last executing test programs: 11m3.454243158s ago: executing program 32 (id=69): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000800004"], 0x94}}, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44801}, 0x10) 5m35.869506983s ago: executing program 33 (id=1269): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x3, 0x0, 0x8000005, 0x3, 0x5, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0xfe, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x70000000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0xfffffffe, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x9, 0x800, 0xffffffd6, 0xfffffffc, 0x0, 0x1, 0x0, 0xffffffff, 0x2ec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x80, 0x0, 0x3, 0x0, 0x9, 0x800000, 0x7], [0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x80, 0x520, 0xd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100, 0xff, 0x80000001, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x5, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffeffd, 0x3, 0x0, 0x0, 0x3, 0x4, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0x1, 0x80000001, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b24, 0x3fffffd, 0x2, 0x5, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x3]}, 0x45c) 5m31.53266656s ago: executing program 34 (id=1282): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'ip6_vti0\x00'}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000000)=0x9c) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x10d) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) syz_usb_disconnect(0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000000c0)={[{0x3, 0x8da, 0x9, 0xfb, 0x9, 0x5, 0x4, 0x81, 0x8, 0x9, 0x77, 0x0, 0x316}, {0x81, 0x3, 0x10, 0xfe, 0x2, 0x7, 0x3, 0x9e, 0x7, 0x3b, 0xa6, 0xfe, 0x10000000}, {0x1c38, 0x9, 0x80, 0x5, 0x0, 0x6, 0x9, 0x6, 0x3, 0x8, 0x4, 0x0, 0x68d}], 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 3m33.506202975s ago: executing program 35 (id=1727): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x6}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) listen(r3, 0x0) write(r0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$evdev(0x0, 0x6, 0x34a03) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x0) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB="2829bf8df10b8c370cc2b889f02407921847b1b38625d05d0a7c2c0fe0fb98c50fdac5d4d021945324ffbb9546d13397a92eaed24bee4ff7d68917f0f47e895357f1548686a59e5736ae21b35fb9df29b519a10910f8a60a60182905e2825174c95f7e00b9be40f1d0378acce6b3e60705511da3d317533c27fba333daa9a9bda314a2b6882270da28eb0affb17175b089928400ac9fc834bfc8db108126c94be262807b803e5c54adf70d4479c1bcd06e806c8604a97b791e00c02d374b100a", @ANYRES64=r5], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x4c2a00, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc1, 0x0) write$binfmt_aout(r8, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfe, "0963cb49785d00"}) syz_open_pts(r8, 0x80) r9 = dup3(r4, r7, 0x80000) ioctl$TIOCGICOUNT(r9, 0x545d, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000180)={0x1}) 3m1.098336975s ago: executing program 36 (id=1847): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000000c0)={[&(0x7f0000000140)='\xd3\x05\xdb\"H\xd0\xb3e\xf5\x8f\x89\x1a\x92.\f\x88\\o\xa30\xf3\x00\x06x\xd0\xea3P\xc8\v\xc3\xd5mQ\xcf\xda\x9b^\xc1\x14\x9a\xed&}\xf4Y\xa8\x96u:\x008\xd6Y\x1b\xf3\xb7\'\x90|v\\\x8e4\x11\xf3\xd0\x1e\xe5\xdd\xf5Z\x1b\xe5\xd0mH\x9cSuLV\xcf\x8cG\xff\xe9U\xcb9\xef\x99\xa6\xcbQ1=\x93Q\xe0\xd4\xb1nJ\xcf\xff\x8fW\a,2\xd2\xcf9RA{\xd5\x9d\x99\x88g\xcd\x94\xc3O5}\x16D\x13\xd1g\xa5y\xcc\f,\xcbdd7t\xb2<\x9d\x97\xe6EW\xf9\x89\xaa\x8f\xc3\x9d\xe2Y\xc8']}, 0x0, 0x0) 2m56.951680804s ago: executing program 37 (id=1860): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0x98, 0xab, 0x10, 0x5fc9, 0x63, 0x9352, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0x2e, 0x30}}]}}]}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000001c0)={0x5, 0x0, [{0x2, 0x87, 0x1, 0x6, 0x4, 0x3, 0x81}, {0xb, 0x6, 0x6, 0x0, 0x9, 0x6, 0x1}, {0x4, 0x9, 0x1, 0x6, 0x5, 0x3}, {0x80000008, 0xf1f, 0x3, 0x4, 0x6, 0x2, 0x56}, {0x80000019, 0x400, 0x5, 0x6904, 0xffffffff, 0xc, 0x7}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@setneightbl={0xd0, 0x43, 0x8, 0x70bd25, 0x25dfdbfb, {0xf5693364ec34c8f8}, [@NDTA_THRESH1={0x8, 0x2, 0x8}, @NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_THRESH1={0x8, 0x2, 0x8001}, @NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_THRESH3={0x8, 0x4, 0x3ff}, @NDTA_THRESH2={0x8, 0x3, 0x6}, @NDTA_PARMS={0x38, 0x6, 0x0, 0x1, [@NDTPA_APP_PROBES={0x8}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x80000001}, @NDTPA_GC_STALETIME={0xc, 0x6, 0x100000001}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x400}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x8000}]}, @NDTA_THRESH2={0x8, 0x3, 0x80}, @NDTA_PARMS={0x44, 0x6, 0x0, 0x1, [@NDTPA_RETRANS_TIME={0xc, 0x5, 0x51986f66}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x1}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x6}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x2a400000000000}, @NDTPA_PROXY_QLEN={0x8}, @NDTPA_GC_STALETIME={0xc, 0x6, 0x7fffffffffffffff}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0x98, 0xab, 0x10, 0x5fc9, 0x63, 0x9352, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0x2e, 0x30}}]}}]}}, 0x0) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000001c0)={0x5, 0x0, [{0x2, 0x87, 0x1, 0x6, 0x4, 0x3, 0x81}, {0xb, 0x6, 0x6, 0x0, 0x9, 0x6, 0x1}, {0x4, 0x9, 0x1, 0x6, 0x5, 0x3}, {0x80000008, 0xf1f, 0x3, 0x4, 0x6, 0x2, 0x56}, {0x80000019, 0x400, 0x5, 0x6904, 0xffffffff, 0xc, 0x7}]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@setneightbl={0xd0, 0x43, 0x8, 0x70bd25, 0x25dfdbfb, {0xf5693364ec34c8f8}, [@NDTA_THRESH1={0x8, 0x2, 0x8}, @NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_THRESH1={0x8, 0x2, 0x8001}, @NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_THRESH3={0x8, 0x4, 0x3ff}, @NDTA_THRESH2={0x8, 0x3, 0x6}, @NDTA_PARMS={0x38, 0x6, 0x0, 0x1, [@NDTPA_APP_PROBES={0x8}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x80000001}, @NDTPA_GC_STALETIME={0xc, 0x6, 0x100000001}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x400}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x8000}]}, @NDTA_THRESH2={0x8, 0x3, 0x80}, @NDTA_PARMS={0x44, 0x6, 0x0, 0x1, [@NDTPA_RETRANS_TIME={0xc, 0x5, 0x51986f66}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x1}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x6}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x2a400000000000}, @NDTPA_PROXY_QLEN={0x8}, @NDTPA_GC_STALETIME={0xc, 0x6, 0x7fffffffffffffff}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) 2m43.465088447s ago: executing program 38 (id=1891): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0xde, 0x6f, 0xb6, 0x8, 0x4c8, 0x720, 0xb8b6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0xd0, 0x72, [{{0x9, 0x4, 0x9b, 0xfb, 0x0, 0xfc, 0xa2, 0xca, 0x99}}, {{0x9, 0x4, 0xf5, 0x6, 0x0, 0xac, 0xef, 0x41, 0xc}}]}}]}}, 0x0) (async) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x58, 0x596, 0x506, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6b, 0x40, 0x13, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0x906}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x7, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x6, 0x1, 0xff}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x3, 0x4, 0x1, 0x40, 0xa8}, 0x1e, &(0x7f0000000080)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x87, 0xff, 0x9, 0x4f, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x1, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x8, 0x80}]}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x32, &(0x7f0000000100)=@string={0x32, 0x3, "3402ead79a68169f4991698c0b1bf9da1fa2abcf98886e3daf59795d130ecf8e8fe83e6169f411e28907d1a35a17f486"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40d}}, {0xf4, &(0x7f0000000180)=@string={0xf4, 0x3, "b2ec215c41177e13c32699ac02668d6c8ef7737f91d603dea60619eda2c02ff555b0ee76be523600a425247f59ae3457604f7633c0318fd9d0f82a1ad3d70feb0dda73bbe9401101442606a6b5e89e951580a9ee8f839c3aefbe6e1b079731c71839e9f497c8d3fda856b2d334018b893c0a405ff75d997e88d8917bc224d0e063a550533186243c63c54d48ee28d03165426d2305eaa7975d9bc1d087d758a0c243f92f48c441145ed7847093f471898dc63b28c2853e4fa688b10f53d3a3ff33ea6892c290a57be4f2fe2ab32917078a48eb23ee00877c451d27ac6156bffd7914ac81010bb2df773a534e01ff31bc9f2c"}}]}) 2m37.628389004s ago: executing program 39 (id=1898): ioprio_set$pid(0x1, 0x0, 0x0) (async) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x600007, @mcast1, 0xd}, 0x1c) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000005902"]) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r4, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmsg$inet6(r4, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xcfd}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)='^', 0x1}], 0x1}, 0x4000000) r6 = io_uring_setup(0x63b7, &(0x7f0000000140)={0x0, 0xf999, 0x8, 0x1, 0x198}) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, &(0x7f00000002c0)={&(0x7f0000000080)={&(0x7f00000001c0)="e2", 0x1, 0x1, 0x6, 0x7f}}, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000340)={r7, 0x5}, 0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000240)={0x0, 0xff95, &(0x7f00000007c0)=[{&(0x7f0000000ac0)="06", 0x1}], 0x1}, 0x240400c1) (async) recvmsg$unix(r8, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/80, 0x50}], 0x1}, 0x21) socket(0xf, 0x2, 0x4) (async) pselect6(0x40, &(0x7f00000000c0)={0x5, 0x7f, 0x6, 0x8, 0x400, 0x0, 0x400a20e, 0x6}, 0x0, &(0x7f0000000300)={0x200000008, 0x3, 0xb, 0x80, 0x7fa1, 0x3, 0xa, 0xce}, &(0x7f0000000340)={0x0, 0x3938700}, 0x0) 2m17.306228185s ago: executing program 40 (id=1912): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004c000060000000000021907800000000ffffffff441c24c3ac1e000100000004ac141421000001ffac14140e00007fff050090780a0101024a0000000000000000000042ac1e0001ac141401071300e000000200000000ffffffffac14140c00"], 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x24}, 0xc644}, @in6={0xa, 0x4e20, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffa}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf9e}], 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2m8.546419648s ago: executing program 41 (id=1959): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6cd07004693a1a6f6164206563727970746673"], 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x4) fchdir(r5) r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) r7 = dup(r1) syz_io_uring_setup(0x2f59, &(0x7f0000000380)={0x0, 0x5079, 0x1, 0x3, 0x288, 0x0, r7}, &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'netpci0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="51b27cff7f0000c31a8e3734d4b61372dda6cbee9b13835e84af6f1b8261b5e2c3cda4d89485f995598118181b58cb97f759c2a3d305a59e870044914e38d41ef95289ff6c27c8522fde73903ba963ef519d79eb569074560c3147487ed27760b9eb87195b26827dcf50d3c0579886d5f0807927daa14fee7206b57c9d82c7c5b7fd62537e011dd2ecad47ddad33d5e2da2e9ec3e7bf4e680ec36e0cbd613236ee38e8", @ANYRES16=r11, @ANYBLOB="0100000000000000000067000000080001003c00000008", @ANYRES32, @ANYBLOB="0c00080000000000000000000800c300741300000800c40001000200"], 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)) 1m31.371325704s ago: executing program 1 (id=2114): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x0, 0x100000000000000}, {}, 0x80000000, 0x0, 0x2, 0x4, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd2b, 0xa}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x2809}], 0x1, 0x0, 0x0, 0x9c) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x7, 0x4, 0x5, 0x4, 0x9, "a5a214b0cd5bd3e1110df2c82a0bb38f8f3ef4", 0xa2fa, 0x53}) 1m30.38364613s ago: executing program 1 (id=2118): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000200)=0xff) shutdown(0xffffffffffffffff, 0x1) 1m30.366855814s ago: executing program 3 (id=2119): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) r3 = syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xd95f, 0x10100, 0x0, 0x242, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x353, 0x0, 0x0, 0x0, 0x0) signalfd(r2, &(0x7f0000002340), 0x8) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x2120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) userfaultfd(0x801) r10 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r10, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00031e0000000403"], &(0x7f0000000380)=ANY=[@ANYBLOB="000f82000000050f8200030710021a7602000a1003020b0001d8f4ff6c1003288baa2af1283279f2102f96fe5bd2a102e2106862845a36e93f82bb1c3533d684a7426a14b40801a084b31760a1a700334fc1a4043dcb04a0cb83ba6e0f5a194d6e88e6f0b9fb1030d1cbd8cf1d920077e88ae2e172ccf1ee1947201fecff11f55189b60a5db223b5a12598ad3a2727411ca81ef221588877d53ee9efccbab73560665e3560a983d436d0eea08077b362705495d2834f848660e2a19bc35dcd749f096bd665ea913d4be3bd21422265444e879224ece756fcde0e717bed305987320a62ae1c06e9dd702c16eb8d4b54200daaa1c95da457c8bb5b3cdc1c55aeec13a2ead3acfb7dea89a1fc4595f654df07b719d31c8844446d5085a3589f038051b179e56b0664af19a30c5b42ad47363411be14245e13c630bf10083284f5c8e826ec2a345c6bd5e99ae31ac6376190c7e38f9c"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) close(r7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 1m30.057545477s ago: executing program 1 (id=2121): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000d00)={0x44, &(0x7f00000004c0)={0x20, 0x16, 0x28, "cc5914df6188838c2d1b706ac260e9476090883a8437c96696a485c49d9cc6685c4d16655c1eea7a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x6c01f575c5ef484f, 0x16, 0x4, "ee8fb77a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = accept4(r0, 0x0, 0x0, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) syz_io_uring_setup(0xcac, &(0x7f00000002c0)={0x0, 0xb5fe, 0x1, 0x6, 0x1aa}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000000110"], 0x28}, 0x1, 0x0, 0x0, 0x40c44}, 0x40088c4) time(&(0x7f0000000280)) (async) syz_usb_control_io$hid(r1, &(0x7f0000000680)={0x24, &(0x7f0000000500)={0x40, 0x22, 0x98, {0x98, 0x4, "44f92fe3c94cf58df11702daab11db3727a6f69eb18494f7f1aee44a2117adbc6a4de6ce449ed240bd4f0ff27cb573c2242b1de7aeea2bb1e008d1d34e65736aacf1c6269fe9195ceb0eb3e4ad3cef9ca7e0f676a41654704e59cf7b72f2f1de72ed429c9f29c2ea9fac7a91b7c8a4db648bd113d0e2dbf46e02bfe7bce0b96a60f739805fdc524bc05e74496180faf2b384ea2ae0ad"}}, &(0x7f00000005c0)={0x0, 0x3, 0x82, @string={0x82, 0x3, "006a1e50795ba7c60e75f67077a1e48c237572086ddccc57475085ea200425eea32d362d4e1b22410d4a133e66bd4b84a74c327ee65405c688a4ba416b5fcb7f0fb2fceb1b9d876cd5ff006538297d6277069e4dde92408a21daed008bdcad8a7420e4dace01c684af16b8b96dc47d22d1188fa86af05c24b6a7c11a1ee6a71e"}}, &(0x7f00000003c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0xb, "d3ca1834"}, @global=@item_012={0x0, 0x1, 0x8}, @global=@item_4={0x3, 0x1, 0x7, "f3836fa6"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x0, 0x0, 0xc}, @global=@item_012={0x1, 0x1, 0x3, 'e'}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0xab3}}}}, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)={0x20, 0xc, 0x38, "3351fe210c02614bf2f951567743e6805a1361667b6a3a68c985fa1ede057cc13586802071fe8b0f95a8f6483dadfffacd0d255bc17227db"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xe4}, &(0x7f0000000a00)={0x20, 0x1, 0xe9, "c8481695874d65f92e2bede866cf2444eca9ac1d2cf15298cf28ae5f63efd44f75e3e0b7c151af112ecdf4e13993cd65103ef87748068851381a472b721bc4b0f612eaa7e2f70c88979ed91353be7c6fbb99045365c14b28f10019c1cc714027701058f14ca4baba619652875a106f07800cd43c130809838dbee2a1d0893e1128978e8dd41ab685889ef3ea853efe403adc05f3743cead19a97096775d1ebe9927411f177b2c3eb771df3478b9de4f6595c5955b43026144a6490b9402c0c6801573ce26ef39baf0771e3302d7f33a1e37d08584cb854a978d4d1275b018f696f147aca1430a6e3c3"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0xd}}) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x30, 0x0, 0x0, 0x0, 0x23456}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000260009000100080080000000a7571a5efd237ef402000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) sendmmsg$sock(r2, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20048884) (async) recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x1}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) (async) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x10000) ioctl$USBDEVFS_RESETEP(r9, 0x80045503, &(0x7f0000000380)={0xd}) 1m28.324067177s ago: executing program 1 (id=2125): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m27.786264388s ago: executing program 1 (id=2127): syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) mmap(&(0x7f0000721000/0x2000)=nil, 0x2000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001280), 0x800, 0x0) mmap(&(0x7f0000823000/0x2000)=nil, 0x2000, 0x1, 0x10, r2, 0x45ed1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x40) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000012c0)=ANY=[], 0xe8) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) r6 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r7 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000380)={0x8, 0x0, 0x3, 0x0, 0x6}) 1m27.112690232s ago: executing program 3 (id=2129): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, 0x0) connect$inet(r0, &(0x7f0000000940)={0x2, 0x4e1f, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f00005a8000/0x1000)=nil, 0x1000, 0x13) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfffffffc, {0x3}, {0x7}, @raw32={[0x2, 0x0, 0x800]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfc}, {}, @control={0x7, 0x8, 0x3}}, {0x6, 0x3, 0x9, 0x3, @tick=0x2, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0xd0, 0x5, 0xb, @tick=0x80000001, {0x3, 0x9}, {0x2, 0x2}, @note={0xf9, 0x7, 0xb, 0x3, 0x10}}], 0x70) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x51, 0xb, @buffer={0x0, 0x0, &(0x7f00000004c0)=""/211}, &(0x7f0000000240)="ae8d7acda0", 0x0, 0xfffffff9, 0x0, 0x8, 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}, @private=0xa010102, {[@rr={0x7, 0x0, 0x14, [@broadcast, @broadcast]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @timestamp={0x44, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, {[@fastopen={0x22, 0x0, "84ba7171a799e355cb"}, @md5sig={0x13, 0x0, "3978880ab23e9c069fc0fb878fc1aaed"}]}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000024c0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x9}]}]}]}]}, 0x30}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0xe8080) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000480)={[&(0x7f00000002c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000300)='*)^', &(0x7f0000000340)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000380)='nl80211\x00', &(0x7f00000003c0)='wlan0\x00', &(0x7f0000000400)='\\\x00', &(0x7f0000000440)='@-\x00']}, 0x100) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x6, 0x4, &(0x7f0000000100)="6f9907fed63710054363ddc14175add7e91b04400be91d9af2c0d34f89bc0332aa872774374848e4020305ab3e03cec3b54988b4506cdfc82db005bdee6e6cefd7f6c6afe7195913c5aa0059dba2ae0995a404b128cc5d111a9f7440b626bbfbb0eb6d441cae755c8dd772d8b50c53e619576ca432b3175c2f57765fe166b94b0a3a80ac09216cbabec481f7c65a62e45d42581e8ec7f9c5a0cdbc503ee7fe7f4723924a76d618cb7ba352abf79385cdbe"}) 1m27.01606544s ago: executing program 1 (id=2130): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5], 0x4c}}, 0x10004) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) read$alg(r6, &(0x7f0000000240)=""/4096, 0xfffffdef) socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_subtree(r6, &(0x7f0000000040), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) wait4(0x0, &(0x7f00000000c0), 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r9, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000013c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080045000028006500000f06907864010101ac1414aa00004e220feab0974fe73b58c17b99787b3f81a6d35dabb340eac030ce92b4d69c6f930a4b4dc03b1705fa778d1aeb6356b26db2a2b5d3d5142b1d24e8b46eb41bbdfcee36faf78d3917ab27811e98e83658878cf50f24c044872c39b974c8d54368919c5c6a55931b296fe7301d5d028939eabe51620aa690f3aff5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000001340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0xda18, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x24, 0x7d, 0x0, 0x1, [0x6, 0x8, 0x9, 0xce55, 0x7, 0x10001, 0x5, 0x5]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0801000000000000140003006e657464657673696d30000000d42033cc4339835804000014001680100001800c0009000000000000000000"], 0x50}}, 0x800) 1m26.258943637s