_openat2+0x17a/0x1d0 [ 317.036240][T11325] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 317.036260][T11325] ? __fget_files+0x2a/0x410 [ 317.036287][T11325] ? __fget_files+0x2a/0x410 [ 317.036321][T11325] ? __secure_computing+0x125/0x370 [ 317.036341][T11325] syscall_trace_enter+0xa8/0x150 [ 317.036367][T11325] do_syscall_64+0xcc/0x230 [ 317.036387][T11325] ? clear_bhb_loop+0x35/0x90 [ 317.036410][T11325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.036430][T11325] RIP: 0033:0x7fcdd698d169 [ 317.036445][T11325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.036459][T11325] RSP: 002b:00007fcdd777f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 317.036477][T11325] RAX: ffffffffffffffda RBX: 00007fcdd6ba5fa0 RCX: 00007fcdd698d169 [ 317.036489][T11325] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000005 [ 317.036499][T11325] RBP: 00007fcdd777f090 R08: 0000000000000000 R09: 0000000000000000 [ 317.036510][T11325] R10: 0000400000000200 R11: 0000000000000246 R12: 0000000000000001 [ 317.036520][T11325] R13: 0000000000000000 R14: 00007fcdd6ba5fa0 R15: 00007fcdd6ccfa28 [ 317.036544][T11325] [ 317.280626][ T8449] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 317.286075][ T25] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 317.286132][ T25] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 317.347568][ T25] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 317.388894][ T29] audit: type=1326 audit(1740727102.500:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 317.456743][ T25] usb 2-1: USB disconnect, device number 31 [ 317.482217][ T29] audit: type=1326 audit(1740727102.500:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 317.513730][ T8449] usb 5-1: Using ep0 maxpacket: 8 [ 317.540693][ T8449] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 317.544583][ T29] audit: type=1326 audit(1740727102.500:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 317.570105][ T8449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.586815][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.598312][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.605675][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.617490][ T29] audit: type=1326 audit(1740727102.500:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdd698bad0 code=0x7ffc0000 [ 317.640979][ T29] audit: type=1326 audit(1740727102.500:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdd698bc1f code=0x7ffc0000 [ 317.663321][ T8449] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.663353][ T8449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 317.663391][ T8449] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 317.663410][ T8449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.704164][ T29] audit: type=1326 audit(1740727102.500:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.0.1020" exe="" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 317.704726][ T8449] usb 5-1: config 0 descriptor?? [ 317.727046][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.739386][ T29] audit: type=1326 audit(1740727102.540:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcdd698bb7c code=0x7ffc0000 [ 317.826058][ T29] audit: type=1326 audit(1740727102.540:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdd698bc1f code=0x7ffc0000 [ 317.886557][T11323] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 317.889708][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.057964][T11336] program syz.0.1026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.165805][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.355078][T11323] netlink: 'syz.4.1019': attribute type 27 has an invalid length. [ 318.378262][T11323] netlink: 'syz.4.1019': attribute type 3 has an invalid length. [ 318.386282][T11323] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1019'. [ 318.441031][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.491451][ T5889] usb 5-1: USB disconnect, device number 25 [ 318.493838][ T5833] Bluetooth: hci6: Opcode 0x0c03 failed: -19 [ 318.570776][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.581062][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.589930][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.602223][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.610262][ T5146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 318.617597][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.811728][T11360] netlink: 'syz.0.1031': attribute type 25 has an invalid length. [ 318.821238][T11360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1031'. [ 318.837037][T11356] x_tables: duplicate underflow at hook 1 [ 318.923571][T11360] hub 9-0:1.0: USB hub found [ 318.929760][T11360] hub 9-0:1.0: 1 port detected [ 319.061304][T11354] chnl_net:caif_netlink_parms(): no params data found [ 319.267555][ T53] bridge_slave_1: left allmulticast mode [ 319.273646][ T53] bridge_slave_1: left promiscuous mode [ 319.324777][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.365799][ T53] bridge_slave_0: left allmulticast mode [ 319.372110][ T53] bridge_slave_0: left promiscuous mode [ 319.378216][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.670052][ T5906] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 319.889542][ T5906] usb 2-1: config 5 has an invalid interface number: 1 but max is 0 [ 319.908401][ T5906] usb 2-1: config 5 has no interface number 0 [ 319.914643][ T5906] usb 2-1: config 5 interface 1 has no altsetting 0 [ 319.927714][ T5906] usb 2-1: New USB device found, idVendor=15ba, idProduct=002b, bcdDevice=d5.66 [ 319.937427][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.945589][ T5906] usb 2-1: Product: syz [ 319.956434][ T5906] usb 2-1: Manufacturer: syz [ 319.962342][ T5906] usb 2-1: SerialNumber: syz [ 320.062742][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 320.075729][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.092873][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.104207][ T53] bond0 (unregistering): Released all slaves [ 320.241698][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 320.249584][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 320.288814][ T8] usb 5-1: config index 0 descriptor too short (expected 65531, got 44) [ 320.305244][ T8] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 320.326061][ T8] usb 5-1: config 255 has an invalid descriptor of length 1, skipping remainder of the config [ 320.379396][ T5906] ftdi_sio 2-1:5.1: FTDI USB Serial Device converter detected [ 320.391893][ T8] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 320.402709][ T5906] ftdi_sio ttyUSB0: unknown device type: 0xd566 [ 320.414345][ T8] usb 5-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=35.13 [ 320.426028][ T5906] usb 2-1: USB disconnect, device number 32 [ 320.442578][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.466117][ T5906] ftdi_sio 2-1:5.1: device disconnected [ 320.477851][ T8] usb 5-1: Product: syz [ 320.482083][ T8] usb 5-1: Manufacturer: syz [ 320.502875][ T8] usb 5-1: SerialNumber: syz [ 320.555253][T11354] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.568391][T11354] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.588747][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 320.599165][T11354] bridge_slave_0: entered allmulticast mode [ 320.615966][T11354] bridge_slave_0: entered promiscuous mode [ 320.649614][T11354] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.669183][T11354] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.676476][T11354] bridge_slave_1: entered allmulticast mode [ 320.687848][ T5146] Bluetooth: hci1: command tx timeout [ 320.719139][T11354] bridge_slave_1: entered promiscuous mode [ 320.736471][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 320.833745][T11354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.900578][T11354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.078284][ T53] hsr_slave_0: left promiscuous mode [ 321.094520][ T53] hsr_slave_1: left promiscuous mode [ 321.104154][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.112855][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.123250][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.145617][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.260242][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 321.546033][ T8] usb 5-1: USB disconnect, device number 26 [ 321.615373][ T53] veth1_macvtap: left promiscuous mode [ 321.637255][ T53] veth0_macvtap: left promiscuous mode [ 321.642921][ T53] veth1_vlan: left promiscuous mode [ 321.648419][ T8468] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 321.677542][ T53] veth0_vlan: left promiscuous mode [ 321.820366][ T8468] usb 2-1: config 0 has an invalid interface number: 4 but max is 2 [ 321.847997][ T8468] usb 2-1: config 0 has an invalid interface number: 93 but max is 2 [ 321.876630][ T8468] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.917386][ T8468] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 321.956800][ T8468] usb 2-1: config 0 has no interface number 0 [ 321.973400][ T8468] usb 2-1: config 0 has no interface number 1 [ 321.997831][ T8468] usb 2-1: config 0 interface 4 altsetting 139 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 322.018689][ T8468] usb 2-1: config 0 interface 93 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 322.046955][ T8468] usb 2-1: config 0 interface 4 has no altsetting 0 [ 322.053782][ T8468] usb 2-1: config 0 interface 93 has no altsetting 0 [ 322.061976][ T8468] usb 2-1: New USB device found, idVendor=05c6, idProduct=9034, bcdDevice=74.09 [ 322.117654][ T8468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.148243][ T8468] usb 2-1: config 0 descriptor?? [ 322.518669][ T5906] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 322.690756][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 322.699187][ T5906] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 322.713196][ T5906] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 322.725756][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 322.740480][ T5906] usb 5-1: Product: syz [ 322.744917][ T5906] usb 5-1: Manufacturer: syz [ 322.761036][ T5906] usb 5-1: SerialNumber: syz [ 322.768775][ T5833] Bluetooth: hci1: command tx timeout [ 322.801185][ T5906] usb 5-1: config 0 descriptor?? [ 322.811677][T11434] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 322.844321][ T53] team0 (unregistering): Port device team_slave_1 removed [ 322.921138][ T53] team0 (unregistering): Port