ago: executing program 42 (id=2130): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5], 0x4c}}, 0x10004) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) read$alg(r6, &(0x7f0000000240)=""/4096, 0xfffffdef) socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_subtree(r6, &(0x7f0000000040), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) wait4(0x0, &(0x7f00000000c0), 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r9, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000013c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080045000028006500000f06907864010101ac1414aa00004e220feab0974fe73b58c17b99787b3f81a6d35dabb340eac030ce92b4d69c6f930a4b4dc03b1705fa778d1aeb6356b26db2a2b5d3d5142b1d24e8b46eb41bbdfcee36faf78d3917ab27811e98e83658878cf50f24c044872c39b974c8d54368919c5c6a55931b296fe7301d5d028939eabe51620aa690f3aff5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000001340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0xda18, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x24, 0x7d, 0x0, 0x1, [0x6, 0x8, 0x9, 0xce55, 0x7, 0x10001, 0x5, 0x5]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0801000000000000140003006e657464657673696d30000000d42033cc4339835804000014001680100001800c0009000000000000000000"], 0x50}}, 0x800) 1m26.213032196s ago: executing program 3 (id=2135): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000100)={{0x84, @empty, 0x4e20, 0x3, 'nq\x00', 0x17, 0x2, 0x2a}, {@empty=0x84, 0x4e23, 0x4, 0xc24, 0x0, 0xfffffffb}}, 0x44) 1m25.926929227s ago: executing program 3 (id=2137): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m25.592056083s ago: executing program 3 (id=2138): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x15, @remote, 'nr0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m25.241266411s ago: executing program 3 (id=2139): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) r3 = syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xd95f, 0x10100, 0x0, 0x242, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x353, 0x0, 0x0, 0x0, 0x0) signalfd(r2, &(0x7f0000002340), 0x8) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x2120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) userfaultfd(0x801) r10 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r10, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00031e0000000403"], &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) close(r7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 1m24.32890238s ago: executing program 43 (id=2139): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) r3 = syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xd95f, 0x10100, 0x0, 0x242, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x353, 0x0, 0x0, 0x0, 0x0) signalfd(r2, &(0x7f0000002340), 0x8) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x2120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) userfaultfd(0x801) r10 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r10, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00031e0000000403"], &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) close(r7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 1m14.285991595s ago: executing program 8 (id=2164): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000002031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 1m13.969776854s ago: executing program 8 (id=2165): r0 = socket$inet_smc(0x2b, 0x1, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r2) 1m13.660125539s ago: executing program 8 (id=2166): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2b, 0x4000000, {0x7, 0x0, 0x68, r1, 0x940, 0x22265}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000845}, 0x8004) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000080)=""/65, 0x41}], 0x2, 0x7, 0xfffffffa) 1m12.689637248s ago: executing program 8 (id=2168): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') read$FUSE(r0, &(0x7f00000025c0)={0x2020}, 0x2020) (async) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(morus1280-avx2)\x00'}, 0xffffffffffffff47) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000900)=ANY=[@ANYBLOB="120100042007b6b80000000109021b00020000d07209049bfb00fca2ca990904f50600acef410c000000000000"], 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) 1m9.503581846s ago: executing program 8 (id=2171): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8110}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff89}}}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x80, 0x2c, 0x20, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_POLICE={0x4c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x9, 0x401, 0x4, {0x9, 0x2, 0x4, 0x2, 0x5, 0x23f7}, {0x9, 0x2, 0xd, 0x222, 0x80, 0xf}, 0x5, 0x2, 0xfffffffb}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}]}}]}, 0xaf}, 0x1, 0x0, 0x0, 0x10}, 0x44000) 1m9.215737234s ago: executing program 8 (id=2172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x14, 0x10f}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000740)={'#! ', './file0'}, 0xb) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) gettid() sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0xc2, 0x5d}}]}}]}}, 0x0) 1m8.357892848s ago: executing program 6 (id=2173): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000004231ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 1m8.231359194s ago: executing program 6 (id=2174): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff95, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff95, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080), &(0x7f0000000340)) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) (async) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0x200, 0xfffe, 0x80000000, 0x8, 0x200000000000002f, 0x8001, 0x1, 0x2c, 0xffffffff, 0x2}) open_tree(r2, &(0x7f0000000080)='./file0\x00', 0x89901) (async) r6 = open_tree(r2, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r6, 0x0, r2, 0x0, 0x46) (async) move_mount(r6, 0x0, r2, 0x0, 0x46) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040)) 1m5.347473024s ago: executing program 5 (id=2179): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d00)=ANY=[@ANYBLOB="00020000160085020000000000000000ac1e0401000000000000000000000000e0000002000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003200000000000000000000000000000000000000000000000000006400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001414ac0000000000000000000000000000000000fdffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb"], 0x200}}, 0x0) 1m5.129992449s ago: executing program 5 (id=2180): pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x20, 0x0, 0x0, 0x0, 0x5, 0x800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1c}}}]}, 0x30}}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xda0) 1m4.950755393s ago: executing program 5 (id=2181): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xe206) 1m4.757933749s ago: executing program 5 (id=2183): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m4.630863137s ago: executing program 5 (id=2184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x8c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x54, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x108}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0x2000000}, 0x20050800) 1m4.372354944s ago: executing program 5 (id=2185): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x789], 0x1, 0x400}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m3.412299108s ago: executing program 44 (id=2185): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x789], 0x1, 0x400}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m3.322909286s ago: executing program 6 (id=2189): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) listen(r1, 0x5) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@hyper, 0x8}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0xa0000) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x2, 0x844) 1m3.147749666s ago: executing program 6 (id=2191): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="30001c00000100000000000000a70000010000001c00188008000340000004000800034000001000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20040001) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r1 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) r2 = syz_io_uring_setup(0xe3f, &(0x7f0000000140)={0x0, 0x2119, 0x11308, 0x3, 0x82}, &(0x7f0000000240), &(0x7f00000001c0)) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000002c0)={0x5b, 0xa, 0x1, "b50404cf3d04d7ad1ce6caa4751ea58fc78e9e2295ced1ed0d1ef2b41900", 0x97cef55}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/connector\x00') read$eventfd(r4, &(0x7f0000000180), 0x8) 1m2.90952922s ago: executing program 6 (id=2192): syz_genetlink_get_family_id$devlink(&(0x7f0000002680), 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000f300000055"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) poll(&(0x7f0000000040), 0x55, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000ffc900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00b94e3d500007000000e0ff00000018000500", [0x0, 0x2000000000001]}}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x14) r3 = syz_io_uring_setup(0x10c, &(0x7f0000001280)={0x0, 0xb28b, 0x800, 0xfffffffc, 0x20002, 0x0, r2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000000c0)=0x10001, 0x0, 0x4) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, 0xffffffffffffffff, 0x3, {0x3b4, 0x9}, 0x6}, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000700)={0xfffd, {{0x2, 0x4e22, @rand_addr=0x64010101}}, {{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x108) 1m1.939315816s ago: executing program 6 (id=2193): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4041800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101024a00000000000000000036de1e025a4f30ab0000ac1e0001ac141401071300e000000200000000ffffffffac14140c00da173dad41dbd33c21c6af8306b9a63ee237d70f95a930bcf24fbf86f85a4d7ab28de9e11db647a28a90cb0679b910"], 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040891}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x20, 0x23, 0x39, {0x39, 0x22, "bccc4142c8881fd4309c915e79a5856f6da0d3997e85bb51fd27809674a7fdb707b5ee9e82136ae1b16d55a0949b2d926415808ec11b29"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000900)={0x0, 0xd, 0x9b, "610e1f1fe115eb93278cca7e903e2514d5ef66d4a5ed673f81d557019235cfc05f97e7e6a01c1ca645c546cfed635f64a74f9deff4baedb35783053c441922a3a9c6d25ad0045da0c8bbbb36fadef978b236eb9c91200f4d6a995ce1208d59db7ac8f527af32a5f5da67cdac3913bf2b93655846652a923218a6848cc23312c39966818d9319d2d9084f6e8eef9d1aaf2965aae61ff50c78ed8bf7"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f00000009c0)={0x20, 0x0, 0x4f, {0x4d, "a122124b557fa8d9b585f054e25504b2d5fa4be31d592c53fd78a33e7e9e94855454f1d995f040982c6a7347e5f4357d6209013a9b6ce64e8ec8c75efd88059d65375e1a397a6f140efe2749b7"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x9}}) memfd_create(&(0x7f0000000c40)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\x01\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\x9c\xfaZ\xfeR\xbb\xea5F\x00G\xe8\xc6\xb9\x05\x00\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\'\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac \xc2\xe8\xc1\x1b\x17\xb5\x95\xb2\xdb\xe0+\x0e\xc0\x8d\xd8\xb5\xb4\xea\x90\x06\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|\xf0\xf7\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xff`\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00ct\x00\xe8\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00\x8cJ=\xfd\xed\xcd\xfb\xab\x19\x88Y&[\xfaS\x9a\x80\x85\xb5\xa7\xf6\xef}\x81G\x15\x93\xfd\x02\xab\xaf\xe7\xe8\xcfz\x80\xf7\xf9\xe0\xd6\x98\xbf]\t7nPV\xe5\xe7LF\xc4PM\'mp.\x8a\xc7', 0x4) r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 54.09795297s ago: executing program 45 (id=2172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x14, 0x10f}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000740)={'#! ', './file0'}, 0xb) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) gettid() sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0xc2, 0x5d}}]}}]}}, 0x0) 46.578900123s ago: executing program 46 (id=2193): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4041800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101024a00000000000000000036de1e025a4f30ab0000ac1e0001ac141401071300e000000200000000ffffffffac14140c00da173dad41dbd33c21c6af8306b9a63ee237d70f95a930bcf24fbf86f85a4d7ab28de9e11db647a28a90cb0679b910"], 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040891}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x20, 0x23, 0x39, {0x39, 0x22, "bccc4142c8881fd4309c915e79a5856f6da0d3997e85bb51fd27809674a7fdb707b5ee9e82136ae1b16d55a0949b2d926415808ec11b29"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000900)={0x0, 0xd, 0x9b, "610e1f1fe115eb93278cca7e903e2514d5ef66d4a5ed673f81d557019235cfc05f97e7e6a01c1ca645c546cfed635f64a74f9deff4baedb35783053c441922a3a9c6d25ad0045da0c8bbbb36fadef978b236eb9c91200f4d6a995ce1208d59db7ac8f527af32a5f5da67cdac3913bf2b93655846652a923218a6848cc23312c39966818d9319d2d9084f6e8eef9d1aaf2965aae61ff50c78ed8bf7"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f00000009c0)={0x20, 0x0, 0x4f, {0x4d, "a122124b557fa8d9b585f054e25504b2d5fa4be31d592c53fd78a33e7e9e94855454f1d995f040982c6a7347e5f4357d6209013a9b6ce64e8ec8c75efd88059d65375e1a397a6f140efe2749b7"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x9}}) memfd_create(&(0x7f0000000c40)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\x01\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\x9c\xfaZ\xfeR\xbb\xea5F\x00G\xe8\xc6\xb9\x05\x00\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\'\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac \xc2\xe8\xc1\x1b\x17\xb5\x95\xb2\xdb\xe0+\x0e\xc0\x8d\xd8\xb5\xb4\xea\x90\x06\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|\xf0\xf7\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xff`\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00ct\x00\xe8\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00\x8cJ=\xfd\xed\xcd\xfb\xab\x19\x88Y&[\xfaS\x9a\x80\x85\xb5\xa7\xf6\xef}\x81G\x15\x93\xfd\x02\xab\xaf\xe7\xe8\xcfz\x80\xf7\xf9\xe0\xd6\x98\xbf]\t7nPV\xe5\xe7LF\xc4PM\'mp.\x8a\xc7', 0x4) r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 10.962677824s ago: executing program 9 (id=2338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f00000000c0)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200080, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b80000000800000014f200000000861f4104bfeacd", 0x20, 0xfffffffffffffffb) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xbe) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="02090000020000000000000000000000e543dc159f28458492cf54cba781"], 0x10}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x6, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 8.445807908s ago: executing program 0 (id=2342): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x42dbef72d0050be5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x42dbef72d0050be5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000001100)=0x7004, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000001100)=0x7004, 0x4) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/softnet_stat\x00') pread64(r5, &(0x7f00000000c0)=""/4082, 0xff2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0xd, 0x0, 0x0) (async) setsockopt$inet_int(r7, 0x0, 0xd, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, 0x0, 0x20008040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f0000000800)="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", 0x2000, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.146239918s ago: executing program 0 (id=2344): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000580)="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", 0x5c2}, {&(0x7f0000000000)="629c", 0x2}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000006, 0x46032, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xfe, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x14, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) 7.699328082s ago: executing program 9 (id=2347): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406c256e0000000000000109022400010000000009042000010300220009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xf, "bf1f"}]}}, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x2, 0x12) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host, 0x1}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1e}, "b5e7fbc71a04ad8c8e8a1fb74ee0fa4f82298f2c2589f18123cdb33642f1"}, 0x22) r4 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x6a, 0x3, 0x0, 0x4) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@my=0x0, 0xfffff7fe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="791040000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$swradio(&(0x7f00000012c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000001300)={0xb, @pix={0x38305343}}) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00') 6.913082061s ago: executing program 2 (id=2348): r0 = syz_usb_connect(0x4, 0x1b, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x4, 0x4e, 0xd1, 0x10, 0x1f4d, 0xb803, 0xddf8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x1}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="001510"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x541b, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) fstat(r4, &(0x7f0000000180)) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) syz_usb_control_io(r0, 0x0, 0x0) 6.152792113s ago: executing program 0 (id=2349): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0x0) syz_usb_ep_write(r0, 0x4, 0xaa, &(0x7f0000000000)="b21c1879c7153c16da6137e6c1ccc873641c003978431ca7bac9e1da24d23fa15d018d68dafa4bfd56cf5cdfff95e965cb80163ded383aaa000b0142b7e1ec94831c8d04a07f34292314c91448035fffc504df8fdf8efe40daf8f7486cd57617bd58242051c4533bc842ff7fc0ca627ec5a3a1121726fe34ef083d8659e9ab4136b677828791c6c2df15381e5c4d64b8ff6f48e1f9534b4680bf035583ae413b45f4ff63db50d23ad615") 6.014749218s ago: executing program 4 (id=2351): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r1, &(0x7f0000000240)=""/167, 0xa7) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x3b) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.885793878s ago: executing program 2 (id=2352): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x1a8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async) setpriority(0x2, 0x0, 0x6) syz_io_uring_setup(0x4d7, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="24a9f20600983d000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00', @ANYRESHEX=r4, @ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYBLOB="11002a00dd0b6362636465666768696a6b00000010002d8002020202020000", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000740)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x5, 0xfc, 0xfeff, 0x7f}}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x86, 0xaf, 0x9, 0x101}}, [{0xdd, 0x98, "9b7eb1689b389efced539873e7a2bf592094e7323f818a2a94a242edf462b3d2db01bcd374ef5078bd2284fb34a9d91ab65c1e91091ddd0f4f0622c11da99d332593e4009947ad26760fe7a57c3b98c9e216e412a6a65e5907239dd33f19f6c8163ddeee1f78329c1896ae8c7b3fb378704d1473788ab47508c627ca83bd7f6d06fe2e2bfa6006481499e7fa3f17f08e1f349c3d10437c58"}, {0xdd, 0x2e, "29524ae45a6fcd163d6cc4d2363fa53006246865d6419484add02d4ab826dd6850bf722497a127a6daec05871e36"}, {0xdd, 0x24, "f3d3f40be1d0dfac5d36917036ca4d3b0d848c7ff3047918746354aaf38800af016504fe"}, {0xdd, 0x3a, "cf536e6c5b956a48df30077ec0ddcafb80cb32d579818bd201358364e1e40e098f7b39b9fe68f78244831ce477bdb24e51a005f43e51997e6fc0"}]}, 0x172) (async) syz_80211_inject_frame(0x0, &(0x7f0000000280)=ANY=[], 0x33) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) (async) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc}) 5.4686202s ago: executing program 9 (id=2353): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93", 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0xfe, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x0, @empty, @local}}}}}}, 0x0) 5.236488915s ago: executing program 9 (id=2354): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x789], 0x1, 0x400}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.041706005s ago: executing program 7 (id=2355): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x10, &(0x7f0000000000)={0x200, 0x2}, &(0x7f0000000140)=0x10) r2 = epoll_create(0x5) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=[r3], 0x1}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x20, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000080)={0x10}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022050000001000000000"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0) 4.416143886s ago: executing program 2 (id=2356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x98, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x54, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x108}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x2000000}, 0x20050800) 4.238438761s ago: executing program 2 (id=2357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x98, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x54, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x108}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x2000000}, 0x20050800) (fail_nth: 1) 3.741887407s ago: executing program 2 (id=2358): r0 = socket(0x3d, 0x2, 0xc) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0xf}, @TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x40}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b20710200e01015a000000000109021b00010000000009040000012e6d0a000905", @ANYBLOB="19e6c5"], 0x0) 3.443276152s ago: executing program 9 (id=2359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f00000000c0)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b80000000800000014f200000000861f4104bfeacd", 0x20, 0xfffffffffffffffb) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbe) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="02090000020000000000000000000000e543dc159f28458492cf54cba781"], 0x10}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x6, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 3.042250508s ago: executing program 0 (id=2360): request_key(&(0x7f0000000480)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) 2.893796199s ago: executing program 0 (id=2361): iopl(0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0xe38d, '\x00', r0, 0xffffffffffffffff, 0x3}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) lchown(&(0x7f0000000100)='./file0\x00', r2, 0xee00) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', r0, 0x10, 0x40, 0x4, 0x4, {{0x9, 0x4, 0x0, 0x23, 0x24, 0x68, 0x0, 0x7f, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@noop, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x1, 0x7, "ca39769311"}]}]}}}}}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x9, 0x24100) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0], 0x1, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0xd, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x30}}, 0x400c080) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_query], &(0x7f0000000540)='GPL\x00', 0x7, 0xdb, &(0x7f0000000580)=""/219, 0x41100, 0x10, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x3, 0x309, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)=[{0x2, 0x2, 0xb, 0x1}, {0x1, 0x2, 0x9, 0xa2b63b69283b11de}, {0x5, 0x5, 0x4, 0x1}]}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000800)=@generic={&(0x7f00000004c0)='./file0\x00', r8}, 0x18) iopl(0x6) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000840), &(0x7f0000000880)={'L+'}, 0x16, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f00000008c0)={{0xf, 0x30a4}, 0x100, './file0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)=@deltclass={0x98, 0x29, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff1, 0xc}, {0x1, 0xa}, {0xc}}, [@c_atm={{0x8}, {0x6c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0xfff2}}, @TCA_ATM_FD={0x8, 0x1, r10}, @TCA_ATM_HDR={0xa, 0x3, "3c3a7e82a8cb"}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_HDR={0x2b, 0x3, "d212b4d9fe5ce25385971aec62cb16c1296d0dad8e3332eab770812eaddf78517f58cc06589b78"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0x9}}, @TCA_ATM_FD={0x8, 0x1, r7}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xfffd}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x400c4) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000b80)=0xb) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r11, 0x4068aea3, &(0x7f0000000bc0)) iopl(0x81) ioctl$KVM_GET_DIRTY_LOG(r11, 0x4010ae42, &(0x7f0000000c40)={0x10004, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r12) sendmsg$NL80211_CMD_SET_REG(r12, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r13, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20088050) r14 = dup2(r10, r12) setsockopt$inet6_tcp_TCP_ULP(r14, 0x6, 0x1f, &(0x7f0000000e00), 0x4) 2.861636256s ago: executing program 4 (id=2362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = io_uring_setup(0x308b, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0x1, 0xcd}) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)}], 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x2c, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}}}}, 0x3a) socket$netlink(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r3, &(0x7f0000000180)={0xffffffffffff8000, 0x20, 0x1, 0x20, 0x3}, 0x48) write$binfmt_misc(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r4, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a41, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) io_uring_setup(0x308b, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0x1, 0xcd}) (async) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)}], 0x0}, 0x20) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x2c, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}}}}, 0x3a) (async) socket$netlink(0x10, 0x3, 0xc) (async) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') (async) write$tcp_mem(r3, &(0x7f0000000180)={0xffffffffffff8000, 0x20, 0x1, 0x20, 0x3}, 0x48) (async) write$binfmt_misc(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r4, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) (async) 2.720976743s ago: executing program 0 (id=2363): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x100) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005124e4407c0500222946010203010902240001fc0000000904fe01"], 0x0) 2.374107097s ago: executing program 4 (id=2364): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc92001b003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 2.358074308s ago: executing program 2 (id=2365): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000240)) r2 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003e00290200000000fcdbdf250a000004"], 0x18}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000300)={0x1d, r3, 0x2, {0x0, 0xf0, 0x1}, 0xc295a7c9ee09b05c}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r3, 0x1, {0x0, 0xf0}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000005c0)={&(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x4}, 0x1}, 0x18, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000089}, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0xb, 0x34) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000000904000002"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000040f3bd350b6dcad23cda2f1814010000000000000000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x40010) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x2, @pix={0x200, 0x8, 0x34565559, 0x5, 0x7ffffd, 0xfffffff5, 0xb, 0x983e, 0x1, 0x8, 0x2}}, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x88400, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, &(0x7f0000000000)=0x1) 2.149411069s ago: executing program 4 (id=2366): r0 = socket$netlink(0x10, 0x3, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x6, 0x3, 0x40, 0x6, '\x00', 0x4000040}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="ab0afcd235388da8596affbe3db889f3c6fc4eaf82168b3f72c81691bc66785b6c528172", 0x24}, {&(0x7f0000000280)="9699901e28241dcaa7f5fb6ab6ab33d94c889890d748eebd0c20b7913bfdd56e32e7742876e45778c243198a4e2e688cf5aa5bbdcc7ddceabcce436e0d763d7e0854c2568840b07e9e2fe100048ae11f2e5ec2841625e5b2906ee4e4ad625c90ab6cebe2c5b2d3825e3e0be2a8a6d171c39dcbd89acb732d4bf6b4571344dfff", 0x80}, {&(0x7f0000000300)="e83bc4a556d71f44ba70f8d71d7b80b215f00b86749e87b0d2496a83379e7f0dd4e086dab0b9bede62be28608ad71c80e3ae38559c70a9f859e51181f69778776583e2059e09445900b4a1aee8e7cbd99745d0ecd482dca556f8dd7973d443a5a72eefc7bc0ae82ee1b706dcbd623fc13d0d0c961e70903cda3882005d3f66c9a4b59984524081be93e1f08358d1928aa0f0c05f3b1b37a0038c431ccf9772ee5bd561c468c91d30ec3802fb15a8b182efd737bccc62da", 0xb7}, {&(0x7f00000004c0)="cbf112190657eb676dcdd7fe41bd7ccb314b200e1482a1c4fc329f4152f84e9dd16c5173eeb43e8a1f4af860972f91b2607da26382011f5f236d755a178c91d58f26129088422edd69c8510c49be560ebab048432c44cd73afc2e3477f77f6add063962cfb18feec5606a6d2d2a79f2b05907463042de305fed3e1da822fe93d3a5474", 0x83}, {&(0x7f0000000140)="b6a25e9783f44f17a691e1417a243fd2375f0f3c877a7222b2ff66bf81ebd93664222f3027233a0d2c550003ea", 0x2d}, {&(0x7f0000000580)="097647d70e8eb61d9c0101dfcbcc94ba4ad4589bd1784bcb2faa9f159763e05858957532c85b5ada5cfe41aaba299f671c16810c0ead0ba644fdfe7c95229a8f4e260fe1e913d4190221718fa46e12b1412c8fc1af935e29a4f89a573185e21ce8a7cde5294350c22fae2eb2e2ba9f32abc6e1c7d9953cbdaffad1aab9d90c7e8c8778dc561817296b8e87ceaf8ad8aa7803b69b2fb973a2dabf3e1c1bbdec450eacba54852050b7cccd4b38b89d0583cc0e232e6112287f7b818ff092f4ef7f2e24d1089715b7b6540287963be04ee6f395d981321fe564d7900fab1711a16fc782168be279a8a62beb70e1838edc28", 0xf0}], 0x6}}, {{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000700)="7ce3d08f51f791cc6d19dcc5628bb6e84c7868832af40c7a70a4b0402c95ad10da45db3a9a143c0db45a8ffeac2992860237aced02558eea52619e21777151d8c741be3eeeccebd142b5d108fe2ef1e33050be4dc3ae323fd0386126f8f797974f86d1812b2026aa02e3a42031878474453f236c251de211354049f316a0412bc86754ee4be0a5734804616d8a9d76610cc782b0bf83fd0aaee926a6b151352214d7ad7b799152c6ddcd83fe196c47cc1fa648c840c270b30b771c4dede06380a82d0a4d6eca692e444869b47f2afabde26d4616024fdb4aac763a67b7213ca054cf4d314a68982b38ffb5e59bb824b0d2a99bbebfe8ad931db5da630e6caf36199ddb7d774f76a05573375c264d9ba69760e8ce6233d214fc57571619d7614d15021bc71aade95b9116369182a7baece212a5eb77218eae30665af5bd2d156bbc6759db1d2a78c8f77fb79f2561e060c9d0b80516fc5ba2efdeb7d2e7cafa869d7b2416e994267d0affe3013c8f5b78efa71b47b4f47b80855fe1e5cbecb023db6155a47833cbedb77a3e476facc2dcbb168e63cf34f47a8d4b26d3fd2f0c89124ef411726f165c3352e1c0fee2d6173efc7f7a60a2d5a2880d7cb2b0fb26e6ffcb6c29901a58ac71ba72eef7a6b970ff35b4822ac5e28158b0d7f1832eb4d2685b71fcb232084fec86367883d3df29e6627b0885d089e9e304cd011e545529339fb7bfec20fbd61299366954a0619eb548c2ac850e642e57aa75bff2622eea8d8af6c14f9552b778d3e766c231e903bddc843153fd279202bc01a67305359615f10eab518bc74edbc3113079f72eb45ae3d7027febd94cd54e1590d8c8cb5d43995f0afda7c8c8bbcba31a5e9eb247ff06fe4e0af50e9722bb401096e99f35becbe2b65bf1012fdb145d8e0f5d72b35a884e58fa071e1e4f569cb5b9c1858a1d79547c30ba06372f5f532501ef123cdad09bb8c0a4aee7959579d9b89679259e107eab9a874cd7852c2ead3934706b2623379247722c8dedbaad888e38d281d753230063d0392b85b91e628ef990c19aea0b3180af3db738132de7cab9f5f40093ddf59ad79667b76602e66d652175d07b68f8825cd4064d2fe6234ab7210accbf963177ef3da976c15ff4e9ec1f1158d3a1f9112bdffe2eb33b9f88ffd13dd30b0ecf99ec295f91b7a29d5f97b50740b1afcd94fe1ee503b627209d292d485136604e51f68b2fbf0cab3cde746e63be2c68c23dcfbbc41f12e2bcf1c0ecc7491ace19fcf351a0ae584dc3b751d6824864b759d8eaa0329635091bbb24c92f1ab3646b8272d0169d06f5c1179a214e5ad67f6a788b5df515e7313bf0fc76b0b7fee6854de721b9e67896b669130e69cdba57329f1608d1376712f99aea584ccd7cc7afc5135fe3082c021d3451158d9866b7f235584ac776ac8c1b919a83a20f8ffc7ea0970c700919d42ccaa0d133f1800e3e97707a1f743318b3e2944c20403ca5f812da0945c1c01dddca0328213f8142c0f6597095594eb2e2239ebf886dcad0532c197bcc85652cbe726728b89f4f1493a022d50c645eb8c0f1b5c1e9a7f8709bed8fd4307f39207bc1fec7e39013e2e65cb524e2d935cb9d9e0d5ffcedb4eeb8578f8734980778a5eedac3a9a4ce4b21162386535db0ffc0c8ede8ec73570f08e4a0387bf5a8668213ead82413f1b5e3565bbea564b297ce8ae3f764e7bae07c12405418c1b9018fd9a24375b6b64df17b5b7e447527892da00849cd35af71b323a146e3e594f521570c9db2d41bd4c1b7e431af3aa4e2bbdebadb3306ece2e8ad3b8f7a26cad18e0aa3d75d73ab47bc224f7ea10583f38dc244c670436f2ba9c5e448004ca3e152e85200734378ceed6a3e68f7006e48ac169c8500756281a6912f85f64f77b041dcb360597279fb500369d0b3dfb34df678675b284c7d44ae6b368a8d7367452626122b91640ff1f2f8c2962260655d6a33e20894a3274459d59a5f9ba3382ab58abe1fb7cf8eadffe3378eb5e8d3a600a4c01896b5b39ee50e3f83170bff4d5f587ef5299d2324a30702853c321cc803ab41332a5a744007dae28a7eb20fee7642f846b691507d1d4bce05732ba376f350c56a8d8f85cf49e5ccfc2d9dc2eb407e778b9231ec09499ec3d3dd18efafb146213cb8663887573487faceb63066fa56ff08360985575a730a30a4625705c28b80548e5c5a3094a44409651a9c3a5ca1d1ae932a9ba1cabfcdb57f675e9d7b3c409ecdef0b289400ca227023028b7dfe2b2a1d662c55b7fedcf7fca2dc9341db60566fe86ef79ce80fd9dacdb3df1797499b4ca95abcdb1ee655fec08b1a27ba73336cce0a0703cd020758e27e43286e5b034815e6e73bb3462fb9e9561a4e5449468c82a0e1d9185f03141b14921868cc78b7e5c9473e08e44ce776c4c03f1519679c210ebe1233dc330476529889027324c43d3d5a9dbdfec564b47ead8c84a1f5336a7f08d5add2029d7ba34964cd136f0f5cdaa7e56c6b2059dd9d83b32e6763fee941f5ede9d73fc9857f72c29c1f454faa1c1cdeb3f32d5f804dfef0dd4e64eff1ea026a9bc723f15e63e7df65cef60a44aa4bacf023887e8da3c9da64ea9ee3439b4ec56c05b19b135d80f588daf373e9c4cddf7831795c1406be6a37da5e310a481402f28d561dc6746a9de5b2bec91b302b19eb66b0df5ec040a15c5eb9debcd40382bf66e6a1a2a1de037abae677e49cf7714235f907c62b2b5ac4f35c79aa978c796b393c7f309a97f702b4a3b9057df1e443e912e2c7680b0a80c4f5c4352a77b3759271bf4fbbebe65241aaccab1201b7d4caff946ad4bccb6c0b08c8eb829730371c99699dde33384ba359c4c2177eec0c3c88ea7121a4ed24e6aa25c2fbc0b525f0832b592bfcdb32239001220ee5fcf06e1372e64e831e03cf4aa0c4ea24f6c03d71df6f6fc441e92304f53f6e084d38a13b4e95d45738a5d05c859013f33178ed50264178e44852f07dd0cf4ce5ed8940e2ca8bc30ec716c4935aac701b016773002f8d7a0014693f1068b762a3880d2332b875cc36f51e39411a244cc5cf5df5cbcb7c981ce1730af2e4795d9fc34f75e54e003f1d1b431988d5830d31f83b64a61d0a52a92986ef11c2a5004e8a556235df5bc3dc735758248c27fc1ad9f41dc4df96a680a2531b109e1ef1069699ca91314b6ae3a55a86ad78d7b216ceb9dc22e213adfc2b2770531dafd3bd4b7667d583bfb82c8882912fdb65a4f1974b1050a3ff033a0db99c9d90ee0939c89971d7f9f0196a12f49abfb20fe12118d824738ac47ed78592289488dd1e88e1f585a2255d1cfc48e2de576e744843b51f3a3fb7f2df38244b15dfb86037f9609c98462dc3c42b12afb6ee6611c43acec4c9096849fe86abe75c143d76c94ecef594d2807d8b6add63ce2f0152b9cc3e503015901c5dab9bc4144485c46ff8b6f3e674586e457381cc12ed3580c8230bc80111f9ab8135a5f6378c719950eca92ab4c1ba23c9bde004e5201b0aba034018ab7ffc53c561c226152240bd5316063fa5fc229fd748dc000dfacc722273c6fc7f6c33d3296d5d6040fd9215cf245804b3e4e90d3e08c11e83e9feb53b4c2884b3e6061e57af2e3c254a3559568934815df2180c0a0dbad1af61d3ba66bdaf5a0a3127b5db00bd539e666ac41098f6e3d8b9dd5e814a44909af17f0a754fc0fe8eef3f04905547ec3ca21986f33450f2a725b0d897cc5d0bf63aa2b320ed1e5020c49f59c09f5e353fb71075f6c12a3dd83befb6cc1c8a7b31fcd8289bc00f0c667341f041cc530067c36f705b0604df8c7fab657395516b2199d599b8a171a3430db5d0528dc57149e2bd8165b5ad4cabcb9dbdba484b69899139e2b552531d2ae44e3524de2620154dd77ead4310644b64f4c88abb80fc6730468c822374fb0b7078babcb8bce6f2f1732a11e5c33be2cd6d73f045b176e916819f46c75fbdaad0ef3cb7688eb02f458ffe03c6a18bba9241cafaca068761b27232742f7d51453d89bf8cad61d5e24d7fc4c0fc567aeb3c7c9198815a4300173e1ddbdf52d206bacc8b5aad71b5e4b8a053c8c0c627d412aef73119d7d91c1708bd788b7f60434b24b313a486f9a88628acede886902819b5b9c4d294f8f4f1c7f2960f9a4fb062006e8e52afb20fb9daf7b17cb595ae8cd05eec8aaf3257d638b7b311263f1e43718a9e98e1664bd9fa0c92183e0aea71d07afc653c7b60b0f382bb3379775514149b43652fa77dc70802318347e8efab61daa00141f55017a0904aec934179db81527426809440edf4b68538165b6f63dfbe2d3d85ced428713c4e1daec44ddc79eea8953be8035aafd18cf0f1147e65f4b8f9976d73d04b504a0144df4d0ab6e6072cbdf11baaa16fc5487a6e224e67dd600869ae6ecfaec0a23886f9d5e61f10a6fef6e29a41932c0d4133e405b7f0c80b931ccbf59ee26ddc9ff144790eda3006a66055fd2351715e46ac0cdd525b582fc1cd75355b7c408f699c4391c14fcf91b98125325e5fb6d78a8df272088ec082b8d2e249a48fc34f46717b4384ee9161b33376ebd5715d2cec0303ce64ce1c0857fba3d7a0ee8d1af9b1695ece8aca91195a9a7c337126e943e67152b345cae1b8cee060a455f0a3c24090ae5b309ba2a6f402a9b8bf87fb974fcb20c12441f5e7c592a12e1587ad57f6dc5968", 0xd06}, {0x0}], 0x2, 0x0, 0x0, 0x20044810}}, {{&(0x7f0000003bc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40040}}], 0x3, 0x8004) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000001440)=ANY=[@ANYRES64=r1, @ANYRES8=r4, @ANYRESOCT=r1, @ANYRESHEX=r6, @ANYBLOB="4c7e0821d2284896dc4a3fc0be144caaed30ed3a4a06e0021d035b097484c60a6c31ce98501186d1dca0557f94d20aca7f04ed66b68263942edf2e651aa5771d25d1c170c0699067f59ac21c1ccced3ade02b96b907a5dda8451a947afdab21f16f581bee7"]) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590288ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 1.83649515s ago: executing program 7 (id=2367): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x8000, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x50) r1 = socket(0x10, 0x803, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getpgid(0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0xd, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket(0x1e, 0x803, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x20081, 0x0) io_setup(0x5, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) fallocate(r4, 0x1, 0xff, 0x8) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x111) 1.659245761s ago: executing program 4 (id=2368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x98, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x54, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x108}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x2000000}, 0x20050800) (fail_nth: 2) 1.518011407s ago: executing program 9 (id=2369): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000040)={0x6, 0x1700, "778d8ce72aa8f35457c8617739b4948e07180be64604d3a5", {0x9, 0x8}, 0x2}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005480)={0x38, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}, @typed={0x8, 0xca, 0x0, 0x0, @u32=0xffffff01}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c", @ANYRES16=r6, @ANYBLOB="4b7656da"], 0x40c}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 838.006623ms ago: executing program 4 (id=2370): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x53e}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x49c}}, './file0\x00'}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 704.915585ms ago: executing program 7 (id=2371): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 349.027218ms ago: executing program 7 (id=2372): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newchain={0x2c, 0x1e, 0x1, 0x70bd2a, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0xe}, {0x10, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x44004) 127.20704ms ago: executing program 7 (id=2373): iopl(0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0xe38d, '\x00', r0, 0xffffffffffffffff, 0x3}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) lchown(&(0x7f0000000100)='./file0\x00', r2, 0xee00) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', r0, 0x10, 0x40, 0x4, 0x4, {{0x9, 0x4, 0x0, 0x23, 0x24, 0x68, 0x0, 0x7f, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@noop, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x1, 0x7, "ca39769311"}]}]}}}}}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x9, 0x24100) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0], 0x1, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0xd, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x30}}, 0x400c080) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_query], &(0x7f0000000540)='GPL\x00', 0x7, 0xdb, &(0x7f0000000580)=""/219, 0x41100, 0x10, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x3, 0x309, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)=[{0x2, 0x2, 0xb, 0x1}, {0x1, 0x2, 0x9, 0xa2b63b69283b11de}, {0x5, 0x5, 0x4, 0x1}]}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000800)=@generic={&(0x7f00000004c0)='./file0\x00', r8}, 0x18) iopl(0x6) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000840), &(0x7f0000000880)={'L+'}, 0x16, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f00000008c0)={{0xf, 0x30a4}, 0x100, './file0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)=@deltclass={0x98, 0x29, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff1, 0xc}, {0x1, 0xa}, {0xc}}, [@c_atm={{0x8}, {0x6c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0xfff2}}, @TCA_ATM_FD={0x8, 0x1, r10}, @TCA_ATM_HDR={0xa, 0x3, "3c3a7e82a8cb"}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_HDR={0x2b, 