device team_slave_0 removed [ 323.122715][ T5889] usb 5-1: USB disconnect, device number 27 [ 323.685487][T11354] team0: Port device team_slave_0 added [ 323.716637][T11414] 8021q: adding VLAN 0 to HW filter on device team1 [ 323.760030][T11354] team0: Port device team_slave_1 added [ 323.902583][T11354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.916073][T11354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.942093][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.978476][T11354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.008604][T11354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.064759][ T8468] usb 2-1: string descriptor 0 read error: -71 [ 324.108166][T11354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.135253][ T8468] usb 2-1: USB disconnect, device number 33 [ 324.228361][T11354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.300862][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 324.316308][T11354] hsr_slave_0: entered promiscuous mode [ 324.356758][T11354] hsr_slave_1: entered promiscuous mode [ 324.376006][T11354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.392839][T11354] Cannot create hsr debugfs directory [ 324.457220][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 324.488653][ T25] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 324.499344][ T25] usb 1-1: config 4 has no interface number 0 [ 324.526019][ T25] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.554853][ T25] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.581350][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 324.611830][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.668935][ T25] hub 1-1:4.128: USB hub found [ 324.759914][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 324.837409][ T5146] Bluetooth: hci1: command tx timeout [ 324.853497][ T25] hub 1-1:4.128: 2 ports detected [ 324.859288][ T25] hub 1-1:4.128: Using single TT (err -22) [ 325.057482][ T25] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 325.066498][ T25] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 325.101195][ T25] usb 1-1: USB disconnect, device number 9 [ 325.178509][ T5906] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 325.338898][ T5906] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 325.347043][ T5906] usb 2-1: config 0 has no interface number 0 [ 325.394378][ T5906] usb 2-1: config 0 interface 69 has no altsetting 0 [ 325.411450][ T5906] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00aa, bcdDevice= 4.57 [ 325.424565][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.450035][ T5906] usb 2-1: config 0 descriptor?? [ 325.699148][ T8449] usb 2-1: USB disconnect, device number 34 [ 325.811871][T11354] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 325.830006][T11354] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 325.855752][T11354] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 325.874242][T11354] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.105525][T11354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.133139][T11354] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.147922][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.155178][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.167246][ T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 326.264524][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.271704][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.337336][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 326.352052][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.368605][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.381482][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.385080][T11354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.405123][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 326.415262][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.432870][ T25] usb 5-1: config 0 descriptor?? [ 326.499775][T11354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.661814][T11354] veth0_vlan: entered promiscuous mode [ 326.710465][T11354] veth1_vlan: entered promiscuous mode [ 326.820045][T11354] veth0_macvtap: entered promiscuous mode [ 326.851311][T11354] veth1_macvtap: entered promiscuous mode [ 326.892328][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.895779][ T25] koneplus 0003:1E7D:2E22.0013: unknown main item tag 0x0 [ 326.910435][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.920633][ T5146] Bluetooth: hci1: command tx timeout [ 326.932161][ T25] koneplus 0003:1E7D:2E22.0013: unknown main item tag 0x0 [ 326.949178][ T25] koneplus 0003:1E7D:2E22.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 326.957164][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.981644][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.005976][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.044805][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.055300][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.074391][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.085933][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.101717][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.108023][ T25] koneplus 0003:1E7D:2E22.0013: couldn't init struct koneplus_device [ 327.113677][T11354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.147238][ T25] koneplus 0003:1E7D:2E22.0013: couldn't install mouse [ 327.182523][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.188984][ T25] koneplus 0003:1E7D:2E22.0013: probe with driver koneplus failed with error -71 [ 327.226599][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.241851][ T25] usb 5-1: USB disconnect, device number 28 [ 327.242987][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.268763][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.285548][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.301631][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.323574][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.356252][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.381014][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.401266][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.419174][T11354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.440751][T11354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.457936][T11354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.511790][T11354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.529039][T11354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.544193][T11354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.555423][T11354] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.573220][T11526] usb usb1: usbfs: process 11526 (syz.0.1073) did not claim interface 0 before use [ 327.742542][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.774709][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.787347][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.815465][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.715853][ T8468] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 328.918675][ T8468] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 328.929450][ T8468] usb 1-1: config 0 has an invalid interface number: 2 but max is -1 [ 328.947475][ T8468] usb 1-1: config 0 has an invalid interface number: 2 but max is -1 [ 328.970913][ T8468] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.992002][ T8468] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 329.032663][ T8468] usb 1-1: config 0 has no interface number 0 [ 329.057230][ T8468] usb 1-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.108627][ T8468] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.123727][ T8468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.152517][ T8468] usb 1-1: Product: syz [ 329.162709][ T8468] usb 1-1: Manufacturer: syz [ 329.182978][ T8468] usb 1-1: SerialNumber: syz [ 329.199281][ T8468] usb 1-1: config 0 descriptor?? [ 329.433895][ T8468] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 329.466482][ T8468] usb 1-1: MIDIStreaming interface descriptor not found [ 329.592646][ T8468] usb 1-1: USB disconnect, device number 10 [ 329.961864][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.166058][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 330.166076][ T29] audit: type=1326 audit(1740727115.660:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 330.245168][ T29] audit: type=1326 audit(1740727115.700:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 330.375319][ T29] audit: type=1326 audit(1740727115.700:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdd698bad0 code=0x7ffc0000 [ 330.498293][ T29] audit: type=1326 audit(1740727115.700:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 330.567280][ T5906] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 330.581477][ T29] audit: type=1326 audit(1740727115.700:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 330.629833][ T29] audit: type=1326 audit(1740727115.700:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 330.688737][ T29] audit: type=1326 audit(1740727115.710:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 330.747470][ T29] audit: type=1326 audit(1740727115.710:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 330.798482][ T29] audit: type=1326 audit(1740727115.710:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 330.827723][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 330.841897][ T5906] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 330.851413][ T29] audit: type=1326 audit(1740727115.710:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.0.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd698d169 code=0x7ffc0000 [ 330.858553][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.991473][ T5906] usb 2-1: Product: syz [ 330.995728][ T5906] usb 2-1: Manufacturer: syz [ 331.078900][ T5906] usb 2-1: SerialNumber: syz [ 331.105843][ T5906] usb 2-1: config 0 descriptor?? [ 331.119370][ T5906] usb 2-1: active config #0 != 1 ?? [ 331.328436][T11629] net_ratelimit: 82 callbacks suppressed [ 331.328458][T11629] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 331.676220][T11644] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 331.689976][T11644] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 331.917441][ T5906] usb 2-1: USB disconnect, device number 35 [ 331.996484][T11658] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1102'. [ 332.969267][T11661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.979338][ T9833] cxacru 8-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 333.368112][ T8] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 333.568131][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.602380][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.687518][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.696656][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.765788][ T8] usb 5-1: Product: syz [ 333.818931][ T8] usb 5-1: Manufacturer: syz [ 333.823595][ T8] usb 5-1: SerialNumber: syz [ 333.837540][T11705] x_tables: duplicate underflow at hook 1 [ 334.129424][ T8] usb 5-1: 0:2 : does not exist [ 334.152950][ T8] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 334.207517][ T5883] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 334.215653][ T8] usb 5-1: USB disconnect, device number 29 [ 334.239340][T11719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.269093][T11719] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 334.397254][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 334.405913][ T5883] usb 3-1: config 8 has an invalid interface number: 207 but max is 0 [ 334.427123][ T5883] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 334.458113][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.473573][ T977] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 334.477028][ T5883] usb 3-1: config 8 has no interface number 0 [ 334.527000][ T5883] usb 3-1: config 8 interface 207 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 334.545506][ T5883] usb 3-1: config 8 interface 207 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 334.559751][ T5883] usb 3-1: config 8 interface 207 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.584278][ T5883] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 334.602582][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.617613][ T977] usb 8-1: device descriptor read/64, error -71 [ 334.619235][ T5883] usb 3-1: Product: syz [ 334.634068][ T5883] usb 3-1: Manufacturer: syz [ 334.641520][ T5883] usb 3-1: SerialNumber: syz [ 334.661570][T11708] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 334.848606][ T5890] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 334.877350][ T977] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 334.909209][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.948142][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.027555][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 335.032889][ T977] usb 8-1: device descriptor read/64, error -71 [ 335.050143][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.089001][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.120556][ T5890] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 335.139573][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.159750][ T977] usb usb8-port1: attempt power cycle [ 335.190037][ T5890] usb 2-1: config 0 descriptor?? [ 335.205151][ T5890] hub 2-1:0.0: USB hub found [ 335.405858][ T5890] hub 2-1:0.0: 11 ports detected [ 335.414660][ T5890] hub 2-1:0.0: insufficient power available to use all downstream ports [ 335.517446][ T977] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 335.568662][ T977] usb 8-1: device descriptor read/8, error -71 [ 335.607496][ T8468] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 335.687180][ T5890] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 335.713057][ T5890] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 335.743701][T11765] xt_CT: No such helper "pptp" [ 335.745388][ T5890] usbhid 2-1:0.0: can't add hid device: -71 [ 335.763257][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 335.801098][ T8468] usb 5-1: Using ep0 maxpacket: 16 [ 335.809753][ T5890] usb 2-1: USB disconnect, device number 36 [ 335.822761][ T8468] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 335.831224][ T977] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 335.854191][ T8468] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.867908][ T977] usb 8-1: device descriptor read/8, error -71 [ 335.902515][ T8468] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 335.920617][ T8468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.933931][ T8468] usb 5-1: Product: syz [ 335.942884][ T8468] usb 5-1: Manufacturer: syz [ 335.954875][ T8468] usb 5-1: SerialNumber: syz [ 335.965944][ T8468] usb 5-1: config 0 descriptor?? [ 335.974898][ T8468] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 335.984468][ T977] usb usb8-port1: unable to enumerate USB device [ 335.990802][T11773] x_tables: duplicate underflow at hook 1 [ 336.172813][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.411821][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.613548][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.703613][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 336.854525][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.877430][ T8468] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 336.894807][ T8468] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 337.047014][ T5883] usb 3-1: USB disconnect, device number 13 [ 337.230946][T11804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1136'. [ 337.287285][T11804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1136'. [ 