0x3, "d212b4d9fe5ce25385971aec62cb16c1296d0dad8e3332eab770812eaddf78517f58cc06589b78"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0x9}}, @TCA_ATM_FD={0x8, 0x1, r7}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xfffd}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x400c4) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000b80)=0xb) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r11, 0x4068aea3, &(0x7f0000000bc0)) iopl(0x81) ioctl$KVM_GET_DIRTY_LOG(r11, 0x4010ae42, &(0x7f0000000c40)={0x10004, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r12) sendmsg$NL80211_CMD_SET_REG(r12, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r13, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20088050) r14 = dup2(r10, r12) setsockopt$inet6_tcp_TCP_ULP(r14, 0x6, 0x1f, &(0x7f0000000e00), 0x4) 0s ago: executing program 7 (id=2374): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$tipc(0x1e, 0x5, 0x0) socket(0xa, 0x3, 0x3a) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x8001) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x80, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="90", 0x1}, {&(0x7f0000000640)="0c865c7e5a58845137453408f0aaf000044556f6f09239ed4d01692c456398948cdff02e11a3a7dc0acdf48a2fbf57c20be45206551392386b7129d0cb395669249d1890c051257cd5c58af2f36efdf2a254d16c2db4c9cacabe079f4b3257be0d0eca07247aafc6daad0e88f393a24588e10530cb31843d23f4c7b660d70a2d89da2c1d9a64dd22cdba0289c0c4b307446b09d43d81804255643f7df1fe8a125785f12c7f913bdc7acfcba2", 0xac}], 0x2}}], 0x2, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000480)={r7, 0x9}, 0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000100)={r7, 0x1a, "9c23bccd2aa3843dbc62f78ec6f3d650a482db5a6821a8505342"}, &(0x7f0000000180)=0x22) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0xfffffffd) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000600)={0x17}) kernel console output (not intermixed with test programs): ng to 7 [ 650.865842][T13718] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.904031][T13718] usb 7-1: New USB device found, idVendor=0403, idProduct=0830, bcdDevice= 0.00 [ 650.942367][T13718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.954109][T13540] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 651.013480][T15084] geneve2: entered promiscuous mode [ 651.029010][T13718] usb 7-1: config 0 descriptor?? [ 651.055557][ T6883] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 60278 - 0 [ 651.152428][ T6883] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 60278 - 0 [ 651.171318][T13540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 143, changing to 11 [ 651.189693][ T6883] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 60278 - 0 [ 651.190068][T13540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24840, setting to 1024 [ 651.259301][ T6883] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 60278 - 0 [ 651.344894][ T980] gspca_sq930x: reg_r 001f failed -110 [ 651.385596][ T980] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 651.401086][T13540] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 651.552187][T13718] hid-generic 0003:0403:0830.001A: unknown main item tag 0x7 [ 651.578885][T13540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.590033][T13718] hid-generic 0003:0403:0830.001A: hidraw0: USB HID v0.00 Device [HID 0403:0830] on usb-dummy_hcd.6-1/input0 [ 651.773885][T13540] usb 2-1: config 0 descriptor?? [ 651.983682][T13540] usbhid 2-1:0.0: can't add hid device: -71 [ 651.990534][T13540] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 652.172884][T13540] usb 2-1: USB disconnect, device number 66 [ 652.646657][T13540] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 652.830860][T15127] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2029'. [ 652.850817][T13540] usb 2-1: Using ep0 maxpacket: 16 [ 652.876128][T13540] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 652.894506][T13540] usb 2-1: can't read configurations, error -61 [ 652.946509][ T980] usb 1-1: USB disconnect, device number 14 [ 653.073908][T13540] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 653.168894][T15137] netlink: 'syz.0.2032': attribute type 1 has an invalid length. [ 653.290772][T15137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 653.333994][T13540] usb 2-1: Using ep0 maxpacket: 16 [ 653.363619][T15141] bond1: (slave dummy0): making interface the new active one [ 653.394257][T13540] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 653.401851][T13540] usb 2-1: can't read configurations, error -61 [ 653.429815][T15141] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 653.439226][T13540] usb usb2-port1: attempt power cycle [ 654.347391][T15170] fuse: Unknown parameter 'D21QIM&OE97}-HGl.'@ڭE9?C 1 [ 681.128147][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 681.150309][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 681.159065][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 681.209407][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 681.473398][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 681.474288][T13718] usb 1-1: USB disconnect, device number 24 [ 681.480233][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 681.492012][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 681.761835][ T152] bridge_slave_1: left allmulticast mode [ 681.778704][ T152] bridge_slave_1: left promiscuous mode [ 681.842956][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.894759][ T152] bridge_slave_0: left allmulticast mode [ 681.922028][ T152] bridge_slave_0: left promiscuous mode [ 681.950270][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.064716][T13718] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 682.263855][T13718] usb 1-1: Using ep0 maxpacket: 16 [ 682.283038][T13718] usb 1-1: no configurations [ 682.302299][T13718] usb 1-1: can't read configurations, error -22 [ 682.483889][T13718] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 682.683468][T13718] usb 1-1: Using ep0 maxpacket: 16 [ 682.699557][T13718] usb 1-1: no configurations [ 682.706298][T13718] usb 1-1: can't read configurations, error -22 [ 682.722129][T13718] usb usb1-port1: attempt power cycle [ 682.757397][T12639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 682.770379][T12639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 682.788665][T12639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 682.798146][T12639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 682.824573][T12639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 683.055322][ T980] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 683.266972][ T980] usb 7-1: unable to get BOS descriptor or descriptor too short [ 683.285134][ T980] usb 7-1: not running at top speed; connect to a high speed hub [ 683.311498][ T980] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 683.335697][ T980] usb 7-1: config 1 interface 0 has no altsetting 0 [ 683.359475][ T980] usb 7-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=fa.40 [ 683.374047][ T5874] Bluetooth: hci0: command tx timeout [ 683.381270][ T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.394448][ T980] usb 7-1: Product: syz [ 683.400269][ T980] usb 7-1: Manufacturer: syz [ 683.403066][T15730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.418359][ T980] usb 7-1: SerialNumber: syz [ 683.428734][T15717] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 683.460278][T15732] netlink: 'syz.0.2142': attribute type 12 has an invalid length. [ 683.496271][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.524418][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.543269][ T152] bond0 (unregistering): Released all slaves [ 683.959580][T15742] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2145'. [ 684.309101][ T152] hsr_slave_0: left promiscuous mode [ 684.350636][ T152] hsr_slave_1: left promiscuous mode [ 684.361450][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.380656][ T980] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input69 [ 684.400165][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.412257][ T5220] bcm5974 7-1:1.0: could not read from device [ 684.426918][ T5220] bcm5974 7-1:1.0: could not read from device [ 684.441122][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.442472][ T980] usb 7-1: USB disconnect, device number 38 [ 684.469362][ T5220] bcm5974 7-1:1.0: could not read from device [ 684.469719][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.555697][ T152] veth1_macvtap: left promiscuous mode [ 684.581621][ T152] veth0_macvtap: left promiscuous mode [ 684.615524][ T152] veth1_vlan: left promiscuous mode [ 684.643908][ T152] veth0_vlan: left promiscuous mode [ 684.673968][ T6628] udevd[6628]: Error opening device "/dev/input/event4": No such file or directory [ 684.689408][ T6628] udevd[6628]: Unable to EVIOCGABS device "/dev/input/event4" [ 684.713107][ T6628] udevd[6628]: Unable to EVIOCGABS device "/dev/input/event4" [ 684.735635][ T6628] udevd[6628]: Unable to EVIOCGABS device "/dev/input/event4" [ 684.754844][ T6628] udevd[6628]: Unable to EVIOCGABS device "/dev/input/event4" [ 684.903739][ T5874] Bluetooth: hci1: command tx timeout [ 685.454094][ T5874] Bluetooth: hci0: command tx timeout [ 685.712627][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.722592][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.742126][ T43] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 685.813953][ T43] dvb_usb_dibusb_mb 9-1:6.90: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 685.815989][T15774] openvswitch: netlink: Message has 8 unknown bytes. [ 685.844390][ T43] dvb-usb: found a 'Artec T1 USB2.0 TVBOX (please check the warm ID)' in cold state, will try to load a firmware [ 685.853534][T15774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.911510][ T43] usb 9-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 685.939027][ T43] usb 9-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 686.122492][ T152] team0 (unregistering): Port device team_slave_1 removed [ 686.271612][ T152] team0 (unregistering): Port device team_slave_0 removed [ 686.464423][T13718] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 686.664138][T13718] usb 1-1: config 0 has no interfaces? [ 686.704758][T13718] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 686.717387][T13718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.735841][T13718] usb 1-1: Product: syz [ 686.740334][T13718] usb 1-1: Manufacturer: syz [ 686.768076][T13718] usb 1-1: SerialNumber: syz [ 686.787573][T13718] usb 1-1: config 0 descriptor?? [ 687.023910][ T5874] Bluetooth: hci1: command tx timeout [ 687.546093][T12639] Bluetooth: hci0: command tx timeout [ 687.992129][T15703] chnl_net:caif_netlink_parms(): no params data found [ 688.186683][T15720] chnl_net:caif_netlink_parms(): no params data found [ 688.650748][T15703] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.659100][T15703] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.667161][T15703] bridge_slave_0: entered allmulticast mode [ 688.689711][T15703] bridge_slave_0: entered promiscuous mode [ 688.735481][T15720] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.745185][T15720] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.753887][ T5921] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 688.768976][T15720] bridge_slave_0: entered allmulticast mode [ 688.788888][T15720] bridge_slave_0: entered promiscuous mode [ 688.818196][T15703] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.830695][T15703] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.843949][T15703] bridge_slave_1: entered allmulticast mode [ 688.860936][T15703] bridge_slave_1: entered promiscuous mode [ 688.873366][T15720] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.882560][T15720] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.915602][ T5921] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.935376][T15720] bridge_slave_1: entered allmulticast mode [ 688.941396][ T5921] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 688.956458][T15720] bridge_slave_1: entered promiscuous mode [ 688.978316][ T5921] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 688.991371][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.008275][ T5921] usb 7-1: Product: syz [ 689.012538][ T5921] usb 7-1: Manufacturer: syz [ 689.026411][ T5921] usb 7-1: SerialNumber: syz [ 689.054263][T12639] Bluetooth: hci1: command tx timeout [ 689.071646][T15703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.129403][T15703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.179433][T13540] usb 1-1: USB disconnect, device number 28 [ 689.256030][T15720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.265678][T15810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.276942][T15720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.313287][T15820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.338543][T15810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.346167][T15820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.384336][ T152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.597484][ T5921] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 689.613990][T12639] Bluetooth: hci0: command tx timeout [ 689.627219][T15703] team0: Port device team_slave_0 added [ 689.636733][T15720] team0: Port device team_slave_0 added [ 689.645916][T15720] team0: Port device team_slave_1 added [ 689.687671][ T5921] usb 7-1: USB disconnect, device number 39 [ 689.692124][T13540] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 689.841019][ T152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.896456][T13540] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 689.919912][T13540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.949179][T15703] team0: Port device team_slave_1 added [ 689.957651][T13540] usb 1-1: config 0 descriptor?? [ 690.165691][ T152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.307595][T15703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.323841][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.379332][T15823] loop2: detected capacity change from 0 to 7 [ 690.384885][T15703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.388386][T15823] loop2: p1 [ 690.411030][T15720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.428355][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.471456][T15823] loop2: partition table partially beyond EOD, truncated [ 690.474179][T15720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.498841][T15720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.509194][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.543941][T15720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.544567][T15823] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 690.607422][ T152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.636324][T15703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.643284][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.798264][T13540] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 690.799496][T15703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.808887][T13540] asix 1-1:0.0: probe with driver asix failed with error -71 [ 690.859336][ T7187] udevd[7187]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 690.970384][T13540] usb 1-1: USB disconnect, device number 29 [ 691.134239][T12639] Bluetooth: hci1: command tx timeout [ 691.232452][T15720] hsr_slave_0: entered promiscuous mode [ 691.250706][T15720] hsr_slave_1: entered promiscuous mode [ 691.290569][T15720] debugfs: 'hsr0' already exists in 'hsr' [ 691.313210][T15720] Cannot create hsr debugfs directory [ 691.453253][T15869] netlink: 'syz.8.2160': attribute type 29 has an invalid length. [ 691.541658][T15703] hsr_slave_0: entered promiscuous mode [ 691.560180][T15880] netlink: 500 bytes leftover after parsing attributes in process `syz.8.2160'. [ 691.573411][T15703] hsr_slave_1: entered promiscuous mode [ 691.585960][T15703] debugfs: 'hsr0' already exists in 'hsr' [ 691.593389][T15703] Cannot create hsr debugfs directory [ 691.671152][T15872] netlink: 'syz.8.2160': attribute type 29 has an invalid length. [ 692.314471][T15893] PKCS7: Unknown OID: [5] (bad) [ 692.324874][T15893] PKCS7: Only support pkcs7_signedData type [ 692.553518][ T152] bridge_slave_1: left allmulticast mode [ 692.560916][ T152] bridge_slave_1: left promiscuous mode [ 692.594862][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.649593][ T152] bridge_slave_0: left allmulticast mode [ 692.655619][ T152] bridge_slave_0: left promiscuous mode [ 692.661988][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.944400][T13540] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 693.105576][T13540] usb 1-1: Using ep0 maxpacket: 16 [ 693.151462][T13540] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 693.165418][T13540] usb 1-1: config 0 has no interface number 0 [ 693.179653][T13540] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 693.207453][T13540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.216133][T13540] usb 1-1: Product: syz [ 693.220512][T13540] usb 1-1: Manufacturer: syz [ 693.227168][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.229040][T13540] usb 1-1: SerialNumber: syz [ 693.247034][T13540] usb 1-1: config 0 descriptor?? [ 693.247167][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.260972][T13540] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 693.277064][ T152] bond0 (unregistering): Released all slaves [ 693.969763][ T152] hsr_slave_0: left promiscuous mode [ 693.976355][ T152] hsr_slave_1: left promiscuous mode [ 693.982510][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.001755][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.012618][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.030759][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.060711][ T152] veth1_macvtap: left promiscuous mode [ 694.074851][ T152] veth0_macvtap: left promiscuous mode [ 694.080587][ T152] veth1_vlan: left promiscuous mode [ 694.086648][ T152] veth0_vlan: left promiscuous mode [ 694.120545][T15917] support for cryptoloop has been removed. Use dm-crypt instead. [ 694.282009][T13540] gspca_spca1528: reg_w err -71 [ 694.306906][T13540] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 694.323599][T13540] usb 1-1: USB disconnect, device number 30 [ 694.923957][T13540] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 695.088384][T13540] usb 7-1: Using ep0 maxpacket: 32 [ 695.100786][T13540] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 695.116624][T13540] usb 7-1: can't read configurations, error -61 [ 695.154065][ T5921] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 695.256703][T13540] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 695.318525][ T5921] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 695.354033][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.381853][ T5921] usb 1-1: Product: syz [ 695.404324][ T5921] usb 1-1: Manufacturer: syz [ 695.408949][ T5921] usb 1-1: SerialNumber: syz [ 695.428075][T13540] usb 7-1: Using ep0 maxpacket: 32 [ 695.450710][T13540] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 695.474015][T13540] usb 7-1: can't read configurations, error -61 [ 695.486662][T13540] usb usb7-port1: attempt power cycle [ 695.576508][T15703] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 695.587691][T15703] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 695.600969][T15703] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 695.614266][T15703] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 695.651465][T15924] program syz.0.2170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.823963][T13540] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 695.861425][T13540] usb 7-1: Using ep0 maxpacket: 32 [ 695.871928][T13540] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 695.893844][T13540] usb 7-1: can't read configurations, error -61 [ 696.034722][T13540] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 696.070027][T13540] usb 7-1: Using ep0 maxpacket: 32 [ 696.093233][T13540] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 696.102522][T13540] usb 7-1: can't read configurations, error -61 [ 696.121616][T13540] usb usb7-port1: unable to enumerate USB device [ 696.388049][T15703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.483601][T15703] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.528464][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.535665][ T6890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.577689][T15720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 696.629357][T15720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 696.688795][T15720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 696.722490][T15945] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2171'. [ 696.740845][T15720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 696.760867][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.768053][ T6890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.049977][T15703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.134719][ T5921] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 697.167147][T15720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.308892][T15720] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.416209][ T6891] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.423425][ T6891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.498214][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.505406][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.592537][T15703] veth0_vlan: entered promiscuous mode [ 697.798269][ T5921] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 697.883157][ T5921] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 697.901234][T15703] veth1_vlan: entered promiscuous mode [ 698.015591][ T5921] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 698.047306][T15720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.127135][ T5921] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 698.177651][T15703] veth0_macvtap: entered promiscuous mode [ 698.217104][T15703] veth1_macvtap: entered promiscuous mode [ 698.273274][T15703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.297294][T15720] veth0_vlan: entered promiscuous mode [ 698.318676][T15703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.333467][ T5921] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 698.372536][ T5921] usb 1-1: USB disconnect, device number 31 [ 698.456224][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.471995][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.500883][ T6883] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.515698][ T6883] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.533451][T15720] veth1_vlan: entered promiscuous mode [ 698.812774][T15720] veth0_macvtap: entered promiscuous mode [ 698.922961][T15720] veth1_macvtap: entered promiscuous mode [ 699.026654][ T6883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.044966][ T6883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.062741][T15720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.155967][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.167432][T15720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.178888][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.210924][ T152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.220358][ T152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.267776][ T152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.301314][T15999] openvswitch: netlink: Message has 4 unknown bytes. [ 699.316981][T15999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.372658][ T152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.498441][T16000] kvm: pic: non byte write [ 699.570094][ T6891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.590312][ T6891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.627846][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2131'. [ 699.676148][T16003] bridge0: entered promiscuous mode [ 699.691559][T16003] bridge0: left promiscuous mode [ 699.752490][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.771050][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.907179][ T9] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 700.091387][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 700.114374][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 700.137054][ T9] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 700.166649][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 700.180712][ T9] usb 1-1: config 1 has no interface number 0 [ 700.188232][ T9] usb 1-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 700.199133][ T9] usb 1-1: config 1 interface 138 has no altsetting 0 [ 700.210292][ T9] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 700.221727][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.292645][ T9] usb 1-1: Product: syz [ 700.319749][ T9] usb 1-1: Manufacturer: syz [ 700.332491][ T9] usb 1-1: SerialNumber: syz [ 700.910385][T16040] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2179'. [ 701.403395][T16058] fuse: Invalid rootmode [ 701.956712][ T6891] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.159013][ T6891] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.385956][ T6891] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.438071][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 702.572774][ T9] usb 1-1: USB disconnect, device number 32 [ 702.651099][ T6891] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.098436][T16086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 703.156878][ T6891] bridge_slave_1: left allmulticast mode [ 703.162584][ T6891] bridge_slave_1: left promiscuous mode [ 703.176457][ T6891] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.194282][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 703.216410][ T6891] bridge_slave_0: left allmulticast mode [ 703.233994][ T6891] bridge_slave_0: left promiscuous mode [ 703.246229][ T6891] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.344754][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 703.386632][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 703.413981][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.444899][ T9] usb 1-1: config 0 descriptor?? [ 703.462363][T16092] loop2: detected capacity change from 0 to 7 [ 703.480901][T16092] Dev loop2: unable to read RDB block 7 [ 703.508052][T16092] loop2: unable to read partition table [ 703.549430][T16092] loop2: partition table beyond EOD, truncated [ 703.610682][T16092] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 703.725882][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 703.737620][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 703.746589][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 703.755217][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 703.772466][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 704.214733][ T6891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.279648][ T6891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.305349][ T6891] bond0 (unregistering): Released all slaves [ 704.553701][T16115] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 704.592371][T16115] batadv1: entered promiscuous mode [ 704.598722][T16115] team0: Port device batadv1 added [ 704.909337][ T6891] hsr_slave_0: left promiscuous mode [ 704.920612][ T6891] hsr_slave_1: left promiscuous mode [ 704.929665][ T6891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.942929][ T6891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.964247][ T6891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.972900][ T6891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.975463][ T980] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 705.069669][ T6891] veth1_macvtap: left promiscuous mode [ 705.075451][ T6891] veth0_macvtap: left promiscuous mode [ 705.081180][ T6891] veth1_vlan: left promiscuous mode [ 705.087870][ T6891] veth0_vlan: left promiscuous mode [ 705.146501][ T980] usb 3-1: device descriptor read/64, error -71 [ 705.400444][ T980] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 705.565688][ T980] usb 3-1: device descriptor read/64, error -71 [ 705.676240][ T980] usb usb3-port1: attempt power cycle [ 705.859286][T12639] Bluetooth: hci0: command tx timeout [ 705.953386][ T6891] team0 (unregistering): Port device team_slave_1 removed [ 706.017651][ T6891] team0 (unregistering): Port device team_slave_0 removed [ 706.057010][ T980] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 706.095563][ T980] usb 3-1: device descriptor read/8, error -71 [ 706.344158][ T980] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 706.386893][ T980] usb 3-1: device descriptor read/8, error -71 [ 706.515249][ T980] usb usb3-port1: unable to enumerate USB device [ 707.083146][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 707.115577][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 707.138950][ T9] asix 1-1:0.0: probe with driver asix failed with error -71 [ 707.177309][ T9] usb 1-1: USB disconnect, device number 33 [ 707.276365][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'. [ 707.329026][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2196'. [ 707.434275][T16100] chnl_net:caif_netlink_parms(): no params data found [ 707.660236][T16203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2197'. [ 707.697777][T16100] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.712306][T16100] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.721490][T16100] bridge_slave_0: entered allmulticast mode [ 707.736449][T16100] bridge_slave_0: entered promiscuous mode [ 707.751926][T16100] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.760451][T16100] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.768210][T16100] bridge_slave_1: entered allmulticast mode [ 707.777805][T16100] bridge_slave_1: entered promiscuous mode [ 707.870450][T16100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.897657][T16100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.934513][ T980] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 707.946362][T12639] Bluetooth: hci0: command tx timeout [ 708.048746][T16100] team0: Port device team_slave_0 added [ 708.067004][T16100] team0: Port device team_slave_1 added [ 708.137545][ T980] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 708.147889][ T980] usb 1-1: config 54 has no interface number 0 [ 708.170355][ T980] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 708.186445][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.202528][ T980] usb 1-1: Product: syz [ 708.209249][ T980] usb 1-1: Manufacturer: syz [ 708.224279][ T980] usb 1-1: SerialNumber: syz [ 708.314282][T16100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.328628][T16100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.354519][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.388028][T16100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.429604][T16100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.441628][T16100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.467535][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.513066][T16100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.552022][ T8103] usb 1-1: Failed to submit usb control message: -71 [ 708.559150][ T8103] usb 1-1: unable to send the bmi data to the device: -71 [ 708.566441][ T980] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 708.583348][ T8103] usb 1-1: unable to get target info from device [ 708.597794][ T8103] usb 1-1: could not get target info (-71) [ 708.612679][T16100] hsr_slave_0: entered promiscuous mode [ 708.631710][T16100] hsr_slave_1: entered promiscuous mode [ 708.639507][T16100] debugfs: 'hsr0' already exists in 'hsr' [ 708.644247][ T980] usb 1-1: USB disconnect, device number 34 [ 708.651230][T16100] Cannot create hsr debugfs directory [ 708.661109][ T8103] usb 1-1: could not probe fw (-71) [ 709.457136][ T5996] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 709.633932][ T5996] usb 1-1: Using ep0 maxpacket: 8 [ 709.644243][ T5996] usb 1-1: unable to get BOS descriptor or descriptor too short [ 709.985438][ T5996] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 710.003863][ T5996] usb 1-1: config 8 interface 0 altsetting 7 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 710.016576][T12639] Bluetooth: hci0: command tx timeout [ 710.030974][ T5996] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 710.195465][ T5996] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x8F has invalid wMaxPacketSize 0 [ 710.243813][ T5996] usb 1-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 710.260106][T16100] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 710.284722][ T5996] usb 1-1: config 8 interface 0 has no altsetting 0 [ 710.296804][T16100] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 710.316719][ T5996] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 710.329393][T16100] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 710.343815][ T5996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.363797][ T5996] usb 1-1: Product: syz [ 710.367968][ T5996] usb 1-1: Manufacturer: syz [ 710.405908][T16100] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 710.422804][ T5996] usb 1-1: SerialNumber: syz [ 710.599418][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2202'. [ 710.676159][T16262] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 710.687726][T16262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 710.756664][T16100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.799794][T16100] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.819305][ T5996] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 710.850772][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.857930][ T6883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.863893][ T5996] usb 1-1: selecting invalid altsetting 0 [ 710.881053][T16267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2203'. [ 710.926283][ T5996] snd-usb-audio 1-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 710.943678][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.950847][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.952653][ T5996] usb 1-1: USB disconnect, device number 35 [ 711.049997][ T8357] udevd[8357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.103065][T16100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 711.183204][T16100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.261542][T16100] veth0_vlan: entered promiscuous mode [ 711.276753][T16100] veth1_vlan: entered promiscuous mode [ 711.316621][T16100] veth0_macvtap: entered promiscuous mode [ 711.356630][T16100] veth1_macvtap: entered promiscuous mode [ 711.374264][T13304] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 711.414804][T16100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.434687][T16100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.448800][ T6883] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.500897][ T6883] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.524247][T13304] usb 3-1: device descriptor read/64, error -71 [ 711.531053][ T6883] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.562882][ T6883] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.607856][T16283] binder_alloc: binder_alloc_mmap_handler: 16280 200000ffd000-200001000000 already mapped failed -16 [ 711.683031][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.714063][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.753529][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.771955][T13304] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 711.794867][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.853160][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2207'. [ 711.938032][T13304] usb 3-1: device descriptor read/64, error -71 [ 712.075122][T13304] usb usb3-port1: attempt power cycle [ 712.096237][T12639] Bluetooth: hci0: command tx timeout [ 712.984013][T13304] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 713.053383][T13304] usb 3-1: device descriptor read/8, error -71 [ 713.327060][T13304] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 713.395169][T13304] usb 3-1: device descriptor read/8, error -71 [ 713.535203][T13304] usb usb3-port1: unable to enumerate USB device [ 713.689488][ T5874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 713.699150][ T5874] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 713.708649][ T5874] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 713.717274][ T5874] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 713.724959][ T5874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 713.957221][T16330] binder: 16323:16330 ioctl c0306201 200000000100 returned -11 [ 713.966224][T16330] fuse: Bad value for 'fd' [ 714.506708][T16336] chnl_net:caif_netlink_parms(): no params data found [ 714.773863][ T980] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 714.870014][T16351] loop4: detected capacity change from 0 to 7 [ 714.886527][T16351] Dev loop4: unable to read RDB block 7 [ 714.905323][T16351] loop4: unable to read partition table [ 714.911637][T16351] loop4: partition table beyond EOD, truncated [ 714.926401][T16351] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 714.976569][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 714.990625][T16336] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.007848][T16336] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.018666][T16336] bridge_slave_0: entered allmulticast mode [ 715.025951][T16336] bridge_slave_0: entered promiscuous mode [ 715.033473][T16336] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.041268][T16336] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.048894][T16336] bridge_slave_1: entered allmulticast mode [ 715.056443][T16336] bridge_slave_1: entered promiscuous mode [ 715.114493][ T980] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 715.124710][ T980] usb 3-1: config 0 has no interface number 0 [ 715.130918][ T980] usb 3-1: config 0 interface 132 has no altsetting 0 [ 715.141354][ T980] usb 3-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 715.152317][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.162072][T16336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.207128][T16336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.223160][ T980] usb 3-1: Product: syz [ 715.283699][T16336] team0: Port device team_slave_0 added [ 715.298080][T16336] team0: Port device team_slave_1 added [ 715.324097][ T980] usb 3-1: Manufacturer: syz [ 715.369950][T16336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.386737][ T980] usb 3-1: SerialNumber: syz [ 715.393185][T16336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.433062][ T980] usb 3-1: config 0 descriptor?? [ 715.441634][T16336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.532731][T16336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.554043][T16336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.601652][T16336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.747393][ T980] cdc_subset 3-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.2-1, Belkin, eTEK, or compatible, 96:39:b4:00:f3:27 [ 715.870515][T16336] hsr_slave_0: entered promiscuous mode [ 715.911448][T16336] hsr_slave_1: entered promiscuous mode [ 715.950713][T16336] debugfs: 'hsr0' already exists in 'hsr' [ 715.992194][T16336] Cannot create hsr debugfs directory [ 716.106639][ T5874] Bluetooth: hci5: command tx timeout [ 716.789592][T16336] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 716.805797][T16336] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 716.823437][T16336] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 716.850344][T16336] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 717.045980][T16336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.080803][T16336] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.101344][ T8103] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.108529][ T8103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.132626][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.139745][ T8103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.358198][T16336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.435710][T16336] veth0_vlan: entered promiscuous mode [ 717.490680][T16336] veth1_vlan: entered promiscuous mode [ 717.547567][ T980] usb 3-1: USB disconnect, device number 82 [ 717.578634][ T980] cdc_subset 3-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.2-1, Belkin, eTEK, or compatible [ 717.637740][T16336] veth0_macvtap: entered promiscuous mode [ 717.691177][T16336] veth1_macvtap: entered promiscuous mode [ 717.799528][T16336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.847336][T16336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.876769][ T6883] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.896962][ T6883] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.981594][ T6883] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.036000][ T6883] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.184187][ T5874] Bluetooth: hci5: command tx timeout [ 718.234012][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.291001][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.560743][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.589274][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.851217][T16425] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2209'. [ 718.900028][T16427] mac80211_hwsim hwsim77 wlan0: entered promiscuous mode [ 718.925367][T16427] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 719.003874][T13540] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 719.216672][T13540] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.234141][T13540] usb 3-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 719.263044][T13540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.292602][T13540] usb 3-1: config 0 descriptor?? [ 719.325083][T13540] gspca_main: kinect-2.14.0 probing 045e:02bf [ 719.505686][T16443] binder: 16442:16443 ioctl 4b41 200000000000 returned -22 [ 720.264938][ T5874] Bluetooth: hci5: command tx timeout [ 720.879408][T12639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 720.889961][T12639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 720.898015][T12639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 720.906053][T12639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 720.914097][T12639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 720.947558][ T5921] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 721.116658][ T5921] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 721.148547][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.183049][ T5921] usb 1-1: config 0 descriptor?? [ 721.218356][ T5921] pwc: Samsung MPC-C10 USB webcam detected. [ 721.413939][ T5921] pwc: send_video_command error -71 [ 721.425336][ T5921] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 721.434892][T16474] loop4: detected capacity change from 0 to 7 [ 721.443653][ T5921] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 721.445589][ T7187] Dev loop4: unable to read RDB block 7 [ 721.473848][ T5921] usb 1-1: USB disconnect, device number 36 [ 721.501301][ T7187] loop4: unable to read partition table [ 721.519717][ T7187] loop4: partition table beyond EOD, truncated [ 721.546073][T16474] Dev loop4: unable to read RDB block 7 [ 721.584453][T16474] loop4: unable to read partition table [ 721.611650][T16474] loop4: partition table beyond EOD, truncated [ 721.631968][T13718] usb 3-1: USB disconnect, device number 83 [ 721.642382][T16474] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 721.729692][T16470] chnl_net:caif_netlink_parms(): no params data found [ 721.947289][ T5921] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 721.987802][T16479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2232'. [ 722.034345][T16479] netlink: 'syz.2.2232': attribute type 30 has an invalid length. [ 722.117557][ T5921] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 722.135490][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.149678][ T5921] usb 1-1: config 0 descriptor?? [ 722.188916][ T6883] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.190671][ T5921] pwc: Samsung MPC-C10 USB webcam detected. [ 722.209090][T16470] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.216656][T16470] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.224175][T16470] bridge_slave_0: entered allmulticast mode [ 722.232408][T16470] bridge_slave_0: entered promiscuous mode [ 722.253261][T16470] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.260803][T16470] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.270512][T16470] bridge_slave_1: entered allmulticast mode [ 722.287101][T16470] bridge_slave_1: entered promiscuous mode [ 722.298108][ T6883] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.307598][ T6883] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.328417][ T6883] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.338088][T12639] Bluetooth: hci5: command tx timeout [ 722.377335][T16470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.390266][T16470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.399963][T13540] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 722.453189][T16470] team0: Port device team_slave_0 added [ 722.463540][T16470] team0: Port device team_slave_1 added [ 722.523654][T16470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.531523][T16470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.558328][T16470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.565571][ T5921] pwc: recv_control_msg error -71 req 02 val 2b00 [ 722.572131][T16470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.585258][T13540] usb 10-1: Using ep0 maxpacket: 16 [ 722.594697][T13540] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.606407][T13540] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 722.606918][T16470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.644261][ T5921] pwc: recv_control_msg error -71 req 02 val 2700 [ 722.650990][T16470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.654704][T13540] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 722.662414][ T5921] pwc: recv_control_msg error -71 req 04 val 1700 [ 722.680832][ T5921] pwc: recv_control_msg error -71 req 02 val 2c00 [ 722.686540][T13540] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.700170][T13540] usb 10-1: Product: syz [ 722.701058][ T5921] pwc: recv_control_msg error -71 req 04 val 1000 [ 722.705269][T13540] usb 10-1: Manufacturer: syz [ 722.713981][ T5921] pwc: recv_control_msg error -71 req 04 val 1300 [ 722.727325][T13540] usb 10-1: SerialNumber: syz [ 722.751988][ T5921] pwc: recv_control_msg error -71 req 04 val 1400 [ 722.768693][ T5921] pwc: recv_control_msg error -71 req 02 val 2000 [ 722.781053][ T5921] pwc: recv_control_msg error -71 req 02 val 2100 [ 722.788555][ T5921] pwc: recv_control_msg error -71 req 02 val 2200 [ 722.796864][ T5921] pwc: recv_control_msg error -71 req 06 val 0600 [ 722.811598][ T5921] pwc: recv_control_msg error -71 req 04 val 1500 [ 722.819166][ T5921] pwc: recv_control_msg error -71 req 02 val 2500 [ 722.828775][ T5921] pwc: recv_control_msg error -71 req 02 val 2400 [ 722.837510][T16470] hsr_slave_0: entered promiscuous mode [ 722.844779][ T5921] pwc: recv_control_msg error -71 req 02 val 2600 [ 722.853281][ T5921] pwc: recv_control_msg error -71 req 02 val 2900 [ 722.861195][T16470] hsr_slave_1: entered promiscuous mode [ 722.868178][ T5921] pwc: recv_control_msg error -71 req 02 val 2800 [ 722.872366][T16470] debugfs: 'hsr0' already exists in 'hsr' [ 722.876605][ T5921] pwc: recv_control_msg error -71 req 04 val 1100 [ 722.884808][T16470] Cannot create hsr debugfs directory [ 722.903411][ T5921] pwc: recv_control_msg error -71 req 04 val 1200 [ 722.918298][ T5921] pwc: Registered as video103. [ 722.933539][ T5921] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input70 [ 722.974587][T13540] usb 10-1: 0:2 : does not exist [ 722.980316][T12639] Bluetooth: hci6: command tx timeout [ 723.031259][T13540] usb 10-1: USB disconnect, device number 3 [ 723.093186][ T5921] usb 1-1: USB disconnect, device number 37 [ 723.123608][ T7187] udevd[7187]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 723.509794][T16470] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.677638][T16470] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.688523][ T5921] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 723.759396][T16509] netlink: 'syz.9.2240': attribute type 10 has an invalid length. [ 723.780977][T16509] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 723.790844][T16509] team0: Failed to send options change via netlink (err -105) [ 723.798543][T16509] team0: Port device netdevsim0 added [ 723.824288][ T5996] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 723.834898][T16470] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.864099][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 723.875017][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.898030][ T5921] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 723.915629][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.942115][ T5921] usb 1-1: Product: syz [ 723.957232][T16470] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.973939][ T5921] usb 1-1: Manufacturer: syz [ 723.982638][ T5921] usb 1-1: SerialNumber: syz [ 724.001439][ T5996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.014312][ T5921] usb 1-1: config 0 descriptor?? [ 724.038487][ T5996] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 724.053737][ T5996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.072985][ T5996] usb 3-1: config 0 descriptor?? [ 724.351379][T16470] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 724.379649][T13718] usb 1-1: USB disconnect, device number 38 [ 724.491352][T16470] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 724.504661][T16470] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 724.543118][ T5996] lenovo 0003:17EF:60A3.001E: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 724.557179][T16470] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 724.709871][T16502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.744499][T16502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.761252][T13540] usb 3-1: USB disconnect, device number 84 [ 724.852025][T16470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.971799][T16470] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.025506][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.032663][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.054126][T12639] Bluetooth: hci6: command tx timeout [ 725.089366][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.096557][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.435053][T16470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.675956][T16566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2247'. [ 725.730111][T16470] veth0_vlan: entered promiscuous mode [ 725.762803][T16470] veth1_vlan: entered promiscuous mode [ 725.889565][T16470] veth0_macvtap: entered promiscuous mode [ 725.911103][T16470] veth1_macvtap: entered promiscuous mode [ 725.935304][T16470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.956963][T16470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.982460][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.031525][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.049591][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.067590][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.726962][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.844182][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.869208][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.145100][T12639] Bluetooth: hci6: command tx timeout [ 727.344166][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.113892][T13718] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 728.273939][T13718] usb 3-1: Using ep0 maxpacket: 8 [ 728.283136][T13718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.350109][T13718] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 728.382169][T13718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.399439][T13718] usb 3-1: Product: syz [ 728.421953][T13718] usb 3-1: Manufacturer: syz [ 728.436207][T13718] usb 3-1: SerialNumber: syz [ 728.455526][T13718] usb 3-1: config 0 descriptor?? [ 728.525103][T13540] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 728.529884][T16625] usb usb8: usbfs: process 16625 (syz.0.2260) did not claim interface 4 before use [ 728.672989][T13718] usb 3-1: USB disconnect, device number 85 [ 728.714288][T13540] usb 10-1: Using ep0 maxpacket: 32 [ 728.727063][T13540] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 728.750488][T13540] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.762608][T13540] usb 10-1: config 0 descriptor?? [ 728.771946][T13540] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 728.897774][ T5967] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 729.076287][ T5967] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 729.097210][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.120464][ T5967] usb 1-1: config 0 descriptor?? [ 729.144093][ T5967] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 729.216410][T12639] Bluetooth: hci6: command tx timeout [ 729.345713][ T5967] gp8psk: usb in 128 operation failed. [ 729.731496][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 729.762713][T16664] netlink: 'syz.2.2265': attribute type 30 has an invalid length. [ 729.784427][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2265'. [ 730.714204][ T5967] gp8psk: usb in 146 operation failed. [ 730.720691][ T5967] gp8psk: failed to get FW version [ 730.887496][T16672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.924266][T16672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.031606][ T5967] gp8psk: FPGA Version = 173 [ 731.506570][T13540] gspca_vc032x: reg_r err -71 [ 731.514595][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.520922][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.548048][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.587000][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.622570][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.646511][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.662938][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.675763][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.708170][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.737783][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.796237][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.823974][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.836347][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.848313][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.870259][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.899094][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.918112][T13540] gspca_vc032x: I2c Bus Busy Wait 00 [ 731.925121][T13540] gspca_vc032x: Unknown sensor... [ 731.931379][T13540] vc032x 10-1:0.0: probe with driver vc032x failed with error -22 [ 731.965167][T13540] usb 10-1: USB disconnect, device number 4 [ 732.858094][ T5967] gp8psk: usb in 138 operation failed. [ 732.895719][ T5967] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 733.103666][ T5967] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 733.126776][ T5967] usb 1-1: USB disconnect, device number 39 [ 733.184034][T13540] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 733.363814][T13540] usb 10-1: Using ep0 maxpacket: 8 [ 733.646834][T13540] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.660204][T13540] usb 10-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 733.670118][T13540] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.821769][T13540] usb 10-1: Product: syz [ 733.826362][T13540] usb 10-1: Manufacturer: syz [ 733.831064][T13540] usb 10-1: SerialNumber: syz [ 733.843649][T13540] usb 10-1: config 0 descriptor?? [ 733.964045][T13718] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 734.058915][T13540] usb 10-1: USB disconnect, device number 5 [ 734.219636][T13718] usb 5-1: Using ep0 maxpacket: 8 [ 734.273642][T13718] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 734.293036][T13718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.308338][T13718] usb 5-1: Product: syz [ 734.312517][T13718] usb 5-1: Manufacturer: syz [ 734.321716][T13718] usb 5-1: SerialNumber: syz [ 734.359715][T13718] usb 5-1: config 0 descriptor?? [ 734.371994][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'. [ 734.393873][ T980] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 734.398538][T16739] netlink: 'syz.0.2277': attribute type 30 has an invalid length. [ 734.413306][T16739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'. [ 734.561114][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 734.583721][ T980] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 734.593580][T13718] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 734.600980][ T980] usb 3-1: config 0 has no interface number 0 [ 734.613988][ T980] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.649905][T16745] netlink: 'syz.0.2279': attribute type 1 has an invalid length. [ 734.664978][ T980] usb 3-1: config 0 interface 85 has no altsetting 0 [ 734.685570][ T980] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 734.714523][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.742910][ T980] usb 3-1: Product: syz [ 734.753020][ T980] usb 3-1: Manufacturer: syz [ 734.766410][ T980] usb 3-1: SerialNumber: syz [ 734.777231][ T980] usb 3-1: config 0 descriptor?? [ 734.968026][ T5996] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 735.160653][T16736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.200978][T16736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.217433][ T5996] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 735.229936][ T5996] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 735.246421][T16736] fuse: Unknown parameter ']FN ) failed (rc=-5) [ 736.884147][T13304] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 736.904053][ T5996] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 736.990745][T13718] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 737.018924][T13718] usb 5-1: USB disconnect, device number 51 [ 737.060183][ T152] bridge_slave_1: left allmulticast mode [ 737.066195][ T152] bridge_slave_1: left promiscuous mode [ 737.081581][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.089388][ T5996] usb 10-1: Using ep0 maxpacket: 32 [ 737.109685][ T5996] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 737.149863][ T152] bridge_slave_0: left allmulticast mode [ 737.157650][ T5996] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.185874][ T152] bridge_slave_0: left promiscuous mode [ 737.191540][T13304] usb 3-1: Using ep0 maxpacket: 32 [ 737.199549][ T5996] usb 10-1: Product: syz [ 737.212448][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.226099][ T5996] usb 10-1: Manufacturer: syz [ 737.232926][T13304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.250763][ T5996] usb 10-1: SerialNumber: syz [ 737.327646][T13304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.337906][ T5996] usb 10-1: config 0 descriptor?? [ 737.359892][T13304] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 737.369387][T13718] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 737.398085][T13304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.435076][T13304] usb 3-1: config 0 descriptor?? [ 737.586437][ T5996] snd-usb-6fire 10-1:0.0: unknown device firmware state received from device: [ 737.596950][T13718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.606996][ T5996] eb 9a 47 80 9b f8 7a f0 [ 737.611536][T13718] usb 5-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00 [ 737.621134][ T5996] snd-usb-6fire 10-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 737.633522][T13718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.679502][T13718] usb 5-1: config 0 descriptor?? [ 737.863111][T13304] ft260 0003:0403:6030.001F: unknown main item tag 0x7 [ 737.984248][T16804] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2285'. [ 738.111708][T13304] ft260 0003:0403:6030.001F: chip code: aa7b 7457 [ 739.188562][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.217308][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.247395][ T152] bond0 (unregistering): Released all slaves [ 739.306312][T13304] ft260 0003:0403:6030.001F: failed to retrieve system status [ 739.318651][T13304] ft260 0003:0403:6030.001F: probe with driver ft260 failed with error -71 [ 739.378461][T13304] usb 3-1: USB disconnect, device number 87 [ 739.795345][ T152] hsr_slave_0: left promiscuous mode [ 739.808700][ T152] hsr_slave_1: left promiscuous mode [ 739.821276][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.839654][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.863230][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.872730][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.945040][T16833] netlink: 'syz.2.2291': attribute type 1 has an invalid length. [ 739.953111][T16833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2291'. [ 739.964454][T16834] netlink: 'syz.2.2291': attribute type 1 has an invalid length. [ 739.972219][T16834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2291'. [ 739.978746][ T152] veth1_macvtap: left promiscuous mode [ 740.012533][ T152] veth0_macvtap: left promiscuous mode [ 740.034854][ T152] veth1_vlan: left promiscuous mode [ 740.054636][ T152] veth0_vlan: left promiscuous mode [ 740.516170][T13304] usb 10-1: USB disconnect, device number 7 [ 740.522260][T13718] usbhid 5-1:0.0: can't add hid device: -71 [ 740.566087][T13718] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 740.627173][T13718] usb 5-1: USB disconnect, device number 52 [ 741.068604][T16853] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2294'. [ 741.098779][T13304] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 741.106497][T13718] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 741.336996][T13304] usb 3-1: Using ep0 maxpacket: 32 [ 741.351014][T13718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 741.384092][T13304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.434883][T13718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 741.462151][T13304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.487672][T13718] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 741.496933][T13304] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 741.514468][T13718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.534904][T13304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.689973][T13304] usb 3-1: config 0 descriptor?? [ 741.715527][T13718] usb 5-1: config 0 descriptor?? [ 741.739953][T16850] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 741.949042][T16836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.983947][T16836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.206415][T13718] usbhid 5-1:0.0: can't add hid device: -71 [ 742.242970][T13718] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 742.314260][T13718] usb 5-1: USB disconnect, device number 53 [ 742.523329][ T152] team0 (unregistering): Port device team_slave_1 removed [ 742.661853][ T152] team0 (unregistering): Port device team_slave_0 removed [ 743.179259][ T980] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 743.344107][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 743.368815][ T980] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 743.392292][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.413217][ T980] usb 5-1: Product: syz [ 743.423799][ T980] usb 5-1: Manufacturer: syz [ 743.431764][ T980] usb 5-1: SerialNumber: syz [ 743.446698][ T980] r8152-cfgselector 5-1: Unknown version 0x0000 [ 743.459708][ T980] r8152-cfgselector 5-1: config 0 descriptor?? [ 744.045585][T13304] usbhid 3-1:0.0: can't add hid device: -71 [ 744.051617][T13304] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 744.086968][T13304] usb 3-1: USB disconnect, device number 88 [ 744.608597][ T5921] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 744.763893][T13304] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 744.804192][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 744.848927][ T5921] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 744.857603][ T5921] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 744.877395][ T5921] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 744.933835][ T5921] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 744.945832][ T5921] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.970120][ T5921] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 744.980160][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.988296][T13304] usb 3-1: Using ep0 maxpacket: 8 [ 745.020249][T13304] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 745.067942][T13304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.112912][T13304] usb 3-1: Product: syz [ 745.125279][T13304] usb 3-1: Manufacturer: syz [ 745.162148][T13304] usb 3-1: SerialNumber: syz [ 745.185621][T13304] usb 3-1: config 0 descriptor?? [ 745.243339][ T5921] usb 1-1: usb_control_msg returned -32 [ 745.252247][ T5921] usbtmc 1-1:16.0: can't read capabilities [ 745.407476][T13304] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 745.619855][T16905] Dead loop on virtual device ip6_vti0, fix it urgently! [ 745.952279][T16931] usbtmc 1-1:16.0: usb_clear_halt returned -32 [ 746.068583][ T5921] r8152-cfgselector 5-1: USB disconnect, device number 54 [ 746.074829][T16931] fuse: Unknown parameter 'ft' [ 746.142927][T16931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.166993][T16931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.265703][ T5921] usb 1-1: USB disconnect, device number 40 [ 746.643647][T16945] bridge_slave_0: left allmulticast mode [ 746.644011][T13718] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 746.659596][T16945] bridge_slave_0: left promiscuous mode [ 746.684316][T16945] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.707497][T16945] bridge_slave_1: left allmulticast mode [ 746.713279][T16945] bridge_slave_1: left promiscuous mode [ 746.728510][T16945] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.758768][T16945] bond0: (slave bond_slave_0): Releasing backup interface [ 746.787133][T16945] bond0: (slave bond_slave_1): Releasing backup interface [ 746.817116][T13718] usb 5-1: Using ep0 maxpacket: 8 [ 746.832589][T13718] usb 5-1: config 4 interface 0 has no altsetting 0 [ 746.851366][T13718] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 746.860657][T13718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.871786][T13718] usb 5-1: Product: syz [ 746.877863][T13718] usb 5-1: Manufacturer: syz [ 746.882645][T13718] usb 5-1: SerialNumber: syz [ 746.891145][T13304] usb write operation failed. (-71) [ 746.903531][T13304] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 746.925745][T13304] dvbdev: DVB: registering new adapter (Terratec H7) [ 746.932800][T13304] usb 3-1: media controller created [ 746.947181][T13304] usb read operation failed. (-71) [ 746.955981][T16945] team0: Port device team_slave_0 removed [ 746.966837][T13304] usb write operation failed. (-71) [ 746.998885][T13304] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 747.011682][T16945] team0: Port device team_slave_1 removed [ 747.030175][T16945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.038451][T16945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.039970][T13304] usb 3-1: USB disconnect, device number 89 [ 747.097259][T16945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.126180][T16945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.141300][ T43] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 747.160141][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.166881][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.179912][ T43] dvb_usb_dibusb_mc 9-1:6.90: probe with driver dvb_usb_dibusb_mc failed with error -110 [ 747.198776][T13718] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 747.217238][T13718] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 747.233164][T13718] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 747.242106][T16945] team0: Port device netdevsim0 removed [ 747.250789][ T43] dvb-usb: found a 'Artec T1 USB2.0' in cold state, will try to load a firmware [ 747.265774][ T43] usb 9-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 747.276750][T13718] usb 5-1: media controller created [ 747.307927][ T43] usb 9-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 747.338021][T13718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 747.405640][T13718] zl10353_read_register: readreg error (reg=127, ret==0) [ 747.525300][T13718] usb 5-1: USB disconnect, device number 55 [ 748.154032][T13718] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 748.471878][T13718] usb 5-1: Using ep0 maxpacket: 8 [ 748.494115][T13718] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 748.552225][T13718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.625511][T13718] usb 5-1: config 0 descriptor?? [ 748.839047][T13718] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 749.844573][T16976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.870728][T16976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.956308][T13718] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 749.968702][T13718] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 750.048296][T13718] asix 5-1:0.0: probe with driver asix failed with error -71 [ 750.064970][T13718] usb 5-1: USB disconnect, device number 56 [ 750.632651][ T5921] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 750.901256][ T5921] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.917861][ T5921] usb 10-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00 [ 750.937495][ T5921] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.981992][ T5921] usb 10-1: config 0 descriptor?? [ 751.304813][T17046] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2327'. [ 751.403981][ T980] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 751.819107][ T980] usb 5-1: config 0 has no interfaces? [ 752.077075][ T980] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 752.144387][T13718] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 752.178087][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.258774][ T980] usb 5-1: Product: syz [ 752.262959][ T980] usb 5-1: Manufacturer: syz [ 752.306870][T13718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.324047][T13718] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 752.381826][ T980] usb 5-1: SerialNumber: syz [ 752.382632][T13718] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 752.410224][T13718] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 752.427317][T13718] usb 3-1: Manufacturer: syz [ 752.442994][T13718] usb 3-1: config 0 descriptor?? [ 752.561421][ T980] usb 5-1: config 0 descriptor?? [ 752.572809][ T5921] usbhid 10-1:0.0: can't add hid device: -71 [ 752.590418][ T5921] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 752.615118][ T5921] usb 10-1: USB disconnect, device number 8 [ 752.751313][T13718] usb 3-1: USB disconnect, device number 90 [ 752.867867][T17076] libceph: resolve ' [ 752.867867][T17076] -&fYǝa2i [ 752.867867][T17076] .?&*&' (ret=-3): failed [ 753.514820][T13540] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 753.685165][T13540] usb 10-1: Using ep0 maxpacket: 8 [ 753.712874][T13540] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.742347][T13540] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 753.773987][T13540] usb 10-1: config 0 interface 0 has no altsetting 0 [ 753.795838][T13540] usb 10-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 753.851389][T13540] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.891895][T13540] usb 10-1: config 0 descriptor?? [ 753.905641][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 753.905656][ T30] audit: type=1326 audit(1755997644.896:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f28d8146207 code=0x50000 [ 753.968842][ T30] audit: type=1326 audit(1755997644.896:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d818ebe9 code=0x50000 [ 754.178989][ T30] audit: type=1326 audit(1755997644.896:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d818ebe9 code=0x50000 [ 754.203018][ T30] audit: type=1326 audit(1755997644.896:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d818ebe9 code=0x50000 [ 754.228974][ T30] audit: type=1326 audit(1755997644.896:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d818ebe9 code=0x50000 [ 754.251966][ T30] audit: type=1326 audit(1755997644.896:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d818ebe9 code=0x50000 [ 754.289409][ T30] audit: type=1326 audit(1755997644.896:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d818ebe9 code=0x50000 [ 754.347793][ T30] audit: type=1326 audit(1755997644.896:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d818ebe9 code=0x50000 [ 754.412030][ T30] audit: type=1326 audit(1755997644.946:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d818ebe9 code=0x50000 [ 754.462956][T13540] kye 0003:0458:4018.0020: unknown main item tag 0x0 [ 754.469985][T13540] kye 0003:0458:4018.0020: reserved main item tag 0xe [ 754.501322][T13540] kye 0003:0458:4018.0020: item fetching failed at offset 15/133 [ 754.528709][T13718] usb 5-1: USB disconnect, device number 57 [ 754.531047][ T30] audit: type=1326 audit(1755997644.946:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d818ebe9 code=0x50000 [ 754.569516][T13540] kye 0003:0458:4018.0020: parse failed [ 754.596804][T13540] kye 0003:0458:4018.0020: probe with driver kye failed with error -22 [ 754.656868][ T5921] usb 10-1: USB disconnect, device number 9 [ 756.763818][ T5967] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 757.603872][ T5967] usb 3-1: Using ep0 maxpacket: 32 [ 757.624804][ T5967] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 757.734106][ T5967] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 757.775703][ T5967] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 757.823376][ T5967] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 757.883891][ T5967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 757.931205][ T5967] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 757.973601][ T5967] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 758.012513][ T5967] usb 3-1: Product: syz [ 758.032731][ T5967] usb 3-1: Manufacturer: syz [ 758.094199][ T5967] usb 3-1: SerialNumber: syz [ 758.138086][ T5967] usb 3-1: config 0 descriptor?? [ 758.165477][ T5967] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 758.233182][ T5967] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 758.385514][ T5967] usb 3-1: USB disconnect, device number 91 [ 758.391469][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 758.434227][ T5967] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 758.824559][ T5996] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 758.843838][ T5921] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 758.866669][T13304] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 758.976269][ T5996] usb 1-1: Using ep0 maxpacket: 32 [ 758.991208][ T5996] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.006329][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 759.011575][ T5996] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 759.030764][ T5996] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20 [ 759.046483][ T5921] usb 5-1: config 0 has an invalid interface number: 40 but max is 0 [ 759.055115][ T5921] usb 5-1: config 0 has no interface number 0 [ 759.061460][T13304] usb 10-1: config 0 has an invalid interface number: 32 but max is 0 [ 759.071180][ T5996] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 759.081522][T13304] usb 10-1: config 0 has no interface number 0 [ 759.088285][ T5996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 759.097773][T13304] usb 10-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 759.110111][ T5921] usb 5-1: New USB device found, idVendor=22b8, idProduct=689d, bcdDevice=20.6b [ 759.121586][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.132013][ T5996] usb 1-1: SerialNumber: syz [ 759.143939][T13304] usb 10-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.163852][ T5921] usb 5-1: Product: syz [ 759.169388][ T5921] usb 5-1: Manufacturer: syz [ 759.174833][T17159] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 759.192288][T13304] usb 10-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 759.201556][ T5921] usb 5-1: SerialNumber: syz [ 759.226218][ T5921] usb 5-1: config 0 descriptor?? [ 759.234462][T13304] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.251053][T13304] usb 10-1: config 0 descriptor?? [ 759.299040][T17188] loop8: detected capacity change from 0 to 7 [ 759.310739][ T7189] Dev loop8: unable to read RDB block 7 [ 759.323993][ T7189] loop8: unable to read partition table [ 759.340249][ T7189] loop8: partition table beyond EOD, truncated [ 759.368925][T17188] Dev loop8: unable to read RDB block 7 [ 759.400513][ T5996] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 759.407885][T17188] loop8: unable to read partition table [ 759.425134][ T5996] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 759.428283][T17188] loop8: partition table beyond EOD, truncated [ 759.445854][ T5996] usb 1-1: USB disconnect, device number 41 [ 759.463221][ T5921] qmi_wwan 5-1:0.40: More than one union descriptor, skipping ... [ 759.469180][T17188] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 759.500705][ T5921] qmi_wwan 5-1:0.40: probe with driver qmi_wwan failed with error -22 [ 759.501954][ T7189] Dev loop8: unable to read RDB block 7 [ 759.521232][ T7189] loop8: unable to read partition table [ 759.528217][ T7189] loop8: partition table beyond EOD, truncated [ 759.548906][ T5921] usb 5-1: USB disconnect, device number 58 [ 759.554097][T17190] Dev loop8: unable to read RDB block 7 [ 759.565196][T17190] loop8: unable to read partition table [ 759.588920][T17190] loop8: partition table beyond EOD, truncated [ 759.602924][T17190] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 759.680149][T13304] uclogic 0003:256C:006E.0021: interface is invalid, ignoring [ 759.890700][T17173] bridge0: port 1(gretap0) entered blocking state [ 759.897974][T17173] bridge0: port 1(gretap0) entered disabled state [ 759.905286][T17173] gretap0: entered allmulticast mode [ 759.912767][T17173] gretap0: entered promiscuous mode [ 759.931624][T17173] bridge0: port 1(gretap0) entered blocking state [ 759.938263][T17173] bridge0: port 1(gretap0) entered forwarding state [ 759.983631][T17201] gretap0: left allmulticast mode [ 760.015640][T17201] gretap0: left promiscuous mode [ 760.033170][T17201] bridge0: port 1(gretap0) entered disabled state [ 760.070420][ T5921] usb 10-1: USB disconnect, device number 10 [ 760.294321][T13540] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 760.434016][ T5967] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 760.441760][T13540] usb 1-1: device descriptor read/64, error -71 [ 760.634221][ T5967] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 760.643294][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.708323][ T5967] usb 5-1: config 0 descriptor?? [ 760.717647][ T5967] gspca_main: spca508-2.14.0 probing 8086:0110 [ 760.774846][T13540] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 760.933138][T13540] usb 1-1: device descriptor read/64, error -71 [ 761.015570][ T5967] gspca_spca508: reg_read err -32 [ 761.024403][ T5967] gspca_spca508: reg_read err -32 [ 761.029895][ T5967] gspca_spca508: reg_read err -32 [ 761.041156][ T5967] gspca_spca508: reg_read err -32 [ 761.064266][T13540] usb usb1-port1: attempt power cycle [ 761.443963][T13540] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 761.476867][T13540] usb 1-1: device descriptor read/8, error -71 [ 761.554891][ T5967] gspca_spca508: reg write: error -110 [ 761.560546][ T5967] spca508 5-1:0.0: probe with driver spca508 failed with error -110 [ 761.782933][T13540] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 761.836903][T13540] usb 1-1: device descriptor read/8, error -71 [ 761.952564][T13540] usb usb1-port1: unable to enumerate USB device [ 762.007096][T17249] FAULT_INJECTION: forcing a failure. [ 762.007096][T17249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.023679][T17249] CPU: 1 UID: 0 PID: 17249 Comm: syz.2.2357 Not tainted syzkaller #0 PREEMPT(full) [ 762.023705][T17249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 762.023722][T17249] Call Trace: [ 762.023730][T17249] [ 762.023739][T17249] dump_stack_lvl+0x189/0x250 [ 762.023768][T17249] ? __pfx____ratelimit+0x10/0x10 [ 762.023795][T17249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.023818][T17249] ? __pfx__printk+0x10/0x10 [ 762.023844][T17249] ? __might_fault+0xb0/0x130 [ 762.023880][T17249] should_fail_ex+0x414/0x560 [ 762.023911][T17249] _copy_from_user+0x2d/0xb0 [ 762.023936][T17249] ___sys_sendmsg+0x158/0x2a0 [ 762.023961][T17249] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.024018][T17249] ? __fget_files+0x2a/0x420 [ 762.024046][T17249] ? __fget_files+0x3a0/0x420 [ 762.024085][T17249] __x64_sys_sendmsg+0x19b/0x260 [ 762.024110][T17249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 762.024140][T17249] ? __pfx_ksys_write+0x10/0x10 [ 762.024165][T17249] ? rcu_is_watching+0x15/0xb0 [ 