337.372014][T11804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1136'. [ 337.410338][ T12] bridge_slave_1: left allmulticast mode [ 337.447906][T11804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1136'. [ 337.479099][ T12] bridge_slave_1: left promiscuous mode [ 337.484891][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.584756][ T12] bridge_slave_0: left allmulticast mode [ 337.613407][ T8468] usb 5-1: USB disconnect, device number 30 [ 337.620055][ T12] bridge_slave_0: left promiscuous mode [ 337.625895][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.705789][T11821] ip6t_REJECT: ECHOREPLY is not supported [ 337.830976][T11826] x_tables: duplicate underflow at hook 1 [ 338.454147][ T8449] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 338.517635][ T8468] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 338.589019][T11848] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1148'. [ 338.608614][T11848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1148'. [ 338.626891][T11848] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1148'. [ 338.646310][T11848] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1148'. [ 338.687932][ T8468] usb 8-1: Using ep0 maxpacket: 16 [ 338.703467][ T8468] usb 8-1: config 0 descriptor has 1 excess byte, ignoring [ 338.712556][ T8449] usb 3-1: Using ep0 maxpacket: 16 [ 338.725434][ T8468] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 338.769786][ T8468] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 338.802463][ T8468] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 338.822819][ T8468] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 338.849466][ T8468] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 338.866272][ T8468] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.907798][ T8449] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 338.910119][ T8468] usb 8-1: Product: syz [ 338.929582][ T8449] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 338.960317][ T8449] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.965448][ T8468] usb 8-1: Manufacturer: syz [ 338.987255][ T8468] usb 8-1: SerialNumber: syz [ 339.016978][ T8468] usb 8-1: config 0 descriptor?? [ 339.048668][T11844] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 339.068578][T11844] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 339.207485][ T8449] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.216591][ T8449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.318670][T11844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.338169][T11844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.492428][T11855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.556179][T11855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.663968][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.697195][ T8449] usb 3-1: Product: syz [ 339.701421][ T8449] usb 3-1: Manufacturer: syz [ 339.718020][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.740269][ T12] bond0 (unregistering): Released all slaves [ 339.775931][T11833] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.784976][T11833] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.838669][ T8449] usb 3-1: SerialNumber: syz [ 339.851337][T11833] bridge0: entered allmulticast mode [ 340.079718][T11841] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.086987][T11841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.168748][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 340.298614][ T8468] mcba_usb 8-1:0.0: Microchip CAN BUS Analyzer connected [ 340.305761][ C1] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 340.305843][ C1] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 340.375915][ T8449] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 340.549518][ T8468] usb 8-1: USB disconnect, device number 27 [ 340.556641][ T8468] mcba_usb 8-1:0.0 can0: device disconnected [ 341.451561][ T8449] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 341.841654][T11878] x_tables: duplicate underflow at hook 1 [ 341.954063][ T8449] usb 3-1: USB disconnect, device number 14 [ 342.518717][T11888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.317837][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.447298][ T12] hsr_slave_0: left promiscuous mode [ 343.459407][ T5890] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 343.662223][ T12] hsr_slave_1: left promiscuous mode [ 343.721678][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.733674][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.913694][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.966649][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.179851][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.197786][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.231421][T11908] netlink: 'syz.2.1161': attribute type 10 has an invalid length. [ 344.242673][T11908] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1161'. [ 344.281283][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.318242][ T5890] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.857300][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.867115][ C0] sched: DL replenish lagged too much [ 459.787140][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 