762.024190][T17249] ? do_syscall_64+0xbe/0x3b0 [ 762.024223][T17249] do_syscall_64+0xfa/0x3b0 [ 762.024250][T17249] ? lockdep_hardirqs_on+0x9c/0x150 [ 762.024277][T17249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.024297][T17249] ? clear_bhb_loop+0x60/0xb0 [ 762.024322][T17249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.024341][T17249] RIP: 0033:0x7fd74338ebe9 [ 762.024359][T17249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.024378][T17249] RSP: 002b:00007fd7441d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.024406][T17249] RAX: ffffffffffffffda RBX: 00007fd7435b5fa0 RCX: 00007fd74338ebe9 [ 762.024421][T17249] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 762.024434][T17249] RBP: 00007fd7441d8090 R08: 0000000000000000 R09: 0000000000000000 [ 762.024447][T17249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.024459][T17249] R13: 00007fd7435b6038 R14: 00007fd7435b5fa0 R15: 00007fd7436dfa28 [ 762.024490][T17249] [ 762.623899][T13540] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 762.778445][T13540] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 762.796362][T13540] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 197, setting to 64 [ 762.808770][T13540] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 762.907886][T13540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.940658][T13540] usb 3-1: config 0 descriptor?? [ 762.997694][T17253] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 763.058500][T13540] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 763.236531][T13540] usb 5-1: USB disconnect, device number 59 [ 763.263603][T13304] usb 3-1: USB disconnect, device number 92 [ 763.392642][T17277] syzkaller1: entered promiscuous mode [ 763.411913][T17277] syzkaller1: entered allmulticast mode [ 763.874153][ T5996] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 763.897451][T17292] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 764.194509][ T5996] usb 1-1: config 252 has an invalid interface number: 254 but max is 0 [ 764.220526][ T5996] usb 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 764.263810][ T5967] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 764.271474][ T5996] usb 1-1: config 252 has no interface number 0 [ 764.300146][ T5996] usb 1-1: config 252 interface 254 has no altsetting 0 [ 764.410344][ T5996] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 764.429571][ T5996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.484352][ T5967] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 764.493932][ T5996] usb 1-1: Product: syz [ 764.508563][ T5967] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 764.516493][ T5996] usb 1-1: Manufacturer: syz [ 764.579501][T12639] Bluetooth: hci4: command 0x0406 tx timeout [ 764.583765][ T5996] usb 1-1: SerialNumber: syz [ 764.632602][ T5967] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 764.672476][ T5996] bfusb 1-1:252.254: probe with driver bfusb failed with error -5 [ 764.691715][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.694390][T17308] FAULT_INJECTION: forcing a failure. [ 764.694390][T17308] name failslab, interval 1, probability 0, space 0, times 0 [ 764.759937][ T5967] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 764.809782][T17308] CPU: 1 UID: 0 PID: 17308 Comm: syz.4.2368 Not tainted syzkaller #0 PREEMPT(full) [ 764.809808][T17308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 764.809820][T17308] Call Trace: [ 764.809828][T17308] [ 764.809836][T17308] dump_stack_lvl+0x189/0x250 [ 764.809875][T17308] ? __pfx____ratelimit+0x10/0x10 [ 764.809903][T17308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.809926][T17308] ? __pfx__printk+0x10/0x10 [ 764.809959][T17308] ? __pfx___might_resched+0x10/0x10 [ 764.809981][T17308] should_fail_ex+0x414/0x560 [ 764.810012][T17308] should_failslab+0xa8/0x100 [ 764.810041][T17308] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 764.810068][T17308] ? __alloc_skb+0x112/0x2d0 [ 764.810091][T17308] __alloc_skb+0x112/0x2d0 [ 764.810111][T17308] netlink_sendmsg+0x5c6/0xb30 [ 764.810149][T17308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.810180][T17308] ? aa_sock_msg_perm+0xf1/0x1d0 [ 764.810200][T17308] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 764.810219][T17308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.810249][T17308] __sock_sendmsg+0x21c/0x270 [ 764.810277][T17308] ____sys_sendmsg+0x505/0x830 [ 764.810304][T17308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.810334][T17308] ? import_iovec+0x74/0xa0 [ 764.810361][T17308] ___sys_sendmsg+0x21f/0x2a0 [ 764.810383][T17308] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.810439][T17308] ? __fget_files+0x2a/0x420 [ 764.810465][T17308] ? __fget_files+0x3a0/0x420 [ 764.810496][T17308] __x64_sys_sendmsg+0x19b/0x260 [ 764.810515][T17308] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 764.810542][T17308] ? __pfx_ksys_write+0x10/0x10 [ 764.810562][T17308] ? rcu_is_watching+0x15/0xb0 [ 764.810582][T17308] ? do_syscall_64+0xbe/0x3b0 [ 764.810609][T17308] do_syscall_64+0xfa/0x3b0 [ 764.810635][T17308] ? lockdep_hardirqs_on+0x9c/0x150 [ 764.810662][T17308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.810682][T17308] ? clear_bhb_loop+0x60/0xb0 [ 764.810705][T17308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.810724][T17308] RIP: 0033:0x7f8838b8ebe9 [ 764.810742][T17308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.810760][T17308] RSP: 002b:00007f88399bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.810781][T17308] RAX: ffffffffffffffda RBX: 00007f8838db5fa0 RCX: 00007f8838b8ebe9 [ 764.810796][T17308] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 764.810809][T17308] RBP: 00007f88399bf090 R08: 0000000000000000 R09: 0000000000000000 [ 764.810820][T17308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.810832][T17308] R13: 00007f8838db6038 R14: 00007f8838db5fa0 R15: 00007f8838edfa28 [ 764.810871][T17308] [ 765.184804][ T5967] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 765.198621][ T6628] udevd[6628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 765.224171][ T5952] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 765.529983][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2371'. [ 765.548009][ T5952] usb 10-1: Using ep0 maxpacket: 16 [ 765.563362][T17319] bond0: (slave bond_slave_1): Releasing backup interface [ 765.588642][ T5952] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 765.639132][ T5952] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.733521][ T5952] usb 10-1: config 0 descriptor?? [ 765.757146][ T5952] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 766.334643][ T31] INFO: task syz.9.1912:14362 blocked for more than 143 seconds. [ 766.453886][ T31] Not tainted syzkaller #0 [ 766.462775][ T31] Blocked by coredump. [ 766.513171][ T5921] usb 1-1: USB disconnect, device number 46 [ 766.592064][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 766.633898][ T31] task:syz.9.1912 state:D stack:24952 pid:14362 tgid:14355 ppid:13907 task_flags:0x40044c flags:0x00004002 [ 766.773818][ T31] Call Trace: [ 766.777197][ T31] [ 766.780164][ T31] __schedule+0x1798/0x4cc0 [ 766.792792][ T31] ? __pfx___schedule+0x10/0x10 [ 766.819370][ T31] ? schedule+0x91/0x360 [ 766.833878][ T31] schedule+0x165/0x360 [ 766.852269][ T31] schedule_preempt_disabled+0x13/0x30 [ 766.875592][ T31] __mutex_lock+0x7e6/0x1350 [ 766.936357][T17338] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 766.991709][ T31] ? __mutex_lock+0x5bb/0x1350 [ 766.999267][ T31] ? usbdev_release+0x7e/0x760 [ 767.004217][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 767.031492][ T31] ? __asan_memset+0x22/0x50 [ 767.075080][ T31] ? __fsnotify_parent+0x242/0x540 [ 767.158683][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 767.238685][ T31] ? do_raw_spin_lock+0x121/0x290 [ 767.338640][ T31] ? __pfx_usbdev_release+0x10/0x10 [ 767.346027][ T31] usbdev_release+0x7e/0x760 [ 767.358476][ T31] ? __pfx_usbdev_release+0x10/0x10 [ 767.371773][ T31] __fput+0x44c/0xa70 [ 767.382122][ T31] task_work_run+0x1d4/0x260 [ 767.388904][ T31] ? __pfx_task_work_run+0x10/0x10 [ 767.400235][ T31] do_exit+0x6b5/0x2300 [ 767.413638][ T31] ? do_raw_spin_lock+0x121/0x290 [ 767.433191][ T31] ? __pfx_do_exit+0x10/0x10 [ 767.490556][ T31] do_group_exit+0x21c/0x2d0 [ 767.497672][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 767.509670][ T31] get_signal+0x1286/0x1340 [ 767.524596][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 767.532406][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 767.590048][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 767.610728][ T31] exit_to_user_mode_loop+0x75/0x110 [ 767.672549][ T31] do_syscall_64+0x2bd/0x3b0 [ 767.705691][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 767.718733][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.753763][ T31] ? clear_bhb_loop+0x60/0xb0 [ 767.758466][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.814115][ T31] RIP: 0033:0x7ff38ff8d550 [ 767.846102][ T31] RSP: 002b:00007ff390e6cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 767.880433][ T5921] usb 3-1: USB disconnect, device number 93 [ 767.894382][ T31] RAX: 000000000000000d RBX: 0000000000041341 RCX: 00007ff38ff8d550 [ 767.902379][ T31] RDX: 0000000000041341 RSI: 00007ff390e6cc10 RDI: 00000000ffffff9c [ 767.939718][ T31] RBP: 00007ff390e6cc10 R08: 0000000000000000 R09: 0000000000000000 [ 767.958447][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 767.981864][ T31] R13: 00007ff3901b6218 R14: 00007ff3901b6180 R15: 00007ff3902dfa28 [ 768.000204][ T31] [ 768.005613][ T31] [ 768.005613][ T31] Showing all locks held in the system: [ 768.013334][ T31] 3 locks held by kworker/u8:1/13: [ 768.019747][ T31] #0: ffff88814cec2948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 768.031448][ T31] #1: ffffc90000127bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 768.052562][ T31] #2: ffffffff8f5387c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 768.062927][ T31] 1 lock held by khungtaskd/31: [ 768.068203][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 768.082288][ T31] 6 locks held by kworker/1:1/43: [ 768.087702][ T31] #0: ffff8881446b2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 768.100128][ T31] #1: ffffc90000b37bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 768.112531][ T31] #2: ffff888028800198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 768.148710][ T31] #3: ffff888029bda198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 768.169876][ T31] #4: ffff888056cbe160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 768.213790][ T31] #5: ffffffff8dfe0310 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 768.229232][ T31] 6 locks held by kworker/u8:5/152: [ 768.251933][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 768.266347][ T31] #1: ffffc90002e77bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 768.290989][ T31] #2: ffffffff8f52b930 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 768.340152][ T31] #3: ffffffff8f5387c8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 768.360352][ T31] #4: ffff888053bb94e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_pre_exit+0xb0/0x1d0 [ 768.398180][ T31] #5: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 768.452216][ T31] 2 locks held by getty/5622: [ 768.461571][ T31] #0: ffff88803027f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 768.490256][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 768.531420][ T31] 5 locks held by kworker/0:4/5952: [ 768.549779][ T31] #0: ffff8881446b2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 768.577152][ T31] #1: ffffc90005147bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 768.620986][ T31] #2: ffff888145718198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 768.638443][ T31] #3: ffff888075c74198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 768.650738][ T31] #4: ffff888051789160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 768.670548][ T31] 4 locks held by udevd/6010: [ 768.701416][ T31] #0: ffff8880503681c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 768.734826][ T31] #1: ffff888054dee088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 768.750830][ T31] #2: ffff8880619bed28 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 768.770219][ T31] #3: ffff888029bda198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 768.788425][ T31] 3 locks held by kworker/u8:16/6883: [ 768.797460][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 768.821013][ T31] #1: ffffc900032e7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 768.833665][ T31] #2: ffffffff8f5387c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 768.852434][ T31] 2 locks held by kworker/u8:21/8103: [ 768.867029][ T31] #0: ffff88801f709948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 768.881124][ T31] #1: ffffc90003adfbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 768.904193][ T31] 1 lock held by syz.9.1912/14362: [ 768.909451][ T31] #0: ffff888028800198 (&dev->mutex){....}-{4:4}, at: usbdev_release+0x7e/0x760 [ 768.926431][ T31] 1 lock held by syz.8.2172/15963: [ 768.931679][ T31] #0: ffff888028800198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 768.940926][ T31] 1 lock held by syz.6.2193/16115: [ 768.946503][ T31] #0: ffff888028800198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 768.955715][ T31] 1 lock held by syz.9.2369/17338: [ 768.963941][ T31] #0: ffffffff8f5387c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 768.964157][ T5952] gspca_sonixj: reg_w1 err -110 [ 768.973153][ T31] 2 locks held by dhcpcd-run-hook/17358: [ 768.983959][ T31] [ 768.986670][ T31] ============================================= [ 768.986670][ T31] [ 768.990216][ T5952] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 768.996607][ T31] NMI backtrace for cpu 1 [ 768.996624][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 768.996645][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 768.996658][ T31] Call Trace: [ 768.996665][ T31] [ 768.996674][ T31] dump_stack_lvl+0x189/0x250 [ 768.996704][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 768.996727][ T31] ? __pfx__printk+0x10/0x10 [ 768.996765][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 768.996790][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 768.996816][ T31] ? __pfx__printk+0x10/0x10 [ 768.996846][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 768.996878][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 768.996904][ T31] watchdog+0xf93/0xfe0 [ 768.996935][ T31] ? watchdog+0x1de/0xfe0 [ 768.996965][ T31] kthread+0x70e/0x8a0 [ 768.996992][ T31] ? __pfx_watchdog+0x10/0x10 [ 768.997017][ T31] ? __pfx_kthread+0x10/0x10 [ 768.997042][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 768.997066][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 768.997091][ T31] ? __pfx_kthread+0x10/0x10 [ 768.997115][ T31] ret_from_fork+0x3f9/0x770 [ 768.997137][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 768.997161][ T31] ? __switch_to_asm+0x39/0x70 [ 768.997185][ T31] ? __switch_to_asm+0x33/0x70 [ 768.997208][ T31] ? __pfx_kthread+0x10/0x10 [ 768.997232][ T31] ret_from_fork_asm+0x1a/0x30 [ 768.997271][ T31] [ 768.997279][ T31] Sending NMI from CPU 1 to CPUs 0: [ 769.157255][ C0] NMI backtrace for cpu 0 [ 769.157272][ C0] CPU: 0 UID: 0 PID: 5851 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 769.157292][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 769.157304][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 769.157331][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 74 59 fe 0b 48 89 de 5b e9 83 9b 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 50 a0 92 65 8b 15 98 a4 [ 769.157347][ C0] RSP: 0018:ffffc90003eff7d8 EFLAGS: 00000202 [ 769.157363][ C0] RAX: ffffffff84863dcc RBX: 0000000000000002 RCX: ffff88807aa71e00 [ 769.157377][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 769.157388][ C0] RBP: ffffc90003eff9f0 R08: ffff888027529980 R09: 0000000000000000 [ 769.157401][ C0] R10: ffffc90003effbf8 R11: fffff520007dff81 R12: ffff88802ec83700 [ 769.157414][ C0] R13: ffff888027529980 R14: ffff888022345280 R15: 1ffff920007dff08 [ 769.157428][ C0] FS: 000055557e6ae500(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 769.157444][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 769.157456][ C0] CR2: 000055cc8e1fa950 CR3: 00000000765b6000 CR4: 00000000003526f0 [ 769.157473][ C0] DR0: 0000000000000002 DR1: 0000000000000002 DR2: 0000000000000008 [ 769.157483][ C0] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 769.157496][ C0] Call Trace: [ 769.157503][ C0] [ 769.157510][ C0] aa_label_sk_perm+0x4cd/0x630 [ 769.157538][ C0] ? __lock_acquire+0xab9/0xd20 [ 769.157566][ C0] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 769.157599][ C0] ? __pfx___might_resched+0x10/0x10 [ 769.157621][ C0] ? aa_file_perm+0x13a/0x1550 [ 769.157640][ C0] aa_sk_perm+0x5d9/0x950 [ 769.157673][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 769.157699][ C0] ? aa_sock_msg_perm+0xf1/0x1d0 [ 769.157716][ C0] security_socket_recvmsg+0xa3/0x2e0 [ 769.157739][ C0] sock_recvmsg+0x56/0x270 [ 769.157764][ C0] sock_read_iter+0x231/0x2f0 [ 769.157786][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 769.157806][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 769.157835][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 769.157855][ C0] ? security_file_permission+0x75/0x290 [ 769.157882][ C0] vfs_read+0x557/0xa30 [ 769.157908][ C0] ? __pfx_vfs_read+0x10/0x10 [ 769.157938][ C0] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 769.157963][ C0] ksys_read+0x145/0x250 [ 769.157986][ C0] ? __pfx_ksys_read+0x10/0x10 [ 769.158009][ C0] ? do_syscall_64+0xbe/0x3b0 [ 769.158037][ C0] do_syscall_64+0xfa/0x3b0 [ 769.158062][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.158079][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 769.158098][ C0] ? clear_bhb_loop+0x60/0xb0 [ 769.158117][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.158135][ C0] RIP: 0033:0x7f2a8d98d5bd [ 769.158149][ C0] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d a1 af 1f 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 769.158164][ C0] RSP: 002b:00007ffc957e4928 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 769.158181][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2a8d98d5bd [ 769.158194][ C0] RDX: 0000000000000004 RSI: 00007ffc957e493c RDI: 0000000000000003 [ 769.158205][ C0] RBP: 0000000000000000 R08: 0000000015fa7b49 R09: 7fffffffffffffff [ 769.158218][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc957e4d50 [ 769.158231][ C0] R13: 0000000000000004 R14: 00007ffc957e493c R15: 00007ffc957e49d0 [ 769.158251][ C0] [ 769.571758][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 769.578651][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 769.587768][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 769.597829][ T31] Call Trace: [ 769.601111][ T31] [ 769.604046][ T31] dump_stack_lvl+0x99/0x250 [ 769.608648][ T31] ? __asan_memcpy+0x40/0x70 [ 769.613250][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 769.618456][ T31] ? __pfx__printk+0x10/0x10 [ 769.623083][ T31] vpanic+0x281/0x750 [ 769.627072][ T31] ? __pfx_vpanic+0x10/0x10 [ 769.631577][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 769.637138][ T31] ? preempt_schedule+0xae/0xc0 [ 769.642005][ T31] ? preempt_schedule_common+0x83/0xd0 [ 769.647488][ T31] panic+0xb9/0xc0 [ 769.651221][ T31] ? __pfx_panic+0x10/0x10 [ 769.655650][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 769.661045][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 769.667212][ T31] watchdog+0xfd2/0xfe0 [ 769.671391][ T31] ? watchdog+0x1de/0xfe0 [ 769.675738][ T31] kthread+0x70e/0x8a0 [ 769.679822][ T31] ? __pfx_watchdog+0x10/0x10 [ 769.684510][ T31] ? __pfx_kthread+0x10/0x10 [ 769.689108][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 769.694298][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 769.699492][ T31] ? __pfx_kthread+0x10/0x10 [ 769.704073][ T31] ret_from_fork+0x3f9/0x770 [ 769.708654][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 769.713759][ T31] ? __switch_to_asm+0x39/0x70 [ 769.718524][ T31] ? __switch_to_asm+0x33/0x70 [ 769.723279][ T31] ? __pfx_kthread+0x10/0x10 [ 769.727860][ T31] ret_from_fork_asm+0x1a/0x30 [ 769.732640][ T31] [ 769.735879][ T31] Kernel Offset: disabled [ 769.740215][ T31] Rebooting in 86400 seconds..