459.794855][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8466/1:b..l [ 459.803701][ C1] rcu: (detected by 1, t=10502 jiffies, g=61005, q=801 ncpus=2) [ 459.811547][ C1] task:syz-executor state:R running task stack:20112 pid:8466 tgid:8466 ppid:8461 task_flags:0x400140 flags:0x00000000 [ 459.827053][ C1] Call Trace: [ 459.831172][ C1] [ 459.834267][ C1] __schedule+0x190e/0x4c90 [ 459.839017][ C1] ? __pfx___schedule+0x10/0x10 [ 459.844366][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 459.850400][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 459.855935][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 459.861184][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 459.866969][ C1] irqentry_exit+0x5e/0x90 [ 459.871424][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 459.877535][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 459.882859][ C1] Code: 2b 00 74 08 4c 89 f7 e8 3a 45 8c 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 459.902586][ C1] RSP: 0018:ffffc900033c7460 EFLAGS: 00000206 [ 459.908787][ C1] RAX: 0000000000000001 RBX: 1ffff92000678e98 RCX: ffff8880304a64e8 [ 459.916963][ C1] RDX: dffffc0000000000 RSI: ffffffff8c2ab700 RDI: ffffffff8c80ef80 [ 459.925140][ C1] RBP: ffffc900033c75a8 R08: ffffffff94549847 R09: 1ffffffff28a9308 [ 459.933163][ C1] R10: dffffc0000000000 R11: fffffbfff28a9309 R12: 1ffff92000678e94 [ 459.941466][ C1] R13: dffffc0000000000 R14: ffffc900033c74c0 R15: 0000000000000246 [ 459.950119][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 459.955238][ C1] ? __slab_free+0x290/0x380 [ 459.959912][ C1] ? __pfx_lock_release+0x10/0x10 [ 459.964976][ C1] ? __kmalloc_node_noprof+0x290/0x4d0 [ 459.970480][ C1] ? alloc_fdtable+0xdf/0x2a0 [ 459.975204][ C1] ? copy_files+0xc8/0x120 [ 459.980054][ C1] ? copy_process+0x1672/0x3cf0 [ 459.984952][ C1] ? page_ext_get+0x20/0x2a0 [ 459.989574][ C1] page_ext_get+0x3d/0x2a0 [ 459.994112][ C1] ? page_ext_get+0x20/0x2a0 [ 459.998827][ C1] __page_table_check_zero+0xb1/0x350 [ 460.004238][ C1] free_frozen_pages+0xe21/0x10e0 [ 460.009504][ C1] __put_partials+0x160/0x1c0 [ 460.014933][ C1] ? put_cpu_partial+0x14c/0x250 [ 460.019994][ C1] put_cpu_partial+0x17c/0x250 [ 460.024799][ C1] ? put_cpu_partial+0x70/0x250 [ 460.029801][ C1] __slab_free+0x290/0x380 [ 460.034260][ C1] ? __phys_addr+0xba/0x170 [ 460.039524][ C1] qlist_free_all+0x9a/0x140 [ 460.044518][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 460.050115][ C1] __kasan_kmalloc+0x23/0xb0 [ 460.054837][ C1] __kmalloc_node_noprof+0x290/0x4d0 [ 460.060160][ C1] ? __kvmalloc_node_noprof+0x72/0x190 [ 460.065659][ C1] __kvmalloc_node_noprof+0x72/0x190 [ 460.070979][ C1] alloc_fdtable+0xdf/0x2a0 [ 460.075564][ C1] ? dup_fd+0x85f/0xb40 [ 460.079762][ C1] dup_fd+0x869/0xb40 [ 460.083876][ C1] copy_files+0xc8/0x120 [ 460.088253][ C1] copy_process+0x1672/0x3cf0 [ 460.092974][ C1] ? copy_process+0x9fa/0x3cf0 [ 460.097785][ C1] ? __pfx_copy_process+0x10/0x10 [ 460.102960][ C1] kernel_clone+0x226/0x8e0 [ 460.107515][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 460.112681][ C1] ? __pfx_reacquire_held_locks+0x10/0x10 [ 460.118994][ C1] __x64_sys_clone+0x267/0x2e0 [ 460.123930][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 460.129295][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 460.135666][ C1] ? exc_page_fault+0x590/0x8b0 [ 460.140559][ C1] ? do_syscall_64+0xb6/0x230 [ 460.145822][ C1] do_syscall_64+0xf3/0x230 [ 460.150815][ C1] ? clear_bhb_loop+0x35/0x90 [ 460.155654][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.161871][ C1] RIP: 0033:0x7f95571839d3 [ 460.166420][ C1] RSP: 002b:00007f95574cfca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 460.175313][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f95571839d3 [ 460.183979][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 460.192065][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 460.200804][ C1] R10: 0000555562ee17d0 R11: 0000000000000246 R12: 0000000000000000 [ 460.210326][ C1] R13: 00000000000927c0 R14: 0000000000053e6e R15: 00007f95574cfe40 [ 460.218570][ C1] [ 460.221902][ C1] rcu: rcu_preempt kthread starved for 9916 jiffies! g61005 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 460.233491][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 460.243853][ C1] rcu: RCU grace-period kthread stack dump: [ 460.249865][ C1] task:rcu_preempt state:R running task stack:26032 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 460.263750][ C1] Call Trace: [ 460.267424][ C1] [ 460.270467][ C1] __schedule+0x190e/0x4c90 [ 460.275107][ C1] ? __pfx___schedule+0x10/0x10 [ 460.280100][ C1] ? __pfx_lock_release+0x10/0x10 [ 460.285451][ C1] ? __pfx___mod_timer+0x10/0x10 [ 460.290527][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 460.297633][ C1] ? schedule+0x90/0x320 [ 460.302003][ C1] schedule+0x14b/0x320 [ 460.306379][ C1] schedule_timeout+0x15a/0x290 [ 460.311267][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 460.317644][ C1] ? __pfx_process_timeout+0x10/0x10 [ 460.323331][ C1] ? prepare_to_swait_event+0x330/0x350 [ 460.329018][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 460.334140][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 460.339660][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 460.346217][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 460.351538][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 460.357477][ C1] ? finish_swait+0xd4/0x1e0 [ 460.362112][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 460.367347][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 460.372010][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 460.377233][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 460.383804][ C1] ? __kthread_parkme+0x169/0x1d0 [ 460.388949][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 460.394205][ C1] kthread+0x7a9/0x920 [ 460.398591][ C1] ? __pfx_kthread+0x10/0x10 [ 460.403405][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 460.408651][ C1] ? __pfx_kthread+0x10/0x10 [ 460.413285][ C1] ? __pfx_kthread+0x10/0x10 [ 460.417921][ C1] ? __pfx_kthread+0x10/0x10 [ 460.422559][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.427984][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 460.433278][ C1] ? __pfx_kthread+0x10/0x10 [ 460.438064][ C1] ret_from_fork+0x4b/0x80 [ 460.442543][ C1] ? __pfx_kthread+0x10/0x10 [ 460.447171][ C1] ret_from_fork_asm+0x1a/0x30 [ 460.451975][ C1] [ 460.455013][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 460.461358][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 460.471713][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 460.482461][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 460.487791][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d c5 00 82 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 460.507627][ C1] RSP: 0000:ffffc900001a7d08 EFLAGS: 00000246 [ 460.513728][ C1] RAX: ffff88801da98000 RBX: ffff8881442c1864 RCX: 000000000011cca9 [ 460.522121][ C1] RDX: 0000000000000001 RSI: ffff8881442c1800 RDI: ffff8881442c1864 [ 460.530140][ C1] RBP: 000000000003aab8 R08: ffff8880b873799b R09: 1ffff110170e6f33 [ 460.538415][ C1] R10: dffffc0000000000 R11: ffffffff8c088010 R12: ffff8881482fa800 [ 460.546544][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f337b20 [ 460.554729][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 460.564044][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.571001][ C1] CR2: 00007fb4e3cc9c39 CR3: 0000000033a38000 CR4: 00000000003526f0 [ 460.579018][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 460.587083][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 460.595229][ C1] Call Trace: [ 460.598617][ C1] [ 460.601489][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 460.608196][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 460.613972][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 460.619935][ C1] ? timekeeping_advance+0x5e8/0x770 [ 460.626062][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 460.632617][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 460.638132][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 460.643817][ C1] ? update_process_times+0x242/0x2f0 [ 460.649250][ C1] ? tick_nohz_handler+0x37c/0x500 [ 460.654486][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 460.660014][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 460.665520][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 460.671282][ C1] ? read_tsc+0x9/0x20 [ 460.675550][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 460.681654][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 460.686858][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 460.693147][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 460.698984][ C1] [ 460.701936][ C1] [ 460.704902][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 460.711365][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 460.716784][ C1] ? acpi_safe_halt+0x21/0x30 [ 460.722124][ C1] acpi_idle_enter+0xe4/0x140 [ 460.726977][ C1] cpuidle_enter_state+0x109/0x470 [ 460.732214][ C1] ? __pfx_menu_select+0x10/0x10 [ 460.737304][ C1] cpuidle_enter+0x5d/0xa0 [ 460.741882][ C1] do_idle+0x372/0x5c0 [ 460.746614][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 460.753301][ C1] ? __pfx_do_idle+0x10/0x10 [ 460.758039][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 460.763633][ C1] cpu_startup_entry+0x42/0x60 [ 460.769509][ C1] start_secondary+0x102/0x110 [ 460.774624][ C1] common_startup_64+0x13e/0x147 [ 460.779701][ C1] [ 461.199777][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.211119][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.719781][ T5890] usb 1-1: config 0 descriptor?? [ 463.470096][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.476918][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.517295][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 463.523379][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 463.525700][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 465.733869][ T12] veth1_macvtap: left promiscuous mode [ 466.017303][ T12] veth0_macvtap: left promiscuous mode [ 466.022980][ T12] veth1_vlan: left promiscuous mode [ 466.269504][ T12] veth0_vlan: left promiscuous mode [ 468.607361][ T5890] usbhid 1-1:0.0: can't add hid device: -71 [ 468.744387][ T5890] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 SYZFAIL: failed to send rpc fd=3 want=752 sent=0 n=-1 (errno 32: Broken pipe) [ 468.909554][ T5890] usb 1-1: USB disconnect, device number 11